Friday Links #36 — JavaScript Ecosystem Weekly

A curated roundup of JavaScript ecosystem news covering the past two weeks. Highlights include TypeScript 6 RC preparing for a future Go-based compiler in TS7, Deno 2.7 improving Node compatibility and stabilizing the Temporal API, and Solid 2.0 beta introducing native async reactivity while retiring Suspense. Security items cover supply-chain attacks via malicious GitHub repos, a vm2 sandbox escape vulnerability, AI web agents leaking user data (Brave research), and Anthropic/Claude uncovering 14 critical Firefox vulnerabilities. Also includes new tool releases (React Native 0.85 RC, pnpm 10.32, Jest 30.3, Prisma 7.5), articles on CSS anchor positioning, pnpm monorepos, and React hooks performance, plus news on TLS certificate lifespan reductions.