diff --git a/www/node25/Makefile b/www/node25/Makefile
index 88a165d4bf52..8f73f286932d 100644
--- a/www/node25/Makefile
+++ b/www/node25/Makefile
@@ -1,137 +1,136 @@
 PORTNAME=	node
 PORTVERSION=	${NODEJS_PORTVERSION}
 DISTVERSIONPREFIX=	v
-PORTREVISION=	1
 CATEGORIES=	www
 MASTER_SITES=	https://nodejs.org/dist/v${PORTVERSION}/
 PKGNAMESUFFIX=	${PORTVERSION:R:R}
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	V8 JavaScript for client and server
 WWW=		https://nodejs.org/ \
 		https://github.com/nodejs/node
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BROKEN_SSL=	libressl libressl-devel
 BROKEN_SSL_REASON=	Node.js ${PORTVERSION:R:R}.x requires OpenSSL or the BUNDLED_SSL option enabled
 ONLY_FOR_ARCHS=	aarch64 amd64 armv6 armv7 i386 powerpc64 powerpc64le
 
 BUILD_DEPENDS=	objdump:devel/binutils
 LIB_DEPENDS=	libada.so:devel/libada \
 		libbrotlidec.so:archivers/brotli \
 		libcares.so:dns/c-ares \
 		libgtest.so:devel/googletest \
 		libhdr_histogram.so:graphics/hdr_histogram \
 		libicui18n.so:devel/icu \
 		libLIEF.so:devel/lief \
 		libllhttp.so:www/llhttp \
 		libmerve.so:devel/merve \
 		libnbytes.so:www/nbytes \
 		libnghttp2.so:www/libnghttp2 \
 		libnghttp3.so:www/libnghttp3 \
 		libngtcp2.so:net/libngtcp2 \
 		libsimdjson.so:devel/simdjson \
 		libuv.so:devel/libuv \
 		libuvwasi.so:devel/uvwasi \
 		libzstd.so:archivers/zstd
 RUN_DEPENDS=	corepack>=0:www/corepack
 
 USES=		compiler:c++20-lang gmake localbase pkgconfig python:build shebangfix sqlite tar:xz
 
 CONFIGURE_ARGS=	--prefix=${PREFIX:S|^${DESTDIR}||} \
 		--shared-ada \
 		--shared-brotli \
 		--shared-cares \
 		--shared-gtest \
 		--shared-hdr-histogram \
 		--shared-http-parser \
 		--shared-libuv \
 		--shared-lief \
 		--shared-merve \
 		--shared-nbytes \
 		--shared-nghttp2 \
 		--shared-nghttp3 \
 		--shared-ngtcp2 \
 		--shared-simdjson \
 		--shared-sqlite \
 		--shared-uvwasi \
 		--shared-uvwasi-includes=${LOCALBASE}/include \
 		--shared-zlib \
 		--shared-zstd \
 		--with-intl=system-icu \
 		--without-npm
 CXXFLAGS_powerpc64=	-mpower8-vector
 HAS_CONFIGURE=	yes
 MAKE_ENV=	CC.host="${CCACHE_BIN} ${CC}" \
 		CFLAGS.host="${CFLAGS}" \
 		CXX.host="${CCACHE_BIN} ${CXX}" \
 		CXXFLAGS.host="${CXXFLAGS}" \
 		LDFLAGS.host="${LDFLAGS}" \
 		LINK.host="${CXX}"
 REINPLACE_ARGS=	-i ''
 
 CONFLICTS_INSTALL=	node[0-9][0-9]
 
 SHEBANG_FILES=	deps/v8/third_party/inspector_protocol/*.py \
 		deps/v8/tools/*.py \
 		tools/*.py \
 		tools/inspector_protocol/*.py
 
 OPTIONS_DEFINE=	BUNDLED_SSL DOCS JIT
 OPTIONS_DEFAULT=JIT
 OPTIONS_SUB=	yes
 BUNDLED_SSL_DESC=	Use bundled OpenSSL implementation from node.js
 JIT_DESC=		Use Just In Time compiler
 
 BUNDLED_SSL_CONFIGURE_OFF=	--openssl-use-def-ca-store --shared-openssl
 BUNDLED_SSL_USES_OFF=	ssl
 JIT_CONFIGURE_OFF=	--v8-lite-mode
 
 .include "Makefile.version"
 .include <bsd.port.options.mk>
 
 .if ${PORT_OPTIONS:MBUNDLED_SSL} && ${ARCH} != amd64
 CONFIGURE_ARGS+=--openssl-no-asm
 .endif
 
 post-patch:
 	@${REINPLACE_CMD} -e 's|/usr/local|${LOCALBASE}|' ${WRKSRC}/tools/v8_gypfiles/v8.gyp
 # Clean up bundled libraries
 	@${RM} -r ${WRKSRC}/deps/ada/
 	@${RM} -r ${WRKSRC}/deps/brotli/
 	@${RM} -r ${WRKSRC}/deps/cares/
 	@${RM} -r ${WRKSRC}/deps/googletest/
 	@${RM} -r ${WRKSRC}/deps/histogram/
 	@${RM} -r ${WRKSRC}/deps/icu-small/
 	@${RM} -r ${WRKSRC}/deps/LIEF/
 	@${RM} -r ${WRKSRC}/deps/llhttp/
 	@${RM} -r ${WRKSRC}/deps/merve/
 	@${RM} -r ${WRKSRC}/deps/nbytes/
 	@${RM} -r ${WRKSRC}/deps/nghttp2/
 	@${RM} -r ${WRKSRC}/deps/ngtcp2/
 	@${RM} -r ${WRKSRC}/deps/npm/
 	@${RM} -r ${WRKSRC}/deps/simdjson/
 	@${RM} -r ${WRKSRC}/deps/sqlite/
 	@${RM} -r ${WRKSRC}/deps/uv/
 	@${RM} -r ${WRKSRC}/deps/uvwasi/
 	@${RM} -r ${WRKSRC}/deps/zlib/
 	@${RM} -r ${WRKSRC}/deps/zstd/
 
 post-configure:
 	# Post-process Makefile and *.mk files created by node-gyp and remove
 	# all occurrences of -I${LOCALBASE}/include. C*FLAGS include this
 	# before all -I../deps/* for bundled code. This can cause build
 	# breakages if the dependency is installed in ${LOCALBASE}. The
 	# USES+=localbase above will ensure that we pick up includes for real
 	# external dependencies.
 	@${FIND} ${WRKSRC}/out -type f -print0 | ${XARGS} -0 ${REINPLACE_CMD} -e 's|-I${LOCALBASE}/include||g'
 
 post-install:
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/node
 
 post-install-BUNDLED_SSL-on:
 	cd ${STAGEDIR}${PREFIX} && ${FIND} include/node/openssl/ -type f >> ${TMPPLIST}
 
 .include <bsd.port.mk>
diff --git a/www/node25/Makefile.version b/www/node25/Makefile.version
index 540ea6223dd8..cbf1a2f977af 100644
--- a/www/node25/Makefile.version
+++ b/www/node25/Makefile.version
@@ -1 +1 @@
-NODEJS_PORTVERSION=	25.6.1
+NODEJS_PORTVERSION=	25.8.0
diff --git a/www/node25/distinfo b/www/node25/distinfo
index 2ed43ee16eb1..56765936b4f4 100644
--- a/www/node25/distinfo
+++ b/www/node25/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1771105014
-SHA256 (node-v25.6.1.tar.xz) = cf756781c8b4dc5ee030f87ddf9d51b8d5bf219ad56cbd9855c4a3bdc832c78e
-SIZE (node-v25.6.1.tar.xz) = 57241180
+TIMESTAMP = 1773152831
+SHA256 (node-v25.8.0.tar.xz) = 5d00429cb856cc72200ec6c08e8cdda75ea9618256de8d899fa049c23f4a2eee
+SIZE (node-v25.8.0.tar.xz) = 57408820
diff --git a/www/node25/files/patch-merve b/www/node25/files/patch-merve
new file mode 100644
index 000000000000..f192eb17a1cc
--- /dev/null
+++ b/www/node25/files/patch-merve
@@ -0,0 +1,15 @@
+Obtained from:	https://github.com/nodejs/node/commit/59a522af24173b244cb86829de145d46b143a45c
+
+--- src/node_cjs_lexer.cc.orig	2026-02-24 06:13:37 UTC
++++ src/node_cjs_lexer.cc
+@@ -22,8 +22,8 @@ using v8::Value;
+ using v8::Value;
+ 
+ // Create a V8 string from an export_string variant, using fast path for ASCII
+-inline Local<String> CreateString(Isolate* isolate,
+-                                  const lexer::export_string& str) {
++template <typename T>
++inline Local<String> CreateString(Isolate* isolate, const T& str) {
+   std::string_view sv = lexer::get_string_view(str);
+ 
+   if (simdutf::validate_ascii(sv.data(), sv.size())) {