🆒

Cloudflare@cloudflare.social · yesterday

Learn how to build customizable, sandboxed CI/CD pipelines natively on Cloudflare using Workflows, Artifacts, and the CI SDK. We walk through replacing complex YAML configurations with TypeScript workflow steps and self-healing AI agents. https://cfl.re/4heNriD

npm is now scanning packages for malware at publish time before they become available for consumption

npm publish-time malware scanning and dual-use metadata - GitHub Changelog

As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…

github.blog

“If you're feeling like your work is simultaneously more productive and less satisfying, you're not broken. The feedback loop is broken. And I think we need to start treating that as an engineering problem in its own right, not a personal failure.”

Manuel Matuzović @matuzo.at · last wk.

The Human-in-the-Loop is Tired by @summerscope.bsky.social pydantic.dev/articles/the...

⛰️ mountx :: mount JavaScript as a real filesystem! Write ~6 lines of JS, get a real directory any process can read & write: editors, CLIs, AI agents. Rootless on Linux (FUSE) and macOS (NFSv3 with no kernel extensions). ~Pure JS, zero deps. mountx.vercel.app

ECMAScript Excitement 🎉 This week, at its 115th meeting, TC39 advanced these proposals: 3️⃣ Await dictionary 2️⃣.7️⃣ Thenable curtailment 2️⃣ Error code property 2️⃣ Fused multiply-add 1️⃣ Intl.DateTimeFormat alignment with other standards 1️⃣ Linear matching 1️⃣ Map.take

Vue 3.6 is now entering RC phase! 🎉 Super excited for all these perf improvements and for Vapor to soon be available for everyone to use! github.com/vuejs/core/r...

Release v3.6.0-rc.1 · vuejs/core

Vue 3.6 is now entering the RC phase as we have completed the intended feature set for Vapor Mode. 3.6 also includes a major refactor of @vue/reactivity based on alien-signals, which significantly ...

github.com

FYI we have an @e18e.dev MCP server! you can use it remotely, or you can install it locally as a stdio server. this lets your agent check your codebase for redundant dependencies, polyfills, etc.

If you make websites for a living, stop what you're doing and read this research by @tammyeverts.com; it shows what many of us have been saying for a long time: even if there is such a thing as "fast enough", it's generally *much* faster than you are targeting: embrace.io/blog/research-co…

New research: The Core Web Vitals thresholds you trust might be wrong for your site

Core Web Vitals data from ten leading online retailers reveals that "good" for Google may not be good enough for your users or your business.

embrace.io

I couldn't resist extracting that Rust Mermaid rendering code out and compiling it to WebAssembly so you can try it out directly in a browser tools.simonwillison.net/grok-mermaid

🎉 magic-string is now fully migrated to pure ESM and TypeScript, and its long-awaited v1.0 release is finally here! github.com/Rich-Harris/...

feat!: migrate build to pure ESM and TypeScript by sxzz · Pull Request #310 · Rich-Harris/magic-string

closes #309, closes #301

github.com

new @npmx.dev timeline chart 👀 this shows the segmented view of how much the install size changed between versions, split by package (deps + self). big thanks to @graphieros.npmx.social pairing with me on this one! npmx.dev/package-time...

Safari shipped `display: grid-lanes` and Chromium's working on it. But what does it mean for accessibility when grid items reorder themselves? Can an adjusted `flow-tolerance` help? Manuel cautiously proposes a very interesting solution. https://matuzo.at/blog/2...

Preact supports async hydration. Resumed hydration lets Suspense boundaries become interactive independently while code/data arrives. Why that helps the main thread, what Hydration 2.0 fixes, the remaining useId problem, and streaming: www.jovidecroock.com/blog/resumed...

Async hydration in Preact

How Preact resumes hydration across Suspense boundaries, why useId made that hard, and how streaming changes the tradeoffs.

jovidecroock.com

Hi! I'm working on a new HTML feature: filterable select There are two proposed API shapes so far: 1. Nesting <input> in <select> 2. Sibling <input> for listbox <select> w/id ref Option 1 is more ergonomic, but would break selects in older browsers Thoughts? (Both currently in Canary w/flag)

🧵

Aurora Scharff@aurorascharff.no · 4w ago

I've been working on the React Suspense docs: there's now a full list of what activates a Suspense boundary, with a live example for each trigger. Thanks @danabra.mov and Sebbie Silbermann for reviews! react.dev/reference/re... Demos below ↓

Ever been annoyed by a "confirm your email" message with a flaky magic link or OTP with clunky copy+paste, if the email even arrives‽ Optimistically, 20-30% of those emails* are never seen. We can fix that! If you have *any* email collection on your site, I'd love to see you try it & give feedback.

Test the Email Verification Protocol with an origin trial  |  Blog  |  Chrome for Developers

Test the Email Verification Protocol with the origin trial available from Chrome 150.

developer.chrome.com

Since experimenting with module federation at @sanity.io , we've teamed up with the core maintainers, @gioboa.bsky.social and with the help of the @e18e.dev tooling managed to cut the Module Federation Vite plugin's dependency footprint from 72 → 18. 🎉

this is the culmination of a huge engineering lift to unblock symlink-powered package linkers in JavaScript. writeup below — approachable for people who do not think about package managers in their spare time 😛 nubjs.com/blog/unblock...

Node’s phantom dependency problem and the path to a 5x faster package manager

One copy of every package per machine, symlinked into every project — and the mechanisms that make that layout work across the ecosystem.

nubjs.com

It's not enough for Apple to take ~$20BN in profit from the web every year while kneecapping competitors and starving Safari of funding. No, they really seem to think we should be thanking them for their magnanimity: infrequently.org/2026/07/abje...

✨ New post “What's new in ECMAScript 2026” pawelgrzybek.com/whats-new-in... #javascript #nodejs #ecmascript

What's new in ECMAScript 2026 | pawelgrzybek.com

Every year after the final language specification approval, I publish about the latest additions to the language. Here is a full list.

pawelgrzybek.com

A fascinating, deep piece by @moultano.bsky.social on why modern screens can show only part of the colors our eyes can see. And where in the real world to find colors screens can’t reproduce, like the green of U.S. traffic lights. moultano.wordpress.com/2026/06/19/w...

Heads up Svelte / npmx / atproto friends in Berlin (or those coming to @localfirstconf.com) - there will be a crossover meetup hosted by @willow.sh @patak.cat @jensroemer.com @flo-bit.dev, me and others on 2026-07-15 Sign up here: guild.host/events/atpro...

atproto x npmx x svelte meetup | Guild

Jul 15th 6:30PM: Join us in Berlin after Local-First Conf at our crossover satellite event with the AT Protocol, npmx, and Svelte communities! A huge thank you to Bitcrowd for hosting us Schedule: T...

guild.host

TIL github.com/michaelficar...

GitHub - michaelficarra/proposal-linear-matching: exploring features for RegExp matching with performance guarantees

exploring features for RegExp matching with performance guarantees - michaelficarra/proposal-linear-matching

github.com

Jake Bailey@jakebailey.dev · last mo.

Pretty surprised to see movement in the "make regex backtracking not catastrophic" space: arxiv.org/pdf/2311.17620 Only learned about this by being cross referenced to github.com/le0pard/re2js on a Go CL fixing a regex bug

More than a year ago I predicted that AI would create a huge new wave of programmers. Has it? Yes. But an unwelcome phenomenon came along with it: junior programmers jobs collapsed. What's the fix? https://seldo.com/posts/ai-has-torched-the-market-for-junior-programmers/

The first part of Declarative Partial Updates (`<template for>` out-of-order HTML) is now available, unflagged, in Chrome 150!! developer.chrome.com/release-note... The second part (the new JS setting APIs, include the streaming ones) we're still working on the spec side, but maybe for Chrome 152?

Chrome 150  |  Release notes  |  Chrome for Developers

CSS text-fit property, background-clip border-area, Focusgroup, and more.

developer.chrome.com

👀 Look, ma! The Cross-Origin Storage extension running on Firefox! If you dare, install it via `about:debugging` from github.com/web-ai-commu.... Else, just wait for it to be approved on the Firefox Add-on Store. More background on #CrossOriginStorage: github.com/WICG/cross-o....

New in Chrome DevTools in Chrome 151 (which goes stable mid July): The specificity bubble can now show you a breakdown of how the specificity was calculated. Big thank you and congrats to @hjanuschka.bsky.social for contributing this to Chromium 👏

There's an ideal set of sizing constraints for custom <select>, but the CSS is a bit tricky. Here's how to make it work, and a tour of new CSS features along the way. jakearchibald.com/2026/goldilo...

The Goldilocks customizable select height

The 'ideal' sizing is more complicated than you think…

jakearchibald.com

I know many of my followers aren't big AI fans. Still, the new MDN MCP server is super handy for pulling up docs and browser support data. https://developer.mozill...

Introducing Sätteri — High-performance Markdown & MDX processing for the JavaScript ecosystem. satteri.bruits.org

Sätteri

Sätteri puts flexible JavaScript plugins on top of a fast Rust Markdown / MDX engine. Best of both worlds.

satteri.bruits.org