January 21, 2025

Subject: Pnpm 10; Rolldown v1.0.0-beta.1; Vitest 3.0; WinterCG becomes WinterTC; RegExp pattern modifiers; formatting dates & times; esbuild bundle analyzer

Secure your JavaScript dependencies.

socket.dev Sponsor

Open source code makes up 90% of most codebases. Socket detects what traditional vulnerability scanners can’t, including 70+ indicators of open source supply chain risk like malware, typosquatting, hijacked packages, obfuscated code, privileged APIs, and more. Install our free GitHub app today to instantly enable protection on all updates and new dependencies added in PRs.

New versions

pnpm 10: lifecycle scripts of installed dependencies are not executed (by default)

github.com @pnpm@fosstodon.org

This is the biggest change introduced by pnpm 10: “Lifecycle scripts of dependencies are not executed during installation by default! This is a breaking change aimed at increasing security. In order to allow lifecycle scripts of specific dependencies, they should be listed in the pnpm.onlyBuiltDependencies field of package.json.”

For more information on this topic, see “pnpm 10.0.0 blocks lifecycle scripts by default” by Sarah Gooding for Socket.

The first beta of Rolldown (Rust-based bundler to eventually power Vite) is out

github.com @vite@webtoo.ls

Along with this release, the documentation was updated. It answers questions such as:

Vitest 3.0 is out

vitest.dev @vitest@webtoo.ls

Other news

WinterCG (who work on server-side JS APIs) become WinterTC at Ecma

ecma-international.org @lcasdev@mastodon.social github.com/sideshowbarker @littledan@hachyderm.io

“The W3C Web Interoperable Runtimes Community Group (‘WinterCG’) and Ecma International (the organization which standardizes ECMAScript, also known as JavaScript) have collaborated to create a new Ecma Technical Committee, TC55 – Web-interoperable server runtimes, dubbed ‘WinterTC’, for the development of a common web-aligned API surface for server-side JavaScript runtimes like Node.js, Deno and Cloudflare Workers.”

“WinterCG’s most prominent work item is the ‘minimum common API’, which defines the subset of the web platform to be supported across all web-interoperable server environments. [...] the WinterCG participants decided to charter an Ecma Technical Committee [...], which will host the effort to standardize this API.”

ECMAScript feature: regular expression pattern modifiers

2ality.com @rauschma@fosstodon.org

Pattern modifiers enable us to use the flags i,m,s inside regular expressions: 
> /^x(?i:HELLO)x$/.test('xHELLOx')
true
> /^x(?i:HELLO)x$/.test('xhellox')
true
> /^x(?i:HELLO)x$/.test('XhelloX')
false

Formatting dates and times in JavaScript with Temporal and the Internationalization API

fullystacked.net @Olliew@indieweb.social

Hawkeye: esbuild bundle analyzer

angularexperts.io github.com/nivekcode

‍

This email was sent to {{ email | default }}. You can unsubscribe from this list here or update your preferences.

‍