Next.js August 2026: Two Critical RCEs — Patch Before Someone Else Does
Next.js shipped two critical unauthenticated RCE vulnerabilities on August 25, 2026. Patch to 16.3.3 or 15.5.24 now — here is exactly what is ...
Vite+ Beta: One Command for Your Entire JavaScript Toolchain
VoidZero's Vite+ beta unifies Vite, Vitest, Oxlint, Oxfmt, and Rolldown behind a single vp command. ...
SvelteKit 3 RC: Remote Functions Replace Load Functions
SvelteKit 3 RC is out with Remote Functions, Vite 8, and breaking config changes. Here ...
Nuxt 4.5: Vite 8, Rspack 2, and SSR Streaming Explained
Nuxt 4.5 ships Vite 8 as default, a Rsbuild-powered Rspack 2 builder, and experimental SSR ...
HTMX 4.0: Fetch API, Built-In Morphing, and What Breaks
htmx 4.0.0 shipped today with Fetch API streaming, built-in Idiomorph morphing, and explicit property inheritance. ...
SvelteKit 3 RC: Remote Functions Replace Load Functions
SvelteKit 3 RC ships with remote functions that replace load functions and actions, a unified Vite config, Vite 8, and a one-command migration ...
Next.js 16.3.3: Two Critical RCE Flaws — Patch Now
Next.js 16.3.3 and 15.5.24 fix two critical RCE vulnerabilities. CVE-2026-75604 hits Windows servers with no ...
Bun 1.4: Rust Rewrite Lands With Six Built-In APIs
Bun 1.4 rewrites its runtime from Zig to Rust and ships six built-in APIs that ...
pnpm 12 Goes Native: Rust Rewrite, 30x Faster Installs
pnpm 12 ships stable with a full Rust rewrite. Cached installs drop from 381ms to ...
Bun 1.4: Built-In Browser Automation, 5x Lower CPU
Bun 1.4 stable is out. Here is what developers actually get: Bun.WebView headless automation, +1,517 ...