Vulnerabilities & updates
Page 6
Tue, December 2
Bun is joining Anthropic
Bun has been acquired by Anthropic. Anthropic is betting on Bun as the infrastructure powering Claude Code, Claude Agent SDK, and future AI coding products & tools.
Tue, November 25
Fri, November 21
Bun v1.3.3
Fixes 95 issues (addressing 348 👍). CompressionStream and DecompressionStream, Control .env and bunfig.toml loading in standalone executables, `retry` and `repeats` in `bun:test`, --no-env-file, SQLite 3.51.0, Upgraded to Zig 0.15.2, Bugfixes for bundler, bun install, Windows, Node.js compatibility, Web APIs, Bun.serve, networking, Bun.YAML, Bun.Transpiler, Bun.spawn & TypeScript definitions
Mon, November 17
Wed, November 12
Sat, November 8
Bun v1.3.2
Fixes 287 issues (addressing 324 👍). Hoisted installs restored as default for backward compatibility. CPU profiling with --cpu-prof, faster installs for packages with post-install scripts, bun:test onTestFinished hook, ServerWebSocket subscriptions getter, Alpine 3.22 in Docker images, improved Git dependency resolution, bun list alias, and numerous bug fixes across install, HTTP/HTTPS, N-API, bun test, bun build, and runtime.
Wed, October 29
Vercel now supports the Bun Runtime
Deploy and run your applications with Bun's fast JavaScript runtime on Vercel Functions, with full access to Bun APIs and improved performance
Wed, October 22
Bun v1.3.1
Fixes 103 issues (addressing 172 👍). 2× faster bun build on macOS for symlink-heavy projects, source maps preserve legal comments, and --format=cjs now inlines import.meta; bun test adds global vi, --pass-with-no-tests, and --only-failures; .npmrc :email auth support, faster installs when no peer deps, selective hoisting for isolated installs (publicHoistPattern/hoistPattern), and fs/promises FileHandle.readLines(); numerous bundler/transpiler fixes (external sourcemaps in Bun.build({ compile:true }), --bytecode with import.meta, Windows react-jsxdev); reliability fixes across install/pm/pac…
Next.js 16
Next.js 16 includes Cache Components, stable Turbopack, file system caching, React Compiler support, smarter routing, new caching APIs, and React 19.2 features.
Tue, October 21
My highlights from the new Deno Deploy
Highlights from the new version of Deno Deploy.
Fri, October 17
Deno's Other Open Source Projects
Here’s a roundup of some of our popular open source libraries and how we use them in Deno.
Thu, October 16
React Conf 2025 Recap
Last week we hosted React Conf 2025, in this post, we summarize the talks and announcements from the event...
Sun, October 12
Sat, October 11
Bun 1.3
Bun 1.3 introduces zero-config frontend development, unified SQL API, built-in Redis client, security enhancements, package catalogs, async stack traces, VS Code test integration, and Node.js compatibility improvements.
Fri, October 10
Next.js 16 (beta)
Next.js 16 beta includes stable Turbopack, file system caching, React Compiler support, smarter routing, new caching APIs, and React 19.2 features.
Tue, October 7
Introducing the React Foundation
Today, we're announcing our plans to create the React Foundation a new technical governance structure
React Compiler v1.0
We are releasing the compiler's first stable release today.
Wed, October 1
React 19.2
React 19.2 adds new features like Activity, React Performance Tracks, useEffectEvent, and more.
Tue, September 30
How Deno protects against npm exploits
Recent supply chain attacks on npm is a reminder that Node and npm grants unfettered access to your systems. Here's how Deno, with an opt-in security model, protects against these vulnerabilities.
Sun, September 28
Bun v1.2.23
Fixes 119 issues (addressing 412 👍). pnpm-lock.yaml migration for seamless switching from pnpm to bun install, Redis Pub/Sub support, concurrent test execution with configurable parallelism, platform-specific dependency filtering with --cpu and --os flags, system CA certificates support with --use-system-ca, Windows code signing for compiled executables, JSX configuration improvements in Bun.build, sql.array helper for parameterized arrays, randomized test ordering, stricter CI test defaults, process.report.getReport() on Windows, and numerous Node.js compatibility improvements including htt…
Fri, September 26
Wed, September 24
Thu, September 18
Help Us Raise $200k to Free JavaScript from Oracle
Our legal battle over Oracle's claim on the word "JavaScript" is entering the discovery phase. Here's how you can help.
Mon, September 15
Bun v1.2.22
Fixes 144 issues (addressing 257 👍). Async stack traces for better debugging, RFC 6455 compliant WebSocket client subprotocol negotiation, MySQL adapter improvements including affectedRows and lastInsertRowid support, JSX side effects preservation during bundling, event loop delay monitoring with perf_hooks, HTTP server idle connection management, --workspaces in bun run, function name removal during minification, and numerous Node.js compatibility fixes including child_process.spawnSync, socket.write with Uint8Array, crypto.verify RSA defaults, N-API improvements, HTMLRewriter error handlin…
Thu, September 11
Behind The Scenes of Bun Install
Learn how Bun is able to cut install times by up to 25×. Bun skips Node.js's overhead with direct system calls, cache-friendly data layouts, OS-level copy-on-write, and full-core parallelism.
Wed, September 10
Deno 2.5: Permissions in the config file
Simpler permission management with permission sets, new Deno.test APIs for setting up and tearing down test cases, specifying custom headers in WebSocket connections, runtime APIs in deno bundle, and more.
Thu, September 4
Tue, September 2
Fresh 2.0 Graduates to Beta, Adds Vite Support
Fresh 2.0 beta introduces optional Vite integration - with hot reloading, faster boot times, seamless React aliasing, and the full Vite plugin ecosystem
Fri, August 29
Thu, August 28
Tue, August 26
Bun v1.2.21
Fixes 69 issues (addressing 204 👍). Bun.SQL now supports MySQL and SQLite, alongside PostgreSQL. Native YAML support. 500x faster postMessage(string). Bun.build() compile API, with cross-platform targets. Reduced idle CPU usage. Bun.stripANSI for SIMD-accelerated ANSI escape removal. bunx --package flag support. customizable User-Agent headers. Windows executable metadata embedding. and extensive Node.js compatibility improvements
Thu, August 21
500x faster postMessage(string)
Zero-copy postMessage(string)
Tue, August 19
Next.js 15.5
Next.js 15.5 includes Turbopack builds in beta, stable Node.js middleware, TypeScript improvements, `next lint` deprecation, and deprecation warnings for Next.js 16.
Fri, August 15
Migrating to Laravel with Lenny the Larva. The Artisan of the Day Is Dave Kiss.
Dave Kiss shows that switching frameworks doesn't have to be scary, and walks through a Next.js to Laravel migration in the company of Lenny the larva.
Tue, August 12
Taming JavaScript Complexity: The Artisan of the Day Is Evan You
Meet Evan You, the creator of Vue.js and Vite, two essential pieces of the modern JavaScript ecosystem.
Sun, August 10
Bun v1.2.20
Fixes 141 issues (addressing 429 👍). Reduced idle CPU usage. Improved `bun:test` diffing. Automatic `ETag` and `If-None-Match` in static routes for `Bun.serve`. 40x faster `AbortSignal.timeout`. Windows long path support. `WebAssembly.compileStreaming` and `WebAssembly.instantiateStreaming`. Many, many reliability improvements.
Fri, August 1
Sat, July 19
Bun v1.2.19
Fixes 163 issues (addressing 1,043 👍). Introduces `bun install --linker=isolated` for pnpm-style isolated node_modules, `bun why` for dependency tree understanding, `bun pm pkg` commands for package.json management, enhanced `node:fs.glob()` with array patterns and exclude options, `node:module.SourceMap` class and `findSourceMap()`, smarter `@types/bun` with automatic Node.js compatibility detection, plus numerous Node.js compatibility improvements, runtime bugfixes, bundler enhancements, and bun install optimizations.