Jun 8, 2026
3 links from the engineering internet.
oxc 0.135.0 integrates a rust port of the react compiler
the rust-based javascript toolchain lands a rust port of the react compiler and marks ast nodes #[non_exhaustive], a breaking change for downstream consumers. the parser also starts reporting ts1255 for invalid class definite assignment assertions.
apache httpd 2.4.68 patches three cves and adds openssl 4.0 support
the web server's stable release fixes a mod_http2 denial of service (cve-2026-49975), a mod_http2 use-after-free when file handles are exhausted (cve-2026-48913), and a heap underflow in ap_regname (cve-2026-44631), and adds native openssl 4.0 support to mod_ssl.
req 0.6.1 makes response decompression opt-in for the elixir http client
the elixir http client stops decompressing response bodies automatically. decompression is now opt-in via the compressed: true option, a behavior change existing callers need to set explicitly to keep gzip and brotli handling.