Would You Let Your AI Agent Grade Its Own Homework? — Agents write code faster than ever. They even review their own work. But who’s reviewing them? Dropbox, Notion & ElevenLabs don’t take the risk. With Meticulous, every change is exhaustively verified, with zero developer effort.
Meticulous sponsor |
|
💡 Fittingly, Pat Kerr, whose 1996 Atari ST prototype formed the basis of the original game's vehicle physics, recently rebuilt it in JavaScript. |
|
RELEASES:
-
Node.js v26.12.1 (Current), v24.22.1 (LTS) and v22.23.4 – Security releases fixing ten CVEs, including the 'Node2Shell' Brotli decoder flaw, which can lead to remote code execution when an app decompresses malicious data. (Also, Node 26 is due to become LTS tomorrow.)
-
Bun 1.4.4 – Adds bun fmt, a Prettier-compatible formatter that uses your existing Prettier or oxfmt config. It's very fast.
-
Electron 45 – Upgrades to Chromium 156, Node 24.22 and V8 15.6, and adds hooks for the Prompt API so apps can plug in a local model.
-
pnpm 12.16, Remix 3.1, axios 1.21, Deno 2.9.8
|
|
Parser Combinators in TypeScript, Built From Scratch — Parser combinators sit between regexes and heavyweight tools like tree-sitter. This animated, step-by-step walkthrough shows the basic elements of building them, concluding in an example turning ping output into typed objects.
Florian Schindler |
|
Dead Code Shouldn't Exist: How Sentry Cut 28,000 Lines — A talk Dominik has given at six conferences this year, now as swipeable slides with a full transcript. He covers how unused code can cost more than you might think, and how Sentry used Knip to remove 28,000 lines.
Dominik Dorfmeister (Sentry) |
|
Building an Isolated Preview for AI-Generated HTML — Rendering model-written HTML in a srcdoc iframe runs it on your own origin. A security engineer breaks the naive approach, then rebuilds it using sandbox and a strict CSP, with demos showing what each one blocks.
Keshav Malik |
|
Introducing TanStack Redact: A Slimmer React Runtime — A build plugin swaps React and React DOM for a smaller reimplementation in the browser with no code changes. It works with Vite, Start, Vinext and Next.js, and while TanStack reports 20-70% smaller client builds, rendering is synchronous only.
Tanner Linsley (TanStack) |
|
AI Tests That Catch Real Bugs — AI can write low-value tests that pass without checking much. Wallaby helps your agent refine assertions and catch bugs.
Wallaby Team sponsor |
|
Biome 2.6 Adds Markdown, YAML and SCSS Support — The Rust-powered alternative to Prettier and ESLint adds formatting support for Markdown, YAML and SCSS, along with initial linting support. JavaScript plugins for custom lint rules are available as a developer preview.
Biome Core Team |
- ☕ CoffeeScript 2.7.1 – The first release in four and a half years brings Node 22+ fixes and
with { type: 'json' } import attributes.
|
-
oxlint 1.89 – The Rust-based linter now counts the upstream-recommended rules of its React, Vue, Next.js, Jest/Vitest, import, unicorn and other plugins as recommended, so expect more reports after upgrading.
-
Mutative 2.0 – Immer-style efficient immutable updates library. The author reports a 3.6x speedup over Immer across a benchmark suite.
-
SonicJS 3.0 – Headless CMS for Cloudflare Workers, built on Hono. v3 rebuilds the data layer, auth and plugin system. Homepage.
-
query-string 10.0 – Parse and stringify URL query strings. Now throws for values it can't represent.
-
ShareDB 7.0 – Realtime database backend based on operational transformation.
|
|
📢 Elsewhere in the ecosystem |
-
🔒 Node2Shell: ELLIO now reports exploit traffic in the wild for the Brotli RCE fixed in the Node releases (as mentioned earlier). The flaw is in Google's Brotli library, so bundled copies elsewhere need patching too.
-
Sentry has given $1m to open source maintainers this year. JavaScript recipients include pnpm, TanStack, MSW, Knip and three Three.js maintainers, plus the OpenJS Foundation.
-
🎉 CSS-Tricks, the popular web dev resource, is independent again, now owned by longtime editor Geoff Graham.
-
Arc, the design-led Chromium browser popular with developers, is being sunset with The Browser Company steering everyone to Dia.
-
📄 Google Docs can now open, edit and collaborate on Markdown files natively and Drive renders previews of them too.
|
|