Coming in July 2026, npm v12 disables automatic install scripts, git dependencies, and remote URL resolution by default. Every frontend team needs an allowlist before the upgrade lands.
Evan You and the VoidZero team join Cloudflare with a $1M Vite Ecosystem Fund and a promise: all projects stay MIT-licensed, community-driven, and vendor-agnostic.
Deno 2.8 jumps from 42% to 76% Node.js compatibility, makes the npm: prefix optional, and adds a Rust-powered dependency resolver that cuts cold installs by 3.6x.
The v7 alpha rewrites the CSS parser, brings CSS custom properties and media queries to React Native, and adds a built-in animation adapter. No Reanimated required.
React Native 0.86 brings comprehensive edge-to-edge display support on Android 15+ and improved DevTools performance tracing, continuing the project's commitment to zero-breaking-change upgrades.
Babel 8 modernizes the most-installed npm package: ESM-only distribution, no more ES5 transpilation by default, and first-class TypeScript types baked into every package.
AI agents can now set up Storybook autonomously in complex projects, generating configs, mocks, stories, and interaction tests without human intervention.
WebAssembly Garbage Collection (WasmGC) is now supported in all major browsers and Node.js. This removes the biggest barrier to running managed languages (Java, Kotlin, Dart, OCaml) directly in the browser at near-native speed.
Scroll-driven animations achieved Baseline status in 2026, meaning they're available in all major browsers. Parallax, scroll-triggered reveals, and progress-linked animations now work with pure CSS, no JavaScript, no IntersectionObserver, no animation libraries.
Node.js 26 ships the Temporal API enabled by default, no experimental flag. Also includes V8 14.6, `Map.getOrInsert`, pure JS `buffer`, and updated `Intl.NumberFormat` v3. Corepack has been removed.
HackerOne launched an AI platform that autonomously discovers and validates security vulnerabilities. It combines agentic AI with the company's existing bug bounty triage data to reduce false positives and speed up remediation.
CSS Gap Decorations let you draw rules and borders in the gaps between Grid, Flexbox, and multi-column items. `column-rule` and `row-rule` now work with inset, visibility, and color properties, replacing hacky background tricks.
CVE-2026-11645 is the fifth Chrome zero-day exploited in 2026, an out-of-bounds read/write in the V8 JavaScript/WebAssembly engine. CVSS 8.8. Patch is in Chrome 149. The pace of Chrome zero-days is accelerating.
Rubrik Agent Cloud adds governance, immutable repo snapshots, and an "Agent Rewind" feature for Claude Code and Claude Cowork. Targets organizations where AI agents can commit, push, and deploy without human approval.
AI-generated code gets higher marks than human code during review, but 82% of orgs hit production failures from it, 86% of senior devs spend more time fixing it, and a new term is born: agent debt.
The Go-native `tsgo` compiler is now in public beta. On the 1.5M-line VS Code codebase: 7.5s vs 77.8s for the JS compiler. Language service startup drops from 9.6s to 1.2s. Memory use cut roughly in half.
Apple's next-gen Foundation Models were built in collaboration with Google Gemini. Small Business Program developers get free cloud API access. Core AI framework lets you run full LLMs locally on Apple Silicon.
Apple's Xcode 27 integrates coding agents from Anthropic, Google, and OpenAI directly into the IDE, with self-validating agents that write tests, check previews, and run simulators autonomously. MCP and ACP support built in.
Microsoft moved Copilot from flat-rate to per-token billing on June 1, and heavy users are seeing costs jump from double digits to thousands per month. We break down the new pricing, who's affected, and the alternatives gaining traction.