2026 · Week 38
Node.js 26.9, ESLint and Agent Tooling | Week 38 JavaScript
Review Node.js 26.9.0, ESLint startup improvements, experimental WebMCP integration, and native subscription authentication in the AI SDK.
Weekly Digest Archive
JavaScript
38 source-backed weekly reports, ordered newest first.
2026 · Week 37
Week 37: React 19.3, runtime boundaries and package security
React 19.3, Node.js compatibility, native-app migrations and recurring npm malware make behavior and dependency review central to this week’s upgrades.
2026 · Week 36
Week 36: Express security, Vitest 5 and the Remix 3 release candidate
Express middleware patches, Vitest 5 migration rules, Remix 3 RC and Rslib 1.0 lead a week of runtime fixes and measured build tradeoffs.
2026 · Week 35
Next.js Ships Two Critical RCE Fixes — Week 35 JavaScript
Next.js security patches, Node.js 24.20 permissions, and Rspack 2.2 performance changes make execution boundaries the JavaScript story of Week 35.
2026 · Week 34
Bun 1.4 Rewrites the Runtime in Rust — Week 34 JavaScript
Bun 1.4, Next.js 16.3, and Oxc show JavaScript infrastructure trading hidden runtime work for explicit compatibility, cache, and compiler contracts.
2026 · Week 33
SvelteKit 3 RC Resets Framework Contracts — Week 33 JavaScript
SvelteKit 3 consolidates configuration and error handling, while TanStack Router, Angular 22, and React show how to separate overlapping async lifetimes.
2026 · Week 32
Next.js 16.3 Cuts Dev Memory by Up to 90% — Week 32 JavaScript
Next.js 16.3 reduces dev memory and adds instant-navigation tools, while TanStack Table V9, Astro 7.2, and React Native expose deeper performance gains.
2026 · Week 31
Node.js July Security Release Patches Eleven… — Week 31 JavaScript
Week 31 puts JavaScript security maintenance ahead of feature work. Node.js patched eleven vulnerabilities across the 22.x, 24.x, and 26.x lines, including three…
2026 · Week 30
TypeScript 7: A Native Go Rewrite That… — Week 30 JavaScript
Week 30 is defined by a single seismic tooling event: TypeScript 7, Anders Hejlsberg's complete rewrite of the compiler and language service in Go, ships as the…
2026 · Week 29
JavaScript — 2026 Week 29
Week 29 was dominated by major framework releases and a runtime deadline that every Vercel user needs to calendar. Nuxt 4.5 shipped three simultaneous build-layer…
2026 · Week 28
JavaScript — 2026 Week 28
Week 28 opened with two landmark runtime announcements. Bun v1.4.0 shipped the completed rewrite from 535,496 lines of Zig into Rust — accomplished in 11 days…
2026 · Week 27
JavaScript — 2026 Week 27
The JavaScript toolchain landscape saw two major consolidations this week. VoidZero released the beta of Vite+, a unified MIT-licensed toolchain that wraps Vite,…
2026 · Week 26
JavaScript — 2026 Week 26
Week 26 was headlined by major framework releases pushing hard on build-time performance. Astro 7 completed a triple-layer Rust migration — rewriting the .astro…
2026 · Week 25
JavaScript — 2026 Week 25
Security dominated JavaScript news in week 25, with Node.js shipping emergency patches across all active LTS lines (22.x, 24.x, 26.x) to address eleven CVEs. The…
2026 · Week 24
JavaScript — 2026 Week 24
This week's JavaScript news was dominated by two landmark platform events. Safari 27 Beta, unveiled at WWDC26, ships 58 new features and a record 525 bug fixes —…
2026 · Week 23
JavaScript — 2026 Week 23
This week's JavaScript category was dominated by major framework and tooling releases. Biome v2.5 crossed the 500 lint rules milestone, introducing cross-file…
2026 · Week 22
JavaScript — 2026 Week 22
Security dominated the JavaScript category this week with two critical advisories. The Express team released multiparty 4.3.0 to patch three high-severity…
2026 · Week 21
JavaScript — 2026 Week 21
This week's JavaScript category was dominated by major runtime releases. Deno 2.8 — the biggest minor release to date — landed six new subcommands (deno audit fix,…
2026 · Week 20
JavaScript — 2026 Week 20
The defining event of week 20 was a critical supply-chain attack dubbed Mini Shai-Hulud that struck 42 @tanstack/* npm packages on May 11, publishing 84 malicious…
2026 · Week 19
JavaScript — 2026 Week 19
Week 19 brought a pair of landmark runtime and tooling releases. Node.js 26.0.0 shipped as the new Current release, enabling the Temporal API by default — a…
2026 · Week 18
JavaScript — 2026 Week 18
This week's JavaScript landscape is defined by a rethinking of React Server Components and a wave of framework releases. Tanner Linsley's deep-dive argues that RSC…
2026 · Week 17
JavaScript — 2026 Week 17
Week 17 brought a wave of JavaScript ecosystem releases and spec news. ES2025 is ratified and ES2026 is candidate-approved, delivering Iterator helpers with lazy…
2026 · Week 16
JavaScript — 2026 Week 16
ES2026 reached Stage 4 with six targeted fixes for longstanding JavaScript pain points. The Temporal API replaces the broken Date object with immutable,…
2026 · Week 15
JavaScript — 2026 Week 15
The week's biggest story was the npm supply chain attack targeting axios, the most-downloaded HTTP client on the platform. Two malicious versions — axios@1.14.1…
2026 · Week 14
JavaScript — 2026 Week 14
The biggest JavaScript story of week 14 is TypeScript 7 "Project Corsa," which rewrites the compiler in Go under the binary name tsgo. Real-world benchmarks on VS…
2026 · Week 13
JavaScript — 2026 Week 13
Week 13 opened with a critical security alert: the Node.js project released patches for all active release lines (20.x, 22.x, 24.x, 25.x) addressing nine CVEs,…
2026 · Week 12
JavaScript — 2026 Week 12
Week 12 was dominated by major performance breakthroughs across the JavaScript ecosystem. Next.js 16.2 landed with an ~87% faster dev startup and 25-60% server…
2026 · Week 11
JavaScript — 2026 Week 11
Week 11 marks a watershed moment for JavaScript's relationship with time: Temporal officially reached Stage 4 at TC39's 113th plenary, ending a nine-year effort to…
2026 · Week 10
JavaScript — 2026 Week 10
The week's most urgent story is CVE-2026-27148, a CVSS 8.9 XSS/RCE vulnerability in Storybook versions 8.1.0 through 10.2.9 that exploits an unauthenticated…
2026 · Week 9
JavaScript — 2026 Week 9
The headline of Week 9 is the React Foundation: React, React Native, and JSX moved out of Meta's ownership and into an independent foundation hosted by the Linux…
2026 · Week 8
JavaScript — 2026 Week 8
This week's JavaScript story is dominated by performance — at every layer of the stack. The featured release of Claude Sonnet 4.6 reshaped the AI-coding landscape,…
2026 · Week 7
JavaScript — 2026 Week 7
This week's JavaScript category is anchored by Biome v2.4, the featured release that signals the toolchain's growing ambition: embedded CSS and GraphQL linting…
2026 · Week 6
JavaScript — 2026 Week 6
This week the JavaScript tooling ecosystem delivered two landmark releases. ESLint v10.0.0 finally cuts the cord on the legacy eslintrc config system — all…
2026 · Week 5
JavaScript — 2026 Week 5
The JavaScript runtime space dominated Week 5, with Node.js shipping v25.5.0 and its headline --build-sea flag — a long-overdue consolidation that brings Single…
2026 · Week 4
JavaScript — 2026 Week 4
This week's JavaScript tooling story is defined by a Rust-powered generational shift. VoidZero's Rolldown 1.0 RC lands as the headline item: 3,400+ commits since…
2026 · Week 3
JavaScript — 2026 Week 3
Week 3's JavaScript issue is defined by the tension between raw speed and real-world constraints. Astro 6 Beta leads as the featured release, shipping a completely…
2026 · Week 2
JavaScript — 2026 Week 2
The JavaScript story of week 2 begins where the platform has always struggled: dependency management. Lea Verou's landmark essay tears open the wound that bundlers…
2026 · Week 1
JavaScript — 2026 Week 1
The first ISO week of 2026 opens with the JavaScript ecosystem in a reflective, foundations-first mood. The standout essay is Marvin Hagemeister's holiday deep…