Summary & Key Takeaways ​

• React 19.3 has been released, stabilizing View Transitions and Fragment Refs.
• Safari 27 shipped, completing the module loader rewrite and enabling top-level await in all major browsers.
• Three iterator helper proposals (join, includes, chunking) are up for Stage 4 at the upcoming TC39 meeting.
• A new library, modern-web-types, offers TypeScript support for newer web APIs not yet in lib.dom.
• Attackers are exploiting a Vite dev server vulnerability to access .env files.
• The OpenJS Foundation's CVE team is taking a break due to a surge in AI-generated security reports.
• A resource mapping functional programming jargon with JavaScript examples is highlighted.

Our Commentary ​

Wow, this issue is packed! Safari 27 finally shipping with the module loader rewrite and top-level await everywhere is a huge win for developer sanity. We've been waiting for that cross-browser consistency. And React 19.3 making View Transitions stable? That's going to unlock some seriously smooth UI experiences. The TC39 Stage 4 proposals are always exciting, pushing JavaScript forward. But I can't shake the news about the OpenJS CVE team burnout from AI-generated reports. That's a genuinely unsettling development; it feels like a new kind of attack vector, or at least a new kind of burden, on open-source maintainers. It makes me wonder about the future of security reporting.