Type-aware Linting Stable in oxlint, Qwik v2 Beta, and Octane Turns Up the Heat on React | News | Ep 75

News for the week of July 20, 2026: Oxlint type-aware linting is now stable, Qwik v2 is now in beta, and the successor to Inferno is lighting up React. From the community: must-watch talks from Software Should Work conference, why Node.js can't harden against prototype pollution, and practical TypeScript tips learned while building a Trello clone.

Sponsored by Excalibur.js
Excalibur.js is the free and open source friendly TypeScript 2D game engine for the web. Learn to make web games with TypeScript or JavaScript! Excalibur comes out-of-the-box with everything you need, like physics, sprites, animations, sound effects, and first-party plugins for popular 2D gamedev tools.

• Homepage and Docs: https://excaliburjs.com
• Make Your First Game in 10 Minutes
• Join the Discord: https://discord.gg/9UemP985Uy

Chapters

• (00:00) - Welcome to the Show
• (03:45) - Tooling: WebStorm Adds TypeScript 7 to the IDE
• (04:34) - Tooling: TypeScript 7.1 Compiler API is in Progress
• (05:32) - Tooling: Type-aware Linting is Now Stable in oxlint
• (08:24) - Tooling: New Buz Runtime is a Bun Port in Modern Zig
• (10:48) - Tooling: TypeScript 7 is Getting Some Perf Improvements
• (11:23) - Metaframeworks: Solid.js Getting a Rewrite in Rust?
• (12:53) - Metaframeworks: Qwik v2 Beta is Official
• (15:16) - Metaframeworks: Next.js July Security Release is Available
• (17:13) - Web: TypeScript AI Conference Videos Are Up
• (18:05) - Web: A Bunch of TC39 Proposals Advance
• (20:27) - Web: Octane, Successor to Inferno is a New React Alternative
• (23:46) - Web: Firefox 153 with Quality of Life Updates
• (26:22) - Security: Malicious Corepack Site Was Tricking People Into Downloading Malware
• (28:32) - Security: Wordpress Exploit is Pretty Darn Bad
• (29:49) - Security: White House Launches Gold Eagle Initiative
• (30:54) - Library Watch: scriptc, Compiles TypeScript to Native Binaries
• (33:50) - Library Watch: API Extractor Helps You Build Better TS Library Packages
• (35:35) - Library Watch: knip Keeps Knipping Its Own Performance
• (35:52) - Library Watch: TanStack Markdown and Highlight
• (36:48) - Library Watch: webpack 105.9 Ships Zero-config Bundling
• (39:39) - Community: Jim's TrueType QR Code Font
• (40:11) - Community: Software Should Work Conference Videos Are Up
• (41:18) - Community: MochaJS is Sponsoring Other Open Source Projects
• (41:43) - Community: Effect Miami 2 Talks Are Up
• (42:05) - Community: Antony Jones Shares Practical TypeScript Benefits, Pitfalls, and Patterns That Paid Off
• (43:09) - Community: Jon Sagara Upgrades Microsoft.TypeScript.MSBuild to v7
• (43:57) - Community: Rachel Johnson Will Teach You To Build Express APIs in TypeScript
• (44:21) - Community: Matteo Collina Says No, We Can't Harden Node.js Against Prototype Pollution
• (45:43) - Community: Matia Makes the Web Fun Again with Pretext
• (47:43) - Cool Link: I Tried Coding My Own Graphics Library
• (48:37) - Cool Link: nitter.net Lets You Follow People on X or Get RSS Feeds
• (49:36) - The Minnesota Short Goodnight

News

• Developer Tooling
  • TypeScript 7 in JetBrains WebStorm
  • TypeScript v7.1 is cooking
  • Oxlint: Type-Aware Linting Stable
  • Buz: A drop-in replacement for Bun using modern Zig
• Metaframeworks
  • SolidJS rewritten in Rust?
  • Qwik v2 Beta is official
  • Next.js: July 2026 Security Release
• Web
  • TypeScript AI: The only conference for TypeScript AI developers
  • More ECMAScript Proposals Advanced
  • Octane announced, successor to Inferno (React, compiled)
• Browsers
  • Firefox 153: See All New Features, Updates and Fixes
• Security
  • Socket: Beware of fake Corepack site (since taken down)
  • Wordpress: Wordpress Exploit is Absolutely Beautiful
  • Socket: White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities

Library Watch

• Scriptc: https://github.com/vercel-labs/scriptc
• API Extractor: Validate and track breaking changes on output typings
• Knip is k-nipping perf
• Introducing TanStack Markdown and TanStack Highlight
• Webpack 5.109: Zero-config bundling for new projects

From the Community

• Jim: TrueType QR code font
• Software Should Work conference
  • Andrew Kelly’s Talk Don't Take the Black Pill - Andrew Kelley | SSW 2026
  • Alexis King The Unreasonable Effectiveness of Constructive Data Modeling - Alexis King | SSW 2026
  • Fil-C Real Memory Safety Fil-C: Garbage In, Memory Safety Out! - Filip Pizlo | SSW 2026
• Joshua Goldberg: Mocha is donating to other projects: Knip, @nodejs.org, Prettier, and Unified
• Effect: Effect Miami 2 videos landed
• Antony Jones: TypeScript in Practice: Benefits, Pitfalls and Patterns That Paid Off
• Jon Sagara: Upgrading Microsoft.TypeScript.MSBuild to v7.0.0
• Rachel Johnson: FreeCodeCamp: Build Bullet-Proof APIs in Express w/ TS
• Matteo Collina: