$ tail -f topics/javascript.log
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Meta
React's compiler architecture is getting a major restructuring, moving OXC and SWC integration out of core and into their own projects, while React Native stabilizes animation handling and fixes critical Fabric crashes.
read --wire →
Supabase
The CLI v2.106.0 flips the switch on schema exposure: new public tables no longer surface through the Data API by default, matching hosted project behavior and forcing a migration decision on every team running local stacks.
read --wire →
Node.js
Undici shipped a critical fix for HTTP/2 multiplexing that was crashing processes when two requests shared a session, while Node core fixed vm sandboxes backed by Proxies to properly report property ownership.
read --wire →
Vue.js
Vue core v3.5.38 landed overnight while the entire ecosystem's linter and formatter stack jumps to the latest oxc tooling.
read --wire →
Vercel
Vercel AI shipped critical fixes to block three classes of SSRF bypasses in download validation, while Next.js dev server now persists private cache entries across reloads.
read --wire →
Shopify
The CLI team merged a five-PR foundation for `shopify store info`, a new command that reads store metadata from Business Platform schemas, while Hydrogen's preview release pipeline is now live.
read --wire →
Meta
The Rust compiler is ditching wasteful serialize-deserialize round-trips by passing typed ASTs directly to consumers instead of converting everything to JSON and back.
read --wire →
Supabase
The legal hub is live, reporting charts got fixed, and Realtime 2.106.0 cuts migration blocking from health checks entirely.
read --wire →
Node.js
Undici restored socket validation to respect global timers instead of sneaking around fake timer mocks, fixing a footgun that silently broke test suites relying on clock control.
read --wire →
Vue.js
Vue's runtime now cancels async component callbacks after unmount, stopping false timeout errors from polluting error tracking in production.
read --wire →
Vercel
A client-side attack on tool approval replay is now closed across both generateText and WorkflowAgent after the workflow package's validation logic drifted from the hardened core path.
read --wire →
Shopify
Shopify CLI is surfacing clearer error messages when theme tokens lack the right permissions, while Hydrogen reduces performance monitoring overhead by 90 percent.
read --wire →
Meta
Meta's experimental Rust port of React Compiler is live for feedback with all fixtures passing, while the team has already cut 1MB from the shipped binary by hand-parsing a single regex.
read --wire →
Supabase
Supabase CLI just locked down a critical fix for shadow database migrations: the declarative apply path now provisions auth, storage, and realtime schemas before your custom migrations run, eliminating the dependency resolution failures that have been breaking migrations for weeks.
read --wire →
Node.js
Node's crypto subsystem shipped a significant architecture change overnight that consolidates KeyObject conversions and tightens Web Crypto integration.
read --wire →
Vue.js
Create-vue shipped a routine dependency refresh that pulls in the latest minor versions across your project scaffolding toolkit.
read --wire →
Vercel
The playground is live with Next.js 16.3's self-upgrading app shells, Vercel's AI SDK patched a critical timeout bug that left streams hanging indefinitely, and Claude Fable 5 hit 96% on coding evals with agent context.
read --wire →
Shopify
Hydrogen's cart handler now recursively includes line item children, fixing a data structure bug that could break custom cart implementations across the entire platform ecosystem.
read --wire →
Meta
React Native shipped critical infrastructure upgrades overnight: OIDC token replacement for npm publishing, AGP v9 adoption across the stack, and a text decoration rendering fix that restores native Android behavior.
read --wire →
Supabase
Supabase pushed five new Postgres distributions across 15.x and 17.x lines while CLI finally replaces its Go proxy for native config push across all five services.
read --wire →
