Still Writing Tests Manually? Meticulous AI Is Here — Notion, Dropbox, Wiz and LaunchDarkly now use a testing paradigm they can’t work without. Built by former Palantir engineers, Meticulous automatically creates an evolving suite of E2E UI tests, delivering exhaustive coverage with no developer effort.

Meticulous sponsor

💡 Vercel users should follow these steps, but even if you're not one, the weak link was an OAuth grant to a third-party tool, and that pattern is nearly universal.

IN BRIEF:

• Node.js is moving to support the Temporal API by default, most likely in Node v26 which is expected next week.

• Salesforce ecosystem devs are used to using specific frameworks within its walled garden; now you can build native React apps on Salesforce.

• Rust's official package/crate registry, crates.io, is migrating from Ember.js to Svelte 5.

RELEASES:

• Node.js 24.15.0 (LTS) – require(esm) and the module compile cache are marked as stable, and --max-heap-size has been added.

• Fable 5.0 – A mature F# transpiler that targets JavaScript (plus other languages). v5.0 adds .NET 10 and F# 10 support.

• uuid 14.0 – Create RFC9562-compliant UUIDs (v1 through v7).

📖  Articles and Videos

How I Resolved 15K Circular Dependencies — A senior Microsoft engineer’s retrospective of clearing ~15,000 project-level circular dependencies from a 7 million line(!) TypeScript monorepo, with reusable ideas for anyone wrangling a large TS workspace.

Stefan Haas

The Vertical Codebase — Structuring an app with folders like components/, hooks/, and utils/ feels tidy at first, but gets harder to live with over time. Dominik makes the case for a vertical, domain-first approach.

Dominik Dorfmeister

🔒 The OWASP NPM Security Best Practices Cheat Sheet — A useful, long-standing checklist that continues to be updated with recent updates tackling disabling lifecycle scripts, typosquatting, trusted publishing, and dependency confusion.

OWASP Cheat Sheet Series

🛠 Code & Tools

Bun v1.3.13: Smarter Testing, Streaming Installs, and Less Memory — The Bun runtime has had a great run of releases, including last week’s v1.3.12 with built-in browser automation. Now, bun test gets numerous enhancements with --isolate, --parallel, --shard and --changed options for test env isolation, parallelization, and to run only test files affected by recent changes. The runtime now uses 5% less memory, bun install gets faster, and more.

Jarred Sumner

• TypeGPU 0.11 – TypeScript WebGPU toolkit with advanced type inference and the ability to write shaders in TypeScript.

• 📺 Shaka Player 5.1 – JavaScript library for adaptive media playback supporting DASH and HLS. (Demos.)

• TiddlyWiki 5.4 – Self-contained JavaScript wiki for personal use. (Repo.)

• ✂️ Knip 6.6 – Popular tool for finding and removing unused files, dependencies and exports.

• wasm-xlsxwriter 0.13 – Generate Excel files in the browser or Node.

• React Three Fiber 9.6 – The React renderer for Three.js.

• np 11.2 – A better npm publish.

📢  Elsewhere in the ecosystem

• Git 2.54 has been released with a couple of headline features:

  • git history offers a new, easy way to edit commit messages or interactively split a commit into two.

  • You can now define hooks in config files (whether in a repo, at user level, or even system level) rather than just in .git/hooks. You can also run multiple hooks for the same event in this way.

• If you ever work with Ruby on Rails, you might find rails_vite interesting. It's a new tool that seamlessly brings the power of Vite into Rails' pipeline.

• 💥 Anyone who's analyzed GitHub projects for a while knows this already, but there's a huge 'fake star' economy where people pay to make their projects look more popular than they are.

• Isa Yeter explains how he migrated from DigitalOcean to Hetzner slashing his hosting bill by 84% in the process.

• Cloudflare has released a preview of its new cf CLI tool for working with its various services.