digest: add issues for 2026-06-05

Author: github-actions[bot]

src/posts/2026-06-04_biomejs-biome.md

@@ -0,0 +1,33 @@
+---
+date: 2026-06-04
+repo: biomejs/biome
+size: L
+title: "Biome v2.5 lands with a few fixes"
+excerpt: "Release merge plus fixes for a CSS regression, a type-info recursion crash, and broader SCSS/WASM support."
+commits: 7
+authors: [ematipico, denbezrukov]
+commit_authors: {"7ff6b16": ematipico, "dd0a747": ematipico, "9e3cad4": ematipico, "97e2c32": ematipico, "2bf1d8c": ematipico, "232a5cb": denbezrukov, "53a115a": denbezrukov}
+---
+
+### **Release: Biome v2.5** (dd0a747)
+A version bump merged a large batch of changesets, indicating the v2.5 release cut. This is the main delivery for the day and likely includes the feature set and fixes staged in `next`.
+
+### **Fix type-aware rules from recursing forever** (7ff6b16)
+Biome now tracks recursion depth while flattening `typeof`-based expressions, preventing a stack overflow in type-aware rules like `noFloatingPromises`, `noMisusedPromises`, and `noUnnecessaryConditions`. The new regression test covers the self-referential pattern that used to crash analysis.
+
+### **Fix CSS global selector handling regression** (2bf1d8c)
+The CSS/HTML module graph now recognizes both forms of CSS pseudo-class function selectors when checking for `:global(...)`, using a shared union helper instead of a narrower node cast. That keeps global-scoped classes from being misclassified during dependency and usage tracking.
+
+### **Fix `noUnusedClasses` exemption for `:global(...)`** (97e2c32)
+The linter’s global-selector check was updated to use the shared pseudo-class helper, aligning it with the parser/module-graph fix. This removes a regression where globally scoped classes could be reported as unused.
+
+### **Sync CSS/SCSS formatter fixtures with Prettier** (232a5cb)
+Formatter snapshots were refreshed across a number of CSS and SCSS edge cases, including escaped attributes, custom properties, and SCSS function/map/math examples. These are test-only updates, but they reflect formatter behavior changes that matter for parity with Prettier.
+
+### **Enable SCSS in the unstable WASM build** (53a115a)
+The unstable WASM feature set now includes SCSS support, and `biome_service` exposes the corresponding `lang_scss` feature flag. This makes SCSS available in experimental browser/WASM builds.
+
+### Other misc changes
+- Merge main into next (9e3cad4)
+- Release workflow and changeset churn from the v2.5 merge
+- Minor test snapshot cleanup and internal regression scaffolding

src/posts/2026-06-04_denoland-deno.md

@@ -0,0 +1,16 @@
+---
+date: 2026-06-04
+repo: denoland/deno
+size: L
+title: "Deno hardens Jupyter, fixes npm/TS edge cases"
+excerpt: "LSP gains doc-lint diagnostics and test-step debug lenses, while Jupyter auth and npm/Node resolution get important fixes."
+commits: 7
+authors: [divybot, bartlomieju]
+commit_authors: {"4b2ac61": divybot, "b89147b": divybot}
+---
+
+### **LSP now surfaces `deno doc --lint` warnings** (4b2ac61)
+The language server now reports `deno doc --lint` findings as editor diagnostics for published package entrypoints, including missing JSDoc, explicit types, and return types. That lets package authors catch public-API documentation issues directly in the editor instead of discovering them only at publish time.
+
+### **Type-checking now treats eligible npm `.d.ts` files as ESM** (b89147b)
+Deno’s resolver now looks beyond the nearest `package.json` `

src/posts/2026-06-04_microsoft-typescript-go.md

@@ -0,0 +1,26 @@
+---
+date: 2026-06-04
+repo: microsoft/typescript-go
+size: L
+title: "Parser and API fixes land"
+excerpt: "Parser now blocks uneraseable `as`/`satisfies` forms, while native-preview and project handling fix crashes and parent lookup bugs."
+commits: 6
+authors: [andrewbranch, ahejlsberg, DanielRosenwasser]
+commit_authors: {"69d658d": ahejlsberg, "2aafbdd": andrewbranch, "70b87f0": andrewbranch}
+---
+
+### **Parser stops parsing uneraseable `as`/`satisfies` chains** (69d658d)
+The parser now detects when an `as` or `satisfies` assertion would be impossible to erase without changing the expression’s meaning, and stops consuming later higher-precedence operators in that case. This closes a real correctness gap around mixed binary expressions and assertions, with new regression coverage for the `disallowUnerasableAssertion` cases.
+
+### **native-preview fixes `getOrCreateNodeAtIndex` parent resolution** (2aafbdd)
+Remote nodes created by index now resolve their real parent instead of always pointing at the source file, including skipping synthetic `NodeList` containers to match normal traversal. That makes symbol/node resolution in the preview API more accurate, and the added tests verify class members report the expected parent chain.
+
+### **Module resolver avoids a nil dereference in node_modules lookup** (230d600)
+The resolver now checks that the package info exists before dereferencing version-path data during `node_modules` resolution. This prevents a crash in a module-loading path that could be hit while resolving packages from specific directories.
+
+### **Project command-line reset prevents nil-command-line crashes** (70b87f0)
+Projects now have an explicit `SetCommandLine` path that clears cached derived state and marks the project fully dirty when the command line changes. That fixes a crash where an inferred project could be rebuilt twice in one snapshot and end up passing a nil command line into program construction.
+
+### Other misc changes
+- Added JSDoc namespaced typedef quick info and find-all-refs tests (1 commit)
+- Devcontainer Node feature bump (1 commit)

src/posts/2026-06-04_nodejs-node.md

@@ -0,0 +1,26 @@
+---
+date: 2026-06-04
+repo: nodejs/node
+size: M
+title: "Watch mode fix, TS inspector URL cleanup"
+excerpt: "Shutdown-safe watch mode, inspector-friendly type stripping, and a stream flush fast path landed alongside docs and API cleanup."
+commits: 6
+authors: [trivikr, Anshikakalpana, joyeecheung, dsanders11, addaleax]
+commit_authors: {"4219808": joyeecheung, "cb8eebf": trivikr, "e8cc66e": Anshikakalpana, "09c603f": dsanders11, "5f727fd": trivikr, "2d0c926": addaleax}
+---
+
+### **Watch mode now cancels pending restarts on shutdown** (cb8eebf)
+Node’s watch mode no longer lets a queued file-change debounce timer restart the process after shutdown has begun. It also keeps the child exit listener in place through the whole lifecycle so restart and teardown paths don’t race to remove each other’s handlers.
+
+### **Type-stripped CommonJS now reports file: URLs to the inspector** (4219808)
+The CommonJS loader now passes a module’s file URL through type stripping, so `//# sourceURL` is consistent with ESM and doesn’t get misparsed when paths contain whitespace. This fixes inspector metadata for type-stripped TypeScript across CommonJS and ESM loading paths.
+
+### **Stream transform flushing gets a faster common path** (5f727fd)
+Stateless fused transform flushing now short-circuits common normalized outputs like `Uint8Array`, strings, and buffers instead of always going through generator-based normalization. That reduces overhead in hot stream pipelines while preserving flush ordering.
+
+### **Environment creation overloads were merged** (2d0c926)
+The C++ `CreateEnvironment()` overloads were consolidated into a single signature with an optional `thread_name`. This is API-compatible but ABI-breaking, so it was intentionally separated from the original change.
+
+### Other misc changes
+- WebCrypto doc example fixed AES-OCB IV length (e8cc66e)
+- `stream/promises.pipeline` docs updated to include WebStreams (09c603f)

src/posts/2026-06-04_oven-sh-bun.md

@@ -0,0 +1,25 @@
+---
+date: 2026-06-04
+repo: oven-sh/bun
+size: L
+title: "Proxy auth, crash fix, and tree-shaking win"
+excerpt: "Bun fixed proxy Basic auth encoding, aarch64 crash-handler traps, and a bundler DCE bug; poll teardown got safer too."
+commits: 6
+authors: [robobun, alii, dylan-conway]
+commit_authors: {"29f2c7e": dylan-conway, "977f054": robobun, "a3464c6": robobun, "59ec626": robobun}
+---
+
+### **Proxy Basic auth now uses standard base64** (a3464c6)
+Bun now encodes `Proxy-Authorization: Basic ...` credentials with standard base64 instead of base64url, which fixes proxies that reject credentials containing `+`, `/`, or padding. The update also tightens the proxy tests to clear ambient proxy env vars so the explicit `proxy` option is actually exercised.
+
+### **Crash-handler trap reset prevents aarch64 spin loops** (977f054)
+The crash handler now resets `SIGTRAP` alongside other signals before its final trap, so aarch64 crashes terminate instead of re-entering signal delivery forever when a JS `SIGTRAP` listener exists. A regression test now spawns a child process and asserts it dies rather than spinning.
+
+### **Bundler can tree-shake enum-keyed unused objects** (59ec626)
+The JS parser now unwraps inlined enum-member keys when deciding whether a computed object key is side-effect-free, letting the bundler DCE unused objects that were previously kept alive. This fixes a real dead-code-elimination hole and adds coverage for both the removal case and the side-effectful key case.
+
+### **Poll unregister now treats already-gone registrations as success** (29f2c7e)
+`FilePoll::unregister_with_fd_impl` now treats `ENOENT` and `EBADF` from kqueue/epoll delete calls as successful teardown when the kernel-side registration is already gone. That avoids turning routine close/unregister races into errors and keeps the internal registration state from getting stuck.
+
+### Other misc changes
+- CLAUDE.md guidance updates (2 commits)

src/posts/2026-06-04_pnpm-pnpm.md

@@ -0,0 +1,37 @@
+---
+date: 2026-06-04
+repo: pnpm/pnpm
+size: L
+title: "pnpm lands pnpr S3 storage and install fixes"
+excerpt: "Big pnpr storage/auth changes, a new catalog auto-save flow, and fixes for concurrent installs and rebuilds."
+commits: 12
+authors: [zkochan, rubnogueira, shiminshen]
+commit_authors: {"cbfeeef": zkochan, "4e740d5": rubnogueira, "a668224": zkochan, "8e5e764": zkochan, "e7e99f0": shiminshen, "43ad094": zkochan, "5192edf": zkochan}
+---
+
+### **pnpr can now store hosted packages in S3-compatible object storage** (8e5e764)
+pnpr's authoritative hosted packages can be backed by an S3-compatible object store instead of local disk, with support for AWS S3, R2, MinIO, B2, and similar endpoints. This makes the durable package store easier to scale and back up while keeping the proxy cache and install-accelerator data on local storage.
+
+### **pnpr separates proxy cache from published packages** (43ad094)
+The on-disk layout now splits disposable upstream cache data from the authoritative hosted package store, with the cache moving to a separate `.pnpr-cache` root by default. That removes the old lifecycle coupling, so clearing proxy data no longer risks deleting published packages.
+
+### **pnpr install accelerator now forwards caller credentials** (5192edf)
+The pnpr client and server now forward per-registry auth so the accelerator can resolve and fetch external private dependencies as the caller, not anonymously. This closes a major access gap for private registries and adds per-user grants for content owned by external registries.
+
+### **pnpm add/update can auto-write catalog entries** (a668224)
+Catalog mode's save side is now ported: `add` and `update` can write `catalog:` / `catalog:<name>` specifiers into `package.json`, persist catalog entries in `pnpm-workspace.yaml`, and record resolved snapshots in the lockfile. That makes `save-catalog` and `save-catalog-name` usable end-to-end instead of just enforcing catalog gates.
+
+### **Concurrent installs no longer corrupt partially imported packages** (cbfeeef)
+The fast import path now avoids destructively emptying a shared virtual-store directory when multiple installs target the same workspace at once. This fixes a race where one importer could wipe files another had already written, leaving behind a directory that looked complete but was missing root package files.
+
+### **Global virtual store rebuilds now run build scripts correctly** (4e740d5)
+Dependency rebuilds now resolve package locations through the global virtual store projection when `enableGlobalVirtualStore` is enabled, so lifecycle build scripts can re-link bins into the right place. The fix also serializes concurrent rebuilds of the same shared projection to avoid races.
+
+### **Catalog range specifiers no longer crash updates** (e7e99f0)
+`pnpm update --recursive --lockfile-only` no longer throws `Invalid Version` when a catalog entry is a semver range under `strict` or `prefer` catalog mode. Instead of passing ranges into exact-version comparison, the code now falls through to the normal mismatch handling.
+
+### Other misc changes
+- Release tooling now keys the released-changeset ledger by target branch, and adds a workflow for creating release PRs.
+- Registry-mock tests were updated for pnpr's split proxy cache path.
+- Strict catalog mode no longer catalogs `runtime:` specifiers.
+- Minor lockfile/version bumps and test/docs updates.

src/posts/2026-06-04_tc39-ecma262.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-04
+repo: tc39/ecma262
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+

src/posts/2026-06-04_tc39-proposals.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-04
+repo: tc39/proposals
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+

src/posts/2026-06-04_vitejs-vite.md

@@ -0,0 +1,23 @@
+---
+date: 2026-06-04
+repo: vitejs/vite
+size: M
+title: "Vite adds Cloudflare banner and support update"
+excerpt: "A new top banner and blog post announce Cloudflare backing Vite, alongside template and docs updates."
+commits: 5
+authors: [sapphi-red, TheAlexLichter, DucMinhNe]
+commit_authors: {"4551a4b": TheAlexLichter, "67f5d4b": sapphi-red, "00edb41": sapphi-red, "d58c470": DucMinhNe, "fef134a": sapphi-red}
+---
+
+### **Cloudflare support takes center stage** (4551a4b)
+Vite’s docs site now ships a new dismissible top banner pointing to a dedicated announcement post, replacing the previous Vite+ alpha promotion. The change also wires in a new banner component via theme aliasing, making it easier to surface future site-wide announcements.
+
+### **Cloudflare partnership announcement published** (67f5d4b)
+The docs blog adds a full post explaining that VoidZero is joining Cloudflare while Vite remains MIT-licensed, vendor-neutral, and stewarded by the same broader team. It also introduces the matching social image asset used for the announcement.
+
+### **create-vite templates switch Node resolution mode** (fef134a)
+All TypeScript app templates in `create-vite` now use `"moduleResolution": "nodenext"` in `tsconfig.node.json` instead of `bundler`. This should align the starter configs more closely with Node-style resolution expectations for tooling and config files.
+
+### **Other misc changes**
+- Bundled `@voidzero-dev/vite-task-client` into `packages/vite` package metadata and license docs (00edb41).
+- Updated the documented `baseline-widely-available` browser target to include `ios16.4` (d58c470).