BetaWeekly digests are a beta — we're trying something new. Feedback welcome.
JavaScript Runtimes & Tooling weekly digests
- Week of July 13, 2026pnpm adds workspace release management while Turborepo embeds sccache for Cargo
pnpm 11.11-11.14 introduced native workspace release management with `pnpm change`, `pnpm lane`, and `pnpm version -r`, alongside a new `pnpm doctor` command and significant memory improvements. Meanwhile, Turborepo shipped a canary cycle culminating in embedded sccache support for Cargo compile caching, Cargo-only repo support, and security fixes.
- Week of July 6, 2026Mocks clear by default as Vitest reaches beta 6 and Turborepo ships Cargo workspace support
Vitest v5.0.0-beta.6 introduces breaking changes to mock clearing and reporter output directories, while Turborepo v2.10.4 adds production-ready Cargo workspace support and Deno v2.9.2 brings desktop window APIs and React Router autodetect.
- Week of June 29, 2026Turborepo embraces the new breed of package managers
Turborepo shipped full support for nub and aube package managers across 2.10.x, while pnpm 11.10 made the week's other splash with a CI-friendly authentication overhaul and a path toward its Rust rewrite.
- Week of June 22, 2026Desktop runtimes, faster builds, and smarter caches
Deno 2.9 shipped with a groundbreaking `deno desktop` subcommand for native desktop apps and major performance gains, while Turborepo reached v2.10.0 with incremental task caching and graceful shutdown.
- Week of June 15, 2026pnpm 11.8 ships dry-run install while Turborepo polishes shutdown and Vitest rolls betas
pnpm 11.8 adds dry-run install previews and richer SBOM output; Turborepo releases three canary builds improving PTY process shutdown and symlink handling; Vitest ships a v4.1.9 bugfix backport alongside v5.0.0-beta.5 with breaking config changes.
- Week of June 8, 2026pnpm locks down credential exposure as Turborepo chases Windows PTY parity
pnpm shipped a security fix stopping repository-controlled `.npmrc` files from expanding environment variables, alongside new releases adding frozen store support and file-free registry auth. Turborepo pushed seven canary releases and two stable patches focused on Windows PTY handling and JIT task input hashing.
- Week of June 1, 2026Post-quantum crypto lands in Deno, Vitest ships v5 beta
Deno 2.8.2 adds post-quantum cryptography and a `--minify` flag for compiled binaries, while Vitest released its v5 beta with breaking changes and backported security controls for the browser test runner.
- Week of May 25, 2026pnpm closes supply-chain holes while Turborepo fixes its stability floor
pnpm 11.4 and 11.5 shipped security hardening around lockfiles, credentials, and patch files, while Turborepo landed a series of fixes for process hangs, symlink races, and Bun compatibility across four canary and stable releases.
- Week of May 18, 2026Deno 2.8 rewires the CLI, pnpm experiments with Rust
Deno shipped its biggest release of the year with workspace support, six new subcommands, and a new agent security firewall, while pnpm opened the door to a Rust-powered install backend and Turbo kept hardening.
- Week of May 11, 2026Turborepo's triple security fix overshadows a quiet week
Turborepo patched a high-severity command injection vulnerability in its VS Code extension alongside fixes for CSRF and unintended code execution, while Bun shipped v1.3.14 and Vitest released a minor bug-fix update.