Deno v2.7.8 — Release Notes & Engineering Impact

### 2.7.8 / 2026.03.25 - feat(core): implement NodeRuntime CDP domain and fix --inspect-brk blocking (#32714) - feat(ext/crypto): implement P-521 sign, verify, and ECDH derive (#32602) - feat(ext/napi): add node_api_create_object_with_named_properties (#32906) - feat(ext/telemetry): add console exporter for OpenTelemetry (#32717) - feat(ext/telemetry): copy relevant span attributes to HTTP metrics (#32720) - feat: use lockfile from jsr package for global install (#32490) - fix(audit): respect package.json overrides in vulnerability checks (#32878) - fix(cli): fix arrow keys in interactive picker on Windows (#32978) - fix(cli): parse --frozen flag for deno update and deno outdated (#32975) - fix(compile): skip Node-to-Deno arg translation in standalone binaries (#32980) - fix(ext/console): handle throwing Symbol.toStringTag getter gracefully (#32917) - fix(ext/napi): pass valid env to tsfn call_js_cb after close race (#32957) - fix(ext/node): `fs.cp` across allowed dirs with ignored read permissions (#32927) - fix(ext/node): child_process improvements (internalMessage, argv0, DEP0190) (#32885) - fix(ext/node): close libuv handle on HandleWrap.close() for new-style handles (#32958) - fix(ext/node): defer uv_write callbacks to prevent re-entrancy panic (#32919) - fix(ext/node): do not throw error for `readline.createInterface` outside TTY (#32874) - fix(ext/node): don't fire upgrade event for h2c requests (#32866) - fix(ext/node): drain all ready connections in poll_tcp_handle to prevent accept starvation (#32943) - fix(ext/node): emit request "close" before socket "free" in keep-alive path (#32811) - fix(ext/node): enable node compat test for v8.getHeapStatistics (#32833) - fix(ext/node): enable node:fs compat tests + lchmod fix (#32892) - fix(ext/node): fix Buffer.concat truncating buffers larger than 4GB (#32913) - fix(ext/node): fix IPC stdio handling in child_process (#32920) - fix(ext/node): fix node:domain across async boundaries (#32897) - fix(ext/node): freeze os.constants.signals to match Node.js (#32836) - fix(ext/node): implement process.threadCpuUsage() (#32829) - fix(ext/node): improve process.hrtime argument validation (#32837) - fix(ext/node): improve readline and EventEmitter compat (#32826) - fix(ext/node): pass uid/gid to spawn and implement process.getgroups (#32772) - fix(ext/node): preserve TLS upgrade state on reconnect (#32838) - fix(ext/node): return all own properties from VM context property enumerator (#32911) - fix(ext/node): set fd property on TTY ReadStream and WriteStream (#32880) - fix(ext/node): sqlite prepare() options, defensive default, iterator invalidation (#32756) - fix(ext/node): support http2 createConnection sockets (#32733) - fix(ext/node): support numeric FDs in child_process stdio array (#32959) - fix(ext/node): update process.versions.napi to 9 (#32870) - fix(ext/web): AbortSignal.any() memory leak with long-lived signals (#32916) - fix(ext/web): handle null options in removeEventListener (#32605) - fix(fmt): delegate component expression formatting to markup_fmt (#29763) - fix(fmt): update markup_fmt to 0.27.0 and malva to 0.15.2 (#32949) - fix(inspector): send executionContextDestroyed on process.exit() (#32934) - fix(lockfile): truncate frozen lockfile error diff to 50 lines (#32976) - fix(napi): add test coverage and fix escape_handle/throw bugs (#32960) - fix(node/http): stop leaking TCP wrappers on HTTPS upgrade with createConnection TLSSocket (#32961) - fix(npm): `approve-scripts` detects packages when lockfile is disabled (#32842) - fix(npm): create shims for all bin entries during global npm install (#32607) - fix(npm): skip `file:` and `link:` dependencies in npm packages (#32876) - fix(npm): use box-drawing style for deprecated package warnings (#32979) - fix(resolver): fall through to .deno/ when BYONM node_modules version mismatches (#32981) - fix(resolver): prefer exact version match in BYONM npm resolution (#32977) - fix: handle inner quotes in double-quoted env values in .env file (#32930) - fix: include Temporal types in deno types output (#32952) - fix: make flamegraph SVG fill full browser viewport (#32727) - fix: rewrite approve_scripts_no_lock as PTY tests, skip lockfile test on Windows (#32853) - fix: skip flaky test-process-threadCpuUsage-worker-threads on Windows (#32886) - perf(ext/web): use simdutf for base64 encode/decode (#32743) - perf: upgrade to jsonc-parser 0.32 (#32864)