docs: correct stale claims on the Node.js compatibility page

[robobun]

Problem

• docs/runtime/nodejs-compat.mdx had six claims that are wrong on main. For example, it says that crypto.argon2() throws. argon2() and argon2Sync() work since node:crypto: implement argon2 and argon2Sync #37015.
• The page also did not list eight globals that Node.js has, for example WebSocket and URLPattern.

Fix

• Correct the six claims: node:crypto, node:https (client sockets are tls.TLSSockets), node:http2 (maxOriginSetSize is not a Node.js option), node:worker_threads (execArgv), node:inspector (Debugger commands), and the process.binding list.
• Move node:util, node:sys and node:vm to 🟢. Their remaining gaps are experimental APIs or edge cases.
• Add CloseEvent, ErrorEvent, File, navigator, QuotaExceededError, Storage, URLPattern and WebSocket.
• Verified: each claim on the page has a probe that ran under bun 1.4.1-canary.1 (23 commits behind this base) and Node.js v26.3.0, or a source read for macOS, Windows and arm64 claims.

Background

• The page lists each node: module and each global with a status. 🟢 means that only edge cases are missing. 🟡 means that a commonly used API is missing.
• The last audit of the page was docs: audit guides and Node.js compatibility page #38441 on 2026-08-14.

Notes

• Every other "missing", "no-op" and "ignored" claim still holds. Examples that are still missing on main: util.diff, module.findPackageJSON, module.registerHooks, v8.Serializer, worker_threads.locks, dns.resolveTlsa, Request.keepalive, crypto.encapsulate.
• The "N% of Node.js's test suite passes" figures were not measured again.
• Two differences are new on the page: File objects report Blob as their constructor and Symbol.toStringTag, and the WebSocket binaryType default is "nodebuffer".
• process.binding('http_parser') and process.binding('crypto/x509') return objects in Bun. Node.js v26 throws "No such module" for both.
• Real bugs that the probes found (for example url.format() with an array in query, and new DOMException().stack) are not documented here. They go to separate fixes.

---

no test proof · iteration 0 · docs-only change; test-proof not applicable

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Essentials

Run ID: 4abf0690-0ab5-41b2-b65c-bafe283afe3b

📥 Commits

Reviewing files that changed from the base of the PR and between 385a51c and 42ecb87.

📒 Files selected for processing (1)

• docs/runtime/nodejs-compat.mdx

Included review availability: Your plan provides up to 10 included reviews per hour; 6 remain after this review.

---

Walkthrough

Updated Node.js compatibility documentation for crypto, HTTP/2, runtime modules, inspector behavior, process bindings, and web platform globals.

Changes

Node.js compatibility documentation

Layer / File(s)	Summary
Runtime and module compatibility docs/runtime/nodejs-compat.mdx	Updated HTTPS socket, crypto, HTTP/2, node:util, node:vm, worker execArgv, and inspector compatibility details.
Web platform globals docs/runtime/nodejs-compat.mdx	Added or updated compatibility entries for CloseEvent, ErrorEvent, File, navigator, URLPattern, and WebSocket.
Bindings and storage globals docs/runtime/nodejs-compat.mdx	Documented process.binding("crypto/x509") and added entries for QuotaExceededError and Storage.

Suggested reviewers: cirospaciari

Merge Risk: ⚪ Minimal · up to 42ecb

This updates Node.js compatibility documentation and adds global compatibility entries. No current merge-readiness risk was identified.

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the main change: correcting stale claims in the Node.js compatibility documentation.
Description check	✅ Passed	The description explains the problem, lists the documentation fixes, identifies added globals, and describes verification against Bun and Node.js. It does not use the template headings exactly, but it…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{Comment @coderabbitai help to get the list of available commands.}

[robobun]

Status: the page now matches main at 4661e49. A probe under bun and under Node.js v26.3.0 checked each claim.

Most gaps that the page lists have an open pull request that is not merged. When one of them merges, its line on this page needs an update. The open pull requests, by section:

• node:assert: Implement Node's deep equality algorithm for node:assert #33068 (Node's deep equality algorithm), node:assert: match Node 26 message handling, add Assert class and diff, drop CallTracker #35181 (message handling)
• node:console: fix(console): send console.trace to stderr with a "Trace:" prefix #32638 (console.trace() to stderr), console, process.stdout/stderr: one stdio sink per fd; console writes through the stream like Node #37128 (console output through process.stdout)
• node:diagnostics_channel: diagnostics_channel: add BoundedChannel/boundedChannel, withStoreScope; make TracingChannel props non-enumerable #34604 (boundedChannel), diagnostics_channel: publish tracing:module.require and tracing:module.import #34212 (module channels), node:net: publish diagnostics_channel events (net.client.socket, net.server.socket, net.server.listen) #34209 (net channels), worker_threads: publish the 'worker_threads' diagnostics channel on new Worker #34208 (worker_threads channel), diagnostics_channel: hold channels strongly while they have subscribers #33773 (a subscriber keeps its channel alive), node:diagnostics_channel: sync with Node 26 + subsystem channels (+32 upstream tests) #32628 (Node.js v26 channels)
• node:dns: node:dns: implement resolveTlsa (TLSA records) #36186 (resolveTlsa)
• node:events: node:events: make EventEmitterAsyncResource match Node.js #33689 (EventEmitterAsyncResource)
• node:http: node:http: make http.Server inherit from net.Server #35465 (http.Server extends net.Server), node:http: honor the signal option of server.listen() #37964 (the signal option of listen())
• node:https: node:https: thread SNICallback through to the TLS listener #36707 (SNICallback), node:https: add addContext and other tls.Server methods to https.Server #32435 (addContext and the other tls.Server methods), node:https: enforce server handshakeTimeout #33541 (handshakeTimeout)
• node:os: Read os.userInfo() from the passwd database #33481 (userInfo() from the passwd database)
• node:stream: node:stream: make isReadable/isWritable/isErrored/isDisturbed work with WHATWG web streams #34624 (isReadable and the other checks for web streams)
• node:string_decoder: node:string_decoder: make end(buf) accept what write(buf) accepts #38682 (the end() argument)
• node:async_hooks: node:async_hooks: fire createHook lifecycle events for timers #30832 (createHook events for timers), Preserve AsyncLocalStorage context across MessagePort, Worker, AbortSignal.timeout, and BroadcastChannel events #32805 (AsyncLocalStorage in MessagePort, Worker and BroadcastChannel events), node:async_hooks: assign AsyncResource a unique asyncId #31711 (asyncId)
• node:child_process: node:child_process: IPC channel keeps the parent alive; implement channel ref/unref/refCounted/unrefCounted #36405 (channel.ref() and unref()), child_process: support piping subprocess stdio streams between spawns #30850 (the stdio of a child as the stdio of another child)
• node:cluster: node:http: listen through the cluster primary's shared handle so workers share one port #38109 (HTTP workers share one port)
• node:crypto: node:crypto: implement encapsulate() and decapsulate() #40550 (encapsulate), crypto: support secp256k1 EC keys #32525 (secp256k1), node:crypto: support the chacha20-poly1305 cipher #33305 (chacha20-poly1305), node:crypto: support rsa-pss keys, HMAC-BLAKE2b, and hybrid EC points #32818 (rsa-pss), crypto: add ML-KEM-512 to WebCrypto and node:crypto #35518 (ml-kem-512), node:crypto: secureHeapUsed() returns stats object instead of undefined #34388 (secureHeapUsed)
• node:domain: domain: implement node:domain on AsyncLocalStorage and port the upstream domain suite (+40 upstream tests) #31828, node: add util.diff, http._connectionListener, domain.Domain, process.domain, and process.sourceMapsEnabled #39731
• node:module: node:module: implement findPackageJSON #37947 (findPackageJSON), node:module: add Module.prototype.load and isPreloading #29256 (Module#load and isPreloading), Route require() through an overridden Module._load #33026 (Module._load), Implement module.syncBuiltinESMExports() #33434 (syncBuiltinESMExports), node:module: make findSourceMap() honor process.setSourceMapsEnabled() #33454 (findSourceMap), node:module: implement synchronous module.registerHooks() (+49 tests) #35690 (registerHooks, draft), node:module: stripTypeScriptTypes strip mode + StrippedTypeScript compile cache (+3 tests) #35517 (stripTypeScriptTypes, draft)
• node:net: node:net: adopt connected socket fds in new net.Socket({ fd }) #35341 (new net.Socket({ fd }))
• node:perf_hooks: perf_hooks: implement performance.eventLoopUtilization() #32618 (eventLoopUtilization), perf_hooks: expose eventLoopUtilization/timerify/nodeTiming on the global without an import #36447 (the performance additions without an import), perf_hooks: record nodeTiming milestones and resolve their names in performance.measure() #38477 (nodeTiming)
• process: process: write process.title through to the OS on Linux and coerce non-string assignments #34618 (title on Linux), process: execArgv fix, getActiveResourcesInfo with sockets/servers/fs, _getActiveHandles/_getActiveRequests (+9 tests, process 85%→94%) #34658 (getActiveResourcesInfo), node: add util.diff, http._connectionListener, domain.Domain, process.domain, and process.sourceMapsEnabled #39731 (sourceMapsEnabled), process: implement process.report.writeReport() #34401 (report.writeReport), node: implement process.addUncaughtExceptionCaptureCallback #33154 (addUncaughtExceptionCaptureCallback), process: implement process.binding("stream_wrap") #35451 (binding('stream_wrap'))
• node:tls: node:tls: implement the server ticketKeys option and getTicketKeys/setTicketKeys #28691 (ticketKeys), tls: implement OCSP stapling (OCSPRequest / OCSPResponse) #33297 (OCSP stapling), node:tls: emit the server 'newSession' and 'resumeSession' events #32965 (newSession and resumeSession), node:tls: fix getCipher().version, getEphemeralKeyInfo(), client STARTTLS, and checkServerIdentity exception handling #32824 (getEphemeralKeyInfo)
• node:util: node: add util.diff, http._connectionListener, domain.Domain, process.domain, and process.sourceMapsEnabled #39731 (diff), node:util: add getSystemErrorMap, getSystemErrorMessage, transferableAbortSignal, transferableAbortController #34602 (transferableAbortSignal), node:util: add debuglog().enabled getter #40353 (debuglog().enabled)
• node:vm: node:vm: resolve import() to the namespace when importModuleDynamically returns a Module #39538 (the import() namespace)
• node:wasi: node:wasi: validate options and implement start()/initialize()/getImportObject() #34475 (getImportObject and initialize), node:wasi: honor returnOnExit so proc_exit does not kill the host process #34474 (returnOnExit)
• node:worker_threads: node:worker_threads: implement resourceLimits and enforce maxOldGenerationSizeMb #32896 (resourceLimits), node:worker_threads: close leaked fs fds at worker exit (trackUnmanagedFds, FileHandle) #34260 (trackUnmanagedFds), Implement the Web Locks API (navigator.locks, worker_threads.locks) #37020 (locks), node:worker_threads: per-thread --use-system-ca, real eventLoopUtilization, --cpu-prof in workers, node's online timing, error.code / stack-getter / timeOrigin fixes, async_hooks WORKER resource, worker_threads dc channel (+10 upstream tests) #34424 (eventLoopUtilization)
• node:inspector: inspector: CDP on --inspect, node announce lines, Session, Profiler adapter, Network, exit handshake, async stacks (+9 tests, inspector 11%→22%) #34719 (Network)
• node:test: node:test: --test CLI mode, node:test/reporters, standalone execution, and reporter-output parity (+18 tests, test_runner 32%→55%) #34515 (--test mode and node:test/reporters), node:test: honor only markers under --only and accept --test-only as an alias #35511 (only), node:test: abort t.signal and enforce the test-level signal option #39287 (signal), node:test: honor the parent-test concurrency option for inline subtests #34580 (concurrency)
• Globals: fetch: implement the integrity option (subresource integrity) #32815 (fetch integrity), Request: honor init.referrer, init.integrity, init.keepalive #30127 (Request keepalive, integrity and referrer), fetch: send text/plain Content-Type for string request bodies #33677 (content-type for a string body), webcore: preserve Error cause across structuredClone/postMessage/v8 serialization #31525 (Error cause in structuredClone), webstreams: make Blob/File/body streams byte streams so BYOB readers attach #36643 (BYOB readers for Blob and body streams), DOMException: inherit from ErrorInstance for [[ErrorData]] and .stack #32898 (DOMException and Error.isError), Give File its own prototype that inherits from Blob.prototype #30328 (the File prototype), Implement navigator.language, navigator.languages, and globalThis.Navigator #36443 (navigator.language and Navigator), Enable WebAssembly Memory64 by default #35740 (Memory64 on by default), MessagePort: define node-style emitter methods on the prototype itself #33856 (MessagePort emitter methods), perf_hooks: alias globalThis.PerformanceObserver to the node:perf_hooks class #33789 (PerformanceObserver)

A title search of the open pull requests produced this list. I did not review each pull request. No open pull request matched these gaps: Stats Temporal.Instant getters, node:sea, Storage, stream transfer with postMessage(), and path.matchesGlob().

[robobun]

^{Updated 2:07 AM PT - Sep 4th, 2026}

✅ @robobun, your commit 42ecb879b48855306b3468c825289eb2771eb0fe passed in Build #110103! 🎉

---

🧪   To try this PR locally:

bunx bun-pr 41352

That installs a local version of the PR into your bun-41352 executable, so you can run:

bun-41352 --bun

[claude]

LGTM — the execArgv wording is fixed and the rest of the compatibility updates read accurately.

What was reviewed: the reworded node:worker_threads entry — --stack-trace-limit and --tls-min-* do run through per-worker init, and --conditions/--no-deprecation are CLI-parsed only, so the new examples hold. Spot-checked the node:util/node:vm 🟢 promotions and the new globals entries (File's Blob toStringTag, WebSocket binaryType default, navigator missing languages/locks) against source — no overstated claims found.

Extended reasoning...

Overview

This PR updates docs/runtime/nodejs-compat.mdx only — no runtime code, tests, or types. It corrects stale compatibility claims for several node:* modules (crypto, https, http2, worker_threads, inspector, process.binding), promotes node:util/node:sys/node:vm from 🟡 to 🟢, and adds eight globals (CloseEvent, ErrorEvent, File, navigator, QuotaExceededError, Storage, URLPattern, WebSocket) to the globals table. The prior review flagged that the execArgv sentence incorrectly said "only --no-addons and --no-ffi-cc take effect"; commit 42ecb87 replaced that with "Some execArgv flags take effect… for example --no-addons, --stack-trace-limit and --tls-min-v1.3. Others, for example --conditions and --no-deprecation, only set process.execArgv", which matches what pre_execution.ts and the node:tls/node:net loaders actually read.

Security risks

None. This is a documentation-only change to an .mdx reference page; it does not touch executable code, build configuration, or dependencies.

Level of scrutiny

Low-to-moderate. The only real risk with compat-docs edits is factual overstatement (CLAUDE.md rule 11). The 🟡→🟢 promotions keep their caveat lists intact and match the page's stated convention that 🟢 means "only edge cases missing" — node:util still names diff/transferableAbort*/debuglog gaps, and node:vm still names the importModuleDynamically namespace quirk and measureMemory limitation, so nothing is being hidden. The new globals entries are conservative (two are 🔴, navigator is 🟡) and the File/WebSocket caveats accurately describe known Bun-vs-Node differences rather than papering over them.

Other factors

The one open inline thread from the previous run was directly addressed by the follow-up commit, and the new counter-examples (--conditions, --no-deprecation) check out — those are parsed by the CLI into transpiler/resolver options rather than re-read from process.execArgv inside a worker. No other reviewer has requested changes. Docs changes require no build or test proof per CLAUDE.md.