Who contributed to Meta on May 12, 2026?

2 developers shipped this update, including SimenB and ahnpnl.

What were the notable Meta updates?

Bump @babel/plugin-transform-modules-systemjs to fix CVE-2026-44728 (#56775), Remove legacy Hermes C++ code and HERMES_V1_ENABLED compile definition (#56731), and Remove hermesV1Enabled Gradle property and simplify Hermes version resolution (#56733).

REACT NATIVE PATCHES BABEL VULNERABILITY, AXES HERMES LEGACY CODE

By RepoJournal · Filed 06:03 UTC on May 12, 2026 · About Meta

2 people shipped this

SimenB @SimenB 1 cited

ahnpnl @ahnpnl 1 cited

React Native shipped a critical Babel fix overnight while gutting three releases worth of dead Hermes infrastructure code.

A HIGH severity vulnerability in @babel/plugin-transform-modules-systemjs [1] forced React Native's hand—versions 7.12.0 through 7.29.3 are exploitable, and the repo was resolving an unpatched 7.25.9. The team added a Yarn resolution to force 7.29.4, the first safe version. This isn't optional. Meanwhile, the Hermes cleanup [2][3] removes two major feature flags (HERMES_V1_ENABLED and the hermesV1Enabled Gradle property) that have been dead weight for releases now. Teams running apps with custom Hermes builds need to know the compile definitions have changed. On the Jest side, the runtime gained native ESM fallback detection [4][5]—if a .js file contains import/export syntax, Jest now uses native Node ESM instead of CommonJS transformation, solving a class of weird edge cases. The test docs finally caught up to the code [6], documenting the long-hidden expect.getState() and expect.setState() APIs that developers have been cargo-culting for years. And React Native fixed a silent error message bug [7] where invariant failures in renderApplication dropped the actual rootTag value instead of showing it.

Action items

→ Force @babel/plugin-transform-modules-systemjs to ^7.29.4 immediately via Yarn resolution facebook/react-native [immediate]
→ If you maintain custom Hermes C++ integrations, remove all HERMES_V1_ENABLED guards before next release facebook/react-native [plan]
→ Update Jest runtime if you have .js files with ESM syntax to take advantage of native fallback facebook/jest [monitor]

References

[1] Bump @babel/plugin-transform-modules-systemjs to fix CVE-2026-44728 (#56775) facebook/react-native
[2] Remove legacy Hermes C++ code and HERMES_V1_ENABLED compile definition (#56731) facebook/react-native
[3] Remove hermesV1Enabled Gradle property and simplify Hermes version resolution (#56733) facebook/react-native
[4] fix(jest-runtime): fall back to native ESM when a .js file contains ESM syntax ↗ facebook/jest
[5] fix(jest-runtime): fall back to native ESM when a .js file contains ESM syntax (#16152) facebook/jest
[6] docs: document expect.getState() and expect.setState() API ↗ facebook/jest
[7] - Fix missing format specifier in renderApplication invariant (#56329) facebook/react-native

Quick answers

What shipped in Meta on May 12, 2026?: React Native shipped a critical Babel fix overnight while gutting three releases worth of dead Hermes infrastructure code. In total, 35 commits and 3 pull requests landed.
Who contributed to Meta on May 12, 2026?: 2 developers shipped this update, including SimenB and ahnpnl.
What were the notable Meta updates?: Bump @babel/plugin-transform-modules-systemjs to fix CVE-2026-44728 (#56775), Remove legacy Hermes C++ code and HERMES_V1_ENABLED compile definition (#56731), and Remove hermesV1Enabled Gradle property and simplify Hermes version resolution (#56733).

REACT FIBER FIXES SINGLETON PROPERTY BLEED, REACT NATIVE STRIPS DEAD CODE

React plugged a critical Fiber bug where singleton cleanup was nuking third-party attributes, while React Native dropped unused timing code from iOS binaries.

javascript 11 shipped 1-min read

Meta 1 day ago

REACT DEVTOOLS BRIDGE HARDENS AGAINST RECONNECTS AND CORRUPTION

React's DevTools layer just got bulletproof: hoxyq landed four interconnected patches that eliminate silent state corruption, validate invariants before mutation, and handle extension reconnects with message buffering and handshakes.

javascript 22 shipped 2-min read

Meta 2 days ago

REACT SERVER DOM TURBOPACK GETS DYNAMIC CHUNK MERGING

React's Turbopack integration now supports an experimental array format that lets you dynamically merge or unmerge chunks based on what's already loaded in the browser.

javascript 16 shipped 1-min read

Meta 3 days ago

React 19 Cuts Server Component Decoding Time, React Native Fixes requestIdleCallback Regression

React shipped performance wins across 19.0.8 and 19.1.9 while React Native patched a critical timeout bug that broke requestIdleCallback tasks.

javascript 22 shipped 2-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.