← Back to all sparks
N

Node-RED

INFRA · APIS
Velocity5.0

Low-code programming for event-driven applications and IoT flows

Node-RED 5.0 rebuilt the editor, and the patches since are settling it in

editor-rewritepost-major-stabilisationdual-line-supportsecurity-backportsi18n
Current state
Node-RED shipped 5.0 in June 2026 after a long beta run, calling it the biggest change to the editor experience in the project's history and raising the minimum runtime to Node.js 22.9. Since then the work has been stabilisation: sidebar API and z-index fixes, tree-list behaviour, Japanese translations catching up to the new UI, and a JSONata upgrade that had to be reverted after a behaviour regression. The 4.1 line continues in parallel, receiving security backports.
Where it's heading
The project is in the post-major consolidation phase, where the visible defects are in the newly rewritten editor surfaces rather than the runtime. Maintaining 4.1 alongside 5.0 with same-day security backports — session message sanitization landed on both lines — signals the team expects a slow upgrade curve, which the Node.js 22.9 floor makes likely for embedded and appliance deployments.
Prediction
Expect 5.0.x patches to keep concentrating on editor UI regressions and translation coverage, with the 4.1 line kept alive on security fixes only until 5.0 adoption catches up.

Recent moves

  1. 3d ago

    JSONata upgrade reverted after behaviour regression

    A two-item maintenance release that exists mainly to roll JSONata back one patch version after an upstream behaviour regression. Fast reversal rather than a workaround, which is the right call for an expression language users depend on.

    View source ↗
  2. 4d ago

    Session message sanitization backported to the 4.1 line

    The 4.1 half of a security fix sanitizing session messages, released within hours of its 5.0 counterpart. Same-day backporting is the practical evidence that the older line is still genuinely supported rather than nominally alive.

    View source ↗
  3. 4d ago

    Session messages sanitized; JSONata and test fixes

    Carries the session message sanitization on the 5.0 line alongside Windows test fixes and a JSONata bump that the next release would partly undo. Routine post-major upkeep with one security-relevant change.

    View source ↗
  4. 1mo ago

    First 5.0 patch fixes sidebar APIs and tree-list behaviour

    The largest cleanup after the major, and its contents map directly onto what 5.0 rewrote — sidebar tab initialisation, resize-handle layering, the containsTab API, tree-list expand behaviour. Japanese translations for the new editor land here too, catching i18n up to the release.

    View source ↗
  5. 1mo ago

    Node-RED 5.0 rebuilds the editor experience

    ⚡ SPARK

    The release everything else in this window relates to, either as stabilisation on the 5.0 line or as continued support for users who have not moved. It closes out a roadmap covering UX modernisation, node appearance, functional enhancements and project infrastructure.

    View source ↗
  6. 2mo ago

    Git API arguments sanitized ahead of the 5.0 release

    A 4.1 maintenance release whose notable item is sanitizing all arguments passed to the projects and git API, a hardening fix in the same family as the later session message work. Palette category tooltips and theme override support are small editor gains on the older line.

    View source ↗