Vue.js
Vue language tools adopt Vue 3.6 API; VitePress fixes CSP and icon builds
Vue language-tools upgrades to Vue 3.6.0-rc.6 without codegen changes, while VitePress ships hashed icon assets and CSP-safe config serialization.
read --wire →
$ tail -f topics/javascript.log
JavaScript news, every morning.
Daily updates from the JavaScript and TypeScript world - Node.js, React, Vue, Next.js, Vercel, and the platform layers built on them.
41 updates across 6 projects this week.
Your week in JavaScript, every Monday.
One calm review of what shipped across JavaScript - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top JavaScript projects - refine anytime. · Read a sample issue →
Recent wires
Vercel
Eve activity tracking lands, AI SDK fixes session resumption
Eve shipped its new activity protocol and independent collectors, while the AI SDK fixed Deep Agents sessions losing context after stop/resume and Turborepo cut package listing time by skipping lockfile parsing.
read --wire →
Shopify
Shopify CLI kills localhost dev flow
The Shopify CLI's `app dev --use-localhost` command is aborting instead of prompting for certificate generation, and a fix is already merged.
read --wire →
Meta
React Native patches critical shell-quote RCE
A critical arbitrary code execution vulnerability in shell-quote forces a mandatory React Native upgrade.
read --wire →
Supabase
SLIM POSTGRES NOW BUILDS FROM REAL CONFIG, CLI REMOVES NX, SUPAVISOR SPLITS METRICS
Supabase just unified its slim postgres image build to use the same ansible config as docker.io, eliminating a year of transcription bugs in one architectural fix.
read --wire →
Node.js
COREPACK SHAKES UP PACKAGE MANAGER RESOLUTION
Corepack is quietly becoming the most opinionated tool in your Node.js toolchain, and two new features are about to change how you pin and verify package managers.
read --wire →
Vue.js
VitePress ships relocatable builds
VitePress just made its long-requested relative base and CDN asset prefix a reality, and it's a game changer for anyone deploying to IPFS or multiple subpaths.
read --wire →
Vercel
Turbopack export mangling ships by default on canary
Next.js just made production bundles smaller by default, and it's live on canary today.
read --wire →
Shopify
Shopify CLI Realigns Extension Size Checks with Brotli
The Shopify CLI's local size estimates no longer match what the platform actually enforces, and this update fixes that gap.
read --wire →
Meta
React Native kills two feature flags as Jest scrubs a supply-chain advisory
The overnight shift quietly simplifies React Native's scheduler internals and closes a Jest dependency hole that was poisoning your audit output.
read --wire →
Supabase
FIVE REALTIME RELEASES, ZERO PUBLIC BREAKING CHANGES
Supabase's Swift SDK quietly fixed a data-corruption bug in typed upserts while the CLI shored up its testing infrastructure, and realtime rolled through five new versions overnight.
read --wire →
Node.js
NODE 26.8.1 HITS DOCKER IMAGES
Node's official Docker images just caught up to the latest releases, and a pair of core patches landed that you need on your radar.
read --wire →
Vue.js
Vue fixes Map and Set comparison, Suspense transitions
Four fixes land in Vue core today, with the sharpest edge in v-model and Suspense edge cases.
read --wire →
Vercel
MEMORY GOES FIRST-CLASS, WORKFLOWS LEARN TO FAIL GRACEFULLY, AND SLACK PATCHES ATTACHMENTS
Eve's new memory core landed overnight, Next.js fixed a Turbopack deadlock, and chat adapters closed a security hole in attachment downloads.
read --wire →
Shopify
Shopify CLI goes silent on config-only extensions
Run `shopify app dev` with a configuration-only extension and the terminal says nothing, until now.
read --wire →
Meta
React Native cuts FileIoHandler security risk
React Native patches a serious security hole and stabilizes its Android E2E pipeline in one busy day.
read --wire →
Supabase
REALTIME FIXES PROMETHEUS COUNTER BUG
A subtle counter reset bug in Realtime's gen_rpc metrics was skewing Prometheus dashboards, and the fix is out now.
read --wire →
Node.js
NODE CORE PERF: 10-20% EVENTTARGET SPEEDUP LANDS
EventTarget just got 10-20% faster in the benchmark, and recursive readdir drops the per-entry stat() overhead.
read --wire →
Vue.js
JSX Vapor Drops CJS in Breaking Beta
Vue's JSX vapor channel just shipped a breaking beta that kills CommonJS support and adds a new vue-jsx package.
read --wire →
Vercel
NEXT.JS PULLS SWC PLUGIN HOST FROM WASM
Two Next.js patches that never made it to canary are back in the queue, and workflow bundles just got 95 percent smaller.
read --wire →