Philippe Serhal

Philippe Serhal

@philippeserhal.com

๐Ÿ’ผ Staff Engineer @netlify.com, frameworks, build system, CLI ๐Ÿ”จ Open source @npmx.dev, forges, gatsby. Vite team advisor.

961 followers1.4K following511 posts

Philippe Serhal reposted

talking about coherence, collaboration in the community is as strong as ever behind the noise. they're going to unlock so many paths to explore with this project. check it out and get involved ๐Ÿงก

๐Ÿ™‹โ€โ™‚๏ธ what if one client worked on every forge? ๐”ฃ๐”ฌ๐”ฏ๐”ค๐”ข๐”ฐ is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges โœจ forges.link

Philippe Serhal reposted

Daniel Roe, the creator of Nuxt, and the NPMX team released a JS client that can connect to any Git forge and they were gracious enough to include Pushin! Thanks to then and their valuable feedback, Pushinโ€™s API is now much better. Thank you, NPMX team! โค๏ธ

๐Ÿ™‹โ€โ™‚๏ธ what if one client worked on every forge? ๐”ฃ๐”ฌ๐”ฏ๐”ค๐”ข๐”ฐ is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges โœจ forges.link

๐Ÿš€ Check out what I've been spending my evenings working on with some OSS friends! ๐Ÿ‘€ It's so exhaustive and ambitious already. ๐Ÿ’ญ What will you build on top of this? Does this give you ideas? What didn't seem possible before that may now be in reach?

๐Ÿ™‹โ€โ™‚๏ธ what if one client worked on every forge? ๐”ฃ๐”ฌ๐”ฏ๐”ค๐”ข๐”ฐ is a new TypeScript library for issues, PRs, notifications, checks and webhooks across 12 forges โœจ forges.link

Philippe Serhal reposted

Since last ViteConf, @pi0.io has spent his time on @nitro.build v3: H3 rewritten on web standards, a compiled router, route rules in core. Wondering what is left before stable? Tune in for his talk "Nitro v3: the road to stable" @viteconf.org 2026, TODAY 2pm UTC. Free and online.

Philippe Serhal reposted

You can't stop maintainers getting phished. But what you can is stopping bad release reaching your lockfile! Set a minimum publish age, approve install scripts per version, let pnpm reject trust downgrades. @43081j.com in "Securing the JavaScript Ecosystem" ๐Ÿ”’๏ธ @viteconf.org, today, 14:00 UTC

Philippe Serhal reposted

Did you know that @npmx.dev serves 50 million requests a month, and 300+ contributors carry its ideas out into other projects? @alexdln.com and @willow.sh split "Beyond the fast lane" between how a page feels and the tooling under it @viteconf.org 2026, Thu 15 Oct (TODAY) at 2pm UTC. Free & online

These CVEs have just been published and patched. If you have Next.js projects on @netlify.com, find out what you need to know ๐Ÿ‘‡๐Ÿผ www.netlify.com/changelog/20... (TL;DR: limited impact on Netlify, but upgrade anyway!)

netlify.comNext.js & React security release (Oct 2026): what to knowThree Next.js/React vulnerabilities disclosed: an image RCE, a use cache RCE, and a Server Action DoS. Affected Netlify projects should upgrade.
Next.js@nextjs.org

An out-of-band Next.js security update is planned for Wednesday, October 14. It will address three vulnerabilities in upstream dependencies, including two critical and one high-severity issue. nextjs.org/blog/upcomi... We're also changing how we share future security notices โ†“

๐Ÿ’ฉ I did it: bsky.app/profile/phil.... You can blame @patak.cat.

VoidZero@voidzero.dev

Do we need an adapter for every framework X platform combination? According to @philippeserhal.com ( @netlify.com ) 99 lines of code can replace some of them. Learn more in his talk "Ship Where You Vite" ๐Ÿ‘€ Only at @viteconf.org 2026 Thu 15 Oct, 2pm UTC. Free and online. viteconf.org

๐Ÿ’โ€โ™‚๏ธ A new TanStack Start project is deployed to Netlify approximately every minute(!). Congrats to the TanStack team! Of course, TanStack Start 1.0 is fully supported on @netlify.com on day one. Join hundreds of thousands of users ๐Ÿ‘‰ www.netlify.com/changelog/20...

netlify.comTanStack Start 1.0 deploys on Netlify | Netlify ChangelogGet the latest updates on Netlify products and features to meet your developer needs.
TANSTACK@tanstack.com

TanStack Start 1.0 is officially stable! ๐ŸŽ‰ A full-stack web framework for React and Solid, already used to build millions of apps, from Fortune 500 companies to your favorite tools and weekend projects. tanstack.com/blog/tanstac...

Philippe Serhal reposted

24 years ago today (!), Blender became open source. Happy anniversary to the community ๐Ÿงก

Alec Lloyd Probert@graphieros.npmx.social

๐Ÿค

Philippe Serhal reposted

A new version of npmx has released and it comes with some new additions to package changelog. Now all shorthand for issues, PRs, commits & accounts are supported.

In three days... watch me talk about how platforms make frameworks like SvelteKit work and collaborative ecosystem efforts to make this better. (I definitely didn't spend countless hours compressing and cutting this talk until it fit. That doesn't sound like me at all. Nope.)

Three days...watch me showcasing Svelte Custom Renderers! ๐Ÿ‘€

> To our knowledge, we are the first to provide evidence based recommendations for [...] minimum release age [...] [W]e find that [...] setting the minimum release age to 8 days provides significant security benefits [...] Damn. My gut feeling that 24-48 hours was good enough was way off :(.

As Deno Deploy is shutting down in 6 months, we at @netlify.com want to make sure migrating is as easy as possible if you choose us. If you're a Deno Deploy user interested in helping us vet our migration guide/tooling, please reply or DM me!

Cloudflare@cloudflare.social

We're making the Cloudflare developer platform the best place to run JavaScript, anywhere. Big step toward that today: the Deno team is joining us to build whatโ€™s next. https://cfl.re/4rXMBKy

Philippe Serhal reposted

An out-of-band Next.js security update is planned for Wednesday, October 14. It will address three vulnerabilities in upstream dependencies, including two critical and one high-severity issue. nextjs.org/blog/upcomi... We're also changing how we share future security notices โ†“

nextjs.orgUpcoming Next.js Security Update for Upstream VulnerabilitiesNext.js plans to publish an out-of-band security update next Wednesday, October 14, 2026, addressing two Critical and one High severity vulnerabilities in upstream dependencies.

Philippe Serhal reposted

I am looking for my next career opportunity! Iโ€™m an engineering leader, consultant, author, and open-source maintainer. I've been VP of Eng, written books, get 20M weekly downloads on NPM, and more. Know of a role you think I'd be a good fit for? Book time on my cal or DM me: corbincrutchley.com

corbincrutchley.comCorbin CrutchleyIโ€™m an engineering leader, consultant, author, and open-source maintainer in Sacramento, California.

Philippe Serhal reposted

Nuxt 4.6 is out, alongside nuxt/cli v4 ๐Ÿš€ ๐Ÿงฉ `nuxt/server`, our first big step to a server-agnostic Nuxt ๐ŸŽฏ typed `$fetch` was rebuilt (no more TS2589!) ๐Ÿ” `appSecret` + sealed cookie sessions โšก๏ธ Vue Vapor support ๐Ÿ› brand new dev error pages โ€ฆ plus lots of groundwork for Nuxt 5 ๐Ÿ”๏ธ ๐Ÿ‘‰ nuxt.com/blog/v4-6

Another huge effort behind the scenes this year to make the @netlify.com platform faster and more reliable for everyone, while unlocking exciting future capabilities ๐Ÿ‘€. Edge Functions now run in house on Firecracker microVMs and are decoupled from Deno. Check out the technical breakdown ๐Ÿ‘‡๐Ÿผ.

Netlify@netlify.com

Warm Edge Function invocations on Netlify now take about 5-6ms at the median, down from 25-40ms. Requests run inside our own network now at the same pricing, and your functions work exactly as written. www.netlify.com/blog/edge-fu...

Philippe Serhal reposted

Preact 11 is out ๐ŸŽ‰ Weโ€™ve been hard at work at making our diffing use modern features like moveBefore , leveraging ESM for tree-shaking Preact Compat and ensuring you have a great experience with resumed hydration.