Dev Digest – Fresh Updates for Developers
A short daily digest with the latest fresh and important updates from the world of programming and technology.
Latest Updates
Svelte 5.52.0 adds TrustedHTML support for {@html}, enabling safer Trusted Types integration
February 21, 2026Svelte 5.52.0 (Feb 18, 2026) adds TrustedHTML support to {@html} expressions so apps can interoperate with browser Trusted Types without string coercion—important for XSS-hardening in SSR and client-rendered apps.
React Native 0.84 Released — Hermes V1 Becomes the Default, Prebuilt iOS Binaries and Legacy‑Arch Removal
February 18, 2026React Native 0.84 makes Hermes V1 the default JavaScript engine, ships precompiled iOS binaries by default, removes remaining Legacy Architecture components, and raises the Node requirement — immediate actions for full‑stack teams.
jQuery 4.0.0 Released — ES modules, Trusted Types, and legacy APIs removed
February 15, 2026jQuery 4.0.0 (released Jan 17, 2026) modernizes the library: ES modules, Trusted Types/CSP support, removal of legacy APIs and IE<11 code — what full‑stack teams must audit and change now.
W3C Elevates Web Neural Network (WebNN) API to Candidate Recommendation
February 12, 2026W3C published an updated Candidate Recommendation for the Web Neural Network API, standardizing low‑level, hardware‑accelerated neural‑network inference in browsers and changing how full‑stack teams build client ML.
Test262 Adds 'using' Tests — Explicit Resource Management Nears ECMAScript Inclusion
February 9, 2026TC39's Explicit Resource Management ('using' / 'await using') reached a critical milestone when Test262 tests were merged on Jan 22, 2026 — a major signal that deterministic resource cleanup is moving into the JavaScript standard and implementers are racing to adopt it.
W3C Publishes WebGPU Candidate Recommendation Draft — GPU APIs reach new maturity
February 6, 2026The W3C published a Candidate Recommendation Draft for WebGPU (29 Jan 2026), marking a major milestone for shipping native GPU compute and rendering APIs on the Web and changing how full‑stack teams build high‑performance web apps.
W3C publishes WCAG 3.0 Editor’s Draft (05 Jan 2026): accessibility rules shift to outcomes and app‑level testing
February 3, 2026W3C published the WCAG 3.0 Editor’s Draft on 05 Jan 2026 — it expands scope to apps, components, and new requirement/assertion‑based conformance. Full‑stack teams must update testing, component libraries, SSR output and CI gating to meet the new model.
Chrome 143 changes FedCM: structured ID assertions, stricter client metadata, and breaking API updates
January 31, 2026Chrome 143 (published Jan 12, 2026) changes the FedCM identity flow: ID assertion tokens can be structured JSON, client_metadata validation is enforced, and several API fields move/rename — migration required before Chrome 145.
GitHub Actions 1‑vCPU Linux Runner Now Generally Available
January 28, 2026GitHub has made a new low-cost, containerized 1‑vCPU Linux runner (ubuntu-slim) generally available in GitHub Actions — what full‑stack teams should know and do first.
Vercel Details Turbopack’s Incremental Computation and On‑Disk Caching
January 25, 2026Vercel's Next.js engineering team published a deep dive into Turbopack's fine‑grained incremental computation model and the new on‑disk cache for next dev — implications and practical steps for full‑stack teams.
Next.js 16 makes Turbopack stable and the default for dev and build
February 20, 2026Next.js 16 moves Turbopack to stable/default, raises the Node.js minimum, and ships production-facing caching primitives — what full‑stack teams must change now.
Bun 1.3.9 Released: parallel script runner, ESM bytecode support, and JSC performance wins
February 17, 2026Bun 1.3.9 ships commands for parallel/sequential scripts, ESM bytecode compilation, profiler parity flags, and a sizable JavaScriptCore performance refresh — practical runtime and CI improvements for full‑stack teams.
TypeScript 6.0 Beta Released — last JavaScript-based compiler and key migration pivots
February 14, 2026TypeScript 6.0 Beta arrives as the final JavaScript-based compiler release, introducing migration flags, module-resolution changes, and practical compatibility updates teams must test now.
Babel 8 moves to release candidate; final Babel 7 minor ships (Jan 31, 2026)
February 11, 2026Babel publishes 7.29.0 (the last Babel 7 minor) and releases 8.0.0-rc.1 with ESM-only packaging, a migration guide and standalone improvements — major implications for build pipelines and plugin authors.
Deno Deploy Reaches GA: Zero‑config CI/CD, Per‑PR Databases, Observability and Deno Sandbox
February 8, 2026Deno Deploy is generally available with zero‑config continuous delivery, built‑in Postgres & Deno KV, automatic observability, a deno deploy CLI for CI, and a new Deno Sandbox for secure microVM compute.
Origin API Lands in Edge 145 — Native Origin Object Arrives in Browsers
February 5, 2026Edge 145 ships the Origin API (a native Origin object) to stable browsers — what it is, why it matters for same-origin and same-site logic, and immediate actions for full‑stack teams.
Node.js January 13, 2026 security releases fix multiple high‑severity runtime and permission flaws
February 2, 2026Node.js published coordinated security updates (Jan 13, 2026) across 20.x, 22.x, 24.x and 25.x fixing three high‑severity CVEs (buffer allocation, symlink permission bypass, HTTP/2 crash) plus several medium/low issues — full‑stack teams must upgrade and validate isolation and TLS paths now.
Undici CVE-2026-22036: unbounded decompression chain allows resource exhaustion — patches released
January 30, 2026A Jan 14, 2026 security advisory for undici (the Node.js HTTP client) describes an unbounded decompression-chain vulnerability that can lead to high CPU and memory usage. Full‑stack teams must find and upgrade affected undici versions and add lightweight runtime protections.
Node.js 25.5 Adds --build-sea for One‑Step Single Executable Application Builds
January 27, 2026Node.js 25.5 (Jan 26, 2026) introduces --build-sea to produce single executable Node apps in one step — practical implications for CI, deployment, native add‑ons, and security.
Next.js 15 Released — Turbopack Stable, Async Request APIs, and New Caching Defaults
January 24, 2026Vercel ships Next.js 15 with Turbopack stability, async request/caching changes, and Server Action security updates — what full‑stack teams must plan for now.
Vite 8.0.0‑beta.14 adds server‑side .wasm?init (WASM SSR) and updates Rolldown to 1.0.0‑rc.4
February 19, 2026Vite's Feb 12, 2026 beta introduces SSR support for pre-initialized WebAssembly modules and upgrades its bundler integration to Rolldown 1.0.0‑rc.4 — a practical change that reduces client hydration work and improves tooling stability for Wasm-heavy server renders.
Cloudflare Workers gets built-in Observability: visualizations, exports and shareable traces
February 16, 2026Cloudflare has upgraded the Workers observability experience with charts, JSON/CSV exports, shareable event links, and richer event details — changes that let full‑stack teams diagnose and collaborate on edge issues without immediately adding an external APM.
Rolldown 1.0 Release Candidate Lands — a Rust-powered bundler for Vite and the web
February 13, 2026VoidZero publishes Rolldown 1.0 Release Candidate (Jan 21, 2026): a Rust-based bundler compatible with Rollup plugins that promises large production-build speedups and a unified Vite toolchain—what full‑stack teams must test now.
WASI 0.3 previews land in Wasmtime 37+: native async arrives for WebAssembly components
February 10, 2026WASI 0.3 previews (native async, future/stream types) are now available in Wasmtime 37+, a practical inflection point for server-side WebAssembly and multi‑language component composition.
W3C Publishes WebTransport Working Draft — native HTTP/3 streams & datagrams for the web
February 7, 2026W3C’s WebTransport Working Draft (4 Feb 2026) formalizes the WebIDL and HTTP/3 protocol mapping for WebTransport, putting a production-ready low‑latency alternative to WebSockets within reach for full‑stack teams.
W3C Publishes WebAuthn Level 3 Candidate Recommendation
February 4, 2026W3C published a Candidate Recommendation snapshot for Web Authentication Level 3 on 13 Jan 2026 — new APIs and attestation changes that affect passkeys, cross‑origin embedding, and server verification.
Chromium adds No‑Vary‑Search to the HTTP disk cache, enabling query‑param cache deduplication
February 1, 2026Chromium (Chrome 141+) now lets servers declare which URL query parameters can be ignored when matching entries in the HTTP disk cache. Full‑stack teams can use the No‑Vary‑Search response header to reduce duplicate downloads, improve prerender/prefetch reuse, and lower backend/CDN load — but must audit parameter semantics and client rendering timing before deploying.
React Router / Remix Patch CSRF Vulnerability in Server Actions (CVE-2026-22030)
January 29, 2026React Router and @remix-run/server-runtime patched a medium-severity CSRF issue affecting server-side action handlers and unstable React Server Actions — what full‑stack teams must check and patch now.
Chrome 124 Ships WebSocketStream and ReadableStream Async-Iteration
January 26, 2026Chrome 124 (stable) adds WebSocketStream and ReadableStream async-iteration — practical, high‑impact changes that simplify streaming code and introduce backpressure-aware WebSocket clients for full‑stack teams.
Electron 40.0.0 Released with Chromium 144, V8 14.4 and Node 24.11.1
January 23, 2026Electron 40.0.0 is out — upgrades Chromium, V8 and Node; introduces dynamic ESM in non‑context‑isolated preloads and deprecates direct renderer clipboard access. What full‑stack teams must know.