14 Jan 2026

feedDZone Java Zone

How to Secure a Spring AI MCP Server with an API Key via Spring Security

Instead of building custom integrations for a variety of AI assistants or Large language models (LLMs) you interact with - e.g., ChatGPT, Claude, or any custom LLM - you can now, thanks to the Model Context Protocol (MCP), develop a server once and use it everywhere.

This is exactly as we used to say about Java applications; that thanks to the Java Virtual Machine (JVM), they're WORA (Write Once Run Anywhere). They're built on one system and expected to run on any other Java-enabled system without further adjustments.

14 Jan 2026 1:00pm GMT

13 Jan 2026

feedJavaScript Weekly

Can we ever fix the web dependency mess?

#​768 - January 13, 2026

Read on the Web

JavaScript Weekly

Web Dependencies are Broken; Can We Fix Them? - Lea, who has worked at the heart of Web Standards for years, delivers a compelling (and educational) call to action about a problem every JavaScript developer has encountered: why is managing dependencies and introducing them into code so unnecessarily messy and what could we do about it?

Lea Verou

Build Marketing Sites Like Apple - Learn how modern, high-impact marketing sites are built from someone doing it at the highest level. Matias Gonzales, Design Engineer at Vercel, teaches GSAP animation, scroll-driven storytelling, 3D with Three.js, and performance-first techniques used on award-winning sites.

Frontend Masters sponsor

IN BRIEF:

RELEASES:

πŸ“– Articles and Videos

Date is Out, Temporal is In - The Temporal API has been promised as a future API tackling the weaknesses of JavaScript's Date for many years now, but finally that future is arriving. Mat leans on numerous examples to show off Date's weaknesses and push Temporal's strengths here.

Mat "Wilto" Marquis

πŸ’‘ Temporal's browser support still looks weak, but Chrome 144 - rolling out generally this week - brings full support. Temporal Polyfill also offers a stop-gap while native support grows.

How Wrong Can a JavaScript Date Calculation Go? - "the story of an issue that I faced that will be much easier to handle once Temporal is more widespread."

Phil Nash

Add GitHub, Slack & Google Integrations Without Rebuilding OAuth - WorkOS Pipes handles OAuth flows, token refresh, and storage. Users connect via a widget, your app makes one API call.

WorkOS sponsor

Stop Turning Everything Into Arrays (and Do Less Work Instead) - A post showing off iterator helpers, a broadly supported set of methods for working with Iterator objects as a more efficient way of processing data lazily in an iterative (rather than randomly accessed) fashion.

Matt Smith

How to 'Steal' Any React Component - A look at how to reproduce a component from a production React app without the original source, using React's internal data structures (via Fiber) and LLMs to reconstruct things.

David Fant

πŸ“„ JavaScript's for-of Loops Are Actually Fast Suren Enfiajyan

πŸ“„ Why ARM Has a 'JavaScript Instruction' - FJCVTZS, specifically. NotNotP

πŸ“„ How I Write Custom Elements with lit-html Dave Samaniego

πŸ“„ document.currentScript is More Useful Than I Thought Chris Coyier

πŸ“„ What Happened (and What's Happening) to WebAssembly Emnudge

πŸ›  Code & Tools

memlab 2.0: A Framework for Finding JavaScript Memory Leaks - A testing and analysis framework for identifying memory leaks and optimization opportunities that spawned from Facebook's own approach to optimizing its main app. Write scenarios, and memlab compares heap snapshots, filters memory leaks, and aggregates the results.

Facebook Open Source

The Time-Series Database That Balances Simplicity and Performance - Stay Postgres-native with automatic partitioning, 95% compression, and continuous aggregates at production scale.

Tiger Data (creators of TimescaleDB) sponsor

Fabric.js 7.1: A Powerful SVG Abstraction Library - Provides an interactive object model on top of the HTML5 canvas to make it easier to work with multiple visual elements. Ideal for the browser but it works with Node too.

Fabric.js

Ohm: A Parsing Toolkit for JavaScript and TypeScript - It's been a few years since we covered this project and it's come along a lot since. It's a library for building PEG-based parsers you can use in interpreters, compilers, analysis tools, etc. and you can even play with its grammar online.

Warth, Dubroy, et al.

Superdiff 3.2: Compares Two Arrays or Objects and Return a Diff - Got two similar objects or arrays and want to see the underlying differences? Superdiff's recent updates boost performance, add support for streamed input and using a worker for more efficient diffing in a separate thread.

antoine

πŸ“° Classifieds

⚑️Add lightning-fast barcode & QR scanning to your web app with STRICH, a lean JS library. Simple, predictable pricing. Free trial and demo!

Only fools write manual tests - modern engineering teams like Notion, Dropbox and Lattice use Meticulous to maintain E2E UI tests covering every edge case of your web app.

πŸš€ Auth0 for AI Agents is the complete auth solution for building AI agents more securely. Start building today.

πŸ“’ Elsewhere in the ecosystem

Some other interesting tidbits in the broader landscape:

13 Jan 2026 12:00am GMT

12 Jan 2026

feedDZone Java Zone

Kotlin Code Style: Best Practices for Former Java Developers

Many Kotlin codebases are written by developers with a Java background. The syntax is Kotlin, but the mindset is often still Java, resulting in what can be called "Java with a Kotlin accent." This style compiles and runs, but it misses the core advantages of Kotlin: conciseness, expressiveness, and safety.

Common symptoms include:

12 Jan 2026 7:00pm GMT

08 Jan 2026

feedDZone Java Zone

Building a Containerized Quarkus API and a CI/CD Pipeline on AWS EKS/Fargate with CDK

In a recent post, I have demonstrated the benefits of using AWS ECS (Elastic Container Service), with Quarkus and the CDK (Cloud Development Kit), in order to implement an API for the customer management.

In the continuity of this previous post, the current one will try to go a bit further and replace ECS by EKS (Elastic Kubernetes Service) as the environment for running containerized workloads. Additionally, an automated CI/CD pipeline, using AWS CodePipeline and AWS CodeBuild, is provided.

08 Jan 2026 2:00pm GMT

06 Jan 2026

feedJavaScript Weekly

A new JavaScript engine from Fabrice Bellard

#​767 - January 6, 2026

Read on the Web

πŸŽ‰ Happy New Year. JavaScript Weekly is now landing in your inboxes on Tuesdays, so here we are! Let's see what 2026 brings.
__
Your editor, Peter Cooper

JavaScript Weekly

The 2025 JavaScript Rising Stars - At the start of each year, Michael rounds up the projects in the JavaScript ecosystem that gained the most popularity on GitHub in the prior year. After a two-year run of topping the chart, shadcn/ui has been pushed down to #3 by n8n and React Bits. This is a fantastic roundup, now in its tenth(!) year, and features commentary from a few industry experts too.

Michael Rambeau et al.

Make Flaky Tests a Last-Year Problem - Meticulous creates and maintains a continuously evolving E2E UI test suite with zero developer effort. Built on Chromium with a deterministic engine, it's the only testing tool that eliminates flakes. Relied on by Dropbox, Notion, and Lattice.

Meticulous Ai sponsor

MicroQuickJS: A New JavaScript Engine from Fabrice Bellard - Fabrice, one of the world's most prolific developers well-known for creating FFmpeg, QEMU and QuickJS, is back with a new JavaScript engine targeting embedded systems, and that can run with as little as 10KB of RAM.

Fabrice Bellard

πŸ’‘ The discussion about MicroQuickJS on Hacker News was particularly rich. Redis's creator, Salvatore Sanfilippo, even noted that Redis would have used JavaScript as its scripting language instead of Lua if this had existed in 2010.

IN BRIEF:

RELEASES:

  • pnpm 10.27 - The alternative, efficient (and increasingly security-focused) package manager gets some tweaks, including a setting to ignore trust policy checks for packages published more than a specified time ago.

  • Ink 6.6 - Use React to build CLI apps, as used by Claude Code, Gemini CLI, and many others.

  • 🎨 Color.js v0.6 - The popular standards-compliant color conversion and manipulation library approaches its eventual 1.0 release.

  • Prisma 7.2, Deno 2.6.4

πŸ“– Articles and Videos

How to Compile JavaScript to C with Static Hermes - The creator of Parcel is porting parts of the project to Rust, but this raises some challenges on interoperating with existing JavaScript plugins, especially without a runtime JS interpreter. What about compiling JavaScript to C libraries that can be called directly? It's possible!

Devon Govett

πŸ¦– Build a Dinosaur Runner Game with Deno - An ongoing series of posts (part two and three are also available) on the official Deno blog where you get to recreate something akin to Chrome's Dinosaur Game for yourself.

Jo Franchetti

How CERN Cut Storage by 95% and 40x'd Query Speed with TimescaleDB - Learn how CERN engineers modernized Large Hadron Collider time-series data for performance, scale, and cost efficiency.

Tiger Data (creators of TimescaleDB) sponsor

Fixing TypeScript Performance Problems: A Case Study - A big monorepo-based TypeScript project was suffering sluggish IntelliSense, long type-checking times, and slow builds, but Solomon's team found some ways to significantly improve things.

Solomon Hawk

Why Object of Arrays (SoA Pattern) Beat Interleaved Arrays - A dive down a JavaScript performance rabbit hole.

Royal Bhati

πŸ“„ Brendan Eich Warns Against "Rushed Web UX Over Native" as Windows 11 Leans Harder on WebView2 and Electron Windows Latest

πŸ“„ Implementing Streaming JSON in Just 200 Lines of JavaScript Krasimir Tsonev

πŸ“„ Signals vs Query-Based Compilers Marvin Hagemeister

πŸ“„ The Nine Levels of JavaScript Dependency Hell Andrew Nesbitt

πŸ“„ How to Create a Pixel-to-Voxel Video Drop Effect with Three.js and Rapier Junichi Kasahara

πŸ›  Code & Tools

Schedule-X 3.6: A Material Design Calendar and Date Picker - Available in the form of React/Preact, Vue, Svelte, Angular, or plain JS components. Open source but with a premium version with extra features. GitHub repo.

Tom Γ–sterlund

πŸ“„ jsPDF 4.0: Client-Side JavaScript PDF Generation - Create tickets, documents, certificates, etc. all on the fly. There's a live demo, as well as thorough documentation.

Parallax

SurveyJS: JavaScript Libraries for Custom Web Forms - Keep full ownership of your data. Build JSON-driven forms in your app without SaaS limitations.

SurveyJS sponsor

Bruno 3.0: An Open-Source HTTP API Client App - There are a lot of 'API client' tools with varying levels of features, but this is open source and entirely built in JavaScript. v3.0 features a complete overhaul of the UI, adds workspaces for grouping things together, and more. GitHub repo.

Bruno Software Inc.

πŸ“° Classifieds

πŸ”‘ Let users create their own API keys with Clerk. Built-in UI components, scopes, expiration & revocation. Now in public beta.

Trigger.dev handles queues, retries, and long-running tasks so you can build production-ready agents and TypeScript workflows reliably at scale.

πŸ“’ Elsewhere in the ecosystem

Some other interesting tidbits in the broader landscape:

06 Jan 2026 12:00am GMT

19 Dec 2025

feedJavaScript Weekly

The JavaScript Bundler Grand Prix

#​766 - December 19, 2025

Read on the Web

πŸ—“οΈ As it's the last issue of 2025, a reminder that JavaScript Weekly moves to Tuesdays in January. See you again on January 6, 2026!
__
Your editor, Peter Cooper

JavaScript Weekly

It's the final issue of the year, so we're going to cover a few new items, then look back at the top links of 2025 (based on reader engagement) and recap what happened in the ecosystem month-by-month this year.

The JavaScript Bundler Grand Prix - Bundlers now sit at the heart of many JavaScript workflows and are sometimes even integrated into runtimes (e.g. Bun's). This piece surveys the landscape and argues the speed wars are mostly over, with the real battle shifting to artifact size and the code that actually ships to users.

Kate Holterhoff

Coding with AI: The Practical Path for JavaScript Devs - Go beyond demos and hype. Learn real AI-powered workflows with JavaScript, from prompt engineering and coding agents to MCP, ML, and production-ready apps.

Frontend Masters sponsor

'I Ported JustHTML from Python to JavaScript with LLMs in 4.5 Hours' - Prolific AI blogger Simon Willison shares the tale of porting a standards-compliant HTML5 parser (which passes all 9200+ html5lib-tests) from Python to JavaScript using OpenAI's Codex CLI and GPT 5.2. You can play with the end result or check out the code.

Simon Willison

IN BRIEF:

RELEASES:

πŸ† The Top 10 Links of 2025

1. A Perplexing JavaScript Parsing Puzzle - Hillel's deceptively simple puzzle - just 14 bytes of code - attracted by far the most attention this year. Despite working with JavaScript for most of its lifespan, I got it wrong!

Hillel Wayne

2. Ecma International Approved ECMAScript 2025: What's New? - Each year, the Ecma General Assembly approves the latest ECMAScript language specification, and you can read the ES2025 spec in full. Better, though, is to enjoy Dr. Axel's succinct explainer.

Dr. Axel Rauschmayer

MACROSCOPE - Free AI Code Review for Open Source - Free for non-commercial projects. Everyone else: use OSSAI for 50% off your first 2 months.

Macroscope sponsor

3. 'I Think the Ergonomics of Generators is Growing on Me' - If you've never worked with generator functions, this remains a great look at what they are and where they can be useful. Alex notes that "their practicality hasn't exactly caught on" (yet..)

Alex MacArthur

4. How the Web is Using JavaScript - The JavaScript section of this year's HTTP Archive Web Almanac report went into depth on how much JS we're using (and failing to use), the popularity of TypeScript, Web Worker usage, and.. yes, jQuery still dominates!

HTTP Archive

5. Some Features Every JavaScript Developer Should Know in 2025 - A quick list post breezing through some more modern areas of JavaScript including iterator helpers, structuredClone(), and set operations.

Suren Enfiajyan

6. How to Keep package.json Under Control - Covers 'dependency hygiene' and ways to keep things under control. Great tips and tool recommendations.

7. A Brief History of JavaScript - This epic timeline of JavaScript's history will remain a go-to resource for years.

8. War Story: The Hardest Bug I Ever Debugged - A former engineer on the Google Docs team told the tale of a bizarre error that afflicted Google Docs ten years ago.

9. Things People Get Wrong About Electron - One of Electron's maintainers defended the technical choices made by the project over the years.

10. Move On to ESM-Only - While you can maintain packages supporting both ESM and CommonJS, Anthony explained why it's finally time to go 'ESM only'.

πŸ—“οΈ JavaScript in 2025: Month by Month

Let's step through the year and remember the biggest things that happened in JavaScript each month:

JANUARY - At the start of a very productive year for the alternative JS runtime, Bun took a big step forward with Bun 1.2. We also got a big update on progress with Express.js.

FEBRUARY - An epic documentary about Angular was released. The Deno vs Oracle battle over the JavaScript trademark rumbled on. TypeScript 5.8 was a big release for Node developers in particular. Meanwhile, a developer implemented Doom entirely in TypeScript's type system.

MARCH - Babylon.js 8.0, the latest version of Microsoft's epic JavaScript 3D engine, was released, as was Express 5.1.

APRIL - Koa 3.0 was released, a major Node.js collaboration summit took place in Paris, and p5.js 2.0 was released.

MAY - The Remix project had a huge shakeup. The GSAP animation toolkit was made freely available. The Glitch platform announced it was shutting down. The Deno team put together an epic timeline of JavaScript's history and Microsoft released its first preview of its new natively-compiled Go port of TypeScript.

JUNE - Oxlint 1.0 and Vite 7.0 were released. Dr. Axel unveiled the ES2025 edition of his Exploring JavaScript book. Biome v2 became the first type-aware linter that didn't require tsc, and Ecma International approved the ECMAScript 2025 spec.

When LLMs Hit Your Database, Schema Names Aren't Enough - See how adding semantic context to Postgres helps LLMs query data correctly, and boosts SQL accuracy by 27%.

Tiger Data sponsor

JULY - The JS1024 code golfing contest took place, Deno 2.4 was released, and Vercel acquired NuxtLabs.

AUGUST - TypeScript 5.9 and Apache Echarts 6 were released. The jQuery team dropped a release candidate of jQuery 4.0 (we're still waiting for the final release, though).

SEPTEMBER - Mediabunny shook up the media processing scene. Chrome turned 17, and a messy few months for npm package security began with a variety of packages being compromised in a phishing attack. In response, pnpm added support for delayed dependency updates. macOS Tahoe users found Electron apps were laggy due to a change in a private API. The Deno project asked the community for $200k to help with its JavaScript trademark case.

OCTOBER - React Compiler v1.0 was released, as well as Node.js v25.0, and Node.js 24 became the active LTS release. The React team announced the React Foundation and moves to make React's ownership less attached to Meta. Bun 1.3 was released to much fanfare and Evan You announced Vite+. GitHub announced TypeScript had become the platform's #1 language.

NOVEMBER - The now-named Shai Hulud supply chain attack reared its ugly head in a 'version 2' form. The JavaScript Engines Zoo launched to show us just how rich the JS runtime and engine ecosystem is. Google unveiled Angular v21.

DECEMBER - JavaScript turned 30 years old. Microsoft shared an update on TypeScript 7.0 and Deno 2.6 was released. Node.js v24.12.0 (LTS) was also released, finally making type stripping stable in an LTS release.

πŸ“° Classifieds

πŸŽ„ Give yourself the gift of time this Christmas. Let Meticulous observe your app and auto-build continuously evolving E2E UI tests while you celebrate. Book a call now.

Trigger.dev handles queues, retries, and long-running tasks so you can build production-ready agents and TypeScript workflows reliably at scale.

πŸŽ„ This is the final issue of JavaScript Weekly for 2025 - thanks for reading, submitting links, and supporting us! We're going to return on Tuesday, January 6, 2026. See you then! And, if we're really lucky, we might catch up on our inbox packed with submissions by then too... ;-)

19 Dec 2025 12:00am GMT

11 Aug 2025

feedOfficial jQuery Blog

jQuery 4.0.0 Release Candidate 1

It's here! Almost. jQuery 4.0.0-rc.1 is now available. It's our way of saying, "we think this is ready; now poke it with many sticks". If nothing is found that requires a second release candidate, jQuery 4.0.0 final will follow. Please try out this release and let us know if you encounter any issues. A 4.0 … Continue reading β†’

11 Aug 2025 5:35pm GMT

05 Aug 2025

feedJBoss Blogs

BRZ Keycloak case study published

BRZ migrated the Austrian Business Service Portal with 2M+ users to Keycloak. The Austrian Business Service Portal (USP) is the central online eGovernment platform for entrepreneurs and businesses. It connects businesses with various Austrian online government services, where businesses can access all digital services and information in one place. The USP was launched in 2010 by the (BRZ, abbreviated from the German name Bundesrechenzentrum). The BRZ is the market-leading eGovernment partner of the Austrian federal administration and is both developing and operating the portal. Authenticating and authorizing 2+ million users for 130+ public services is the most important key feature of the USP which now uses Keycloak, microservices and GitOps under the hood. ! We are now starting to collect all case studies at . If you want to share your case study with the Keycloak community, to sort out the details.

05 Aug 2025 12:00am GMT

13 Jul 2025

feedJBoss Blogs

πŸ“š 30+ Serverless Blogs Every Developer Should Follow

These are some of the blogs I follow for high-signal content, real-world lessons, and emerging patterns. 1. The Burning Monk (Yan Cui) - Deep technical guides, real-world insights, and event-driven serverless at its best. πŸ”— 2. Off-by-none (Jeremy Daly) - Weekly curated newsletter filled with top serverless news, tools, and community updates. πŸ”— 3. A Cloud Guru Blog - Trusted training content with strong coverage of AWS, certifications, and serverless how-tos. πŸ”— 4. Serverless.com Blog - Official blog for the Serverless Framework team with tutorials, product updates, and ecosystem insights. πŸ”— 5. AWS Community Builders Blog - Real-world articles from active AWS contributors and thought leaders. πŸ”— 6. Serverless Transformation (Aleios) - Strategy-rich serverless insights, especially around event-driven architecture. πŸ”— 7. AWS Compute Blog - Deep dives into AWS Lambda, Step Functions, and compute services directly from AWS. πŸ”— 8. AWS Architecture Blog - High-level cloud-native architecture practices and guidance for scalable apps. πŸ”— 9. Lumigo Blog - Focused on observability, monitoring, and debugging in serverless environments. πŸ”— 10. Serverless360 Blog - Azure-first serverless content with strong focus on Azure Functions and service management. πŸ”— 11. Nick Tune's Blog - Sociotechnical thinking and service design strategies for microservices and serverless. πŸ”— 12. AWS Enterprise Strategy Blog - Executive cloud transformation strategies, ideal for leadership and enterprise architects. πŸ”— 13. Theodo Blog - Engineering-led content featuring serverless, migration, and rapid product delivery stories. πŸ”— 14. Serverless First (Paul Swail) - Practical daily tips, guides, and architecture breakdowns from an experienced consultant. πŸ”— 15. Serverless Land - AWS-curated library of patterns, tutorials, and EDA content for serverless professionals. πŸ”— 16. Lego Engineers Blog (Sheen Brisals & team) - Real enterprise-scale implementation stories from a global brand. πŸ”— 17. Serverless Chats Podcast - Interviews with top serverless minds - with full transcripts for every episode. πŸ”— 18. Serverless Guru Blog - Transformation-focused advice and engineering best practices from a consultancy team. πŸ”— 19. The Serverless Edge Blog - Cloud strategy, org design, and the "value flywheel effect" in serverless transformation. πŸ”— 20. InfoQ Serverless - Aggregated industry-wide coverage, articles, and videos on serverless and architecture. πŸ”— 21. Jeremy Daly's Personal Blog - Detailed architectural posts and in-depth serverless exploration beyond the newsletter. πŸ”— 22. Lee Gilmore's Blog - Valuable insights on enterprise serverless adoption and scaling strategies. πŸ”— 23. Ready, Set, Cloud (Allen Helton) - Friendly, digestible blog posts with great diagrams and tutorials. πŸ”— 24. Sheen Brisals's Blog - Engineering leadership perspectives with an emphasis on EDA and maturity. πŸ”— 25. Aiden Steele's Blog - Low-level AWS insights with rare gems on Lambda internals and advanced configurations. πŸ”— 26. Luc van Donkersgoed's Blog - Visual, simple explanations of complex cloud patterns and serverless tips. πŸ”— 27. Benjamen Pyle's Blog (Binary Heap) - Great technical content on building serverless in Rust. πŸ”— 28. Ben Kehoe's Blog - Deep strategic thinking on cloud operations, organizational design, and serverless ops. πŸ”— 29. Alex DeBrie's Blog - Author of The DynamoDB Book, Alex shares thorough serverless data modeling guides. πŸ”— 30. Last Week in AWS (Corey Quinn) - Hilarious, opinionated, and insightful commentary on all things AWS - including serverless. πŸ”— 31. AWS Fundamentals Blog - Accessible cloud concepts from community experts. πŸ”— 32. Vadym Kazulkin on Dev.to - Detailed explorations of Lambda SnapStart and Java serverless.πŸ”— 33. Cloudonaut Blog (Wittig Brothers) - Production-grade AWS best practices and architectural tips. πŸ”— Do you know other technical blogs on serverless or cloud? Comment below and share your favorites.

13 Jul 2025 8:59am GMT

19 Mar 2025

feedJBoss Blogs

RESTEasy and Red Hat's Middleware Strategy

19 Mar 2025 6:11pm GMT

17 Jul 2024

feedOfficial jQuery Blog

Second Beta of jQuery 4.0.0

Last February, we released the first beta of jQuery 4.0.0. We're now ready to release a second, and we expect a release candidate to come soonβ„’. This release comes with a major rewrite to jQuery's testing infrastructure, which removed all deprecated or under-supported dependencies. But the main change that warranted a second beta was a … Continue reading β†’

17 Jul 2024 2:03pm GMT

17 Apr 2024

feedOfficial jQuery Blog

Upgrading jQuery: Working Towards a Healthy Web

jQuery's influence on the web will always be evident. When it was first introduced in 2006, jQuery became a fundamental tool for web developers almost immediately. It simplified JavaScript programming, making it easier to manipulate HTML documents, handle events, perform animations, and much more. Since then, it has played and continues to play a major … Continue reading β†’

17 Apr 2024 5:00pm GMT