$ tail -f topics/javascript.log
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Node.js
Undici 8.4.0 lands in Node core with three production fixes that prevent socket assertion crashes, TLS hostname rejections, and parser hangs under backpressure.
read --wire →
Vue.js
The Rust-powered linting ecosystem is accelerating, and create-vue is staying current with back-to-back dependency bumps across the oxc stack.
read --wire →
Vercel
Turbopack drops 2KB of wasted WebAssembly helpers while Workflow patches a critical event-log replay bug that was surfacing as data corruption.
read --wire →
Shopify
Shopify shipped coordinated patch releases across the entire Hydrogen suite fixing a critical cart line item rendering issue that breaks nested item displays.
read --wire →
Meta
React Native's CI is back online after a gradle.properties formatting bug broke template testing, while the team simultaneously lands the Android Gradle Plugin v9 migration that removes legacy dependencies and cuts build complexity.
read --wire →
Supabase
Supavisor moved security scanning to PR branches and fixed critical IPv6 detection, while three MCP packages shipped coordinated updates after a repository transfer.
read --wire →
Node.js
Undici shipped critical fixes for parser deadlock under backpressure and idle socket validation, while import-in-the-middle resolved compatibility issues with CJS builtins that block instrumentation.
read --wire →
Vue.js
Create-vue is rolling forward its tooling stack while eslint-plugin-vue ships a new option that gives developers control over key sorting across blank lines.
read --wire →
Vercel
Workflow's event-log replay just got three critical defense-in-depth patches that close corruption vectors, while Next.js ships runtime wins and Partial Prefetching defaults.
read --wire →
Meta
React's server rendering layer shipped a critical fix for abort handling that prevents silent failures when streaming renders resume mid-request.
read --wire →
Supabase
Supabase multiplayer dropped native emoji reaction support, but only if you're running 2.0.0 or later.
read --wire →
Node.js
Undici 8.2.0 broke the documented single-argument form of MockCallHistory filter methods. A fix just landed to restore backward compatibility without touching the new AND/OR semantics.
read --wire →
Vue.js
npm-run-all2 jumps to v9 across the Vue tooling ecosystem while Quasar refreshes its Vite integration.
read --wire →
Vercel
A critical ReDoS vulnerability in your MCP dependencies just got patched, but your browser_eval wrapper is already broken by an upstream schema change.
read --wire →
Meta
React's server-side rendering layer just became harder to misuse, with three commits that eliminate footguns in error handling and work scheduling that could silently swallow failures.
read --wire →
Supabase
Supabase CLI is fixing a critical local development gap: passkey and WebAuthn configuration now properly propagate to environment variables during `supabase start`.
read --wire →
Node.js
Undici's HTTP/2 client now auto-recovers from invalid sessions instead of failing hard, while Node core plugs a race condition that could corrupt SharedArrayBuffer-backed buffers during encoding.
read --wire →
Vue.js
Vue's TypeScript plugin now correctly treats `class` and `style` as non-boolean properties, fixing a persistent type inference bug that affected template compilation.
read --wire →
Vercel
Next.js v16.3.0-canary.36 ships a critical CLI fix that prevents silent typegen failures from masquerading as successful builds.
read --wire →
Shopify
A latent redirect handling bug surfaced this week when Shopify moved preview theme binding from server-side storage to cookies, causing dev themes to occasionally render as live in the storefront renderer.
read --wire →
