JEM - Web in August - JavaScript Every Month Newsletter
Hello September!
Wake me up when September ends.
Releases
Browsers
Chrome 152
- CSSPseudoElement support for
::backdrop,::scroll-marker, and::view-transition autocorrectglobal attribute- relative alpha colors with
alpha()function - Notification attribution for PWAs on macOS
- For users of Safe Browsing Enhanced protection, Chrome displays a bypassable warning popup when visiting sites with signals indicating they are potentially malicious.
Firefox 154
- text box properties are baseline newly available
- sibling count and sibling index functions are baseline newly available
- new iterator helper methods -
includes(),joins(),chunks() No-Vary-Searchheader support
IDE
- Major AI companies have standardised AI agent extensions with Agent plugins. The package contains skills, MCPs and hooks.
- Minimax launches their coding agent build on Pi - Minimax Code
- Meta's coding agent - Muse Code -Artificial Analysis has added a Search Index that tracks which external search providers perform best.
- Deepseek has released a harness where everything is a plugin and can be replaced by the agent runtime. It comes with it's own mathematical proof.
- Openclaw 2 with team based building
- Claude subscriptions plan weekly limits will be cut 17% starting September 14
- If you are subscribed to Google AI Pro or Ultra, you get AI credits worth $50-$100 each month.
- Claude is watermarking all of it's outputs by configuring the dice.
Bun 1.4
The Rust rewrite lands.
- better Node.js compatibility
- reduces idle CPU usage by 5x
Bun.Image,Bun.WebView,Bun.markdown,Bun.cron(),Bun.Terminal,bun run --parallel,bun test --parallel,bun audit fix,bun dedupe, andbun prune
pnpm 12
pnpm's Rust rewrite is stable.
Rspack 2.2
- 5x faster production build
- CSS parsing is 3.7x faster
- CopyRspackPlugin 3–4× faster
- HMR skips unnecessary CSS
Next 16.3
- long dev sessions use 90% less RAM
- faster builds, type checking, server side rendering
- versioned docs for AI agents
- fewer prefetch requests
- custom error boundaries
Better Auth 1.7
- Device authorization flow to registred OAuth clients
- MCP authentication moves to it's own package
- OAuth provider now supports stronger tokens, explicit rules for protected APIs, more client authentication methods, and broader OpenID conformance
Formisch v1
- framework agnostic library built around schemas
Tanstack Table 9
- Adapters are available for React, Preact, Vue, Solid, Svelte, Angular, Lit, Alpine, Ember and Octane.
- lower memory usage at scale
- table state is managed through Tanstack store
- type safety improvements
- tree shaking and extensibility
Oxlint
React compiler support for oxlint
SSR - Foldkit
The Effect based frontend framework gets SSR.
GitHub Stacked PRs
GitHub has a new shiny feature to split features into smaller PRs that stack together. You can use an agent skill that comes with the gh-cli.
Note that if you installed it when stacked PRs were released, a newer, smaller version is now available and worth reinstalling.
Zod 4.5
compilefunction is now stable- lower memory usage
vgpu
A WebGPU based graphics library from Vercel.
celld
Cloudflare Durable Objects, open source version from Ryan Dahl - founder of Node.js and Deno.
Cloudflare OS
Agent workspaces for your company, from Cloudflare.
NestJS 12
- ESM first projects
- Rspack replaces webpack
- Standard schema support
- structured logging
Changesets v3
- ESM only, small size
- Less aggressive peer dependency bumping
- More robust and flexible version, pack, and publish flows
ui.camera
Generate software/web photo/animated video. Great looking UI on this one.
In the Spotlight 🔦
GitHub outage
GitHub had a major outage on August 17, that lasted over 7 hours. They have published a postmortem on the outage. Outside the neither here nor there messaging in the postmortem, there are some graphs that show the scale that AI agents have caused on GitHub and coding in general.
We failed to scale critical components before demand exceeded their capacity.
The outage prompted all of GitHub's stealth competitors to emerge and announce their products while it was still ongoing.
- Cursor Origin
- code.storage from Pierre Computer Company
- Cloudflare Artifacts
- Netlify Source
- Zed DeltaDB - More of keeping the conversations along with code.
The Cursor team wrote about how they arrived at a backend architectural solution for their product Origin: Git at scale. It's a well structured write up on the shortcomings of GitHub architecture to deal with agent traffic and how Cursor wants to get ahead by using S3 write ahead logs. Tobi Lutke was inspired by the article to code his own solution for a git monorepo - walgit
OpenAI hacking Huggingface
The incident with OpenAI hacking Huggingface became a public spectacle and caught the eye of people who are not into tech in general. Here's some must reads from the incident:
- The Hugging Face incident and the road ahead - OpenAI blog
- Anatomy of a Frontier Lab Agent Intrusion - Hugging face
- Anthropic's incident report on Claude models
- OpenAI researcher presentation at BlackHat USA available for streaming on YouTube
- AI assistant hacks gym website in first known Australian autonomous cyber attack - ABC News
- The incident has even got Bill Gates to change his mind on AI
Security
- Next.js August security release
- Wordpress pre-auth XSS CVE
- Mini Shai-Hulud npm supply chain attacks from August hit 440+ npm packages - ChainDrop supply chain compromise: Anatomy of a self-propagating worm - Microsoft
- LiteLLM hack and 153GB of data publicly available on the Internet.
- Vercel raises the alarm with Everything hackable will get hacked
Tutorials
How we migrated lovable.dev away from Next.js and turned it into another Lovable app
Lovable moved the app, developing it in parallel, from Next.js to Tanstack Start. The article shares tidbits about the workarounds they used and how they handled the challenging navigation between the frameworks during the migration.
Styling Linear for the future with StyleX
Linear migrated their codebase from Styled Components to StyleX. The blog explains why they chose this migration and why StyleX was the ideal choice. Moreover, it shows how developer tooling streamlined the migration.
Cursor also has a post on migrating their interface from Solid to React and SCSS, Tailwind to StyleX.
Creator of TypeScript: 10x Faster Typescript, Why AI Won't Replace SWEs | Anders Hejlsberg - YouTube
Anders Hejlsberg, creator of TypeScript, C#, and Turbo Pascal, explains why he chose JavaScript as the language to start TypeScript and why he later migrated it to Go. He describes how LLMs facilitated the large, mostly error‑free migration, while human insight remained valuable in many cases.
Async Solid - Fetch High, Block Low - Ryan Carniato
As Solid 2.0 release is close, Ryan Carniato talks about how async is implemented in SolidJS through a series of blog posts. You should give it a read on how async gets implemented today vs how it could be simplified. This is my favourite aspect of the lot.
There is no special primitive. No loading flag. No story()?.title. story() is a Story, not a Story | undefined. The types reflect what you see. If it is running, it is there.
In short
- ESLint 9.x has reached end of life support stage. There is a new ESLint RFC for a parsing toolkit
- Tip for shipping ESM packages - use mjs for your files
- Visualise your node_modules black holes with beautiful interactive graphs from Antony Fu.
- Stripe acquires OpenRouter
- Tanstack Charts Alpha
- DuckDB has been acquired by AWS
- Google has a cheer leading article on Go being perfect agent language
- Replit has a free mode powered with GPT Luna
- Tobi Lutke is thinking about banning Claude Code usage at Shopify until they implements AGENTS.md.
- The mailbox that receives your no-reply.net emails - [email protected]
- Reliable Query Prefetching with TanStack Router - TkDodo
- “Code was never the hard part” is an insult to all programmers
- EnvHarness: Awakening Static Worlds for Agent Learning
- Rolldown RFC on Reduce small common chunks
- Tanner Lindsley responds to the claims of a 19x faster Tanstack Router replacement.
In Other News
New M6 Mac Mini
Apple skipped the ceremony and announced the new devices last week through a blog post and a YouTube video. Apple highlights the new processor family and its 4x improvement in AI performance, but the devices also cost $100 more than the previous versions.
On a developer note, Apple has asked developers to remove Intel processor support for smaller size and efficiency.
There's a also a new Framework 12 in town.
Jeff Dean: The 1% Rule for Building in AI | YCombinator - YouTube
There's always time in my life for listening to a Jeff Dean interview, even if it's just to marvel at the technical genius that he is. He's asked a lot of questions that he had not prepared the answers for, so some of the agent use cases turn out to be the obvious, but it's a good take for the napkin math. Also this month, Jeff Dean and Sanjay Ghemawat left Google to start their own AI company named Discovery Loop
Mathematicians and AI
The first field AI took by storm was software development. It has likely changed every way software is written. The next field that every AI lab is focusing on is mathematics, because it is even more independently verifiable than software. How should a mathematician react to this sudden change in their field?
- Mathematicians are grappling with the possibility that AI might eclipse them
- Mathematics in the age of AI
- The End of Mathematics
Also an idea, Software engineers will become scientists
AI updates
- State of Open Models - Hugging Face - 1M datasets.
- Grok's incremental update - Grok 4.6
- Meta update - Muse Spark 1.2. Mark Zuckerberg has put out Meta's vision statement for open AI. Meta Glimmer open source model 30B.
- Qwen launched an update to their very popular open source model - Qwen 3.8-27B that you can run locally. Tips from Qwen team on running the model. It's based on Qwen 3.8 Max
- fal's posttrained Minimax H3 model generates video faster than you can watch - which has created so many real time use cases - Interdimensional cable if you are a Rick & Morty's fan.
- GLM 5.3 flash - New patero frontier
Looking Ahead
- Rust Conf - Sep 8-11
- Apple event - Surprise & Shine - Sep 9
- ZurichJS - Sep 11
- Agent Conf - Sep 17-18
- dotAI - Sep 17
- dotJS - Sep 18
- GOTO Copenhagen - Sep 28