The 26.5.0 current-channel drop is quiet by design — SEMVER-MINOR additions and patch fixes, no breaking changes. The headline additions are `blob.textStream()` for streaming text output from Blob objects, the `--experimental-import-text` flag for pulling plain text files into ESM modules, and a new performance hooks measurement for sample delay per event loop iteration. On the security side, the release rejects small-order EdDSA points during verification and tightens large DH generator validation — neither is a named CVE, but both close classes of inputs that shouldn't have been accepted.