🏖️ A brief scheduling note: We're taking a summer break next week, so we'll be back in your inbox on August 25. Catch you then!
__
Your editor, Peter Cooper

Migrating a Large Flow Monorepo to TypeScript — Over several years, Yelp moved 1.4 million lines off Flow, and this writeup is more useful as a guide to running any long migration than as a Flow story. It was a big win on its own terms, with type coverage up from 83% to 96%.

Shawn Walton (Yelp)

💡 If you missed it, Yelp also wrote about its webpack to Rspack migration.

Render Runs JavaScript, Front to Back — Link your repo and Render takes it from there. Wire up your Vite site to your Hono API to your BullMQ job to your distributed agent workflow, all on one platform. Loop in your agent with official Render /plugins for Codex and Claude Code. Start free and scale from there.

Render

Kitesurf: Cloudflare's Agent-First Browser in V8 Isolates — A browser engine that runs on Workers with one isolate per page. Aimed at agents rather than humans, it uses 3-7x less CPU and memory than Chromium, at the cost of being slower. You can try it out now in beta, and it'll be open sourced in due course.

Martinho, Constant, Figueira, and Duarte (Cloudflare)

IN BRIEF:

• pnpm 12, the Rust rewrite, is now a release candidate, and only three things differ from pnpm 11.

• Bun 1.4 continues to be teased on 𝕏 on an almost daily basis, and is expected any day now, though creator Jarred Sumner has been distracted by trying to solve the Riemann hypothesis.

• 🔒 A 12-year-old weak PRNG in crypto-js was used to drain crypto wallets, though only if you generated secrets with it on a pre-4.0.0 (2020!) release.

RELEASES:

• Deno 2.9.5 – Adds an experimental QuickJS backend for deno compile and deno desktop.

• Node.js 26.7.0 (Current) – Adds --test-coverage-include-all, FFI and SQLite crash fixes, and initial support for Perfetto tracing.

• SolidStart v2 – SolidJS's equivalent of Next.js or SvelteKit.

• Preact 11 Release Candidate, Astro 7.2, Motion 13.1

How Baseline Can Help You Ship Less JavaScript — A practical audit method for your dependencies. Groups them into clusters (Intl, HTTP, UI primitives, lodash), gives you questions to ask before deleting things, and works through a case where a swap can make your bundle bigger (Day.js → Temporal). A familiar theme developed into a rigorous, reusable audit.

Jad Joubran

Making More npm Packages Work with jsDelivr ESM Mode — jsDelivr is a popular CDN used to load npm packages into pages without a build step. This is a thorough, technical tour of what happens when converting packages to browser ESM (via its /+esm endpoint) and all the ways CommonJS finds to make that hard.

Martin Kolárik (jsDelivr)

Progressive Enhancement Inside of JavaScript — Working on a train, a patchy data connection got Remy to notice users can interact with a page before its JavaScript is ready, with a neat fix being to bind a handler early and replay the intent later.

Remy Sharp

📄 How the Astro Team Built a 'Software Factory' to Slash Its Issue Count – Agent-driven triage took Astro from over 200 open issues to 30. Matthew Phillips

📄 Debugging Stuck Node.js Processes – A trick for catching event loop blockers that never yield. Winona Schroeer-Smith

📺 Stop Reviewing Diffs. Start Reviewing Systems Kent C. Dodds

😅 On self-hosting Durable Objects with workerd, "You beat us to it!" said Durable Objects creator Kenton Varda on Hacker News, later adding "celld is definitely ahead of us here. No doubt about that."

hucre 1.0: A Zero-Dependency Spreadsheet Engine — An MIT-licensed, tree-shakeable engine for reading and writing common spreadsheet formats, including support for things like embedded images, hyperlinks, password protection, and pivot tables.

Wind

vlt 1.0: An npm Alternative With CSS-Like Selectors — A drop-in npm alternative with a key draw being vlt query, which lets you use 60+ CSS-like selectors over your dependency graph (of which half are security related). vlt also offers hosted private package registries.

Darcy Clarke

• devalue 5.9 – The Svelte project's more powerful JSON.stringify supporting more JS language features.

• Svelte Select 6.0 – A select/autocomplete/typeahead Svelte component. Now requires Svelte 5.

• fuzzysort 4.0 – Fast, small fuzzy search library with ranking and custom scoring.

• GTKX 1.0 – Build native GTK4 desktop apps with React and TypeScript.

• Belgie 0.40 – Embeds a permissioned Deno runtime in Python.

Which screen is slow, and on which devices? Expo Observe is production performance monitoring for your mobile app.

🤖 Block bots at login without slowing down real users. No CAPTCHAs, zero friction. Try Fingerprint for free.

⚡ Merget is Git for AI-written code. It reviews every coding session and catches what your agent missed. Free for teams now: merget.ai.

📢  Elsewhere in the ecosystem

• The js1024 code golfing contest is over and we have three winners! Skydreams, a Super Monkey Ball-like experience, came in first place. You can read the readable and minified source if you want to see the techniques used.

• Docker has entered the agent sandbox game with Docker Sandboxes, a free way to run coding agents in their own microVMs with a Docker daemon inside.

• MCP goes stateless with the 2026-07-28 spec, so no more sticky sessions or open streams. Cloudflare covers what changed and what it takes to migrate.

• scriptc is a new, experimental TypeScript-to-native compiler from Vercel Labs. With --dynamic, unsupported or dynamic portions are run in a bundled QuickJS engine.

• 📊 The results of the State of CSS 2026 survey have been released.

I'm off on vacation at the end of this week, so see you again on August 25! Or in Node Weekly and React Status if you subscribe to those… ;-)