JS | Node

Next.js Security Update for a Critical Upstream Issue

Next.js Blog — 2026-09-22T18:00:00+00:00

The September 22, 2026 out-of-band security update for Next.js is now available

Upcoming Next.js Security Update for a Critical Upstream Issue

Next.js Blog — 2026-09-22T15:00:00+00:00

Next.js 16.3.6 and 15.5.26 are planned for a critical out-of-band security update on September 22, 2026.

Node.js 26.10.0 (Current)

Node.js Blog — 2026-09-22T09:03:49+00:00

Node.js 26.10.0 (Current)

pnpm 12.6

pnpm Blog — 2026-09-22T00:00:00+00:00

pnpm 12.6 ships with automatic dependency deduplication, relocatable

JavaScript desktop apps in under 10MB

JavaScript Weekly — 2026-09-22T00:00:00+00:00

#803 — September 22, 2026 Read on the Web JavaScript Weekly tinyjs: Build JavaScript Desktop Apps in <10MB — I built an app with this and was impressed. You get a txiki.js -powered backend with full system access (including FFI!), native webview rendering, and tiny macOS, Linux, and Windows builds. It even makes it easy to sign/notarize the final app. Tarwin Stroh-Spijer There are lots of great options in this space though: Electrobun offers richer multi-window and GPU features, at the cost of

Scheduled maintenance

npm Status — 2026-09-19T19:00:07+00:00

Sep 19 , 19:00 UTC Completed - The scheduled maintenance has been completed. Sep 19 , 17:00 UTC In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary. Sep 18 , 21:09 UTC Update - We will be undergoing scheduled maintenance during this time. Sep 18 , 21:00 UTC Scheduled - We will be undergoing scheduled maintenance during this time.

pnpm 12.5

pnpm Blog — 2026-09-18T00:00:00+00:00

pnpm 12.5 expands Python support with editable project packages, shared workspace

Node.js 26.9.0 (Current)

Node.js Blog — 2026-09-16T18:17:42+00:00

Node.js 26.9.0 (Current)

Package Publish Degradation

npm Status — 2026-09-15T18:19:35+00:00

Sep 15 , 18:19 UTC Resolved - This incident has been resolved. Sep 15 , 18:18 UTC Update - Stable Sep 15 , 17:20 UTC Identified - The issue has been identified and a fix is being implemented. Sep 15 , 17:20 UTC Investigating - We are currently investigating this issue.

Publishing Packages Degraded Performance

npm Status — 2026-09-15T16:35:22+00:00

Sep 15 , 16:35 UTC Resolved - This incident has been resolved. Sep 15 , 16:13 UTC Investigating - We are investigating delays affecting npm package publishing. Some newly published package versions may take longer than expected to become available.

Functional programming jargon, mapped out

JavaScript Weekly — 2026-09-15T00:00:00+00:00

#802 — September 15, 2026 Read on the Web JavaScript Weekly Functional Programming Jargon, Mapped and Explained — Currying, purity, functors, monads…? If FP terms ever go over your head, TC39 delegate Hemanth HM's popular jargon reference is now an explorable map of concepts showing how they relate, each with a simple definition and JavaScript example. Hemanth HM Stay Sharp in the Age of AI — Master.dev instructors build at Anthropic, OpenAI, Netflix, Google, and Stripe. Learn from them with hu

OpenJS Foundation Statement Regarding the $NVM Token

OpenJS Foundation — 2026-09-11T00:00:00+00:00

OpenJS Foundation Statement

The OpenJS Foundation CNA is taking a coordinated break: September 17 to October 6, 2026

OpenJS Foundation — 2026-09-11T00:00:00+00:00

To combat volunteer burnout driven by a surge in AI-generated vulnerability reports, the OpenJS Foundation CNA will temporarily pause all security operations from September 17 to October 6, 2026. This planned break prioritizes team sustainability and encourages healthy boundaries for open-source maintainers across the ecosystem.

pnpm 12.4

pnpm Blog — 2026-09-10T00:00:00+00:00

pnpm 12.4 installs crates and Python packages next to npm packages in the same

Node.js 26.8.2 (Current)

Node.js Blog — 2026-09-09T16:09:17+00:00

Node.js 26.8.2 (Current)

Node.js 24.21.0 (LTS)

Node.js Blog — 2026-09-09T11:55:20+00:00

Node.js 24.21.0 (LTS)

React 19.3

React Blog — 2026-09-09T00:00:00+00:00

React 19.3 adds new features like View Transitions, Fragment Refs, browser(), Trusted Types, and more.

When 8 chunks weigh more than 355

JavaScript Weekly — 2026-09-08T00:00:00+00:00

#801 — September 8, 2026 Read on the Web JavaScript Weekly How Turbopack Chunks Your JavaScript — Starting from the Network tab and working up, a look at chunking strategy and the tradeoffs bundlers make between fewer requests and less code (e.g. 8 chunks can weigh more than 355 do), backed by numbers from bundling the official Next.js site itself. Sam Poder Catch Runtime Bugs Before Your JS PR Merges — Greptile now runs your code to find bugs. T-Rex runs your PR branch in a sandbox, uses brows

pnpm 11.26

pnpm Blog — 2026-09-07T00:00:00+00:00

pnpm 11.26 brings the JavaScript CLI level with what pnpm 12 gained over the

Bun v1.4.2

Bun — 2026-09-05T05:39:32+00:00

This release fixes two regressions impacting Elysia and AsyncLocalStorage, a hang in @discordjs/ws, CMYK JPEG decoding in Bun.Image, a rare JIT crash, and a GC crash on musl.

npm audits endpoint is having issues

npm Status — 2026-09-04T13:48:36+00:00

Sep 4 , 13:48 UTC Resolved - This incident has been resolved. Sep 4 , 13:27 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 4 , 11:29 UTC Investigating - We are currently investigating this issue.

Bun v1.4.1

Bun — 2026-09-04T06:47:12+00:00

Fixes 202 issues, addressing 236 👍. HTTP/2 in Bun.serve, Bun.write() streams Response bodies to disk, self-contained workspace node_modules, bun install --offline and --prefer-offline, WebSocket pause() and resume(), crypto.argon2, tree-shaking through dynamic import(), smarter CommonJS to ESM conversion for default imports, --compile --bytecode when cross-compiling, smaller and faster-starting compiled executables, up to 9x faster Buffer reads and writes, 2x faster AsyncLocalStorage, faster sta

How we closed 1,500 GitHub issues in one month

Next.js Blog — 2026-09-04T04:00:00+00:00

How the Next.js team used an agent to research old reports and work through the issue backlog.

Intermittent Failures Impacting npm Publish

npm Status — 2026-09-03T23:21:04+00:00

Sep 3 , 23:21 UTC Resolved - This incident has been resolved. Sep 3 , 22:41 UTC Monitoring - A fix has been implemented and we are monitoring the results. Sep 3 , 22:17 UTC Update - We are continuing to investigate this issue. Sep 3 , 21:42 UTC Investigating - We are currently investigating this issue.

How Turbopack chunks your JavaScript

Next.js Blog — 2026-09-03T16:00:00+00:00

Turbopack’s chunking speeds up page loads and enables sharing code across pages. We shipped new experimental features to improve chunking in Next.js 16.3.

pnpm 12.2-12.3

pnpm Blog — 2026-09-02T00:00:00+00:00

pnpm 12.2 and 12.3 are largely a catch-up pair: a long list of things pnpm 11

NodeSource Weekly — Sept 1, 2026: New Node.js releases, N|Solid Plugin v1.0.3 & the road to Node.js 26 LTS

NodeSource Blog — 2026-09-01T17:36:46+00:00

Explore this week’s Node.js updates, N|Solid DevTools, AI coding agent workflows, NodeConf EU 2026, and the Node.js Upgrade Program.

August report 2026

Total.js Blog — 2026-09-01T12:02:43.230189+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

How to fit Minesweeper into 247 bytes

JavaScript Weekly — 2026-09-01T00:00:00+00:00

#800 — September 1, 2026 Read on the Web Issue 800! I'm not doing anything to celebrate, but I know many of you have been here for years , so thanks for your continued support. Maybe I'll do something for issue 1000, though at current velocity that'll be late 2030... ;-) __ Your editor, Peter Cooper JavaScript Weekly The Depths of JavaScript: Minesweeper in 247 Bytes — An analysis of a playable 8x8 Minesweeper implementation in one line of JavaScript, complete with flags and cascading blank cel

What’s new in Svelte: September 2026

Svelte Blog — 2026-09-01T00:00:00+00:00

This month, Svelte 5.57 shipped with new SvelteMap methods and a few quality-of-life additions while SvelteKit 3 got closer to the finish line with its Release Candidate. The sv CLI also got a new ai-tools add-on that replaces the old mcp one, and sv@next now ships a task-based sveltekit-3 migration for existing apps. Let’s dive a bit deeper! What’s new in Svelte SvelteMap now has getOrInsert and getOrInsertComputed methods for the common “read or initialize” pattern ( 5.57.0 , Docs , #18728 ) c

pnpm 11.25

pnpm Blog — 2026-08-29T00:00:00+00:00

pnpm 11.25 replaces topological batches with a task scheduler, adds configurable

pnpm 12.1

pnpm Blog — 2026-08-29T00:00:00+00:00

pnpm 12.1 brings the new workspace task scheduler to the Rust CLI, persists

Node.js Downloads Surge in 2026 as Node.js 24 Takes the Lead

NodeSource Blog — 2026-08-27T19:30:13+00:00

Official Node.js download data shows 2026 has already surpassed 2025 totals, while Node.js 24 leads for the first time. See what the data means for LTS adoption, EOL risk, and modernization.

NativeScript 9.1: a native runtime that behaves like the web

OpenJS Foundation — 2026-08-27T00:00:00+00:00

NativeScript 9.1 adds Node-API support, so many existing Node native addons can run with little or no change. The test runner was also rebuilt around Vitest, running real tests on a real device.

Node.js 26.8.1 (Current)

Node.js Blog — 2026-08-26T22:11:36+00:00

Node.js 26.8.1 (Current)

Node.js 26.8.0 (Current)

Node.js Blog — 2026-08-26T14:29:48+00:00

Node.js 26.8.0 (Current)

Node.js 24.20.0 (LTS)

Node.js Blog — 2026-08-26T14:29:42+00:00

Node.js 24.20.0 (LTS)

pnpm 12.0

pnpm Blog — 2026-08-26T00:00:00+00:00

pnpm 12 is stable. It is a rewrite of pnpm in Rust. Upgrading should not feel like a migration. The commands, flags, settings, and lockfile format of pnpm 11 all carry over. The documentation now defaults to pnpm 12, with the pnpm 11 documentation available from the version selector.

NodeSource Weekly — Aug 25, 2026: AI Agents, Node.js DevTools & Community

NodeSource Blog — 2026-08-25T20:12:41+00:00

Explore this week’s NodeSource updates on AI coding agents, N|Solid DevTools, Node.js community events, dependency security, and the Node.js Upgrade Program.

August 2026 Security Release

Next.js Blog — 2026-08-25T18:00:00+00:00

The August 2026 security release for Next.js is now available

Update: August Next.js Security Release

Next.js Blog — 2026-08-25T15:00:00+00:00

Next.js is moving the August security release forward to August 25, 2026.

Bun 1.4 is (finally) fresh out of the oven

JavaScript Weekly — 2026-08-25T00:00:00+00:00

#799 — August 25, 2026 Read on the Web 🏖️ I'm back from an intense week of Disney vacationing with the family, so I feel more tired than before I left 😅… but it's time to catch up with all things JavaScript! __ Your editor, Peter Cooper JavaScript Weekly Bun 1.4: Now More Node.js Compatible Than Ever — Several weeks after it was initially expected to launch, Bun's big AI-powered rewrite from Zig to Rust is here, complete with traditional ▶️ release video . A lot of effort has been put into comp

pnpm 11.24

pnpm Blog — 2026-08-24T00:00:00+00:00

pnpm 11.24 brings back pnpm approve-builds --global, which isolated global installs took away in v11.0, and makes recursive batch publishing group its packages by registry so a credential mismatch is caught before anything is published. It also stops --frozen-lockfile from failing over the pnpm version the lockfile pins.

pnpm 11.23

pnpm Blog — 2026-08-23T00:00:00+00:00

pnpm 11.23 gives the registries setting a shape that describes each registry once — its tarball layout, the scopes routed to it, the prefix it answers to — so an Artifactory or GitLab registry can finally keep its tarball URLs out of pnpm-lock.yaml. It adds virtualStoreType, makes undeclared imports resolve under ESM with the global virtual store without a plugin, teaches pnpm config get to report the settings pnpm actually acts on, and warns about settings no pnpm version recognizes.

How to write better Total.js Applications using AI?

Total.js Blog — 2026-08-21T15:10:34.908291+00:00

Learn how to make AI coding agents write better, more native Total.js applications!

Node.js Upgrade: 5 Things That Can Break Before You Migrate

NodeSource Blog — 2026-08-20T22:17:44+00:00

Planning a Node.js upgrade? Learn the 5 areas that can break during migration, from native addons and dependencies to OpenSSL, APIs, CI, and OS compatibility.

Upcoming Next.js August Security Release

Next.js Blog — 2026-08-20T18:00:00+00:00

Next.js is preparing a scheduled August security release for August 26, 2026.

Bun 1.4

Bun — 2026-08-20T00:53:44+00:00

Bun 1.4 rewrites Bun in Rust, ships built-in headless browser automation (Bun.WebView), Bun.Image, Bun.markdown, JSON5, JSONL, Terminal and cron APIs, Node.js 26.3.0 compatibility with 1,517 newly passing tests, parallel test and run, Windows ARM64, and an opt-in global virtual store for up to 7× faster installs.

How to Update Node.js Versions on Linux

NodeSource Blog — 2026-08-19T21:18:10+00:00

This guide will walk you through multiple methods: using a package manager, nvm, NodeSource distribution binaries, and manually downloading

How to Update Node.js Versions on MacOS

NodeSource Blog — 2026-08-19T21:18:00+00:00

In this guide, we’ll walk through different methods to updated Node.js in MacOS, including Homebrew, Node Version Manager (nvm), and manual installation.

How to Update Node.js Versions on Windows

NodeSource Blog — 2026-08-19T21:17:40+00:00

If you're using Windows, there are multiple ways to update Node.js, whether you prefer a simple installer, a package manager, or a version manager.

NodeSource Weekly — Aug 2026: Node.js Community, AI Agents & the Agentic SDLC

NodeSource Blog — 2026-08-18T16:53:18+00:00

NodeSource Weekly: Node.js community updates, upcoming events, AI agents, MCP, Agentic SDLC insights, and the latest developer tools.

Building App-like Experiences with Next.js 16.3

Next.js Blog — 2026-08-18T16:00:00+00:00

Build app-like experiences with Instant Navigations, server-rendered data, optimistic updates, and live client state in Next.js 16.3.

pnpm 11.21-11.22

pnpm Blog — 2026-08-18T00:00:00+00:00

pnpm 11.21 and 11.22 teach pnpm install to update the lockfile in place for most everyday changes instead of re-resolving the whole dependency graph, stop recording SSH URLs that break installs on CI, make global installs switch over atomically and global interactive updates select whole install groups, add pnpm cache path, and take away a project's ability to relocate pnpm's machine-level state through pnpm-workspace.yaml.

npm v12 Blocks Install Scripts. So Why Aren't You Safe Yet?

NodeSource Blog — 2026-08-14T21:33:40+00:00

npm v12 blocks automatic install scripts, but supply chain risks remain. Learn why runtime execution still matters for Node.js security.

Node.js Interactive 2026: A Recap

Node.js Blog — 2026-08-14T00:00:00+00:00

Node.js Interactive 2026: A Recap

The SvelteKit 3 Release Candidate is here

Svelte Blog — 2026-08-13T00:00:00+00:00

SvelteKit 3 is now in the Release Candidate phase. If all goes well — meaning that people like you try it out and find that it works as expected — we will follow it up with a stable release in the near future, with no further breaking changes. But there are some breaking changes since SvelteKit 2. We’re taking advantage of this release to prune some of the weeds in the codebase and lay the groundwork for SvelteKit’s continued evolution, more on which below . To migrate an existing app, you can u

Owning the Agentic SDLC: How NodeSource Reclaimed Control of AI Development

NodeSource Blog — 2026-08-12T20:18:38+00:00

Learn how NodeSource built an internal orchestration layer for agentic development using OpenCode, MCPs, OpenSpec, model routing, and observability.

NodeSource Weekly — Aug 2026: Node.js Releases, AI Agents & Smarter Node.js Diagnostics

NodeSource Blog — 2026-08-11T20:40:37+00:00

Node.js 26.7.0, AI agent architecture, NodeConf EU, N|Solid Extension and Plugin, plus smarter Node.js diagnostics and upgrade resources.

Shipping less JavaScript with Baseline

JavaScript Weekly — 2026-08-11T00:00:00+00:00

#798 — August 11, 2026 Read on the Web 🏖️ A brief scheduling note: We're taking a summer break next week, so we'll be back in your inbox on August 25. Catch you then! __ Your editor, Peter Cooper JavaScript Weekly Migrating a Large Flow Monorepo to TypeScript — Over several years, Yelp moved 1.4 million lines off Flow , and this writeup is more useful as a guide to running any long migration than as a Flow story. It was a big win on its own terms, with type coverage up from 83% to 96%. Shawn Wa

Making jsDelivr’s Origin More Reliable at Scale

jsDelivr Blog — 2026-08-10T15:03:14+00:00

When the original storage index was designed, jsDelivr tracked roughly 350,000 unique files. By the time we replaced it, that number had grown to more than 600 million. We moved the index from Redis to MariaDB, migrated storage from Amazon S3 to Wasabi, compressed and cleaned up the stored

What's different in pnpm 12

pnpm Blog — 2026-08-10T00:00:00+00:00

pnpm 12 is a rewrite of pnpm in Rust, and it is stable. Upgrading should not feel like a migration. Apart from the differences below, it keeps the commands, flags, settings, and lockfile format of pnpm 11, and the documentation applies to both versions.

Making More npm Packages Work with jsDelivr ESM

jsDelivr Blog — 2026-08-07T23:21:23+00:00

After modernizing our backend, we reviewed every reported /+esm issue and used production APM data to analyze the remaining failures. The result is broader support for modern JavaScript, complex CommonJS packages, source-relative assets, and additional Node.js compatibility APIs. When we introduced jsDelivr’s ESM bundling service, the

Making More npm Packages Work with jsDelivr ESM mode

jsDelivr Blog — 2026-08-07T23:21:23+00:00

Over the past few months, we upgraded the /+esm toolchain, worked through the open compatibility reports, and then used production APM data to find the failures that had not been reported yet. This post covers what we found and the changes now running in production. When we introduced jsDelivr’

Node.js 18 and 20 Are EOL—Yet They Were Downloaded More Than 136 Million Times in July 2026

NodeSource Blog — 2026-08-06T22:08:50+00:00

A HeroDevs analysis found more than 136M downloads of EOL Node.js 18 and 20 in July 2026. Learn why unsupported runtimes remain embedded in active builds.

Making Navigations Instant in v0

Next.js Blog — 2026-08-06T13:00:00+00:00

The case study behind Instant Navigations in Next.js 16.3, and how we made v0's navigations instant using tests and a coding agent.

Node.js 26.7.0 (Current)

Node.js Blog — 2026-08-05T16:25:55+00:00

Node.js 26.7.0 (Current)

NodeSource Weekly — August 4, 2026: Node.js Releases, npm Security & AI Agent Updates

NodeSource Blog — 2026-08-04T17:52:07+00:00

Explore the latest Node.js releases, npm v12 supply chain security, AI agent updates, N|Solid DevTools, and community news from NodeSource.

Reimplementing htmx from scratch

JavaScript Weekly — 2026-08-04T00:00:00+00:00

#797 — August 4, 2026 Read on the Web JavaScript Weekly Next.js 16.3 Released — The newly expanded Next.js team (now including Dan Abramov and 𝕏 Pete Hunt !) has dropped the latest version of the popular React framework, complete with faster builds, optional TypeScript 7 type checking, faster SSR, Instant Navigations , AI improvements , and more. The Next.js Team Frontend Architecture: Monoliths to Microfrontends — Maxi Ferreira walks through modular monoliths, monorepos, and microfrontends so

Next.js 16.3

Next.js Blog — 2026-08-03T17:00:00+00:00

Next.js 16.3 introduces Instant Navigations, a suite of tools for single-page-app responsiveness, plus a faster dev server, faster builds, and improved tooling for AI agents.

Node.js 26.6.0 (Current)

Node.js Blog — 2026-08-03T13:51:29+00:00

Node.js 26.6.0 (Current)

Node.js 24.19.0 (LTS)

Node.js Blog — 2026-08-03T13:49:39+00:00

Node.js 24.19.0 (LTS)

pnpm 11.20

pnpm Blog — 2026-08-03T00:00:00+00:00

pnpm 11.20 fixes a package-substitution risk in projects that install from more than one registry alias, stops empty proxy settings from failing installs, hardens pnpm rebuild against a malicious lockfile, and speeds up dependency resolution.

Why Installing an npm Package Can Execute Code on Your Machine (And Why npm v12 Finally Changes That)

NodeSource Blog — 2026-08-02T22:15:25+00:00

Learn how npm install scripts can execute code on your machine, the security risks they create, and what changes with npm v12.

July report 2026

Total.js Blog — 2026-08-01T19:13:37.600601+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

What’s new in Svelte: August 2026

Svelte Blog — 2026-08-01T00:00:00+00:00

The biggest news this month is the first @next releases of SvelteKit 3. Thirteen preview versions shipped in July: previewing new $app/manifest and $app/service-worker modules, improved API availability and type checking in service workers, tracing out of the experimental namespace, shallow routing baked into goto and a lot more. It’s a prerelease, but it’s worth trying out to see what’s coming to SvelteKit! Alongside the preview releases, the stable line kept moving with submitted on remote for

pnpm 11.15-11.19

pnpm Blog — 2026-07-31T00:00:00+00:00

pnpm 11.15 through 11.19 teach pnpm update and pnpm outdated to update GitHub Actions, let pnpm update write changesets for the bumps it makes, introduce cleaner update and audit settings sections, add publishConfig.name for publishing a package under a different name, harden pnpm self-update against project-supplied configuration, make web-based login work without a TTY, and accept = as a save-prefix. They also cut peak resolution memory by several times on large workspaces and speed up repeat

How to install Flow — IoT platform

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

This blog shows you how to install and set up the Flow application as part of the Total.js IoT platform, enabling real-time data processing, alerts, and automation through a low-code visual interface. By the end, you’ll have IoT platform, Stream, OpenReports, and Flow all running together with a basic architecture ready for further use.

How to install OpenReports — IoT platform

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

This blog continues the IoT platform installation series by guiding you through installing and setting up OpenReports, a flexible reporting tool from Total.js. You’ll learn how to connect it to your database, create views, and generate reports, enabling you to analyze and manage your IoT data more effectively.

How to install stream to IoT platform — Total.js

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

This blog continues the IoT platform setup by explaining how to install and run the Stream application, which collects incoming data from sensors. You’ll learn how to create a driver and device, secure the data with a token, and send real-time values to your platform using a simple API request.

July report 2025

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

How to install IoT platform — Total.js

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

This blog shows how to install the Total.js IoT platform step by step, including setting up the database, downloading the code, and running the application. It’s the first part of a series that explains how to build the full platform by adding components like Stream, OpenReports, Flow, and OpenPlatform.

Revolutionize Your IoT Management with Total.js IoT Platform: Simplify, Monitor, and Optimize

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

The Total.js IoT Platform simplifies the management of diverse IoT devices by unifying data, monitoring, and automation in one place. It helps you streamline your operations, visualize data in real-time, and focus on insights instead of technical complexity.

June report 2025

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

May report 2025

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

April report 2025

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

A quick overview of all changes and news from the entire Total.js Platform. Read more about our work.

j-Box - Total.js UI component

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

The j-Box component from the Total.js jComponent UI library is a versatile tool for creating customizable pop-up windows, such as forms or galleries. This blog demonstrates its setup, attributes, and integration with other components, using examples to show how to build pop-up forms with menus, content, and buttons.

Beekeeping - recording damage caused by a brown bear

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

Watch how we built a dynamic, multi-step form using Total.js UI Builder and processed submissions via Flow - all without touching the source code.

j-Importer - Total.js

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

The blog introduces j-Importer, a component from the jComponent library by Total.js, which allows importing HTML templates, scripts, or styles dynamically based on conditions. It explains how to set up and use j-Importer to import a pop-up form triggered by a button.

Total.js AIModel: a practical foundation for AI-powered workflows

Total.js Blog — 2026-07-30T06:34:02.515673+00:00

How Total.js helps developers integrate AI models into real applications with routing, actions, streaming, tools, validation, and business logic in one coherent stack.

Node.js Versions Explained: Why Running an Outdated Release Is a Business Risk

NodeSource Blog — 2026-07-29T22:27:33+00:00

Understand Node.js Current, LTS, Maintenance, and EOL releases, compare Node.js 22, 24, and 26, and learn the risks of outdated runtimes.

Node.js 24.18.1 (LTS)

Node.js Blog — 2026-07-29T16:19:07+00:00

Node.js 24.18.1 (LTS)

Node.js 26.5.1 (Current)

Node.js Blog — 2026-07-29T14:03:39+00:00

Node.js 26.5.1 (Current)

Node.js 22.23.2 (LTS)

Node.js Blog — 2026-07-29T14:01:35+00:00

Node.js 22.23.2 (LTS)

Wednesday, July 29, 2026 Security Releases

Node.js Blog — 2026-07-29T00:00:00+00:00

Wednesday, July 29, 2026 Security Releases

NodeSource Weekly — July 28, 2026: Node.js Security, New API Docs & N|Solid AI DevTools

NodeSource Blog — 2026-07-28T20:59:05+00:00

Explore the latest Node.js security releases, the new API docs beta, N|Solid AI DevTools, the Node.js Upgrade Program, community news, and AI resources.

Anders Hejlsberg demos TypeScript 7's 10x speedup

JavaScript Weekly — 2026-07-28T00:00:00+00:00

#796 — July 28, 2026 Read on the Web JavaScript Weekly Rust Is Eating JavaScript (Still, in 2026) — Our most-read link of 2021 gets an update for 2026. Lee Robinson (then Vercel, now Cursor) predicted Rust would be used to reimplement more and more JavaScript ecosystem tooling, and Rspack, Biome, Turbopack, and Bun's recent rewrite keep proving him right. Lee Robinson Frontend Architecture: Monoliths to Microfrontends — Maxi Ferreira walks through modular monoliths, monorepos, and microfrontend

Check out the New Node.js API Documentation Preview

Node.js Blog — 2026-07-24T19:00:00+00:00

Check out the New Node.js API Documentation Preview

Publish and Install failures

npm Status — 2026-07-24T11:38:53+00:00

Jul 24 , 11:38 UTC Resolved - This incident has been resolved. Jul 24 , 11:36 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 24 , 11:32 UTC Update - We are continuing to investigate this issue. Jul 24 , 11:08 UTC Investigating - We are currently investigating this issue.

intermittent Publish and Install Failures

npm Status — 2026-07-23T19:52:13+00:00

Jul 23 , 19:52 UTC Resolved - This incident has been resolved. Jul 23 , 18:04 UTC Monitoring - A fix has been implemented and we are monitoring the results. Jul 23 , 16:09 UTC Investigating - We are currently investigating this issue.

Meet Our 2026 OpenJS Foundation Board of Directors

OpenJS Foundation — 2026-07-22T00:00:00+00:00

We’re happy to welcome three new members on the OpenJS Foundation Board of Directors, and three that were re-elected. Together, they are filling positions on the Gold, Silver and Community level.

The coding challenge you don't want to pass

JavaScript Weekly — 2026-07-21T00:00:00+00:00

#795 — July 21, 2026 Read on the Web JavaScript Weekly Framework Benchmarks: Compare Frontend Frameworks — An experienced developer built and benchmarked the same app across numerous frameworks (e.g. Angular, Solid, React, Alpine.js…). Here are the results, covering bundle size, build time, UX metrics, and more. Alicia Sykes 💡 Alicia also created Stack Match , a page that lets you specify your criteria for a framework and shows the best matches. Vue usually wins though! xyOps: Open Source Ops A

July 2026 Security Release

Next.js Blog — 2026-07-20T12:00:00+00:00

The July 2026 security release for Next.js is now available

pnpm 11.11-11.14

pnpm Blog — 2026-07-18T00:00:00+00:00

pnpm 11.11 through 11.14 add native workspace release management (pnpm change, pnpm lane, and a bare pnpm version -r), a pnpm doctor command that diagnoses your installation end to end, the pnpm access and pnpm team commands for managing packages and organizations on the registry, convergence overrides, and scheme-carrying peerDependencies specifiers. They also fix a path-traversal vulnerability, cut peak memory during cold-cache resolution by roughly 30%, and resolve a peer dependency deadlock.

npm 12, TypeScript 7, and Bun in Rust

JavaScript Weekly — 2026-07-14T00:00:00+00:00

#794 — July 14, 2026 Read on the Web JavaScript Weekly 📈 TanStack's npm Package Download Charts — A quick way to chart package popularity over time, look for trends, and see what libraries and tools have soared or fallen. The default view compares TanStack's packages against several common packages, but you can enter any packages you wish, or see pre-defined sets like build tools, component libraries, or UI frameworks. TanStack Your AI Writes the Code. CodeRabbit Reviews It — AI can write the c

Next.js Security Release and Our Next Patch Release

Next.js Blog — 2026-07-13T12:00:00+00:00

Next.js is moving to a formal security release process

Meet the Node.js Interactive Speakers at RenderATL 2026

OpenJS Foundation — 2026-07-09T00:00:00+00:00

Node.js Interactive comes to RenderATL with talks on AI-assisted development, performance, open source infrastructure, documentation, and the engineering practices teams need now.

Rewriting Bun in Rust

Bun — 2026-07-08T16:00:00+00:00

Why & how we rewrote Bun from Zig to Rust

OpenJS Foundation Security Update: Q2 2026

OpenJS Foundation — 2026-07-08T00:00:00+00:00

Q2 2026 brought a Node.js 26 release, a major security release addressing 18 vulnerabilities with a streamlined 36-to-7-step process, the removal of the security embargo requirement, and a new LLM-assisted report classifier and web viewer for release management.

What's new in ECMAScript 2026 (and usable today)

JavaScript Weekly — 2026-07-07T00:00:00+00:00

#793 — July 7, 2026 Read on the Web JavaScript Weekly Vite+ Beta: A Web Dev Toolchain Behind One Command — Vite+ is the Vite team’s ‘unified toolchain’ that brings Vite, Vitest, Oxlint, and similar tools together under a single vp command, whether for running a dev server, tests, formatting, or bundling. VoidZero 💡 Vite+ was originally intended to be a commercial project to fund work on Vite and related projects, but was open sourced under the MIT license earlier this year. Still Writing Tests

npmx rainbow comet

npmx — 2026-07-03T00:00:00+00:00

npmx 0.16 is out! This period was especially full of good news. And it’s particularly great that, amid the constant search for vulnerabilities and risks, we’ve started celebrating more and taking joy in what we do - and what our favorite maintainers and authors do.

What’s new in Svelte: July 2026

Svelte Blog — 2026-07-01T00:00:00+00:00

This month brought a real shift in how SvelteKit projects are configured. You can now define your SvelteKit config directly inside vite.config.js and skip svelte.config.js entirely. We also got the first preview of explicit environment variables, which will eventually replace $env/* modules in SvelteKit 3. On top of that, the language tools and the sv CLI both caught up with Svelte’s new {const ...} declaration tags, so the whole toolchain is now in sync. Let’s dive in! What’s new in SvelteKit Y

Will npm v12 reject your .npmrc?

JavaScript Weekly — 2026-06-30T00:00:00+00:00

#792 — June 30, 2026 Read on the Web JavaScript Weekly Deno 2.9 Released — A huge release for the runtime: deno desktop turns scripts and framework-based projects into native, self-contained desktop apps, quick migration from npm/pnpm/Yarn/Bun lockfiles, big test runner improvements, ~2x faster cold starts, and a target of Node.js 26 compatibility. Bartek Iwańczuk 44 Recorded PostgreSQL Talks Are Now Available to Watch — Explore 44 talks about PostgreSQL-backed app development, Postgres perform

Turbopack: What's New in Next.js 16.3

Next.js Blog — 2026-06-29T20:00:00+00:00

Turbopack in Next.js 16.3 adds development memory eviction, persistent file cache for builds, experimental Rust React Compiler, and `import.meta.glob` support.

Next.js 16.3: AI Improvements

Next.js Blog — 2026-06-26T15:00:00+00:00

Actionable errors with paste-ready fix prompts, first-party Skills for the dev loop and Cache Components, and tooling that keeps coding agents in sync with your project.

SQLRooms Joins the OpenJS Foundation Under the Open Visualization Working Group

OpenJS Foundation — 2026-06-26T00:00:00+00:00

The OpenJS Foundation is excited to welcome SQLRooms as a new project within the Open Visualization Working Group as part of the vis.gl open source project, expanding the growing ecosystem of open source tools that help developers explore, analyze, and visualize data on the web.

Next.js 16.3: Instant Navigations

Next.js Blog — 2026-06-25T20:00:00+00:00

A new suite of tools that brings the responsiveness of a single-page app to the server-centric model of Next.js.

Deno 2.9

Deno — 2026-06-25T09:00:00+00:00

`deno desktop` for building native desktop apps from web tech, first-class migration from npm/pnpm/yarn/Bun, CSS module imports, snapshot and parameterized testing, smaller `deno compile --bundle` binaries, and Node.js 26 compatibility.

cosmos.gl v3 Is Here

OpenJS Foundation — 2026-06-25T00:00:00+00:00

Today, the team is shipping v3 – the most significant release in the project's history.

Babel 8.0, Vite 8.1, and TypeScript 7.0 RC

JavaScript Weekly — 2026-06-23T00:00:00+00:00

#791 — June 23, 2026 Read on the Web JavaScript Weekly Desktop Apps With deno desktop — Deno 2.9 (or the 'canary' build now ) can turn JavaScript projects into self-contained apps on macOS, Windows, and Linux. Unlike Electron, you can opt to use the default OS WebView or a bundled Chromium backend, plus you get cross-compilation and automatic support for apps built on frameworks like Next.js and SvelteKit. The Deno Project 📉 It's not in the post, but a --compress option gets packaged app sizes

Vite 8.1 is out!

Vite Blog — 2026-06-23T00:00:00+00:00

Vite 8.1 is out! June 23, 2026 Vite 8 was released in March with a single unified bundler powered by Rolldown , opening the door to further improvements. It is now seeing 41.6 million weekly downloads, almost reaching the total downloads of Vite 7. Alongside resolving upgrade regressions, we've been working on new features, and we're excited to announce the release of Vite 8.1. Quick links: Docs Translations: 简体中文 , 日本語 , Español , Português , 한국어 , Deutsch , فارسی GitHub Changelog Play online

Scroll Without End: Effortless Pagination with react-infinite-scroll-component