最新のセキュリティ情報

How Slack used Deno to save months of engineering effort in launching their new platform

Learn how building with Deno helped Slack launch their new development platform in weeks and not months.

Bun v1.1.6

Fixes 10 bugs (addressing 512 👍). UDP sockets! node:dgram! DataDog and ClickHouseDB! Fixes a bug impacting SvelteKit. Array#sort gets 15% - 135% faster. Fixes a regression in node:http from v1.1.5. Node.js compatibiltiy improvements and bugfixes.

Bun v1.1.5

Fixes 64 bugs (addressing 101 👍). Cross-compile standalone JavaScript & TypeScript executables to other platforms with bun build --compile. import any file as text via the `type: 'text'` import attribute. Introduces a new crash reporter. package.json with comments and trailing commas. Fixes a bug where `bun run --filter` exited with 0. Fixes a bug in bun install with file: dependencies. Fixes bugs in `node:tls`, `node:crypto`, `node:readline`, `node:http`, `node:worker_threads`

bun.report is Bun's new crash reporter

How we built an anonymous Zig/C++ crash reporter that doesn't require debug symbols to be shipped with the application.

React 19 Upgrade Guide

The improvements added to React 19 require some breaking changes, but we've worked to make the upgrade as smooth as possible and we don't expect the changes to impact most apps. In this post, we will guide you through the steps for upgrading apps and libraries to React 19.

Node.js 22.0.0 (Current)

JSR Is Not Another Package Manager

JSR introduces a new way to share JavaScript and TypeScript code across platforms, focusing on simplifying distribution without replacing existing package managers.

Announcing the Hookdeck SDK on JSR

Hookdeck, an event gateway for distributed and async architecture, now has an SDK on JSR.

Announcing the Neon Serverless Driver on JSR

Neon, a performant, edge-compatible, serverless Postgres driver, arrives on JSR.

An intro to TSConfig for JavaScript Developers

TypeScript, one of the fastest growing languages, helps JavaScript developers improve code quality and productivity. But getting started can be challenging. Here's an introduction to TSConfig.

Bun v1.1.4

Fixes 40 bugs (addressing 84 👍 reactions). `bun run --filter

How we built JSR

A modern JavaScript registry needs to be fast, reliable, and be as simple as possible for end users. Here's how we built JSR.

Next.js 14.2

Next.js 14.2 includes development, production, and caching improvements. Including new configuration options, 99% Turbopack tests passing, and more.

How Netlify used Deno Subhosting to build a successful edge functions product

Learn why Netlify chose Deno Subhosting over building their own solution with AWS Lambda to offer a successful edge functions product within weeks.

Node.js 21.7.3 (Current)

Node.js 20.12.2 (LTS)

Node.js 18.20.2 (LTS)

Wednesday, April 10, 2024 Security Releases

Bun v1.1.3

Fixes 5 bugs. bun install gets 50% faster on Windows. A bug that could cause bun install to hang in rare cases has been fixed. A bug where some errors in bun install would not produce a non-zero exit code has been fixed. A bug that could cause specific certain combinations of dependencies to fail to install has been fixed. A bug on Windows where CTRL + C on cmd.exe after exiting bun would not behave as expected has been fixed. A bug where missing permissions on Windows for reading a directory could lead to a crash has been fixed.

Bun v1.1.2

Fixes 4 bugs (addressing 44 👍 reactions). EBUSY on Windows in vite dev, next dev, and saving bun.lockb has been fixed. Object cloning gets 6x faster. Bun Shell gets support for seq, yes, basename and dirname. A TypeScript parsing edgecase has been fixed. A bug causing 'unreachable code' errors has been fixed. fs.watch on Windows has been rewritten to improve performance and reliability.

Bun v1.1.1

Fixes 20 bugs (addressing 60 👍). Add subshell and positional argument support to Bun Shell, fixing an issue with bun install + sharp on Windows. Printed source code in errors no longer fill up your terminal. Upgrades JavaScriptCore, which includes performance improvements to RegExp, typed arrays, String indexOf and String replace. Error objects and JIT'd function calls use less memory. Fixes several bugs with bun install on Windows. Fixes a bug with Bun.serve() on Windows. Fixes a TOML parser bug impacting escape sequences and windows paths in .toml files

Node.js 18.20.1 (LTS)

Node.js 21.7.2 (Current)

Node.js 20.12.1 (LTS)

Introducing Simpler Project Creation in Deno Deploy

Introducing a more simplified project creation flow in Deno Deploy, including seamless CI/CD setup, a more transparent build and deployment step, and more.

Wednesday, April 3, 2024 Security Releases

Bun 1.1

Bun now supports Windows!

Bun v1.0.36

Fixes 13 bugs. Adds support for `fs.openAsBlob` and `fs.opendir`, fixes edgecase in bun install with multiple `bin` entries in `package.json`, fixes `bun build --target bun` encoding, fixes bug with process.stdin & process.stdout, fixes bug in http2, fixes bug with .env in bun run, fixes various Bun shell bugs and improves Node.js compatibility.

Deno 1.42: Better dependency management with JSR

Deno 1.42 revolutionizes dependency management with the seamless integration of JSR, enhancing Node/npm compatibility and introducing significant performance improvements.

Node.js 20.12.0 (LTS)

Node.js 18.20.0 (LTS)

Bun v1.0.34

Fixes 7 bugs, bunx uses less memory, bun install gets faster on Docker & WSL, a conflicting devDependency hoisting bug is fixed, a cyclical CommonJS & ESM import crash is fixed, cross-mount fs.cp & fs.copyFile get 50% faster on Linux, and reliability improvements for bun install & bun's runtime

Announcing VitePress 1.0

Today we are happy to announce the (long overdue) 1.0 release of VitePress ! VitePress is a Static Site Generator (SSG) designed for building fast, content-centric websites. In a nutshell, VitePress takes your source content written in Markdown, applies a theme to it, and generates static HTML pages that can be easily deployed anywhere. VitePress is built on top of Vite and Vue , and is the spiritual successor and modern replacement of VuePress .

Bun v1.0.33

Fixes 2 bugs, including a bug with the mv command in Bun Shell and an error in node:crypto when verifying signatures

Bun v1.0.32

Fixes 13 bugs, including 3 I/O regressions from v1.0.31. Improves Node.js compatibility. 'ws' package can now send & receive ping/pong events. util.promisify'd setTimeout setInterval, setImmediate work now. FileHandle methods have been implemented

Introducing deployctl, the command line interface for Deno Deploy

Deno Deploy’s command line interface, deployctl, is the simplest way to deploy your projects to the cloud. Here’s how to do it.

Bun v1.0.31

Fixes 54 bugs (addresses 113 👍 reactions), introduces `bun --print`, ` | bun run -`, `bun add --trust`, `fetch()` with Unix sockets, fixes macOS binary size regression, fixes high CPU usage bug in spawn() on older linux, adds `util.styleText`, Node.js compatibiltiy improvements, bun install bugfixes, and bunx bugfixes

Node.js 21.7.1 (Current)

Node.js 21.7.0 (Current)

Bun v1.0.30

Fixes 27 bugs (addressing 103 👍 reactions), fixes an 8x perf regression in Bun.serve(), adds a new `--conditions` flag to `bun build` and Bun's runtime, adds support for `expect.assertions()` and `expect.hasAssertions()` in Bun's test runner, fixes crashes and improves Node.js compatibility

Introducing JSR - the JavaScript Registry

The JavaScript Registry (JSR) is a TypeScript-first, ESM-only module registry designed for the entire JavaScript ecosystem. Use JSR modules from Deno and npm-based projects. JSR is free and open source. Available today in public beta.

How to add Monaco to a Next.js app and securely run untrusted user code

Enabling your users to deploy and run code can make your platform more useful. Here's a guide to building a platform that deploys and runs untrusted user code via a browser IDE with Monaco, Next.js, and Subhosting.

Survey Results and Roadmap

You answered our survey and we listened. Here’s what we’re working on currently and what you can expect from Deno next.

Bun v1.0.29

Fixes 8 bugs. Bun.stringWidth(a) is a ~6,756x faster drop-in replacement for the popular 'string-width' package. bunx checks for updates more frequently. Adds expect().toBeOneOf() in bun:test. Memory leak impacting Prisma is fixed. Shell now supports advanced redirects like '2>&1', '&>'. Reliability improvements to bunx, bun install, WebSocket client, and Bun Shell

Deno 1.41: smaller deno compile binaries

We've roughly halved the size of `deno compile` binaries, added official Linux ARM64 builds, continued to land Node.js compatibility improvements, and more.

Webhooks suck, but here are alternatives

Webhooks, originally proposed as a way to consume asynchronous feeds, became the one-size-fits-all solution for integrating cloud software. Here’s why we think there’s a better solution.

Bun v1.0.28

Fixes 6 bugs (addressing 26 👍 reactions). Fixes bugs impacting Prisma and Astro, 'events', 'readline', and 'http2'. Fixes a bug in Bun Shell involving stdin redirection and fixes bugs in bun:test with test.each and describe.only

Bun v1.0.27

Fixes 72 bugs (addressing 192 👍 reactions), Bun Shell supports throwing on non-zero exit codes, stream Response bodies using async generators, improves reliability of fetch(), http2 client, Bun.Glob and Bun Shell. Fixes a regression with bun --watch on Linux. Improves Node.js compatibility

React Labs: What We've Been Working On – February 2024

In React Labs posts, we write about projects in active research and development. We’ve made significant progress since our last update, and we’d like to share our progress.

Node.js 21.6.2 (Current)