JS | Node

pnpm 12.20.0

pnpm Blog — 2026-11-12T00:00:00+00:00

pnpm 12.20.0 records the specifiers of local directory dependencies in the experimental v13 lockfile and fixes several nodeLinker: hoisted, peer dependency, and overrides bugs. The bundled node-gyp no longer ships the undici version that security scanners flag. Remote resolution and shared build...

Node.js 26.13.1 (LTS)

Node.js Blog — 2026-11-11T16:45:20+00:00

Node.js 26.13.1 (LTS)

Node.js 24.22.3 (LTS)

Node.js Blog — 2026-11-11T16:45:11+00:00

Node.js 24.22.3 (LTS)

Node.js 22.23.5 (LTS)

Node.js Blog — 2026-11-11T16:44:58+00:00

Node.js 22.23.5 (LTS)

Wednesday, November 11, 2026 Security Releases

Node.js Blog — 2026-11-11T00:00:00+00:00

Wednesday, November 11, 2026 Security Releases

Total.js Platform and NVIDIA DeepStream: Automated AI Video Anonymization

Total.js Blog — 2026-11-10T12:42:01.501964+00:00

Discover how we combined Total.js Platform, Total.js Flow, and NVIDIA DeepStream to build a scalable, GPU-accelerated video anonymization system for a major enterprise customer. Explore how we process large volumes of video recordings, automate workflows across multiple locations, and manage AI-powered anonymization through a centralized interface.

pnpm 12.19.0

pnpm Blog — 2026-11-10T00:00:00+00:00

pnpm 12.19.0 adds pnpm fund, lets the loaded node linker handle packages that need a build, and adds the projectScopedOptionalPeers setting and an experimental JSON lockfile format. It also includes a security fix: an offline install error no longer prints registry credentials. pnpm now checks...

How X (Twitter) is rebuilding its web app

JavaScript Weekly — 2026-11-10T00:00:00+00:00

#810 — November 10, 2026 Read on the Web JavaScript Weekly How X (Twitter) is Rebuilding Its Web App — X is replacing 3 servers with one app built on React, Vite and Fastify. Yagiz, famed for his performance work on Node, explains the streaming architecture behind it, along with some bottlenecks they had to fix, like how hundreds of tiny JavaScript files slowed startup. Yagiz Nizipli (X Engineering Blog) Why Standard Webhooks Hit 118m npm Downloads a Month — OpenAI, Anthropic, and Gemini all si

Minor issues impacting package publish

npm Status — 2026-11-07T15:05:04+00:00

Nov 7 , 15:05 UTC Resolved - This incident has been resolved. Nov 7 , 14:37 UTC Monitoring - A fix has been implemented and we are monitoring the results. Nov 7 , 14:28 UTC Investigating - We are currently investigating this issue.

Notable V8 changes from Node.js 26 to 27 (Alpha)

Node.js Blog — 2026-11-05T12:00:00+00:00

Notable V8 changes from Node.js 26 to 27 (Alpha)

pnpm 12.18.0

pnpm Blog — 2026-11-05T00:00:00+00:00

pnpm 12.18.0 packs, publishes, and installs packages with platform variants on pnpr registries. It also adds per-skill approval of agent skills and pnpm store add for offline installs from downloaded tarballs. Repeat installs and verifyDepsBeforeRun no longer read the package.json of unchanged...

pnpm 11.28.11

pnpm Blog — 2026-11-05T00:00:00+00:00

pnpm 11.28.11 fixes frozen installs with excludeLinksFromLockfile, pnpm link in workspaces, pnpm deploy with dangling symlinks, and verifyDepsBeforeRun starting needless installs.

November 2026 Security Release

Next.js Blog — 2026-11-03T18:00:00+00:00

The November 2026 security release for Next.js is now available

What Claude spends building with 12 JavaScript stacks

JavaScript Weekly — 2026-11-03T00:00:00+00:00

#809 — November 3, 2026 Read on the Web JavaScript Weekly The AI Cost of JavaScript Frameworks Nolan Lawson had Claude build the same app five times in each of twelve JS stacks to test common "X is better for agents" claims. Costs varied significantly between runs, and Gautam Parab found that the observed cost ranges overlapped or touched for most pairs of frameworks. But a clearer difference was in the median amount of JavaScript sent to browsers: 0KB for Astro, 18K for Hono+htmx, 36K for Svel

October report 2026

Total.js Blog — 2026-11-02T09:54:30.906308+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

pnpm 12.17.0

pnpm Blog — 2026-10-30T00:00:00+00:00

pnpm 12.17.0 adds pnpm peers check --global, dependency-group selectors and wildcards in overrides, and runtime, package manager, Cargo, and Python updates in pnpm outdated and pnpm update. It also fixes files that other users could not read in Docker images, and repeat installs that missed...

pnpm 11.28.10

pnpm Blog — 2026-10-30T00:00:00+00:00

pnpm 11.28.10 stops pnpm store prune from deleting other stores when cacheDir points to their parent directory. It also fixes globally installed commands that load hoisted dependencies, and repeat installs that missed changes to local dependencies.

Node.js 27.0.0-alpha.0.0.0 (Alpha)

Node.js Blog — 2026-10-29T19:52:29+00:00

Node.js 27.0.0-alpha.0.0.0 (Alpha)

npmx photon genesis

npmx — 2026-10-29T00:00:00+00:00

More than 5 million visits a month, and npmx keeps getting faster. This release brings performance work down to every millisecond, more readable UI, smarter charts, and support for more tools and providers.

Ship less JavaScript in Next.js with your AI agent

Next.js Blog — 2026-10-28T20:00:00+00:00

Optimize your Next.js app's bundles with the next-bundle-optimizer agent skill, or explore them yourself with new Bundle Analyzer tools.

Node.js 24.22.2 (LTS)

Node.js Blog — 2026-10-28T18:40:14+00:00

Node.js 24.22.2 (LTS)

Node.js 26.13.0 (LTS)

Node.js Blog — 2026-10-28T16:58:40+00:00

Node.js 26.13.0 (LTS)

Upcoming Next.js November Security Release

Next.js Blog — 2026-10-27T18:00:00+00:00

Next.js is preparing a scheduled November security release for November 3, 2026.

pnpm 12.16.0

pnpm Blog — 2026-10-27T00:00:00+00:00

This release adds a global --env-file flag, updates to a symlinked pnpm-lock.yaml, and pnpm setup --no-modify-path. It also fixes two security issues, in zstd decompression and in signing.

pnpm 11.28.9

pnpm Blog — 2026-10-27T00:00:00+00:00

This release fixes a crash on registry responses with too many content encodings (GHSA-xjj6-f33q-929c) and sizes the install worker pool by the container's CPU quota. A repeat pnpm install now acts on more setting changes.

pnpm 12.16.1

pnpm Blog — 2026-10-27T00:00:00+00:00

This release fixes pnpm install hanging on a cold store in workspaces that install Cargo crates, and pnpm pack shipping a file that files excludes by name.

Rebuilding the original GTA engine in JavaScript

JavaScript Weekly — 2026-10-27T00:00:00+00:00

#808 — October 27, 2026 Read on the Web JavaScript Weekly TanStack AI 1.0: The Vendor-Neutral AI Toolkit Goes Stable — TanStack's framework-agnostic AI toolkit reaches 1.0, with stable APIs for chat, tools and media, plus 23 provider adapters. A new agent harness supports long-running sessions, but its APIs remain experimental. Tuzlak, Herrington, et al. (TanStack) Would You Let Your AI Agent Grade Its Own Homework? — Agents write code faster than ever. They even review their own work. But who’

Node.js Security Vulnerabilities

Total.js Blog — 2026-10-26T15:26:43.962861+00:00

Recent Node.js security updates have addressed serious vulnerabilities, including an issue in Brotli decompression. The news is particularly interesting because AI-assisted security research helped uncover a flaw in technology used by applications around the world.

View package and auth outage on npmjs.com

npm Status — 2026-10-26T06:30:18+00:00

Oct 26 , 06:30 UTC Resolved - This incident has been resolved. Oct 26 , 06:21 UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct 26 , 06:11 UTC Identified - The issue has been identified and a fix is being implemented. Oct 26 , 05:54 UTC Investigating - We are currently investigating this issue.

Understanding the eMudhra Key Compromise

NodeSource Blog — 2026-10-23T17:24:46+00:00

Understand the eMudhra key compromise, why weak CA private keys put HTTPS trust at risk, how vendors responded, and what developers should do.

Degraded Publish, Install, and View Package

npm Status — 2026-10-22T11:59:57+00:00

Oct 22 , 11:59 UTC Resolved - This incident has been resolved. Oct 22 , 09:00 UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct 22 , 06:43 UTC Investigating - We are currently investigating this issue.

Degraded Package Install and Publishing

npm Status — 2026-10-22T04:24:16+00:00

Oct 22 , 04:24 UTC Resolved - This incident has been resolved. Oct 22 , 04:10 UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct 22 , 03:07 UTC Identified - The issue has been identified and a fix is being implemented. Oct 22 , 02:37 UTC Update - We are continuing to investigate this issue. Oct 22 , 02:33 UTC Investigating - We are currently investigating this issue.

Bun v1.4.4

Bun — 2026-10-22T00:58:24+00:00

Fixes 271 issues, addressing 544 👍. bun fmt, a Prettier-compatible formatter built into Bun that is 3x to 6x faster than oxfmt, bun check is 1.4x to 7.8x faster on large projects, bun install migrates Yarn Berry lockfiles, retries with exponential backoff and closes 133 issues, up to 3.2x faster hoisted installs from a warm cache on Linux, bun pm fetch, bun publish --recursive, packageExtensions, Bun.SQL uses up to 48% less CPU per query, query.cancel(), COPY streams, column name transforms, use

pnpm 11.28.8

pnpm Blog — 2026-10-22T00:00:00+00:00

Patch Changes # The standalone @pnpm/exe builds now embed Node.js 26.12.1. The previously embedded Node.js 26.0.0 still trusted the certificate authority intermediates that Node.js distrusted in October 2026, so a standalone pnpm accepted TLS certificates issued under them.

Sovereign Tech Agency Invests in OpenJS to Rethink When Vulnerabilities Should Be Fixed in the Open

OpenJS Foundation — 2026-10-22T00:00:00+00:00

Research using Node.js will classify vulnerabilities by risk, then test whether some security issues can be fixed through normal open source development instead of behind closed doors

Wednesday, October 21, 2026 Security Releases

Node.js Blog — 2026-10-21T22:00:00+00:00

Wednesday, October 21, 2026 Security Releases

Node.js 26.12.1 (Current)

Node.js Blog — 2026-10-21T10:39:20+00:00

Node.js 26.12.1 (Current)

Node.js 24.22.1 (LTS)

Node.js Blog — 2026-10-21T10:39:14+00:00

Node.js 24.22.1 (LTS)

Node.js 22.23.4 (LTS)

Node.js Blog — 2026-10-21T10:39:12+00:00

Node.js 22.23.4 (LTS)

pnpm 12.15.0

pnpm Blog — 2026-10-21T00:00:00+00:00

This release lets pnpm-workspace.yaml delegate settings to other files and config dependencies with include, adds lockfile.integrityTarget: tar and tar-registry support, accepts zstd-compressed registry responses, and honors SOURCE_DATE_EPOCH in pnpm deploy and pnpm install. It also rejects...

NodeSource Weekly — Oct 20, 2026: Node.js 27 Release Model, Node.js 26.12 & AI Agents

NodeSource Blog — 2026-10-20T19:36:21+00:00

NodeSource Weekly: Node.js 27’s new release model, Node.js 26.12 and 24.22 updates, security releases, AI agents, and JSConf México 2026.

The up to 8x faster Rust port of TypeScript

JavaScript Weekly — 2026-10-20T00:00:00+00:00

#807 — October 20, 2026 Read on the Web JavaScript Weekly tsrs: Cloudflare and VoidZero's Rust Port of TypeScript — A Rust port of the Go-based TypeScript 7 compiler, built with some input from the TypeScript team and heading into Oxc . Benchmarks claim up to 8x the speed of TypeScript 7.0 and it runs in WebAssembly. Experimental, but npx tsrs works. Chen, Mitropoulos and Nakazawa (Cloudflare / VoidZero) 💡 Max Schwenk started the port with agents writing the code, and tells the full tale here ,

Improving navigation experience in v0 with Next.js 16.4

Next.js Blog — 2026-10-16T15:00:00+00:00

How we used Partial Prefetching and a coding agent to improve navigation across v0 with Next.js 16.4.

The Node.js Release Schedule Is Changing

NodeSource Blog — 2026-10-15T16:25:47+00:00

Node.js is moving to one major release per year, with every major headed for LTS and a new Alpha phase. Learn what’s changing and why it matters.

pnpm 12.14.0

pnpm Blog — 2026-10-15T00:00:00+00:00

This release adds the sideEffectsCache.exclude setting, stops pnpm install from waiting on the daily update check, and keeps pnpm from aborting with a core dump when the reader of its output exits.

pnpm 11.28.6

pnpm Blog — 2026-10-15T00:00:00+00:00

This release stops pnpm publish from sending a CI identity token to a registry it was not issued for. It also fixes installs that dropped a dependency also declared as an optional peer, and accepts empty httpProxy and httpsProxy settings again.

Triaging open source with agents

Bootstrap Blog — 2026-10-15T00:00:00+00:00

Triaging open source with agents

Next.js Security Update for Upstream Vulnerabilities

Next.js Blog — 2026-10-14T18:00:00+00:00

The October 14, 2026 out-of-band security update for Next.js is now available

Node.js 24.22.0 (LTS)

Node.js Blog — 2026-10-14T15:26:48+00:00

Node.js 24.22.0 (LTS)

Node.js 26.12.0 (Current)

Node.js Blog — 2026-10-14T15:23:06+00:00

Node.js 26.12.0 (Current)

Issues with login and viewing packages

npm Status — 2026-10-14T11:44:22+00:00

Oct 14 , 11:44 UTC Resolved - This incident has been resolved. Oct 14 , 11:33 UTC Monitoring - A fix has been implemented and we are monitoring the results. Oct 14 , 11:20 UTC Identified - The issue has been identified and a fix is being implemented. Oct 14 , 11:06 UTC Update - We are continuing to investigate the issue. We also observe increased errors in accessing package settings. Oct 14 , 09:29 UTC Investigating - We observed increased errors and latency in login and viewing packages. We are

NodeSource Weekly — Oct 13, 2026: Node.js 26.11, N|Solid + OpenVEX & AI Agents

NodeSource Blog — 2026-10-13T17:38:39+00:00

NodeSource Weekly: Node.js 26.11 updates, N|Solid with OpenVEX, the new Node.js release model, AI agent news, and community updates.

pnpm 12.13.0

pnpm Blog — 2026-10-13T00:00:00+00:00

This release adds the pnpm profile and pnpm token commands, the storeIndexFormat: files setting for stores shared over a network filesystem, and faster Python dependency resolution.

Ryan Dahl: 'Why reimplement Node? It works.'

JavaScript Weekly — 2026-10-13T00:00:00+00:00

#806 — October 13, 2026 Read on the Web JavaScript Weekly Deno is Joining Cloudflare (But…) — Maybe David Bushell saw the writing on the wall , as the Deno team isn't joining Cloudflare to keep working on Deno , but to fold celld into workerd so Durable Objects can be self-hosted ( more on that here ). The Deno runtime will get a final year of official fixes, Deno Deploy closes in six months, and JSR moves to Cloudflare's infrastructure. Ryan Dahl 💡 On Hacker News , Ryan Dahl noted that Deno "h

Bun v1.4.3

Bun — 2026-10-10T03:18:05+00:00

Fixes 166 issues, addressing 122 👍. bun check, a TypeScript type checker built into Bun that is 3x to 6.4x faster than tsc 7, --check for bun run, bun build and bun test, 67–89% less idle CPU, Bun.FetchSession, experimental Bun.ModuleGraph, --disallow-code-generation-from-strings, up to 2.7x faster large node:http responses, a JavaScriptCore upgrade with faster JSON.parse, faster rejected-promise handling, CompressionStream compression levels, If-Range support in Bun.serve, bun install skips tar

Deno is joining Cloudflare

Deno — 2026-10-09T15:00:00+00:00

Putting ourselves in the best place to build the future of the web

Upcoming Next.js Security Update for Upstream Vulnerabilities

Next.js Blog — 2026-10-08T18:00:00+00:00

Next.js plans to publish an out-of-band security update next Wednesday, October 14, 2026, addressing two Critical and one High severity vulnerabilities in upstream dependencies.

Not Every CVE Is Exploitable: How N|Solid Uses OpenVEX to Add Security Context

NodeSource Blog — 2026-10-08T16:16:17+00:00

Learn how N|Solid uses OpenVEX to add exploitability context to CVEs, reduce vulnerability noise, and help teams prioritize real Node.js security risk.

Bootstrap 6 Alpha

Bootstrap Blog — 2026-10-08T00:00:00+00:00

Bootstrap 6 Alpha

Node.js 26.11.1 (Current)

Node.js Blog — 2026-10-07T23:56:26+00:00

Node.js 26.11.1 (Current)

Next.js 16.4

Next.js Blog — 2026-10-06T20:00:00+00:00

Next.js 16.4 introduces lazy compilation, smaller Turbopack output, React 19.3 features, Cache Components improvements, and new developer tooling.

NodeSource Weekly — Oct 6, 2026: Node.js 26 LTS, N|Solid 6.3.8 & JSConf México

NodeSource Blog — 2026-10-06T19:45:31+00:00

NodeSource Weekly — Oct 6, 2026: Node.js 26 approaches LTS, N|Solid 6.3.8 ships, Node.js 20 support fades, plus JSConf México and AI updates.

Why don't more developers 'use the platform'?

JavaScript Weekly — 2026-10-06T00:00:00+00:00

#805 — October 6, 2026 Read on the Web JavaScript Weekly Why Don't More Developers 'Use the Platform'? — A thoughtful look at why we often rebuild what browsers already offer, from someone usually on the platform's side. It kicked off an extensive Hacker News discussion , with many arguing native controls and APIs are too limited or awkward to depend on. Nolan Lawson Free Course: Build Ambitious Modern Interfaces Faster with OpenAI Codex — Join Katia Gil Guzman for this free Codex course and le

Vercel and GitHub Actions Are Ending Support for Node.js 20: What You Need to Do

NodeSource Blog — 2026-10-01T12:37:47+00:00

GitHub Actions has removed Node.js 20, and Vercel is ending support. Learn what Node.js 20 EOL means, what’s changing, and how to prepare your projects.

September report 2026

Total.js Blog — 2026-10-01T09:23:11.773542+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

SvelteKit 3 is here

Svelte Blog — 2026-10-01T00:00:00+00:00

Version 3.0 of SvelteKit, the official application framework for Svelte, is now available. If you’ve used earlier versions of SvelteKit, everything will feel very familiar — it’s the same framework with a little more polish, a little more type safety, and a little less junk. We’ve made migration as seamless as we can with the sv migrate command... npx sv migrate sveltekit - 3 -- tasks all -- confirm ...which will automatically migrate as much of your codebase as possible, and generate a TODO lis

What’s new in Svelte: October 2026

Svelte Blog — 2026-10-01T00:00:00+00:00

SvelteKit 3 is here! Check out the announcement post for the highlights, then run sv migrate to handle most of the upgrade for you. sv itself hit 1.0 on the same day, making the community add-on API official. Below you’ll find the last round of changes that landed before 3.0 - adapter API updates, zero-config deploys to Render and a few final breaking changes. Svelte Summit is also back for Svelte’s 10th birthday! It’s happening in Ljubljana on November 19-20 with talks from Rich Harris, Elliott

September 2026 Security Release

Next.js Blog — 2026-09-30T18:00:00+00:00

The September 2026 security release for Next.js is now available

NodeSource Weekly — Sept 29, 2026: ECMAScript Updates, AI Agents & NodeConf EU

NodeSource Blog — 2026-09-29T11:56:57+00:00

Catch up on the latest Node.js and JavaScript updates, including TC39 Stage 4 proposals, AI agent tooling, NodeConf EU 2026, GitHub Actions changes, and NodeSource’s latest Windows upgrade guide.

A-ha's Take on Me, recreated in pure JavaScript

JavaScript Weekly — 2026-09-29T00:00:00+00:00

#804 — September 29, 2026 Read on the Web JavaScript Weekly How Anthropic Made Claude's Apps 3x Faster in Two Weeks — A grab bag of performance lessons from a sprint that cut p75 'time-to-typeable' from 3.1s to 0.55s. Em dashes ( the irony! ) pushed V8 onto a slower regex path, a stray location.reload() caused half a million hidden reloads a day, and more. Wang, Attard, and G (Anthropic) Still Writing Tests? Meticulous Is Here — Notion, Dropbox and Wiz are now using a testing paradigm they can’

How to Update Node.js Versions on Windows

NodeSource Blog — 2026-09-28T21:20:59+00:00

If you're using Windows, there are multiple ways to update Node.js, whether you prefer a simple installer, a package manager, or a version manager.

Issues with npm package publish and private install

npm Status — 2026-09-27T06:47:55+00:00

Sep 27 , 06:47 UTC Resolved - This incident has been resolved. Sep 27 , 01:30 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 27 , 00:50 UTC Investigating - We are currently investigating this issue.

OpenJS Foundation Launches the Security Stewardship Program to Fund Ecosystem-Wide Vulnerability Work

OpenJS Foundation — 2026-09-25T00:00:00+00:00

A new industry-backed program puts real money behind bug bounties, CVE coordination, and maintainer support for Node.js and the broader JavaScript ecosystem.

Can AI Agents Safely Debug Production Node.js?

NodeSource Blog — 2026-09-24T17:00:40+00:00

Explore where AI agents already help debug production Node.js, where runtime context still matters, and why human expertise remains critical.

Upcoming Next.js September Security Release

Next.js Blog — 2026-09-23T18:00:00+00:00

Next.js is preparing a scheduled September security release for September 30, 2026.

Next.js Security Update for a Critical Upstream Issue

Next.js Blog — 2026-09-22T18:00:00+00:00

The September 22, 2026 out-of-band security update for Next.js is now available

NodeSource Weekly — Sept 22, 2026: Node.js 26.10.0, AI Security & NodeConf EU

NodeSource Blog — 2026-09-22T17:14:45+00:00

NodeSource Weekly covers Node.js 26.9.0 and 26.10.0, AI-assisted development security, NodeConf EU 2026, and the Node.js Upgrade Program.

Upcoming Next.js Security Update for a Critical Upstream Issue

Next.js Blog — 2026-09-22T15:00:00+00:00

Next.js 16.3.6 and 15.5.26 are planned for a critical out-of-band security update on September 22, 2026.

JavaScript desktop apps in under 10MB

JavaScript Weekly — 2026-09-22T00:00:00+00:00

#803 — September 22, 2026 Read on the Web JavaScript Weekly tinyjs: Build JavaScript Desktop Apps in <10MB — I built an app with this and was impressed. You get a txiki.js -powered backend with full system access (including FFI!), native webview rendering, and tiny macOS, Linux, and Windows builds. It even makes it easy to sign/notarize the final app. Tarwin Stroh-Spijer There are lots of great options in this space though: Electrobun offers richer multi-window and GPU features, at the cost of

Scheduled maintenance

npm Status — 2026-09-19T19:00:07+00:00

Sep 19 , 19:00 UTC Completed - The scheduled maintenance has been completed. Sep 19 , 17:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 18 , 21:09 UTC Update - We will be undergoing scheduled maintenance during this time. Sep 18 , 21:00 UTC Scheduled - We will be undergoing scheduled maintenance during this time.

Correct Code, Wrong Baseline: The Hidden Security Risk of AI-Assisted Node.js Development

NodeSource Blog — 2026-09-17T18:29:41+00:00

AI can generate correct Node.js code while choosing outdated runtimes or vulnerable dependencies. Learn why current baselines matter for security.

Package Publish Degradation

npm Status — 2026-09-15T18:19:35+00:00

Sep 15 , 18:19 UTC Resolved - This incident has been resolved. Sep 15 , 18:18 UTC Update - Stable Sep 15 , 17:20 UTC Identified - The issue has been identified and a fix is being implemented. Sep 15 , 17:20 UTC Investigating - We are currently investigating this issue.

NodeSource Weekly — Sept 15, 2026: Node.js 24.21.0, N|Solid Growth & AI Agents

NodeSource Blog — 2026-09-15T17:29:29+00:00

Catch up on Node.js 24.21.0 and 26.8.2, N|Solid's 98% August growth, 2.5K DevTools downloads, NodeConf EU, and the latest AI agent updates.

Publishing Packages Degraded Performance

npm Status — 2026-09-15T16:35:22+00:00

Sep 15 , 16:35 UTC Resolved - This incident has been resolved. Sep 15 , 16:13 UTC Investigating - We are investigating delays affecting npm package publishing. Some newly published package versions may take longer than expected to become available.

Functional programming jargon, mapped out

JavaScript Weekly — 2026-09-15T00:00:00+00:00

#802 — September 15, 2026 Read on the Web JavaScript Weekly Functional Programming Jargon, Mapped and Explained — Currying, purity, functors, monads…? If FP terms ever go over your head, TC39 delegate Hemanth HM's popular jargon reference is now an explorable map of concepts showing how they relate, each with a simple definition and JavaScript example. Hemanth HM Stay Sharp in the Age of AI — Master.dev instructors build at Anthropic, OpenAI, Netflix, Google, and Stripe. Learn from them with hu

OpenJS Foundation Statement Regarding the $NVM Token

OpenJS Foundation — 2026-09-11T00:00:00+00:00

OpenJS Foundation Statement

The OpenJS Foundation CNA is taking a coordinated break: September 17 to October 6, 2026

OpenJS Foundation — 2026-09-11T00:00:00+00:00

To combat volunteer burnout driven by a surge in AI-generated vulnerability reports, the OpenJS Foundation CNA will temporarily pause all security operations from September 17 to October 6, 2026. This planned break prioritizes team sustainability and encourages healthy boundaries for open-source maintainers across the ecosystem.

N|Solid Downloads Surged 98% in August 2026 — What It Says About Node.js Runtime Adoption

NodeSource Blog — 2026-09-10T15:52:32+00:00

N|Solid reached 1.15M+ downloads in 2026, with 98% growth in August. See what the latest data shows about Node.js runtime adoption and version trends.

React 19.3

React Blog — 2026-09-09T00:00:00+00:00

React 19.3 adds new features like View Transitions, Fragment Refs, browser(), Trusted Types, and more.

When 8 chunks weigh more than 355

JavaScript Weekly — 2026-09-08T00:00:00+00:00

#801 — September 8, 2026 Read on the Web JavaScript Weekly How Turbopack Chunks Your JavaScript — Starting from the Network tab and working up, a look at chunking strategy and the tradeoffs bundlers make between fewer requests and less code (e.g. 8 chunks can weigh more than 355 do), backed by numbers from bundling the official Next.js site itself. Sam Poder Catch Runtime Bugs Before Your JS PR Merges — Greptile now runs your code to find bugs. T-Rex runs your PR branch in a sandbox, uses brows

Bun v1.4.2

Bun — 2026-09-05T05:39:32+00:00

This release fixes two regressions impacting Elysia and AsyncLocalStorage, a hang in @discordjs/ws, CMYK JPEG decoding in Bun.Image, a rare JIT crash, and a GC crash on musl.

npm audits endpoint is having issues

npm Status — 2026-09-04T13:48:36+00:00

Sep 4 , 13:48 UTC Resolved - This incident has been resolved. Sep 4 , 13:27 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 4 , 11:29 UTC Investigating - We are currently investigating this issue.

Bun v1.4.1

Bun — 2026-09-04T06:47:12+00:00

Fixes 202 issues, addressing 236 👍. HTTP/2 in Bun.serve, Bun.write() streams Response bodies to disk, self-contained workspace node_modules, bun install --offline and --prefer-offline, WebSocket pause() and resume(), crypto.argon2, tree-shaking through dynamic import(), smarter CommonJS to ESM conversion for default imports, --compile --bytecode when cross-compiling, smaller and faster-starting compiled executables, up to 9x faster Buffer reads and writes, 2x faster AsyncLocalStorage, faster sta

How we closed 1,500 GitHub issues in one month

Next.js Blog — 2026-09-04T04:00:00+00:00

How the Next.js team used an agent to research old reports and work through the issue backlog.

Intermittent Failures Impacting npm Publish

npm Status — 2026-09-03T23:21:04+00:00

Sep 3 , 23:21 UTC Resolved - This incident has been resolved. Sep 3 , 22:41 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 3 , 22:17 UTC Update - We are continuing to investigate this issue. Sep 3 , 21:42 UTC Investigating - We are currently investigating this issue.

How Turbopack chunks your JavaScript

Next.js Blog — 2026-09-03T16:00:00+00:00

Turbopack’s chunking speeds up page loads and enables sharing code across pages. We shipped new experimental features to improve chunking in Next.js 16.3.

August report 2026

Total.js Blog — 2026-09-01T12:02:43.230189+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

How to fit Minesweeper into 247 bytes

JavaScript Weekly — 2026-09-01T00:00:00+00:00

#800 — September 1, 2026 Read on the Web Issue 800! I'm not doing anything to celebrate, but I know many of you have been here for years , so thanks for your continued support. Maybe I'll do something for issue 1000, though at current velocity that'll be late 2030... ;-) __ Your editor, Peter Cooper JavaScript Weekly The Depths of JavaScript: Minesweeper in 247 Bytes — An analysis of a playable 8x8 Minesweeper implementation in one line of JavaScript, complete with flags and cascading blank cel

What’s new in Svelte: September 2026

Svelte Blog — 2026-09-01T00:00:00+00:00

This month, Svelte 5.57 shipped with new SvelteMap methods and a few quality-of-life additions while SvelteKit 3 got closer to the finish line with its Release Candidate. The sv CLI also got a new ai-tools add-on that replaces the old mcp one, and sv@next now ships a task-based sveltekit-3 migration for existing apps. Let’s dive a bit deeper! What’s new in Svelte SvelteMap now has getOrInsert and getOrInsertComputed methods for the common “read or initialize” pattern ( 5.57.0 , Docs , #18728 ) c

NativeScript 9.1: a native runtime that behaves like the web

OpenJS Foundation — 2026-08-27T00:00:00+00:00

NativeScript 9.1 adds Node-API support, so many existing Node native addons can run with little or no change. The test runner was also rebuilt around Vitest, running real tests on a real device.

August 2026 Security Release

Next.js Blog — 2026-08-25T18:00:00+00:00

The August 2026 security release for Next.js is now available

Update: August Next.js Security Release

Next.js Blog — 2026-08-25T15:00:00+00:00

Next.js is moving the August security release forward to August 25, 2026.

Bun 1.4 is (finally) fresh out of the oven

JavaScript Weekly — 2026-08-25T00:00:00+00:00

#799 — August 25, 2026 Read on the Web 🏖️ I'm back from an intense week of Disney vacationing with the family, so I feel more tired than before I left 😅… but it's time to catch up with all things JavaScript! __ Your editor, Peter Cooper JavaScript Weekly Bun 1.4: Now More Node.js Compatible Than Ever — Several weeks after it was initially expected to launch, Bun's big AI-powered rewrite from Zig to Rust is here, complete with traditional ▶️ release video . A lot of effort has been put into comp

How to write better Total.js Applications using AI?

Total.js Blog — 2026-08-21T15:10:34.908291+00:00

Learn how to make AI coding agents write better, more native Total.js applications!

Bun 1.4

Bun — 2026-08-20T00:53:44+00:00

Bun 1.4 rewrites Bun in Rust, ships built-in headless browser automation (Bun.WebView), Bun.Image, Bun.markdown, JSON5, JSONL, Terminal and cron APIs, Node.js 26.3.0 compatibility with 1,517 newly passing tests, parallel test and run, Windows ARM64, and an opt-in global virtual store for up to 7× faster installs.

The SvelteKit 3 Release Candidate is here

Svelte Blog — 2026-08-13T00:00:00+00:00

SvelteKit 3 is now in the Release Candidate phase. If all goes well — meaning that people like you try it out and find that it works as expected — we will follow it up with a stable release in the near future, with no further breaking changes. But there are some breaking changes since SvelteKit 2. We’re taking advantage of this release to prune some of the weeds in the codebase and lay the groundwork for SvelteKit’s continued evolution, more on which below . To migrate an existing app, you can u

Shipping less JavaScript with Baseline

JavaScript Weekly — 2026-08-11T00:00:00+00:00

#798 — August 11, 2026 Read on the Web 🏖️ A brief scheduling note: We're taking a summer break next week, so we'll be back in your inbox on August 25. Catch you then! __ Your editor, Peter Cooper JavaScript Weekly Migrating a Large Flow Monorepo to TypeScript — Over several years, Yelp moved 1.4 million lines off Flow , and this writeup is more useful as a guide to running any long migration than as a Flow story. It was a big win on its own terms, with type coverage up from 83% to 96%. Shawn Wa

Making jsDelivr’s Origin More Reliable at Scale

jsDelivr Blog — 2026-08-10T15:03:14+00:00

When the original storage index was designed, jsDelivr tracked roughly 350,000 unique files. By the time we replaced it, that number had grown to more than 600 million. We moved the index from Redis to MariaDB, migrated storage from Amazon S3 to Wasabi, compressed and cleaned up the stored

Making More npm Packages Work with jsDelivr ESM

jsDelivr Blog — 2026-08-07T23:21:23+00:00

After modernizing our backend, we reviewed every reported /+esm issue and used production APM data to analyze the remaining failures. The result is broader support for modern JavaScript, complex CommonJS packages, source-relative assets, and additional Node.js compatibility APIs. When we introduced jsDelivr’s ESM bundling service, the

Making More npm Packages Work with jsDelivr ESM mode

jsDelivr Blog — 2026-08-07T23:21:23+00:00

Over the past few months, we upgraded the /+esm toolchain, worked through the open compatibility reports, and then used production APM data to find the failures that had not been reported yet. This post covers what we found and the changes now running in production. When we introduced jsDelivr’

Reimplementing htmx from scratch

JavaScript Weekly — 2026-08-04T00:00:00+00:00

#797 — August 4, 2026 Read on the Web JavaScript Weekly Next.js 16.3 Released — The newly expanded Next.js team (now including Dan Abramov and 𝕏 Pete Hunt !) has dropped the latest version of the popular React framework, complete with faster builds, optional TypeScript 7 type checking, faster SSR, Instant Navigations , AI improvements , and more. The Next.js Team Frontend Architecture: Monoliths to Microfrontends — Maxi Ferreira walks through modular monoliths, monorepos, and microfrontends so

July report 2026

Total.js Blog — 2026-08-01T19:13:37.600601+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

What’s new in Svelte: August 2026

Svelte Blog — 2026-08-01T00:00:00+00:00

The biggest news this month is the first @next releases of SvelteKit 3. Thirteen preview versions shipped in July: previewing new $app/manifest and $app/service-worker modules, improved API availability and type checking in service workers, tracing out of the experimental namespace, shallow routing baked into goto and a lot more. It’s a prerelease, but it’s worth trying out to see what’s coming to SvelteKit! Alongside the preview releases, the stable line kept moving with submitted on remote for

June report 2025

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

May report 2025

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

April report 2025

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

j-Box - Total.js UI component

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

The j-Box component from the Total.js jComponent UI library is a versatile tool for creating customizable pop-up windows, such as forms or galleries. This blog demonstrates its setup, attributes, and integration with other components, using examples to show how to build pop-up forms with menus, content, and buttons.

Beekeeping - recording damage caused by a brown bear

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

Watch how we built a dynamic, multi-step form using Total.js UI Builder and processed submissions via Flow - all without touching the source code.

j-Importer - Total.js

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

The blog introduces j-Importer, a component from the jComponent library by Total.js, which allows importing HTML templates, scripts, or styles dynamically based on conditions. It explains how to set up and use j-Importer to import a pop-up form triggered by a button.

Total.js AIModel: a practical foundation for AI-powered workflows

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

How Total.js helps developers integrate AI models into real applications with routing, actions, streaming, tools, validation, and business logic in one coherent stack.

Anders Hejlsberg demos TypeScript 7's 10x speedup

JavaScript Weekly — 2026-07-28T00:00:00+00:00

#796 — July 28, 2026 Read on the Web JavaScript Weekly Rust Is Eating JavaScript (Still, in 2026) — Our most-read link of 2021 gets an update for 2026. Lee Robinson (then Vercel, now Cursor) predicted Rust would be used to reimplement more and more JavaScript ecosystem tooling, and Rspack, Biome, Turbopack, and Bun's recent rewrite keep proving him right. Lee Robinson Frontend Architecture: Monoliths to Microfrontends — Maxi Ferreira walks through modular monoliths, monorepos, and microfrontend

Publish and Install failures

npm Status — 2026-07-24T11:38:53+00:00

Jul 24 , 11:38 UTC Resolved - This incident has been resolved. Jul 24 , 11:36 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 24 , 11:32 UTC Update - We are continuing to investigate this issue. Jul 24 , 11:08 UTC Investigating - We are currently investigating this issue.

intermittent Publish and Install Failures

npm Status — 2026-07-23T19:52:13+00:00

Jul 23 , 19:52 UTC Resolved - This incident has been resolved. Jul 23 , 18:04 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 23 , 16:09 UTC Investigating - We are currently investigating this issue.

Meet Our 2026 OpenJS Foundation Board of Directors

OpenJS Foundation — 2026-07-22T00:00:00+00:00

We’re happy to welcome three new members on the OpenJS Foundation Board of Directors, and three that were re-elected. Together, they are filling positions on the Gold, Silver and Community level.

Meet the Node.js Interactive Speakers at RenderATL 2026

OpenJS Foundation — 2026-07-09T00:00:00+00:00

Node.js Interactive comes to RenderATL with talks on AI-assisted development, performance, open source infrastructure, documentation, and the engineering practices teams need now.

Rewriting Bun in Rust

Bun — 2026-07-08T16:00:00+00:00

Why & how we rewrote Bun from Zig to Rust

OpenJS Foundation Security Update: Q2 2026

OpenJS Foundation — 2026-07-08T00:00:00+00:00

Q2 2026 brought a Node.js 26 release, a major security release addressing 18 vulnerabilities with a streamlined 36-to-7-step process, the removal of the security embargo requirement, and a new LLM-assisted report classifier and web viewer for release management.

npmx rainbow comet

npmx — 2026-07-03T00:00:00+00:00

npmx 0.16 is out! This period was especially full of good news. And it’s particularly great that, amid the constant search for vulnerabilities and risks, we’ve started celebrating more and taking joy in what we do - and what our favorite maintainers and authors do.

What’s new in Svelte: July 2026

Svelte Blog — 2026-07-01T00:00:00+00:00

This month brought a real shift in how SvelteKit projects are configured. You can now define your SvelteKit config directly inside vite.config.js and skip svelte.config.js entirely. We also got the first preview of explicit environment variables, which will eventually replace $env/* modules in SvelteKit 3. On top of that, the language tools and the sv CLI both caught up with Svelte’s new {const ...} declaration tags, so the whole toolchain is now in sync. Let’s dive in! What’s new in SvelteKit Y

SQLRooms Joins the OpenJS Foundation Under the Open Visualization Working Group

OpenJS Foundation — 2026-06-26T00:00:00+00:00

The OpenJS Foundation is excited to welcome SQLRooms as a new project within the Open Visualization Working Group as part of the vis.gl open source project, expanding the growing ecosystem of open source tools that help developers explore, analyze, and visualize data on the web.

Deno 2.9

Deno — 2026-06-25T09:00:00+00:00

`deno desktop` for building native desktop apps from web tech, first-class migration from npm/pnpm/yarn/Bun, CSS module imports, snapshot and parameterized testing, smaller `deno compile --bundle` binaries, and Node.js 26 compatibility.

cosmos.gl v3 Is Here

OpenJS Foundation — 2026-06-25T00:00:00+00:00

Today, the team is shipping v3 – the most significant release in the project's history.

Vite 8.1 is out!

Vite Blog — 2026-06-23T00:00:00+00:00

Vite 8.1 is out! June 23, 2026 Vite 8 was released in March with a single unified bundler powered by Rolldown , opening the door to further improvements. It is now seeing 41.6 million weekly downloads, almost reaching the total downloads of Vite 7. Alongside resolving upgrade regressions, we've been working on new features, and we're excited to announce the release of Vite 8.1. Quick links: Docs Translations: 简体中文 , 日本語 , Español , Português , 한국어 , Deutsch , فارسی GitHub Changelog Play online

React Color: The Variety Pack of Color Pickers Your App Has Been Missing