Will npm v12 reject your .npmrc?

Together with

Deno 2.9 Released — A huge release for the runtime: deno desktop turns scripts and framework-based projects into native, self-contained desktop apps, quick migration from npm/pnpm/Yarn/Bun lockfiles, big test runner improvements, ~2x faster cold starts, and a target of Node.js 26 compatibility.

Bartek Iwańczuk

IN BRIEF:

• The second preview release of npm 12 is available for testing. This is worth doing, as Colin McDonnell has already noticed npm 12 hard-errors on unrecognized keys in .npmrc files.

• 🔒 npm now locks 'high impact accounts' (maintainers of the most popular packages) into a 72-hour read-only mode when they change their email or use a 2FA recovery code.

• The Svelte team has just posted the latest monthly Svelte update. In related news, Svelte creator Rich Harris was recently asked ▶️ for his takes on working with AI and Svelte.

RELEASES:

• 🤖 AI SDK v7 – Vercel's SDK that provides an abstraction for building against any AI model provider.

• Node.js v26.4 (Current) adds experimental package map support to resolve packages from a static JSON file instead of walking node_modules.

• Formisch v1 RC – Schema-first, headless type-safe form state library.

• Prettier 3.9, Rspack 2.1, Electron 43, ESLint 10.6, pnpm 11.9

• Wakaru 1.6 – JavaScript decompiler and bundle splitter. Now with even better 'source-like' output, particularly from bundled React apps.

• 🎬 TurboRes 1.0 – Fast Zig/WASM-powered Apple ProRes video decoder for JS environments. From the creator of Mediabunny.

• 📊 ngx-charts 24.0 – Declarative charting framework for Angular. Interactive demo.

• GopherJS 1.21.0 – A Go to JavaScript transpiler. Now supporting up to Go 1.21.13.

• whatwg-url 17.0 – JS implementation of the WHATWG URL Standard. Demo.

📢  Elsewhere in the ecosystem

• 📊 Frank Denis wanted to see the performance of WebAssembly runtimes in 2026 and pitted nine options against one another, including Bun and Node/V8's options.

• GitHub is continuing with efforts to make project management less overwhelming in the agentic era. Now you can restrict issue creation to collaborators with write access.

• Meta has ported Flow, the static type checker for its typed dialect of JavaScript, from OCaml to Rust.

• The pnpm project is working on pnpr, an experimental pnpm-compatible npm registry server, written in Rust.

• Git 2.55 has been released with git history fixup for 'fixing up' earlier commits, faster git status on Linux, and more.

• 🐘 Postgres 19 is currently in beta, with the final release expected this September. Craig Kerstiens looks ahead to what's interesting in Postgres 19 for users and developers.