---
title: "Bun now passes 80.5% of Node's test suite"
publication: "Node Weekly"
issue: 639
published_at: "2026-09-03"
canonical_url: "https://nodeweekly.com/issues/639"
---

Plus node:ffi's progress, srvx 1.0, porting a Node service to Go with AI, and diffing your tarballs before publishing a package.        

#​639 — September 3, 2026 

[Read on the Web](https://nodeweekly.com/issues/639)  

Together with [![Tiger Data logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_1280,h_282/e_make_transparent/co_white,e_outline:30/px1u7kjyvz7xnbm6ytir.png)](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=node-weekly-newsletter)  

![Node.js Weekly](https://res.cloudinary.com/cpress/image/upload/v1653576619/lgfqinzbdqttwmhvljxb.png) 

[![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/qgfr3ewk2uld85sd6ry6.jpg)](https://trilon.io/blog/nestjs-12-is-now-available)  

[NestJS 12 Released with ESM-First Packages, Rspack and Vitest](https://trilon.io/blog/nestjs-12-is-now-available) — The progressive framework gets its biggest release in years, going ESM-first (CJS is still an option), replacing webpack with Rspack, adding [Standard Schema](https://standardschema.dev/) support for easy interop with Zod, Valibot and friends, plus structured logging, [a brand new homepage](https://nestjs.com/), and more. 

Kamil Mysliwiec   [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/e81c4a7d.png)](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=node-weekly-newsletter) 

[One Slow Query Starves Your Whole Connection Pool](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=node-weekly-newsletter) — A heavy analytics query holds a connection while everything else waits. TimescaleDB extends Postgres so those queries return fast, freeing the pool. Hypertables, compression, continuous aggregates. One database, not two. [Get $1000 credit to start](https://www.tigerdata.com/go/trial?utm_source=content-syndication&utm_medium=referral&utm_campaign=node-weekly-newsletter). 

Tiger Data (creators of TimescaleDB) sponsor   

📊 [Bun 1.4 Now Passes 80% of Node's Test Suite](https://bun.com/node-test-suite) — [Bun 1.4](https://bun.com/blog/bun-v1.4)'s headline feature is a [big jump in Node.js compatibility](https://bun.com/blog/bun-v1.4#node-js-compatibility) as part of its goal of being a _"drop-in replacement"_. This page lets you see the project's progress and where Bun is strong and weak. 

Bun Project   

**IN BRIEF:** 

- Matteo Collina has landed [`node:ffi` enabled by default](https://github.com/nodejs/node/pull/65475), so calling into a native C library will no longer need `--experimental-ffi`, an addon, or `node-gyp`. It remains experimental, warns on first load, and hasn't shipped in a release yet.
- Matteo has also added support for _Single Executable Applications_ to [mount their bundled assets as a read-only virtual file system](https://github.com/nodejs/node/pull/65675) by setting `"useVfs": true` in the config.
- 🔒 Express has patched [six vulnerabilities across `hbs`, `multer` and `morgan`](https://expressjs.com/en/blog/2026-08-31-security-releases/).
- Node's issue tracker reaches issue `2**16` with [a proposal to remove dual ESM/CJS code samples in the API docs](https://github.com/nodejs/node/issues/65536).   

[Rewriting a Node.js Service in Go with AI Agents](https://www.checklyhq.com/blog/agentic-rewrite-nodejs-to-go/) — A very 2026 tale of an overnight porting run, with a focus on doing agentic engineering well. Good takeaways on building a test harness _first_ and the rollout experience. 

Edvinas Janusevicius (Checkly)   

[Your Trace Shows the Slow Span. Not the Exception](https://blog.sentry.io/otel-spans-errors-sentry-trace/?utm_source=nodeweekly&utm_medium=paid-community&utm_campaign=tracing-fy27q3-evergreen&utm_content=newsletter-sponsored-link-blog-otel-learnmore) — OTLP carries traces and logs, not errors. Sentry's OtlpIntegration connects both in one trace waterfall. [Learn more about Sentry’s OTLP](https://blog.sentry.io/otel-spans-errors-sentry-trace/?utm_source=nodeweekly&utm_medium=paid-community&utm_campaign=tracing-fy27q3-evergreen&utm_content=newsletter-sponsored-link-blog-otel-learnmore). 

Sentry sponsor   

📄 [Detecting SQLite Full Table Scans in Node.js](https://codesilva.com/programacao/2026/08/13/detecting-sqlite-full-table-scans-in-nodejs) – Did you know SQLite counts the rows scanned by statements and you can read it after the query runs? CodeSilva 

📄 [Workers vs Processes in Node](https://www.thenodebook.com/worker-threads/workers-vs-processes) Ishtmeet Singh   

🛠 Code & Tools 

[![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/deovjytt53exk0rla8fs.jpg)](https://drydock.org/)  

[Drydock: Diff Your `npm` Tarballs Before You Publish](https://drydock.org/) — From a Preact core team member comes a tool to diff built npm tarballs against the last published version, flagging install scripts, network access and new binaries. It can then gate your _Actions_ publish job or watch npm's new staged publishing flow. 

Jovi De Croock  

💡 You can get a quick taste without installing anything: [this web-based diff viewer](https://drydock.org/diff) can compare two versions of an npm package file by file.  

[srvx 1.0: One `fetch` Handler for Node, Deno and Bun](https://srvx.h3.dev/) — You can export a handler that takes a web-standard `Request` and returns a `Response`, then run it unchanged on Node, Deno or Bun. Includes a CLI with watcher and static serving, and `srvx fetch` can hit your handler without starting a server. 

Pooya Parsa   

[NVM for Windows 2.0: Node Version Manager for Windows](https://docs.nvm-windows.com/features/newv2/) — A modern Node workflow for Windows users with version pinning, native integrations, auto-install of missing versions, and more. v2 is a rewrite that introduces a lighter shim-based mechanism and _no longer needs admin privileges_. [GitHub repo](https://github.com/nvm-windows/nvm). 

Author Software Inc   

[Got 16.0: Built-In HTTP/2 and QUERY Method Support](https://github.com/sindresorhus/got/releases/tag/v16.0.0) — The popular Node HTTP client now has a built-in HTTP/2 client, its own DNS cache, fewer dependencies, and support for the newly standardized [`QUERY` HTTP method](https://www.rfc-editor.org/info/rfc10008/). 

Sindre Sorhus   

[SimpleWebAuthn 14.0: Now with Post-Quantum Passkeys](https://github.com/MasterKale/SimpleWebAuthn/releases/tag/v14.0.0) — The passkeys library now verifies post-quantum ML-DSA passkeys and, on Node 24.7 and up, prefers ML-DSA-44 at registration by default. 

Matthew Miller   

- [Restify 12.0](https://github.com/restify/node-restify) – The REST API framework returns after a two and a half year gap with Node 26 support and `url.parse()` replaced with WHATWG URL. Existing users have [a few breaking changes](https://github.com/restify/node-restify/releases/tag/v12.0.0) to note.
- [Zod 4.5](https://zod.dev/blog/zod-4-5) – A big performance release for the popular TypeScript-first schema validation library.
- [np 12.1](https://github.com/sindresorhus/np) – Sindre Sorhus's improved `npm publish` workflow gets some speedups.
- [express-rate-limit 8.7](https://github.com/express-rate-limit/express-rate-limit) – Rate-limiting middleware for Express.      

📰 Classifieds   

⚡ [Zuplo](https://zuplo.link/vuib4cV) puts every API, AI, and MCP request behind one gateway. Route traffic, guard your MCP servers, and cap your AI costs. [Try it free](https://zuplo.link/vuib4cV). 

--- 

📉 Headout cut chargebacks 90% with Fingerprint. [Stop payment fraud](https://fingerprint.com/use-cases/payment-fraud/?utm_source=NodeWeekly) with 100+ signals such as Browser Bot and VPN detection. 

--- 

🎟️ Join us at [Supabase](https://supabase.link/ai2Y3Ck) Select on Oct 2. Learn from the industry’s best builders and meet people building dev tools. [Apply to attend with 25% off: SUPAWEEKLY](https://supabase.link/ai2Y3Ck).     

📢 Elsewhere in the ecosystem 

[![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/fcozfyfgnkfzsddwssvn.jpg)](https://four.htmx.org/announcements/2026-08-28-htmx-4.0.0-is-released)  

- [htmx 4.0 has landed](https://four.htmx.org/announcements/2026-08-28-htmx-4.0.0-is-released), the first major release in two years, with [lots of changes](https://four.htmx.org/docs/whats-new-in-htmx-4). It remains a neat way to add interactivity to server-rendered pages without reaching for a frontend framework.
- 🤔 Upon finding eight versions of `glob` across five major version lines in his employer's monorepo, James Healy is [imploring library maintainers](https://yob.id.au/2026/09/01/major-version-bumps.html) to bump their major versions as rarely as they can.
- A developer shares the techniques behind squeezing an implementation of Minesweeper [into just 247 bytes of JavaScript](https://yui.dev/blog/minesweeper-in-247-bytes).
- 🤚 The [2026 Node.js user survey](https://linuxfoundation.surveymonkey.com/r/nodejs-users-2026) is still open. Your responses guide the core team and its priorities.    

**Got a link for us?** Reply and tell us. We can't include everything but we'll look at anything you send. _Thanks!_ 

--- 

**Sponsorship:** Email `[kristina@cooperpress.com](mailto:kristina@cooperpress.com)` for details. 

--- 

Published by Cooper Press Ltd.
Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom 

[Cancel your subscription](https://nodeweekly.com/leave/*|UID|*) or [change your address](https://nodeweekly.com/edit_subscription/*|UID|*).
