digest: add issues for 2026-06-14

Author: github-actions[bot]

src/posts/2026-06-13_biomejs-biome.md

@@ -0,0 +1,17 @@
+---
+date: 2026-06-13
+repo: biomejs/biome
+size: M
+title: "Biome fixes migrate comma bug"
+excerpt: "A malformed trailing comma could break strict JSON migrations when the renamed rule was last in its group; this patch fixes it and adds coverage."
+commits: 1
+authors: [tom-groves]
+commit_authors: {"5f837df": tom-groves}
+---
+
+### **Fix malformed migrate output for renamed rules** (5f837df)
+`biome migrate` now preserves separator state correctly when a renamed rule is the last item in a group, preventing an invalid trailing comma from being emitted. That matters because the bad output could abort migrations of strict-JSON `biome.json` files with a parse error.
+
+### Other misc changes
+- Added a regression test and snapshot for `renamedRuleLastInGroup`.
+- Changelog entry for the patch release.

src/posts/2026-06-13_denoland-deno.md

@@ -0,0 +1,51 @@
+---
+date: 2026-06-13
+repo: denoland/deno
+size: L
+title: "Deno gets parameterized tests and WebCrypto in Rust"
+excerpt: "Major test, crypto, networking, and resolver changes landed, plus several fixes for fetch, serve, fs events, and LSP behavior."
+commits: 20
+authors: [bartlomieju, divybot, nathanwhitbot, crowlbot, petamoriken]
+commit_authors: {"8297980": bartlomieju, "d7a4b01": bartlomieju, "f82cc27": bartlomieju, "c5fee2e": divybot, "e8c6f4a": bartlomieju, "69de4f4": crowlbot, "fb90ee0": bartlomieju, "197dfca": bartlomieju, "b7446ed": bartlomieju, "99542ca": bartlomieju, "7b3cd9d": bartlomieju}
+---
+
+### **Add `Deno.test.each` for parameterized tests** (d7a4b01)
+Deno now supports a Jest/Vitest-style `Deno.test.each`, registering one real test per case so each input gets its own reporting, filtering, and editor run integration. The implementation also handles name templating, `.only.each`, `.ignore.each`, and array/object/primitive case argument handling.
+
+### **Port WebCrypto from JS to Rust** (c5fee2e)
+WebCrypto moved out of the massive JS shim and into native Rust-backed cppgc classes, leaving JS as a thin bootstrap layer for prototypes, singleton setup, and a small spec-driven `deriveBits` wrapper. This is a major internal refactor with a big performance and maintainability payoff for crypto-heavy workloads.
+
+### **Stabilize bare Node built-in resolution** (e8c6f4a)
+Bare specifiers like `import "fs"` and `import "path"` now resolve without `--unstable-bare-node-builtins`, and npm packages can no longer shadow Node built-ins. That removes a long-standing instability gate and brings Deno’s Node compatibility in line with Node’s own resolution priority.
+
+### **Support `navigator.userAgentData`** (69de4f4)
+Deno now exposes the User-Agent Client Hints API in both window and worker scopes, including the `NavigatorUAData` interface and high-entropy value lookup. This fills a compatibility gap for code that inspects browser-like UA metadata.
+
+### **Require network अनुमति for Unix socket operations** (7b3cd9d)
+Unix domain socket connect/listen operations now require `--allow-net` in addition to filesystem access, closing a local IPC escape hatch that could reach services like Docker or dbus with only read/write permissions on the socket path. The permission model and CLI docs were updated to support scoped grants like `--allow-net=unix:/var/run/docker.sock`.
+
+### **Support `catalog:` in `deno.json` imports** (8297980)
+`catalog:` references now work in `deno.json` `imports` and `scopes`, not just `package.json`. That unblocks catalog-based dependency resolution for both `deno run` and `deno install`, including materializing packages and CLI bins correctly.
+
+### **Keep compressed response headers after transparent decompression** (197dfca)
+Fetch now preserves `content-encoding`, `content-length`, and `transfer-encoding` on decompressed responses, matching the fetch spec and browser/undici behavior. The change also adjusts cache and server serialization so only the wire headers are stripped when re-emitting decoded bodies.
+
+### **Fix `Deno.watchFs` event loss under load** (99542ca)
+Filesystem watcher events are no longer silently dropped when the backend queue overflows; instead, the consumer is told to rescan. This makes watch mode far more reliable during bursts like mass file writes or archive extraction.
+
+### **Make `deno serve --parallel --watch` stop old workers** (fb90ee0)
+Watcher restarts now cancel the previous worker generation instead of leaving old threads and the detached main worker alive. That prevents stale code from continuing to serve requests after edits and avoids eventual isolate-mismatch crashes.
+
+### **Fix async op promise-id wraparound** (f82cc27)
+The core async promise-id counter no longer breaks after integer wraparound, which previously could send lookups to the wrong ring buffer and crash the process with missing-promise errors. This is a correctness fix for long-running or very high-op-count workloads.
+
+### **Fix LSP requests for files opened from `node_modules`** (b7446ed)
+Files opened via managed `node_modules` paths now get associated with a TypeScript project correctly, so hover, diagnostics, code actions, and refactors work instead of failing or returning nothing. That unblocks common editor workflows when jumping into dependency sources.
+
+### Other misc changes
+- SQL formatter switched to `lax-sql` for unstable SQL formatting.
+- `links` field in `deno.json` stabilized via schema cleanup.
+- WebCrypto and formatter-related internals updated to match the Rust port.
+- `deno serve` deprecation warning added for legacy request abort behavior.
+- Unix socket and watcher-related docs/tests/expectations updated.
+- WPT runner and deno_dom dependency updates.

src/posts/2026-06-13_denoland-std.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-13
+repo: denoland/std
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+

src/posts/2026-06-13_jsr-io-jsr.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-13
+repo: jsr-io/jsr
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+

src/posts/2026-06-13_leanprover-lean4.md

@@ -0,0 +1,19 @@
+---
+date: 2026-06-13
+repo: leanprover/lean4
+size: M
+title: "BitVec flattening lands, docstring roles fixed"
+excerpt: "Lean4 adds BitVec.flattenList with lemmas and improves builtin assert docstring highlighting and parsing."
+commits: 2
+authors: [david-christiansen, kim-em]
+commit_authors: {"4e28544": david-christiansen, "67dffca": kim-em}
+---
+
+### **Add BitVec.flattenList with fast runtime implementation** (67dffca)
+Lean4 now has `BitVec.flattenList`, which concatenates a list of fixed-width bitvectors into a single wider bitvector. The new lemmas pin down how individual bits and extracted ranges map back to list elements, and the implementation is swapped to a divide-and-conquer fast path at runtime for much better scaling on long lists.
+
+### **Fix builtin assert docstring highlighting and roles** (4e28544)
+The builtin `assert'` docstring role now accepts two or three code fragments instead of a single combined snippet, matching the intended “lhs = rhs [: type]” shape more robustly. It also fixes hover/highlight metadata for downstream rich-doc consumers, including proper styling for option values and previously private structure exposure.
+
+### Other misc changes
+- None.

src/posts/2026-06-13_microsoft-typescript-go.md

@@ -0,0 +1,22 @@
+---
+date: 2026-06-13
+repo: microsoft/typescript-go
+size: M
+title: "Declaration emit and diagnostics tightened"
+excerpt: "Fixes declaration emit diagnostics, UTF-16 diagnostic positions, and a checker bug around instantiated symbols."
+commits: 4
+authors: [jakebailey, weswigham]
+commit_authors: {"551b02d": jakebailey, "c78d39e": weswigham}
+---
+
+### **Declaration emit now handles newer JS cases correctly** (c78d39e)
+The declaration transformer now sets up diagnostic context for additional expression shapes, including `object.defineProperty` calls and expando-style assignments. This improves error reporting and keeps newer JS declaration emit paths from missing symbol-accessibility diagnostics.
+
+### **Checker avoids unstable symbol identity for instantiated members** (551b02d)
+The checker simplifies how it compares symbols from instantiated types and moves `this`-only instantiation handling into the symbol instantiation path itself. This should make “same reference” checks more deterministic and fix cases where `this`-substituted symbols were compared inconsistently.
+
+### **Diagnostics API now returns UTF-16 offsets** (0751b19)
+Diagnostic responses are converted from file offsets to UTF-16 positions before being returned, matching editor-facing position semantics. This prevents misreported locations for Unicode text and aligns the API with consumer expectations.
+
+### Other misc changes
+- Reclassified `nodeModulesAllowJsImportAssignment` JS emit diffs as accepted baselines (1 commit)

src/posts/2026-06-13_nodejs-node.md

@@ -0,0 +1,31 @@
+---
+date: 2026-06-13
+repo: nodejs/node
+size: L
+title: "Node adds fs buffer reads, keepalive tuning"
+excerpt: "New fs readFile buffer support lands alongside TCP keepalive controls, debugger probe limits, and native API deprecations."
+commits: 12
+authors: [addaleax, Renegade334, guybedford, clavin, joyeecheung, npm-cli-bot, ShenHongFei, mcollina, watilde]
+commit_authors: {"2fb168f": addaleax, "1efdce3": guybedford, "fc28d94": addaleax, "8c4ec8a": joyeecheung, "de67c5c": mcollina}
+---
+
+### **fs: support caller-supplied readFile() buffers** (de67c5c)
+`fs.readFile()` and `fsPromises.readFile()` can now read directly into a caller-provided buffer or a buffer factory, returning a view over the bytes read. This enables fewer allocations and more control over memory use when reading files.
+
+### **net: expose TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive** (1efdce3)
+`socket.setKeepAlive()` now accepts `interval` and `count` in addition to the existing keepalive delay, letting users tune probe cadence and drop thresholds from Node. That makes the API much more useful for long-lived connections and maps cleanly to `TCP_KEEPINTVL` and `TCP_KEEPCNT`.
+
+### **debugger: add --max-hit option to probe mode** (8c4ec8a)
+Probe sessions can now stop as soon as a per-probe hit limit is reached, rather than waiting for timeout or process exit. This is a meaningful ergonomics upgrade for inspector-driven tooling and future attach-to-running-process workflows.
+
+### **src: officially deprecate `node::ObjectWrap`** (fc28d94)
+Node now formally deprecates the long-unmaintained `node::ObjectWrap` interface and steers addon authors toward public interfaces and newer alternatives. This is an API-shaping change for native addon guidance, with docs updated to reflect the preferred patterns.
+
+### **src: do not track weak `BaseObject`s as children of `Realm`s** (2fb168f)
+Heap tracking was adjusted so weak `BaseObject` instances no longer show up as if they were strongly retained by `Realm`/`Environment` nodes. That fixes misleading heap dumps and makes memory-retainer analysis more accurate for leak hunting.
+
+### Other misc changes
+- Primordials/frozen-intrinsics coverage tweaks, including adding `Iterator` to primordials.
+- Official ABI registry update for Electron 44.
+- Dependency bumps and build metadata updates, including npm 11.17.0 and ngtcp2 configuration.
+- Test runner cleanup removing an unused shuffle helper and adding deterministic generator coverage.

src/posts/2026-06-13_oven-sh-bun.md

@@ -0,0 +1,23 @@
+---
+date: 2026-06-13
+repo: oven-sh/bun
+size: M
+title: "Discord.js guide gets a real slash-command flow"
+excerpt: "Bun’s Discord.js docs now walk through a working /ping bot, plus deployment notes and fixed guide links."
+commits: 3
+authors: [robobun]
+commit_authors: {"14bcc6c": robobun, "719be62": robobun, "6f67e09": robobun}
+---
+
+### **Discord.js guide rewritten around a working `/ping` bot** (719be62)
+The guide now takes readers from setup to a bot that actually responds to a slash command, instead of stopping at login. It adds a separate command-registration script, clearer env handling, and a more production-relevant flow that matches how Discord.js bots are typically deployed.
+
+### **Added deployment guidance for running the bot in production** (6f67e09)
+A new closing section explains that Bun can run `bot.ts` directly without a bundling step, so the source can be shipped as-is. It also points readers toward process managers like systemd and PM2 to keep the bot alive after crashes or reboots.
+
+### **Fixed outdated Discord.js guide links** (14bcc6c)
+The guide’s links were updated to the new `discordjs.guide` locations after the docs site moved. This keeps the setup instructions from sending readers to dead pages.
+
+### Other misc changes
+- Tightened a typo in the Discord.js guide copy.
+- Minor wording and phrasing edits in the docs.

src/posts/2026-06-13_pnpm-pnpm.md

@@ -0,0 +1,33 @@
+---
+date: 2026-06-13
+repo: pnpm/pnpm
+size: L
+title: "Batch publish lands, lockfile fixes"
+excerpt: "pnpm adds recursive batch publishing, plus lockfile and install correctness fixes across pacquet and pnpm."
+commits: 11
+authors: [zkochan, KSXGitHub, truffle-dev]
+commit_authors: {"8dfe438": KSXGitHub, "f1521cf": zkochan, "29981f6": zkochan, "a98767a": zkochan, "4819fb4": zkochan, "f20ad8f": truffle-dev}
+---
+
+### **Batch publish packages in one request** (f1521cf)
+pnpm now supports an opt-in `--batch` mode for recursive publish, bundling selected packages into a single registry request instead of one per package. That reduces publish overhead and adds all-or-nothing semantics, with a clear error when the target registry doesn’t support the new endpoint.
+
+### **Match install freshness to catalog changes** (29981f6)
+Pacquet now treats `catalogs:` drift as lockfile staleness, so changing workspace catalog entries will correctly force a fresh install. This closes a fast-path hole where plain `install` could incorrectly skip after catalog edits.
+
+### **Preserve git-hosted tarball paths in lockfiles** (f20ad8f)
+Lockfile resolution now keeps the `path` for git-hosted tarballs that point at a subdirectory, instead of dropping it when the tarball is reserialized. That prevents later installs from unpacking the repository root instead of the intended subfolder.
+
+### **Keep resolver metadata when reusing deprecated entries** (a98767a)
+Pacquet’s lockfile reuse path now preserves deprecated metadata instead of losing it during reuse. The added coverage suggests this is a correctness fix for installs that rely on stale-but-reusable lockfile entries.
+
+### **Tighten peer-resolution to match pnpm** (4819fb4)
+Pacquet’s peer resolution and lockfile output were aligned more closely with pnpm, including transitive optional peer variants and Yarn-compat package extensions. The change also adds support for `ignoreCompatibilityDb`, which should make pacquet behave more predictably on real-world projects.
+
+### **Catch bare @mentions in commit messages** (8dfe438)
+A new Husky commit-msg hook rejects bare `@mentions` unless they’re wrapped in backticks, preventing accidental GitHub notifications from commit messages. The scanner is careful to ignore comments, scissors-cut diffs, and code spans, so it targets only text that would actually be committed.
+
+### **Other misc changes**
+- CI/test resource fixes and sharding changes across Jest and clippy runs (4 commits)
+- Heavy deps-installer test isolation and worker recycling tweaks (2 commits)
+- Publish/release and install test updates, plus minor lockfile/workspace deps bumps (3 commits)

src/posts/2026-06-13_tc39-ecma262.md

@@ -0,0 +1,10 @@
+---
+date: 2026-06-13
+repo: tc39/ecma262
+size: N
+title: "No changes"
+excerpt: ""
+commits: 0
+---
+
+