Node.js October 2026 Security Patch: Three HIGH CVEs — Upgrade Now
Node.js shipped HIGH-severity patches for 22.x, 24.x, and 26.x today. CVE-2026-21710 crashes any HTTP server with one header. Here's what to patch and ...
tsrs Ships: Cloudflare Ports the TypeScript Compiler to Rust
Cloudflare and VoidZero shipped tsrs: a Rust port of tsc that is 18x faster and ...
Node.js 26 Goes LTS October 28: What Breaks, What’s New
Node.js 26 becomes LTS on October 28. Temporal API is default, TypeScript native is stable, ...
pnpm 12.12 + vlt 1.4: Faster JavaScript Installs Now
pnpm 12.12 adds remote build cache via Turborepo API. vlt 1.4 cuts macOS reinstalls 68% ...
Astro 7.4: –timings Shows Where Your Build Is Slow
Astro 7.4 adds --timings to expose build bottlenecks, experimental parallel prerendering with real benchmark data, ...
Deno Is Dead: Cloudflare Bought It, 12-Month Clock
Cloudflare bought Deno Land on October 9 and posted two clocks immediately: Deno Deploy shuts down in six months, the Deno runtime gets ...
Vue 3.6 Vapor Mode RC: Skip the Virtual DOM Now
Vue 3.6 RC is feature-complete with Vapor Mode. One attribute drops the virtual DOM, matches ...
Cloudflare Void Is Open Source: Deploy Vite Apps to Workers
Cloudflare open-sourced Void — an MIT SDK, CLI, and self-hosted platform for deploying full-stack Vite ...
Pele: Mermaid Renderer, 500x Faster, Zero Dependencies
Pele is a new open-source Mermaid renderer from Obsidian: 230 KB bundle, 0.05–0.3ms render time, ...
Zod 4.5: Schema Compilation, 9x Less Memory, 47M ops/s
Zod 4.5 ships z.compile() for 3-9x faster validation with no build step required, plus a ...