$ tail -f topics/javascript.log
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Vue.js
Vue's experimental Vapor compiler shipped v3.2.19 with critical fixes for slot forwarding and directive arrays, while VitePress finally documented the base path prefix feature developers have been asking for.
read --wire →
Vercel
Next.js v16.3.0-canary.90 landed overnight with fresh React internals, while the Eve site got a ground-up design refresh that adds per-template pages.
read --wire →
Meta
The automated translation update for React Native shipped its first batch across messaging and composer modules overnight, processing multiple Android resource files.
read --wire →
Supabase
Supabase dropped CVE-2026-31431 mitigation across Postgres 15, 17, and OrioledB variants overnight, closing a critical vulnerability that could affect every deployment.
read --wire →
Node.js
A regression in Node's stream handling silences data flow to working destinations when a sibling pipe errors, breaking multi-destination pipelines across all recent versions.
read --wire →
Vue.js
VitePress shipped long-overdue markdown container support for note, important, and caution blocks while create-vue rolled through routine dependency updates and upgraded its GitHub Actions.
read --wire →
Vercel
Passport ships identity token verification [ref:1], Eve stops failing turns on unsupported JSON Schemas [ref:6], and Workflow cuts port discovery overhead by 83% [ref:10].
read --wire →
Shopify
Shopify/cli shipped comprehensive unit tests for critical warning and storage systems, closing gaps that could hide regressions in production auth flows.
read --wire →
Meta
RedBox auto-retry was reloading backgrounded apps and deadlocking the main thread until the watchdog killed them.
read --wire →
Supabase
The MCP server gains edge function runtime visibility while infrastructure rolls forward across three major subsystems overnight.
read --wire →
Node.js
Node shipped a critical fix for a heap-use-after-free vulnerability in HTTP/2 stream handling that could crash servers under specific receive-and-send patterns.
read --wire →
Vue.js
Vue's reactivity system just got rebuilt from the ground up, and Vapor Mode is production-ready for the first time.
read --wire →
Vercel
Eve fixed a critical bug where user approval controls submitted after request resolution were misdirected to newer pending requests, and shipped source-backed extension distributions that let packages publish agent-shaped JavaScript without turning Eve's internals into a public ABI.
read --wire →
Node.js
The nodejs.org homepage got a close button, letting visitors dismiss the banner instead of living with it forever.
read --wire →
Vue.js
VitePress is removing the metaChunk configuration option entirely, forcing all sites onto the optimization that was previously optional.
read --wire →
Vercel
AI SDK 6's removal of the `name` parameter from function tool definitions is now documented after breaking upgraders, while Next.js Turbopack merges runtime optimization PRs that eliminate per-route overhead.
read --wire →
Shopify
Shopify's interactivity audit is shipping widespread fixes to eliminate blocking prompts in non-interactive workflows, from app dev to hydrogen deployments.
read --wire →
Meta
React Native's iOS build system just got rebuilt to work natively with Swift Package Manager, eliminating years of Clang VFS overlay workarounds that have been slowing down compiles and fragmenting the header namespace.
read --wire →
Supabase
Supabase shipped three critical studio UI repairs and overhauled ETL's shutdown handling, resource management, and operational tooling in a single push across the platform.
read --wire →
Node.js
Stream writer methods now properly validate options.signal before use, closing a gap where invalid signals caused inconsistent behavior across push, broadcast, and fromWritable.
read --wire →
