digest: add issues for 2026-06-08

Author: github-actions[bot]

src/posts/2026-06-07_biomejs-biome.md

@@ -0,0 +1,19 @@
+---
+date: 2026-06-07
+repo: biomejs/biome
+size: M
+title: "SCSS media queries get interpolated logic support"
+excerpt: "Biome’s CSS parser/formatter now handles interpolated SCSS media conditions, with lint and test updates to match."
+commits: 1
+authors: [denbezrukov]
+commit_authors: {"80449d6": denbezrukov}
+---
+
+### **Parse interpolated SCSS media conditions** (80449d6)
+Biome expanded its CSS/SCSS media-query parsing to understand interpolated logical conditions inside SCSS `@media` rules. The change ripples through parser, syntax factories, formatter, and the `no_unknown_media_feature_name` lint so these constructs are recognized and handled consistently instead of being misparsed or flagged incorrectly.
+
+It also adds substantial parser and formatter coverage for the new SCSS media logic, including error cases for invalid `and`/`not` combinations and a large OK fixture demonstrating the supported interpolation behavior.
+
+### Other misc changes
+- Parser, factory, and formatter generated code updates
+- New/updated CSS and SCSS test snapshots

src/posts/2026-06-07_denoland-deno.md

@@ -0,0 +1,55 @@
+---
+date: 2026-06-07
+repo: denoland/deno
+size: L
+title: "Deno hardens workspace, npm, and node internals"
+excerpt: "Major workspace resolution fixes, npm prerelease handling, publish safety, and several Node/runtime bug fixes landed."
+commits: 25
+authors: [bartlomieju, divybot, scarf005, MaxwellCalkin, petamoriken, swandir, sijie-Z]
+commit_authors: {"8ef94af": scarf005, "2fd8967": divybot, "b843ad7": MaxwellCalkin, "6a9963a": bartlomieju, "5ac9eab": divybot, "4b4e0d9": divybot, "0bc40e7": bartlomieju, "ecc3053": bartlomieju, "02e9dfa": divybot, "9c2d326": bartlomieju, "0975695": bartlomieju, "a3f46ce": bartlomieju, "45b1773": divybot, "d4666f8": divybot, "365e0de": bartlomieju, "acc328f": bartlomieju, "aa18dde": bartlomieju}
+---
+
+### **Auto-discover external import-map-linked workspaces** (a3f46ce)
+Deno now discovers external `deno.json` configs referenced by path-style import map entries and links them automatically. This makes bare specifiers work correctly from external modules without requiring manual `links` entries, closing a long-standing workspace resolution gap.
+
+### **Add prerelease-aware workspace package resolution** (0975695)
+Workspace members with prerelease versions are now treated as local matches instead of being bypassed in favor of the registry. That fixes `deno run npm:<member>` and `workspace:` dependency resolution for prerelease packages, which previously could fetch the published version by mistake.
+
+### **Instrument node:http2 with OpenTelemetry** (aa18dde)
+HTTP/2 traffic now emits spans in the Node polyfill, including request metadata extraction, response status recording, and error tagging. This brings HTTP/2 tracing in line with existing `node:http` and fetch instrumentation, improving observability for h2-heavy apps.
+
+### **Prevent serde_v8 stack overflows on deeply nested input** (6a9963a)
+`serde_v8` now enforces a recursion depth limit while deserializing nested V8 values, turning a potential Rust stack overflow and process abort into a handled error. This closes a real crash vector at op boundaries where hostile or malformed input could previously take down the process.
+
+### **Make `deno publish --dry-run` catch banned triple-slash directives anywhere** (5ac9eab)
+Dry-run validation now scans beyond leading comments so forbidden triple-slash directives are detected even when they appear later in a file. That better matches registry behavior and prevents a false sense of safety before publish.
+
+### **Preserve workspace member resolution during global installs** (0bc40e7)
+Global installs now keep enough workspace context to resolve member packages correctly when a script is installed from a workspace with an explicit config. This fixes broken import-map resolution that could make installed binaries fail once relocated.
+
+### **Clarify and enforce unscoped permissions for `Deno.symlink()`** (ecc3053)
+The symlink permission model is now documented more clearly and the implementation reinforces that scoped grants are not accepted for this op. The change aligns the API with its semantics and removes confusion around why symlink targets require broader permissions.
+
+### **Fix uncaught timer exceptions in the REPL prompt** (4b4e0d9)
+Timer-thrown exceptions are now surfaced properly at the REPL prompt instead of getting swallowed. That makes debugging interactive code more predictable and matches user expectations for uncaught errors.
+
+### **Fix `deno outdated`/`update` to include catalog deps** (365e0de)
+Catalog-backed dependencies are now included in outdated/update checks, so Deno no longer skips packages just because they come from a catalog source. This makes dependency audits more complete and the output more trustworthy.
+
+### **Warn when registry errors cause packages to be skipped in outdated** (acc328f)
+`deno outdated` now reports packages it had to skip because fetching metadata failed, instead of silently omitting them. That improves diagnostics for private or unreachable registries and makes the command’s output easier to trust.
+
+### **Catch SQLite iterator callbacks and authorizers after detach/replacement** (02e9dfa, 45b1773, d4666f8)
+Several Node SQLite and V8 lifetime bugs were fixed: detached `next`/`return` callbacks now keep iterator state alive safely, authorizer replacement is guarded against reentrancy, and the V8 deserializer delegate is traced correctly across GC. These are crashy edge cases, so the fixes materially improve stability under GC and reentrant callback patterns.
+
+### **Handle `deno add`/`npm:` workspace alias edge cases** (2fd8967, 9c2d326)
+Deno’s npm/package.json handling now understands aliased `workspace:` dependencies and accepts `allow-import` for `deno add`. This improves compatibility with pnpm-style workspace layouts and reduces surprising parse/resolution failures.
+
+### **Fix formatting/config regressions** (8ef94af, b843ad7)
+Formatter configuration now supports JSON trailing commas and passes `newlineKind` through to JSON/Markdown formatters. These are small but user-visible formatting fixes that make `deno fmt` behave more consistently across file types.
+
+### **Other misc changes**
+- Added coverage for shebang doc extraction and TC39 decorator `context.access.has` behavior.
+- `Deno.stdin.readable` now cancels pending reads correctly.
+- `child_process.spawn` and shell-command transformation got EMFILE/compound-command handling fixes.
+- Updated extension crate docs and a few small internal/CLI test tweaks.

src/posts/2026-06-07_denoland-std.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-07
+repo: denoland/std
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+

src/posts/2026-06-07_jsr-io-jsr.md

@@ -0,0 +1,23 @@
+---
+date: 2026-06-07
+repo: jsr-io/jsr
+size: L
+title: "API split lands in the Worker front"
+excerpt: "JSR moved read-only stats/metrics into workers-rs, added Hyperdrive Postgres connectivity, and began proxying all other paths to compute."
+commits: 3
+authors: [crowlbot]
+commit_authors: {"33fdd94": crowlbot, "7ccc412": crowlbot, "92953f5": crowlbot}
+---
+
+### **Worker now serves `/api/stats` and `/api/metrics`** (7ccc412)
+The front Worker now owns two read-only metadata endpoints instead of sending them to Cloud Run. The commit also extracts the shared JSON wire types into `jsr_types` so both runtimes can serialize the same response shapes, which is key to keeping the API split behavior identical.
+
+### **Worker gains a live Postgres connectivity path via Hyperdrive** (92953f5)
+This proves the wasm database path end-to-end: the Worker can open a Postgres connection through Cloudflare Hyperdrive and successfully run `SELECT 1`. It’s a foundational step for moving more API logic into the edge runtime without relying on the native compute service.
+
+### **Unmatched API routes now proxy to the compute service** (33fdd94)
+The Worker’s fallback no longer returns `501`; it forwards any unhandled request to the Cloud Run compute service while preserving method, path, query, headers, and body. That closes the front-proxy seam for the split and lets migrated and unmigrated routes keep working during the transition.
+
+### Other misc changes
+- Added Worker-side Postgres/db plumbing and local dev docs.
+- Dependency/Cargo.lock updates for Hyperdrive and wasm support.

src/posts/2026-06-07_microsoft-typescript-go.md

@@ -0,0 +1,19 @@
+---
+date: 2026-06-07
+repo: microsoft/typescript-go
+size: M
+title: "TS gets clearer optional-property errors"
+excerpt: "Improved diagnostics for exact optional properties and computed-name inheritance errors, with updated baseline coverage."
+commits: 2
+authors: [a-tarasyuk, ahejlsberg]
+commit_authors: {"254e9a5": a-tarasyuk, "cbd610a": ahejlsberg}
+---
+
+### **Clearer exact-optional argument diagnostics** (254e9a5)
+When `exactOptionalPropertyTypes` is on, passing `{ y: undefined }` now produces a more specific TS2379 message that points users toward adding `undefined` to the target property type. This makes a common assignability error much easier to understand and fix.
+
+### **Use the late-bound symbol when reporting computed-name errors** (cbd610a)
+Error reporting now resolves the declaration symbol for member-specific checks instead of relying on the member's direct symbol. That fixes misreported diagnostics for inherited computed properties, including cases like `Symbol.toPrimitive`, so the checker points at the right property incompatibility.
+
+### Other misc changes
+- Updated compiler/submodule baselines and test cases for the two diagnostic fixes.

src/posts/2026-06-07_nodejs-node.md

@@ -0,0 +1,19 @@
+---
+date: 2026-06-07
+repo: nodejs/node
+size: M
+title: "Abortable stream reads and C++14 deprecations"
+excerpt: "A stream iterator abort fix lands alongside a Node core deprecation macro cleanup; docs also get a minor release-note link update."
+commits: 3
+authors: [trivikr, addaleax, parkhojeong]
+commit_authors: {"822ef3a": trivikr, "4826d74": addaleax, "45f6b83": parkhojeong}
+---
+
+### **Reject pending stream pulls when aborted** (822ef3a)
+`pull()` now races in-flight source reads against the provided `AbortSignal`, so a pending `next()` can reject promptly even if the source hasn't yielded yet. This fixes a real abort-cancellation gap in async stream iteration and adds coverage for the new behavior.
+
+### **Use standard `[[deprecated]]` for NODE_DEPRECATED** (4826d74)
+`NODE_DEPRECATED` is switched from compiler-specific attributes to the C++14-standard `[[deprecated(message)]]` form. That simplifies the macro and makes the deprecation annotation more portable across toolchains.
+
+### Other misc changes
+- Release docs: update npm supported-versions link (45f6b83)

src/posts/2026-06-07_oven-sh-bun.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-07
+repo: oven-sh/bun
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+

src/posts/2026-06-07_pnpm-pnpm.md

@@ -0,0 +1,31 @@
+---
+date: 2026-06-07
+repo: pnpm/pnpm
+size: L
+title: "Pnpm adds cache revalidation and perf wins"
+excerpt: "Conditional packument revalidation, faster verification/install paths, and a handful of config/self-update fixes landed today."
+commits: 7
+authors: [zkochan, marko1olo, juanpicado]
+commit_authors: {"3537020": marko1olo, "6f11872": juanpicado, "0dc770a": zkochan, "68ddaf9": zkochan, "6b5d91a": marko1olo, "e42e09d": zkochan}
+---
+
+### **pnpr now revalidates stale packuments with conditional GETs** (6f11872)
+When a cached upstream packument ages past its TTL, pnpr now sends `If-None-Match` / `If-Modified-Since` instead of blindly re-downloading it. That lets a `304 Not Modified` refresh the cache cheaply while preserving the upstream's validators in a sidecar metadata file.
+
+### **pacquet sped up virtual-store linking and benchmark plumbing** (0dc770a)
+The install/linking path now shares the warm/cold virtual-store slot linking pass through one parallel helper, which trims duplicated work in a hot path. The same change also broadens integrated-benchmark diagnostics so the project can measure partition sizes and link-slot timing more precisely.
+
+### **Lockfile verification now skips uninterested verifiers earlier** (68ddaf9)
+Verification fan-out now checks whether a resolver might actually care about a candidate before allocating async work for it, reducing pointless concurrency and cache churn. Pacquet also caches successful fresh verification results and skips some routine npm metadata checks, improving repeat install performance.
+
+### **Config get globalconfig points at the real global config path again** (6b5d91a)
+`pnpm config get globalconfig` now consistently resolves through the same helper used by the config reader, so the reported path matches the file pnpm actually reads. That fixes drift between the warning path and the command output, and adds coverage for writing and reading that file.
+
+### **Self-update respects pmOnFail ignore before persisting lockfile metadata** (3537020)
+Self-update now avoids writing `packageManagerDependencies` to the lockfile when package-manager policy is set to ignore, matching the intended opt-out behavior. It also preserves unrelated whitespace hunks and devEngines lockfile writes.
+
+### **Benchmark proxying and override plumbing were tightened** (e42e09d)
+The integrated benchmark harness now routes registry tarballs through the latency proxy instead of bypassing it, so the measured network path matches the intended setup. The proxy itself also gained a configurable bind address plus a helper for converting Mbps into byte-rate limits.
+
+### Other misc changes
+- Dependency bump: pacquet version updated in workspace config (1 commit)

src/posts/2026-06-07_tc39-ecma262.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-07
+repo: tc39/ecma262
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+

src/posts/2026-06-07_tc39-proposals.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-07
+repo: tc39/proposals
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+