JongKyung Lee

Software Engineer / core team

[筋と憎悪，もののけ王 @ubugeeei]

⚡️ Announcement for Vize

Vize is entering the Real World Testing phase.

https://t.co/bPOFfg9kIl

Looking for:

・Bug reports (Issues)
・Pull Requests
・Medium-to-large Vue projects to test against

The next milestone is v1.0.0-alpha.

[JongKyung Lee @jongkyung_dev]

We can officially set vp as npm.scriptRunner in VS Code 1.124.0

[JongKyung Lee @jongkyung_dev]

Finally, it was merged in VS Code 🎉
https://t.co/MIJr9UlTBO

[Boshen @boshen_c]

All our main websites are now on void / cloudflare

https://t.co/PisLyE58F4
https://t.co/cbLf0kyfRa
https://t.co/G6dtN2ghCk
https://t.co/2rYacZ14pF
https://t.co/8G6ajsNBuN

[Evan You @evanyou]

Some notes on the acquisition.

- Vue is not part of this - it remains an independent project. That said, the acquisition does make it possible for me to better financially support the people contributing to or working full-time on Vue. More on this soon.

- Nothing really changes for the relationship between Vue itself and the people in the Vue ecosystem now working at Vercel. I remain close friends with the Nuxt team and Eduardo. I’m confident that @rauchg will continue to support Nuxt the same way we intended to keep Vite vendor-neutral.

[Ryan Dahl @rough__sea]

deno is migrating from swc to oxc

https://t.co/WtRWk23A71

[Boshen @boshen_c]

Ok I'm starting this new project two hours after joining Cloudflare. Wish me luck!

[JongKyung Lee @jongkyung_dev]

@fengmk2 @Cloudflare Congrats 🎉🎉

[JongKyung Lee @jongkyung_dev]

Oh my god! Congrats🥳🥳

[VoidZero @voidzerodev]

VoidZero is joining Cloudflare.

Our mission stays the same: to make JavaScript developers more productive than ever before. Vite, Vitest, Rolldown, Oxc, and Vite+ remain MIT-licensed. Evan and the VoidZero team will continue leading them.

Cloudflare shares our commitment to open source. Together, we can keep investing in the tooling developers rely on every day, while bringing the Vite ecosystem and Cloudflare’s platform even closer together.

[Socket @SocketSecurity]

📦 @pnpmjs 11.5 adds support for recognizing npm staged publishes after staged approval metadata triggered a false downgrade signal.

As npm adds more release paths, registry metadata needs to make it clear how each package version was published.

https://t.co/hNerib86mu

[Boshen @boshen_c]

React Compiler Transform -> Oxc -> Rolldown -> Vite coming soon

Please hit the like button.

https://t.co/8ZZxrTDE9p

[Seb ⚛️ ThisWeekInReact.com @sebastienlorber]

👀 React Compiler in Rust - Exciting update from @rickyfm

TLDR:
- Rust compiler ➡️ 99.9% the same output as the original
- Confident ➡️ merge the PR within the next weeks
- Can be tested locally

The Oxc team is already working on an integration (draft PR)

[Boshen @boshen_c]

Rolldown v1.1.0

* lazy barrel optimization enabled by default
* automatic tsconfig resolution alignment with tsc

https://t.co/ddkoAuSGRd

[React Router @ReactRouter]

We just published 7 CVEs identifying security vulnerabilities in React Router and Remix v2

We recommend updating to the latest appropriate versions:

- React Router v7 -- 7.16.0
- React Router v6 -- 6.30.4
- Remix v2 -- 2.17.5

Details, links, and package ranges are listed below

[JongKyung Lee @jongkyung_dev]

@fengmk2 Claude Code sometimes responds to me in Chinese or Japanese too 😅

[Zoltan Kochan @zkochan]

GitHub now shows Rust as the major language in the pnpm repository. That is basically from 0% to >=50% in a month.

[Vitest @vitest_dev]

We've published a Browser Mode security advisory.

CDP-capable providers like Playwright Chromium with the browser API exposed to the network allowed attackers to run code on the host.

Update vitest/browser to 5.0.0-beta.4, 4.1.8, or 3.2.6.
Vite+ users: Upgrade to 0.1.24

[Vite ⚡ @vite_js]

We've published two Windows advisories:

◇ If Vite runs with `--host`, denied files may have been reachable over the network
◇ launch-editor with NTLM enabled may leak NTLMv2 hashes via a malicious page

Update to Vite 8.0.16/7.3.5/6.4.3, Vite+ 0.1.24, and launch-editor 2.14.1

[Evan You @evanyou]

Hono x Elysia x H3 at VueFes Japan?! 👀

[JongKyung Lee @jongkyung_dev]

Contributed a few small improvements to this release.
Try it out with vp upgrade.

[Boshen @boshen_c]

🚀 Released Vite+ 0.1.23

https://t.co/yZay64SI5N

• 𝚟𝚙: proxy + custom-CA aware HTTP (works behind corporate firewalls)
• 𝚟𝚙 𝚛𝚞𝚗: task shorthands in 𝚟𝚒𝚝𝚎.𝚌𝚘𝚗𝚏𝚒𝚐.𝚝𝚜
• 𝚟𝚙 𝚌𝚛𝚎𝚊𝚝𝚎: GitHub Copilot setup
• 𝚟𝚙 𝚖𝚒𝚐𝚛𝚊𝚝𝚎: smarter tsconfig + ESLint cleanup
• 𝚟𝚙 𝚙𝚖 𝚊𝚙𝚙𝚛𝚘𝚟𝚎-𝚋𝚞𝚒𝚕𝚍𝚜: new, mirrors pnpm
• 𝚟𝚙 𝚘𝚞𝚝𝚍𝚊𝚝𝚎𝚍 -𝚐: consistent global reporting
• 𝚟𝚙 𝚎𝚗𝚟: respects 𝚙𝚊𝚌𝚔𝚊𝚐𝚎𝙼𝚊𝚗𝚊𝚐𝚎𝚛 + Homebrew

Bundled stack:
𝚟𝚒𝚝𝚎 𝟾.𝟶.𝟷𝟺 · 𝚛𝚘𝚕𝚕𝚍𝚘𝚠𝚗 𝟷.𝟶.𝟹 · 𝚝𝚜𝚍𝚘𝚠𝚗 𝟶.𝟸𝟸.𝟶 · 𝚟𝚒𝚝𝚎𝚜𝚝 𝟺.𝟷.𝟽 · 𝚘𝚡𝚕𝚒𝚗𝚝 𝟷.𝟼𝟽.𝟶 · 𝚘𝚡𝚕𝚒𝚗𝚝-𝚝𝚜𝚐𝚘𝚕𝚒𝚗𝚝 𝟶.𝟸𝟹.𝟶 · 𝚘𝚡𝚏𝚖𝚝 𝟶.𝟻𝟸.𝟶