#​624 — May 14, 2026

Read on the Web

Together with  AppSignal logo
Node.js Weekly

📗 NodeBook: An Advanced Guide to Node.js Internals — Volume I of this in-depth guide is now complete with eight chapters of advanced material covering topics like event loop internals, what V8 does, buffer allocation, streams, module resolution, async/await, and the process lifecycle.

Ishtmeet Singh

💡 Ishtmeet is now working on Volume II focusing on network I/O and APIs.

Plug Claude or Cursor into Your Node App's Production Errors — AppSignal's MCP server feeds your AI editor the error, stack trace, and deploy context. AI drafts the fix. You review and ship. Free 30-day trial.

AppSignal sponsor

What's New in Node.js 26 — We featured Node 26’s release last week, but this is a practical tour of the goodies you could easily overlook in a release that “doesn’t look like it’s adding a ton”. v26 goes LTS this October, so everything here is something you could be using in production by the end of the year.

Luciano Mammino

IN BRIEF:

  • Node v22.22.3 (LTS) lands a lot of dependency updates, npm v10.9.8, and backports numerous V8 fixes.

  • Jest 30.4.0 is a noteworthy release for the popular testing framework as it improves ESM, Temporal and React 19 support (require(esm) is supported on Node 24.9+ behind a flag).

  • Socket has released certified patches for vm2, a JavaScript sandboxing library for Node that has fallen prey to a sandbox escaping vulnerability.

  • Vercel Sandbox now supports Node.js 26.x.

Fixing JavaScript Observability, One Library at a Time — The team at Sentry have been working on an approach to replace the monkey-patching that powers JavaScript APM tools with a runtime-oriented diagnostics channel-based approach. The hard part? Getting popular packages to join in, but it’s happening.

Abdelrahman Awad (Sentry)

Your Recursion is Lying to You — ES2015 (a.k.a. ES6) specified tail call optimization, though V8 never shipped it. “Tail-recursive shape does not automatically make JavaScript stack-safe.” Koos walks through the gap between recursive form and runtime behavior, showing off a ‘trampoline’ pattern for keeping the recursive style without the stack overflow.

Gabor Koos

📄 Using HTTP/3 Over QUIC in Node.jsnode:quic is experimental, but if you want to build an HTTP/3 client or server in Node, this is a useful introduction. James M Snell

🛠 Code & Tools

Bun v1.3.14 Adds Image Processing, HTTP/3, HTTP/2 Fetch and More — Another mammoth Bun release. Bun.Image is a new built-in image processing API which can replace Sharp in many cases. Bun’s package manager has added a global virtual store (akin to pnpm’s), Bun.serve has experimental HTTP/3 over QUIC support, and fetch gets HTTP/2 and HTTP/3 support. Plus the usual raft of Node.js compatibility improvements.

Jarred Sumner

How to Send and Receive SMS Messages with Node.js and Google Cloud Run — Deploy a containerized Node.js app to Google Cloud Run to send SMS and process inbound webhooks via Vonage Messages API.

Vonage sponsor

Syncpack 15.0: Consistent Dependency Versions in JS Monorepos — A CLI tool (used by Electron, Cloudflare, Vercel, and others) that finds and fixes version mismatches across your entire monorepo, and enforces version policies to avoid drift. v15.0 adds support for pnpm and Bun catalogs and introduces a default 1 day minimum release age cooldown.

Jamie Mason

Counterfact: An OpenAPI-Driven API Simulator — Point it at an OpenAPI spec and get a live, stateful Node server with typed handlers, hot reload, and a REPL to control behavior at runtime. You can try it out in seconds with npx. GitHub repo.

Patrick McElhaney

pnpm 11.1 Adds More New Commandspnpm bugs opens a package’s bug tracker in the browser, pnpm audit signatures verifies ECDSA registry signatures against keys, and there’s a new gh: prefix for installing packages from the GitHub Packages registry.

Zoltan Kochan

wf: A CLI for Looking Up Web Platform Features — A CLI tool for looking up web platform feature support, bugs, and docs, from Microsoft's Patrick Brosset. You can install and run it as wf or use npx for ad hoc use, e.g.: npx web-features-cli "fetch api" -a

Patrick Brosset (Microsoft)

📰 Classifieds

Clerk API Keys are now GA. Let your users create credentials that delegate access to your app's API — verify server-side, revoke instantly. 1K creations and 100K verifications free per month.


⚙️ Middleware, but for AI agents. Compose Claude Code, Codex & Gemini as one TypeScript harness — 100+ agent recipes: agentfield.ai/github

📢  Elsewhere in the ecosystem

  • zero-native is Vercel's entry into the ecosystem of frameworks for building native JS desktop apps. It sits atop a Zig core and lets you pick between the system WebView or Chromium. It works well, but it's still early days.

  • Wakaru is a Rust-powered tool for pulling apart minified JavaScript bundles – give it minified bundled code and get readable modules back.

  • A developer of an HTTPS debugging tool reflects on switching from Electron to the Rust-based Tauri.