Vulnerabilities & updates

Node.js 22.5.0 (Current)

Announcing Supabase on JSR

Supabase's isomorphic JavaScript client library is now available on JSR.

Bun v1.1.19

Fixes 54 bugs (addressing 248 👍). JavaScript gets faster on Windows. Raspberry Pi 4 support returns. `_auth` support in `.npmrc`. `bun install` preserves package.json indentation. `aws-cdk-lib` support. Memory leak fixes in `new Response(request)` and `fs.readdir`. Several reliability improvements. Statically linked UCRT on Windows.

Deno 1.45: Workspace and Monorepo Support

Deno 1.45 introduces workspaces and monorepo support, improved Node.js compatibility, updates to `deno install`, the new `deno init --lib` command, deprecation of `deno vendor`, Standard Library stabilization, upgrades to V8 12.7 and TypeScript 5.5.2, and more.

Introducing KV Backup for Deno Subhosting

This new feature allows Subhosting users to configure their KV databases to back up data to their own S3-compatible object storage via APIs.

Node.js 22.4.1 (Current)

Node.js 20.15.1 (LTS)

Node.js 18.20.4 (LTS)

Monday, July 8, 2024 Security Releases

Bun v1.1.18

Fixes 55 bugs (addressing 493 👍). Support for npmrc. Improved constant folding & enum inlining. Improved console.log output for functions. Fixes patching dependencies in workspaces. Fixes several bugs in `bun install` when linking binaries. Fixes a crash in `dns.lookup`, and normalizes DNS errors to better match Node. Fixes an assertion failure in `Bun.escapeHTML`. Upgrades JavaScriptCore.

Node.js 22.4.0 (Current)

A Gentle Intro to TypeScript

Quick, digestible bites of TypeScript goodness for Deno developers. In this first bite, we introduce TypeScript, how to add type annotations to your code and why you should.

Announcing Hono on JSR

Hono, a lightweight, fast, cross-platform web framework, is now on JSR.

Bun v1.1.17

Fixes 4 bugs. Fixes a crash in bun repl. Makes fs.readdirSync 5% faster on macOS in small directories. Fixes "ws" module not calling the callback in "send" method. Fixes a crash when reading a corrupted lockfile in bun install. Makes macOS event loop a smidge faster.

Bun v1.1.16

Fixes 41 bugs (addressing 221 👍). lcov code coverage reports in bun test, Install dependencies from private git repositories including Gitlab and Bitbucket. `Buffer.from(string, "base64")` gets 6x - 30x faster on large input. Bug fixes to `bun patch`, `bun install`, N-AIi addons, transpiler bugfixes and Node.js compatibility improvements.

How We Made the Deno Language Server Ten Times Faster

When a customer reported performance issues with the Deno language server, we began a performance investigation that resulted in reducing auto-completion times from 6-8 seconds to under one second in large codebases. This is how we did it.

Node.js 20.15.0 (LTS)

Bun v1.1.14

Fixes 63 bugs (addressing 519 👍). Patch node_modules with bun patch. ORM-less object mapping in bun:sqlite. Log fetch() calls as curl commands. Node.js compatibility improvements. bun install bugfixes, bun:sqlite bugfixes, WebSocket fixes, Windows bugfixes

How the Guardian uses Deno to audit accessibility and performance across their 2.7 million articles

The Guardian receives over 350 million unique page views. Learn how Deno helps the Guardian maximize web performance and adhere to accessibility standards to retain and grow their readership.

Introducing More Flexible Domain Association for Deno Subhosting

This new update simplifies programmatically managing custom domains, wildcard domains, subdomains for different deployments, and more.

Node.js 22.3.0 (Current)

The stabilization process of the Standard Library has begun

The Deno Standard Library is going to reach 1.0.0 shortly. We hope you try RC versions of the packages and give us feedback!

Bun v1.1.13

Fixes 97 bugs (addressing 211 👍). Reliability improvements to bun install, WebSocket server, fetch, worker_threads. worker_threads now supports eval. `URL.createObjectURL`, stack trace error location improvements, several `bun install` fixes, and many crashes and bugs fixed.

Bun v1.1.11

Fixes 36 bugs (addressing 362 👍). bun update saves dependency updates to package.json. A peer dependencies resolution bug in bun install is fixed. setTimeout gets 5x faster throughput on Linux. Node.js compatibility improvements to fs, zlib, timers, http, dgram and module. Event loop improvements on macOS. Windows reliability improvements.

Deno 1.44: Private npm registries, improved Node.js compat, and performance boosts

Deno 1.44 adds support for private npm registries, gRPC connections, improved Node.js compat with initial Next.js support, and significant performance improvements.

Node.js 20.14.0 (LTS)

Bun v1.1.10

Fixes 20 bugs. 2x faster uncached bun install on Windows. fetch() uses up to 2.8x less memory. Several bugfixes to bun install, sourcemaps, Windows reliability improvements and Node.js compatibility improvements

Next.js 15 RC

The Next.js 15 Release Candidate (RC) is now available. This early version allows you to test the latest features before the upcoming stable release.

Bun v1.1.9

Fixes 67 bugs (addressing 150 👍). Fixes to: workspaces in `bun install`, sourcemaps in bun build, IPv6 & VPN connectivity, Loading UNC paths, junctions, symlinks, and pnpm on Windows, `fetch()` gets faster, added `dns.prefetch()` API, `atob()` gets 8x faster, `toString('base64url')` gets 5x faster, expect().toBeReturned() matcher, Node.js compatibility improvements, Bun Shell fixes, and lots more bugfixes.

React Conf 2024 Recap

Last week we hosted React Conf 2024, a two-day conference in Henderson, Nevada where 700+ attendees gathered in-person to discuss the latest in UI engineering. In this post, we'll summarize the talks and announcements from the event.

Node.js 18.20.3 (LTS)

How we built a secure, performant, multi-tenant cloud platform to run untrusted code

When building a modern cloud platform to securely run untrusted code, it can be difficult to balance cost and performance. Here’s how we built Deno Deploy and Deno Subhosting.

Node.js 22.2.0 (Current)

The Deno Standard Library is now available on JSR

The Deno Standard Library has moved to JSR, supporting SemVer ranges in imports and compatibility with Node.js, Cloudflare Workers, and more.

Bun v1.1.8

Fixes 54 bugs (addressing 184 👍). Support for `process.on("uncaughtException")` and `process.on("unhandledRejection")`, Brotli support in `node:zlib`, Faster JSON.parse, `[Symbol.dispose]` in Bun APIs, fixes lots of crashes on Windows, and many other bugfixes.

Node.js 20.13.1 (LTS)

Node.js 20.13.0 (LTS)

Your Low Code Solution Needs an Escape Hatch

A low-code solution is a simple way to offer some flexibility for your users. However, to accommodate further customization (especially for enterprise users), you should have an “escape hatch” — simple, code-level customization. Here are three product scenarios and where an escape hatch makes most sense.

Bun v1.1.7

Fixes 28 bugs (addressing 11 👍). Glob workspace names in bun install. Asymmetric matcher support in expect.extends() equals. bunx --version. Bugfixes to JSX transpilation, sourcemaps, cross-compilation of standalone executables, bun shell, RegExp, Worker on Windows, and Node.js compatibility improvements.

Node.js 22.1.0 (Current)

Deno 1.43: Improved Language Server performance

Deno 1.43 enhances productivity with a faster language server, improved npm compatibility, a new `deno serve` subcommand, URL.parse() API, and announcements regarding Deno 2.

How Slack used Deno to save months of engineering effort in launching their new platform

Learn how building with Deno helped Slack launch their new development platform in weeks and not months.

Bun v1.1.6

Fixes 10 bugs (addressing 512 👍). UDP sockets! node:dgram! DataDog and ClickHouseDB! Fixes a bug impacting SvelteKit. Array#sort gets 15% - 135% faster. Fixes a regression in node:http from v1.1.5. Node.js compatibiltiy improvements and bugfixes.

Bun v1.1.5

Fixes 64 bugs (addressing 101 👍). Cross-compile standalone JavaScript & TypeScript executables to other platforms with bun build --compile. import any file as text via the `type: 'text'` import attribute. Introduces a new crash reporter. package.json with comments and trailing commas. Fixes a bug where `bun run --filter` exited with 0. Fixes a bug in bun install with file: dependencies. Fixes bugs in `node:tls`, `node:crypto`, `node:readline`, `node:http`, `node:worker_threads`

bun.report is Bun's new crash reporter

How we built an anonymous Zig/C++ crash reporter that doesn't require debug symbols to be shipped with the application.

React 19 Upgrade Guide

The improvements added to React 19 require some breaking changes, but we've worked to make the upgrade as smooth as possible and we don't expect the changes to impact most apps. In this post, we will guide you through the steps for upgrading apps and libraries to React 19.

Node.js 22.0.0 (Current)

JSR Is Not Another Package Manager

JSR introduces a new way to share JavaScript and TypeScript code across platforms, focusing on simplifying distribution without replacing existing package managers.

Announcing the Hookdeck SDK on JSR

Hookdeck, an event gateway for distributed and async architecture, now has an SDK on JSR.