Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      CodeSOD: A Unique Way to Primary Key

      July 22, 2025

      BrowserStack launches Figma plugin for detecting accessibility issues in design phase

      July 22, 2025

      Parasoft brings agentic AI to service virtualization in latest release

      July 22, 2025

      Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

      July 21, 2025

      The best CRM software with email marketing in 2025: Expert tested and reviewed

      July 22, 2025

      This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

      July 22, 2025

      I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

      July 22, 2025

      8 ways I quickly leveled up my Linux skills – and you can too

      July 22, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      The Intersection of Agile and Accessibility – A Series on Designing for Everyone

      July 22, 2025
      Recent

      The Intersection of Agile and Accessibility – A Series on Designing for Everyone

      July 22, 2025

      Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

      July 22, 2025

      Execute Ping Commands and Get Back Structured Data in PHP

      July 22, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

      July 22, 2025
      Recent

      A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

      July 22, 2025

      “I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

      July 22, 2025

      Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

      July 22, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Development»The details of TC39’s last meeting

    The details of TC39’s last meeting

    July 21, 2025

    #​744 — July 11, 2025

    Read on the Web

    JavaScript Weekly

    Vercel Acquires NuxtLabs — Vercel has acquired the company that caretakes the Nuxt project and employs some of its core team – a move Vue creator Evan You is quite optimistic about. Vercel now manages, or at least supports, several key projects like Next.js, Turborepo, Svelte, and shadcn/ui. Nuxt itself remains open source and has a promising future. Vercel’s Guillermo Rauch shares a little more about the move here.

    NuxtLabs / Vercel

    💡 Daniel Roe, leader of the Nuxt team, answered lots of questions about the acquisition on Reddit.

    FlexGrid by Wijmo: The Industry-Leading JavaScript Datagrid — A fast and flexible DataGrid for building modern web apps. Key features and virtualized rendering are included in the core grid module. Pick & choose special features to keep your app small. Built for JavaScript, extended to Angular, React, and Vue.

    Wijmo From MESCIUS sponsor

    A Detailed Summary of the Latest TC39 Plenary — A thorough roundup of May’s major ECMAScript committee meeting with far more detail about each proposal’s development and the decisions made than we usually get to hear about. Topics include Array.fromAsync, explicit resource management, the Temporal API, and some brainstorming around AsyncContext.

    Igalia Compilers Team

    IN BRIEF:

    • TypeScript 5.9 Beta has been released with support for deferred module evaluation by using import defer.

    • The Nginx HTTP server has a module (njs) for extending its functionality using JavaScript, but it only supported ES5. Now, njs uses QuickJS for a more modern, powerful experience with full ES2023 support.

    • Got some time to kill? There’s one week left to submit an entry to the JS1024 annual JavaScript golfing competition. Create a cool JS or GLSL program in under 1024 bytes.

    • Oliver Stenbom reflects on the prevalence of Rust in modern JavaScript ecosystem tooling.

    RELEASES:

    • Node.js v24.4.0 (Current) – Note that new versions of all maintained Node.js releases are due next week due to some security vulnerabilities.

    • Oxlint 1.6 – Rust-powered linter for JS and TS.

    • VS Code v1.102, Ember 6.5, Angular 20.1

    📖  Articles and Videos

    What’s the Difference Between Ordinary Functions and Arrow Functions? — This sounds like basic stuff, but James always does a good job of digging in and explaining things in a way that gives you a more nuanced way to think about a concept, even if it’s just “Which function declaration syntax should I use?”

    James Sinclair

    💡 His guide to how to compose JS functions that take multiple parameters is also worth revisiting.

    Embrace Web RUM Provides User-Focused Observability — Get session timelines, Core Web Vitals and JS exceptions in context, and user journey analysis with issue correlation.

    Embrace sponsor

    JavaScript Scope Hoisting is Broken — The creator of Parcel argues that scope hoisting (when bundlers inline modules into a shared scope) conflicts with modern JS patterns like code splitting and dynamic imports, causing subtle bugs and offering little benefit, so he’s considering removing it in Parcel v3.

    Devon Govett

    Codepoint–Safe Truncation: Fixing Emoji Slicing — An app’s CSV importer kept breaking on emoji-filled rows, triggering errors. James demonstrates how swapping slice for a code-point–aware spread fixes it.

    James Mulholland

    📄 Parsing 1 Billion Rows in Bun in Under 10 Seconds Tae Kim

    📄 Loosely Synchronize Your JS Stores in Multiple Tauri Processes – Tauri is a bit like a Rust-flavored Electron for building cross-platform native apps. Costa Alexoglou

    📄 Managing the State of Your Promises – On the potential of Promise.all and Promise.allSettled. Lydia Cho

    📄 When Can I Use Temporal? – “If Brendan Eich can invent .. JavaScript in 10 days, why has it taken eight years to replace the Date API?” John Dalziel

    📄 Is It Still Worth Using jQuery in 2025? Suren Enfiajyan

    🛠 Code & Tools

    Driver.js: Tours, Highlights, Contextual Help, and More — A vanilla JS library for making on-page tours and contextual help systems. It’s been around for several years, but is still maintained, and there are lots of examples to check out – it’s really smooth.

    Kamran Ahmed

    jsonrepair: Repair Invalid JSON Documents — This has lots of possible use cases, including dealing with weird JSON coming back from LLMs or non-compliant JSON spat out by poorly built software. You can use it from Node, as a CLI tool, or try a basic version online.

    Jos de Jong

    🤡 In barely related news, someone has turned JSON into its own programming language. Oh, the horror!

    Server-Side Support for MCP in Next.js — Server-side MCP just got easier in Next.js. One route, no extra infra—Scorecard cut 1,000 lines to just 70.

    Clerk sponsor

    line-numbers: A Web Component to Add Line Numbers Next to Various HTML Elements — Useful for custom apps that show source code or other snippets that require line numbering. See examples here, which demonstrate the flexibility customization options for the line numbering.

    Zach Leatherman

    cRonstrue 3.0: Convert Cron Expressions into Natural Language — Not just English either – it supports about thirty locales. There’s also an online demo.

    Brady Holt

    • Next.js Boilerplate 5.0 – Boilerplate starter app for Next.js with auth, database support, i18n, forms, and more.

    • 🔎 React Scan 0.4 – Scan for performance issues and eliminate slow renders in your app.

    • 🎹 html-midi-player 1.6 – Play and display MIDI files on the web.

    • CKEditor5 46.0 – Popular commercial rich text editor framework.

    • 📊 Recharts 3.1 – D3-powered chart library for React.

    • Vuetify 3.9 – Vue component framework.

    📰 Classifieds

    Meticulous automatically creates and maintains an E2E UI test suite with zero developer effort. Relied on by Dropbox, Wiz, Lattice, Bilt Rewards, etc.

    📌 Try out PinMe: free CLI tool helps deploy your static site in seconds—and keeps it online without any ongoing cost or maintenance.

    👀  Elsewhere…

    Here’s a selection of things from the broader ecosystem this week:

    • As of Chrome 137, you can try out CSS inline conditionals using the new if() function.

    • Did you know you can generate efficient SVGs that feel like GIFs and even use them in your GitHub README.md files?

    • On Reddit, an ex-Meta engineer posted an interesting comment about how Meta / Facebook serves up React as part of the main Facebook site.

    • PlanetScale has shared a neat interactive article about caching that visually demonstrates the benefits of caching from several different angles, right down to the CPU level.

    • 𝕏 Claude Code is now a single-file executable thanks to Bun.

    • ANSI.tools is a handy online tool for analyzing ANSI escape codes/sequences and a lookup of common codes.

    Source: Read More 

    javascript
    Facebook Twitter Reddit Email Copy Link
    Previous ArticleNode.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent
    Next Article Microsoft confirms new Windows 11 migration tool, like Windows 7 Easy Transfer

    Related Posts

    Development

    GPT-5 is Coming: Revolutionizing Software Testing

    July 22, 2025
    Development

    Win the Accessibility Game: Combining AI with Human Judgment

    July 22, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-3458 – WordPress Ocean Extra Stored Cross-Site Scripting Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    FamousSparrow resurfaces to spy on targets in the US, Latin America

    Development

    This upcoming Xbox and PC dark fantasy RPG looks a bit too good to be true — Alkahest teases some incredible combat

    News & Updates

    One of Xbox Game Pass best-kept secrets is getting a cybernetic hound that is your best friend and your enemy’s worst nightmare

    News & Updates

    Highlights

    CVE-2025-37834 – Linux Kernel: Dirty Swapcache Page Reclamation Vulnerability

    May 8, 2025

    CVE ID : CVE-2025-37834

    Published : May 8, 2025, 7:15 a.m. | 58 minutes ago

    Description : In the Linux kernel, the following vulnerability has been resolved:

    mm/vmscan: don’t try to reclaim hwpoison folio

    Syzkaller reports a bug as follows:

    Injecting memory failure for pfn 0x18b00e at process virtual address 0x20ffd000
    Memory failure: 0x18b00e: dirty swapcache page still referenced by 2 users
    Memory failure: 0x18b00e: recovery action for dirty swapcache page: Failed
    page: refcount:2 mapcount:0 mapping:0000000000000000 index:0x20ffd pfn:0x18b00e
    memcg:ffff0000dd6d9000
    anon flags: 0x5ffffe00482011(locked|dirty|arch_1|swapbacked|hwpoison|node=0|zone=2|lastcpupid=0xfffff)
    raw: 005ffffe00482011 dead000000000100 dead000000000122 ffff0000e232a7c9
    raw: 0000000000020ffd 0000000000000000 00000002ffffffff ffff0000dd6d9000
    page dumped because: VM_BUG_ON_FOLIO(!folio_test_uptodate(folio))
    ————[ cut here ]————
    kernel BUG at mm/swap_state.c:184!
    Internal error: Oops – BUG: 00000000f2000800 [#1] SMP
    Modules linked in:
    CPU: 0 PID: 60 Comm: kswapd0 Not tainted 6.6.0-gcb097e7de84e #3
    Hardware name: linux,dummy-virt (DT)
    pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=–)
    pc : add_to_swap+0xbc/0x158
    lr : add_to_swap+0xbc/0x158
    sp : ffff800087f37340
    x29: ffff800087f37340 x28: fffffc00052c0380 x27: ffff800087f37780
    x26: ffff800087f37490 x25: ffff800087f37c78 x24: ffff800087f377a0
    x23: ffff800087f37c50 x22: 0000000000000000 x21: fffffc00052c03b4
    x20: 0000000000000000 x19: fffffc00052c0380 x18: 0000000000000000
    x17: 296f696c6f662865 x16: 7461646f7470755f x15: 747365745f6f696c
    x14: 6f6621284f494c4f x13: 0000000000000001 x12: ffff600036d8b97b
    x11: 1fffe00036d8b97a x10: ffff600036d8b97a x9 : dfff800000000000
    x8 : 00009fffc9274686 x7 : ffff0001b6c5cbd3 x6 : 0000000000000001
    x5 : ffff0000c25896c0 x4 : 0000000000000000 x3 : 0000000000000000
    x2 : 0000000000000000 x1 : ffff0000c25896c0 x0 : 0000000000000000
    Call trace:
    add_to_swap+0xbc/0x158
    shrink_folio_list+0x12ac/0x2648
    shrink_inactive_list+0x318/0x948
    shrink_lruvec+0x450/0x720
    shrink_node_memcgs+0x280/0x4a8
    shrink_node+0x128/0x978
    balance_pgdat+0x4f0/0xb20
    kswapd+0x228/0x438
    kthread+0x214/0x230
    ret_from_fork+0x10/0x20

    I can reproduce this issue with the following steps:

    1) When a dirty swapcache page is isolated by reclaim process and the
    page isn’t locked, inject memory failure for the page.
    me_swapcache_dirty() clears uptodate flag and tries to delete from lru,
    but fails. Reclaim process will put the hwpoisoned page back to lru.

    2) The process that maps the hwpoisoned page exits, the page is deleted
    the page will never be freed and will be in the lru forever.

    3) If we trigger a reclaim again and tries to reclaim the page,
    add_to_swap() will trigger VM_BUG_ON_FOLIO due to the uptodate flag is
    cleared.

    To fix it, skip the hwpoisoned page in shrink_folio_list(). Besides, the
    hwpoison folio may not be unmapped by hwpoison_user_mappings() yet, unmap
    it in shrink_folio_list(), otherwise the folio will fail to be unmaped by
    hwpoison_user_mappings() since the folio isn’t in lru list.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Microsoft: Run PS script now if you deleted “inetpub” on Windows 11, Windows 10

    June 6, 2025

    CVE-2025-24916 – Tenable Network Monitor Local Privilege Escalation

    May 23, 2025

    Real-World Wins: Case Studies of Businesses Thriving with AI📊

    May 5, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.