Adventures in Nodeland logo

Adventures in Nodeland

Subscribe
Archives
September 5, 2022

OpenJS Collaborator Summit and other Adventures in Nodeland - Issue #75

Hi Everyone, September is usually a month of maximum activity in the industry… and I’m no exception. In fact, I will be announcing something new soon.

OpenJS Collaborator Summit - Join us in Dublin + Virtual October 1-2! - OpenJS Foundation
OpenJS Collaborator Summit - Join us in Dublin + Virtual October 1-2! - OpenJS Foundation
Join us in Dublin, Ireland, and virtually October 1-2, 2022, for the OpenJS Collaborator Summit! The Collab Summit is a great time to connect with peers from other projects and learn more about what they are doing and how OpenJS Foundation community members can support your work.
You can register at https://www.eventbrite.com/e/openjs-foundation-collaborator-summit-dublin-tickets-410575531467. Note that there is a discount for NodeConf.eu for all OpenJS Collaborator Summit attendees: CollabSummit-Discount2022.
openjsf.org
OpenJS Collaborator Summit - Join us in Dublin + Virtual October 1-2! - OpenJS Foundation
OpenJS Collaborator Summit - Join us in Dublin + Virtual October 1-2! - OpenJS Foundation
Join us in Dublin, Ireland, and virtually October 1-2, 2022, for the OpenJS Collaborator Summit! The Collab Summit is a great time to connect with peers from other projects and learn more about what they are doing and how OpenJS Foundation community members can support your work.
You can register at https://www.eventbrite.com/e/openjs-foundation-collaborator-summit-dublin-tickets-410575531467. Note that there is a discount for NodeConf.eu for all OpenJS Collaborator Summit attendees: CollabSummit-Discount2022.
openjsf.org

Fastify

  • mercurius v10.5.0 adds the ability to identify a query when using batching uniquely. As in all best traditions, v10.5.1 makes it work. v11.0.0 aligns Mercurius to the latest GraphQL spec and makes it always return 200 in case of errors.
  • fastify-nextjs v9.1.1 uses reply.hijack() over reply.sent and fixes a deprecation warning.
  • fastify-rate-limit v7.4.0 add the “key” in the “onExceeding” and “onBanReach” callbacks.
  • fastify-helmet v10.0.0 bumps the helmet dependency to v6.
  • fastify v3.29.2 backports a fix when a connection is reused.
  • fast-json-stringify v5.2.0 contains several refactors and performance improvements (see https://github.com/fastify/fast-json-stringify/issues/506 for the most critical one).
  • fastify-cli v5.4.0 adds support for generating ES modules and a help flag. v5.4.1 adds the missing help text.
  • fastify-multipart v7.1.2 adds support for uploading with fields with the same name and manage big file uploads≥

Pino

  • pino v8.5.0 adds a new onChild option and lands quite a few docs improvements - it clarifies that there is no need anymore to use pino.final().

Node.js

I didn’t know there was a RFC to handle the migration from IPv4 to IPv6… and the amount of botched IPv6 networks that are out there. Everything works for everybody thanks to RFC8305 “Happy Eyeballs” - indeed, it keeps us happy.

RFC 8305 - Happy Eyeballs Version 2: Better Connectivity Using Concurrency
Internet Engineering Task Force (IETF) D. Schinazi Request for Comments: 8305 T. Pauly Obsoletes: 6555 Apple Inc.
datatracker.ietf.org
watch: add initial implementation for `node --watch` by MoLow · Pull Request #44366 · nodejs/node · GitHub
watch: add initial implementation for `node --watch` by MoLow · Pull Request #44366 · nodejs/node · GitHub
Node.js –watch mode landed. How will it change the landscape?
github.com
watch: add initial implementation for `node --watch` by MoLow · Pull Request #44366 · nodejs/node · GitHub
watch: add initial implementation for `node --watch` by MoLow · Pull Request #44366 · nodejs/node · GitHub
Node.js –watch mode landed. How will it change the landscape?
github.com

News

npm Best Practices for the Supply-Chain - Open Source Security Foundation
npm Best Practices for the Supply-Chain - Open Source Security Foundation
Check out this guide to protect against supply chain attacks. It includes quite a few interesting tricks. Check it out.
openssf.org
npm Best Practices for the Supply-Chain - Open Source Security Foundation
npm Best Practices for the Supply-Chain - Open Source Security Foundation
Check out this guide to protect against supply chain attacks. It includes quite a few interesting tricks. Check it out.
openssf.org

Given that GitHub now supports commit verification with SSH keys, there is no excuse to not sign your commits. Start do it now.

SSH commit verification now supported | GitHub Changelog
SSH commit verification now supported | GitHub Changelog
GitHub now supports SSH commit verification, so you can sign commits and tags locally using a self-generated SSH public key, which will give others confidence about the origin of a change you have made.
github.blog
How to peacefully grow your service
How to peacefully grow your service
In the last almost two decades, I have seen numerous Internet services ranging from small services for niche markets to Tier 1 services for major Internet companies. In this period, apart from database or application design, the technical success of a growing product benefited significantly from adopting a few characteristics:
  1. Feature boundaries
  2. Data autonomy
  3. Cell-based architecture
  4. Service and database dependencies
  5. Graceful degradation
  6. Unique identifiers
  7. Idempotency
  8. SLOs and quotas
  9. Observability
rakyll.medium.com
  1. Feature boundaries
  2. Data autonomy
  3. Cell-based architecture
  4. Service and database dependencies
  5. Graceful degradation
  6. Unique identifiers
  7. Idempotency
  8. SLOs and quotas
  9. Observability
How to peacefully grow your service
How to peacefully grow your service
In the last almost two decades, I have seen numerous Internet services ranging from small services for niche markets to Tier 1 services for major Internet companies. In this period, apart from database or application design, the technical success of a growing product benefited significantly from adopting a few characteristics:
  1. Feature boundaries
  2. Data autonomy
  3. Cell-based architecture
  4. Service and database dependencies
  5. Graceful degradation
  6. Unique identifiers
  7. Idempotency
  8. SLOs and quotas
  9. Observability
rakyll.medium.com
Measure What You Impact, Not What You Influence – CSS Wizardry
Measure What You Impact, Not What You Influence – CSS Wizardry
A thing I see developers do time and time again is make performance-facing changes to their sites and apps, but mistakes in how they measure them often lead to incorrect conclusions about the effectiveness of that work.
csswizardry.com
In Pursuit of Better Container Images
In Pursuit of Better Container Images
Disclaimer 1: I work for Slim.AI as a software engineer, but this article is my personal take on the topic. No one at Slim.AI asked me to write it or somehow influenced the narrative. Disclaimer 2: It’s not an attempt to attack Alpine or any Alpine-based products.
iximiuz.com
In Pursuit of Better Container Images
In Pursuit of Better Container Images
Disclaimer 1: I work for Slim.AI as a software engineer, but this article is my personal take on the topic. No one at Slim.AI asked me to write it or somehow influenced the narrative. Disclaimer 2: It’s not an attempt to attack Alpine or any Alpine-based products.
iximiuz.com
Announcing OpenFGA - Auth0’s Open Source Fine Grained Authorization System
Announcing OpenFGA - Auth0’s Open Source Fine Grained Authorization System
Fine-grained authorization-at-scale, available for everyone
auth0.com
Don't miss what's next. Subscribe to Adventures in Nodeland:
GitHub X YouTube LinkedIn