$ tail -f topics/javascript.log
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Vercel
vercel/ai extends FilesV4 with optional download and metadata methods while eve removes a session startup bottleneck, and both provider-utils and @turbo/releaser ship security updates.
read --wire →
Shopify
Shopify CLI shipped a security fix that validates git commit author arguments and stops printing GitHub credentials to terminal output.
read --wire →
Meta
React stops leaking detached IntersectionObserver targets, Jest's 30.5.0 ESM subpath bug gets a fix, and React Native tightens its stable API visibility.
read --wire →
Supabase
Supabase CLI ships a correctness fix for schema resets plus an opt-out shadow cache, while ETL hardens logical replication and DuckLake ingestion.
read --wire →
Node.js
Node.js overhauled its JavaScript recursive fs.watch fallback on Linux, cutting setup watch handles from 13,501 to 896 and CPU cost per event from ~9 ms to ~2 ms.
read --wire →
Vue.js
create-vue's CI now fails on incompatible peer dependencies and skips workflows in forks, tightening the scaffolding pipeline and saving runner time.
read --wire →
Vercel
WorkflowAgent now signs and verifies tool approvals inside durable steps, Vercel's Python workflow client can detect conflicting hook tokens, and vercel/ai consolidated security-sensitive bridge logic.
read --wire →
Supabase
Supabase Studio now fails CI when dead files or unused dependencies pile up, closing a three-PR cleanup.
read --wire →
Node.js
Node.js core shipped a cleanup in quic that removes a dead end-of-stream flag, updated zlib, and fixed async callback scoping for node-api.
read --wire →
Vue.js
VitePress now resolves $frontmatter expressions during markdown rendering, making titles available to tools like local search that never run Vue.
read --wire →
Vercel
Three Turborepo fixes land today: cache keys no longer fragment on machine-specific paths, watch mode deduplicates hashes across Cargo and Python, and native tasks are discoverable in task listings.
read --wire →
Meta
Facebook's React Native repo merged a commit to upgrade Flow in fbsource.
read --wire →
Supabase
Supabase's slim-service images now carry busybox wget for CLI healthchecks, while five postgres bench releases shipped across versions 15 and 17.
read --wire →
Node.js
Node.js aligned exportKeyPkcs8() with the Web Crypto spec: exporting a public key as 'pkcs8' now throws InvalidAccessError instead of NotSupportedError.
read --wire →
Vue.js
Vue language-tools cuts unnecessary folding-range requests when focus mode is disabled, improving editor responsiveness.
read --wire →
Vercel
Turborepo now tolerates missing native lockfiles while Next.js cuts hash lookups in its storage layer.
read --wire →
Shopify
Shopify CLI's `app dev` now lets developers create a dev store inline instead of leaving the flow, with a stacked PR adding a create-store option to the picker.
read --wire →
Meta
Jest 30.5.0 ships with deep changes to jest-runtime, jest-resolve, and jest-haste-map, and React's test suite moves to Jest 30.4 with a jsdom bump.
read --wire →
Supabase
The supabase CLI's AI review pipeline now runs Claude and Codex in parallel with a dedicated adjudicator, removing the size cap and fixing a v1.12 regression that hung the workflow.
read --wire →
Node.js
A Node.js events fix stops weak references to listeners from being silently overwritten, and core-validate-commit moves its test suite to the built-in test runner.
read --wire →
