Vue.js
LANGUAGE TOOLS TIGHTENS PROP VALIDATION, CREATE-VUE TOOLING GETS ROUTINE UPDATES
Vue's language server now validates required fallthrough attributes, catching component contract violations that TypeScript alone would miss.
read --wire →
$ tail -f topics/javascript.log
JavaScript news, every morning.
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
Your week in JavaScript, every Monday.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Recent wires
Vercel
TURBOREPO HARDENS AGAINST OS-LEVEL CRASHES AND BAKE LOCKFILE BREAKAGE
Turborepo shipped four critical fixes overnight that prevent panics on non-UTF-8 paths, stop Bun lockfiles from rewrites, and close a symlink race condition in logging.
read --wire →
Meta
REACT NATIVE CLEANS HOUSE, JEST REVERTS WATCHER EXPERIMENT
React Native dropped deprecated DisplayMetrics APIs while Jest pulled the plug on a half-baked watcher backend, then pivoted to consolidate file traversal into a single shared implementation.
read --wire →
Supabase
PG-BOSS PATCHES STATEMENT TIMEOUT THAT KILLS MAINTENANCE JOBS AT SCALE
pg-boss just stopped keeling over when your job backlog grows, fixing a 30-second timeout that was nuking archive and purge operations in production.
read --wire →
Node.js
STREAM BACKPRESSURE FIX PREVENTS DATA DUPLICATION IN PIPETO
Node core patched a critical bug in pipeTo() that duplicated chunks when writers returned false during backpressure, causing output like 'abcdcd' instead of 'abcd'.
read --wire →
Vue.js
STYLE GUIDE GETS VUE 3 OVERHAUL AS LANGUAGE TOOLS FIXES COMPLETION BUGS
Vue's official style guide is finally shedding its Vue 2 skin, while the language tools team ships a batch of IDE fixes that should make your template completion stop lying to you.
read --wire →
Vercel
VERCEL AI FIXES XAI PROVIDER BUGS BREAKING MULTI-STEP TOOL CALLING
Grok reasoning models are failing 4-12% of the time on continuation steps, and Vercel AI just shipped two fixes that surface the actual errors and stop duplicate reasoning events from tanking requests.
read --wire →
Shopify
SHOPIFY CLI TIGHTENS BUNDLE GUARDS AND FIXES UPGRADE CHAOS ON WINDOWS
The CLI now prevents silent uploads of oversized and out-of-app assets that were silently ballooning bundles to gigabytes, while fixing a critical path normalization bug breaking Windows auto-upgrades.
read --wire →
Meta
REACT NATIVE KILLS FABRIC FEATURE FLAGS, JEST ADDS CONDITIONAL MOCKS
React Native is shipping Fabric by default after ripping out the last feature flags that controlled the new architecture rollout.
read --wire →
Supabase
SUPABASE SERVER RC.63 SHIPS AUTH FIX, STORAGE IMPROVES ERROR CLARITY
Supabase shipped server-v1.1.0-rc.63 with a critical auth fix that unblocks the JS SDK's dual-mode token handling, while storage v1.58.20 cuts through database error noise to surface the real culprits.
read --wire →
Node.js
NEXT.JS SHIPS SECURITY FIXES AS NODE.JS LANDS HTTP/1 1XX RESPONSE API
The nodejs.org site pulled Next.js 16.2.6 with critical security patches overnight while core Node.js added long-requested support for arbitrary 1xx status codes in HTTP/1.
read --wire →
Vue.js
LANGUAGE TOOLS RECLAIM CUSTOM ELEMENT SUPPORT, PROPS COMPLETION GETS SMARTER
Vue's language-tools just restored the HTML custom data feature that hundreds of teams rely on for web components, while tightening TypeScript prop inference to match the language itself.
read --wire →
Vercel
VERCEL CLI GETS PERFORMANCE BOOST AND SIGNED BINARIES, TURBOREPO HARDENS CACHE SECURITY
Vercel shipped standalone signed binaries for the CLI while eliminating redundant API calls on every deploy, and Turborepo locked down symlink exploits in cache archives.
read --wire →
Shopify
CLI FIXES STALE SCHEMA TRAP, HYDROGEN SCRUBS LEGACY DOCS
Shopify CLI shipped two critical fixes that prevent developers from accidentally working against outdated GraphQL schemas and resolving stores that no longer exist.
read --wire →
Supabase
SUPABASE FIXES URL ENCODING BUGS IN STUDIO WHILE ETL PIPELINE GAINS TIMEOUT PROTECTION
Table names and schemas containing special characters were silently breaking policy links across the Studio, but today's patches restore the guided onboarding flow.
read --wire →
Node.js
COREPACK DROPS NODE 20 AND 25 SUPPORT, UNDICI 8.3.0 SHIPS POOL FIX
Corepack is breaking backward compatibility by ending support for Node.js 20 and 25, while requiring NODE_USE_ENV_PROXY for proxy functionality going forward.
read --wire →
Vue.js
CREATE-VUE TIGHTENS CI PERMISSIONS
Create-vue locked down GitHub Actions token scope to follow least-privilege defaults, reducing attack surface without changing build behavior.
read --wire →
Vercel
WORKFLOW HARDENS AGAINST SUPPLY CHAIN ATTACKS, TURBOREPO PATCHES CSRF AND SHELL INJECTION
Vercel shipped critical security fixes across Workflow and Turborepo while shipping new CLI features and hardening the entire platform against repository-controlled execution.
read --wire →
Shopify
CLI FIXES ANALYTICS BLACKHOLE, PURGES DEPRECATED COMMANDS
Shopify CLI's theme dev command was silently dropping analytics events on exit, and the next major release is finally shedding its legacy baggage.
read --wire →
Meta
REACT FIXES ES6 CONSTRUCTOR CRASH IN NON-REFLECT RUNTIMES
React patched a critical fallback that broke ES6 class constructors on runtimes without Reflect support, while React Native tackles CocoaPods reproducibility and touch event crashes.
read --wire →