Vue.js
LANGUAGE TOOLS TIGHTENS TYPE SAFETY FOR COMPOUND HANDLERS
Vue's language-core just fixed a critical type inference bug that was silently dropping return types from compound event handlers in templates.
read --wire →
$ tail -f topics/javascript.log
JavaScript news, every morning.
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
Your week in JavaScript, every Monday.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Recent wires
Vercel
AI SDK TIGHTENS RELEASE DISCIPLINE WHILE WORKFLOW FIXES PARALLELISM UNDER LOAD
AI SDK now blocks merges without proper changesets, Eve agents get isolated queue namespaces to prevent crosstalk in multi-agent deployments, and Workflow's local dev server can finally handle hundreds of parallel steps.
read --wire →
Meta
REACT DEVTOOLS FACADE LANDS WITH PROFILER AND COMPONENT TREE TOOLS
React's new DevTools Facade can now coexist with the browser extension, unblocking the entire integration strategy for embedded React inspection.
read --wire →
Supabase
REALTIME TIGHTENS SECURITY WITH LEAST-PRIVILEGE USER, CLI FIXES CONFIG PUSH REGRESSION
Supabase Realtime v2.109.0 ships a major security hardening feature that lets the service run as a constrained database role instead of superuser, while the CLI ports critical Go behavior that was lost in the TypeScript rewrite.
read --wire →
Node.js
UNDICI FIXES RETRY HANG ON LARGE DOWNLOADS
Undici patched a critical bug where retried Range requests hung indefinitely under backpressure, reproducibly freezing downloads over 1GB from S3.
read --wire →
Vue.js
PINIA SETUP STORES GET HMR FIX AND TEST DIAGNOSTICS
Pinia shipped critical fixes for setup stores that were losing runtime-added properties during hot module replacement, while new diagnostics catch common testing mistakes before they ship.
read --wire →
Vercel
NEXT.JS LOCKING IN REACT CANARY WHILE WORKFLOW CRUSHES REPLAY OVERHEAD
Next.js shipped React upstream updates [ref:3] while the Workflow runtime cut replay costs with three separate optimizations [ref:6] [ref:9] [ref:10], and Eve's agent framework now handles monorepo package managers correctly [ref:13].
read --wire →
Shopify
CLI TEST SUITE DITCHES FLAKY SLEEPS FOR EXPLICIT WAITS
Shopify's CLI test infrastructure is killing fixed delays in favor of event-driven assertions, eliminating a class of timing-dependent test failures.
read --wire →
Meta
REACT COMPILER FIXES MEMO CACHE MISSES, REACT NATIVE REVERTS ANIMATION FLAG
React's compiler shipped a critical fix for loop reassignments that were breaking memoization on every render, while React Native's animation feature flag landed, then immediately reverted.
read --wire →
Supabase
DASHBOARD GAINS STORED PROCEDURE MANAGEMENT, POSTGRES 17 BECOMES SELF-HOSTED DEFAULT
Supabase shipped the ability to manage stored procedures directly from the dashboard, closing a critical gap that left users stranded when security advisors flagged procedure vulnerabilities.
read --wire →
Node.js
NODE SHIPS FIVE SECURITY PATCHES OVERNIGHT, CLOSES CRITICAL TLS AND HTTP/2 HOLES
Five CVEs landed in the private repo with fixes for TLS hostname normalization, HTTP/2 memory exhaustion, SNI bypass, proxy credential leaks, and process.chdir permission handling - all merged and ready for release.
read --wire →
Vue.js
VAPOR COMPILER GAINS DYNAMIC SLOT SUPPORT, CREATE-VUE BUMPS TO 3.22.4
Vue's Vapor compiler now handles dynamic slots and default slot elements natively, while create-vue ships its first release to drop Node 20 support.
read --wire →
Vercel
WORKFLOW CUTS STEP LATENCY IN HALF WITH LAZY INLINE EXECUTION
Two performance wins collapse network round-trips per step: lazy inline step start eliminates the separate step_created call, and inline event-log delta skips redundant event.list fetches on sequential workflows.
read --wire →
Shopify
SHOPIFY CLI 4.2.0 SHIPS WITH THEME PREVIEW DEBUGGING AND ENV FIXES
Shopify CLI 4.2.0 lands with standard events inspector for theme development and fixes a critical regression in the command loader that broke lazy loading.
read --wire →
Meta
REACT FLIGHT OPTIMIZES JSON SERIALIZATION, NATIVE CLEANS UP FEATURE FLAGS
React's server-side Flight layer is now faster by moving model resolution outside the JSON.stringify path, while React Native is shipping four separate feature flag removals that consolidate months of internal experimentation.
read --wire →
Supabase
SUPABASE PATCHES CRITICAL VITEST RCE, SHIPS SCHEMA DEFAULT EXPRESSIONS
A critical arbitrary file read vulnerability in Vitest's UI server forced an emergency bump across the server stack, while ETL gains deterministic column defaults and safer SQL identifier handling.
read --wire →
Node.js
CODEMOD ADDS TOML SUPPORT AS TYPESCRIPT NATIVE PREVIEW ADVANCES
The jssg-types library shipped TOML language node support overnight, expanding codemod's AST capabilities just as TypeScript's native preview build marches toward production.
read --wire →
Vue.js
VUE 3.6.0-BETA.16 LANDS WITH VITEST BROWSER E2E OVERHAUL
Vue's test infrastructure just got a major upgrade, migrating transition tests from Puppeteer to Playwright-driven browser mode for better stability and speed.
read --wire →
Vercel
CRITICAL CORS VULNERABILITY PATCHED ACROSS AI AND WORKFLOW, DEPENDABOT NOW RESTORES AUTOMATION
Hono's CORS middleware was reflecting credentials to arbitrary origins—both vercel/ai and vercel/workflow patched it overnight, and you need to upgrade before your next deploy.
read --wire →
Shopify
CLI GAINS DEV STORE CREATION, HYDROGEN CUTS OBSERVABILITY OVERHEAD
Shopify CLI now ships a native command to spin up development stores directly from the terminal, while Hydrogen patches a critical vite detection failure that was crashing installations.
read --wire →