in the next major version of raw-body, there will be support for Web Streams. This will allow body-parser and other implementations to use it as middleware in environments where Web Streams are preferred over Node.js streams. github.com/stream-utils...

expressjs.com uses astro 7

🚀 webpack-dev-server v6.0.0 is here! ✨ Native ES modules (ESM + CJS builds) 🔌 Can now be used as a webpack plugin ⚡ Express 5 + http-proxy-middleware v4 🟢 Node.js >= 22.15.0 Release notes 👇 github.com/webpack/webp...

I feel like such a nerd trying to optimize UTF-7 for long strings.

`cookie` is now ESM-only, which means the `cookie-es` fork is no longer really necessary. It's also faster now. These are some of the changes coming in Express 6. github.com/jshttp/cooki...

Haha, I never thought I’d end up carefully reading RFCs to solve issues and, especially, to analyze vulnerabilities in Express.

Storing the password for one password manager inside another password manager.

webpack is getting a new universal target: just write target: "universal" and your code runs in any ESM-capable environment (browser, Node, web workers, Electron, NW.js). github.com/webpack/webp...

🔒 New advisory: webpack-dev-server (CVE-2026-9595). A proxy with context / and ws: true intercepts the HMR WebSocket, leaking cookies to the backend. ✅ Patched in 5.2.5 github.com/webpack/webp...

Thanks, @github.com for your donation, I really appreciate it. You can also join my sponsors at: github.com/sponsors/bjo...

Sin importar quién quede de presidente de Colombia, lo único que importa es que mejore la situación del país. La situación ya está demasiado complicada como para que venga otro y la empeore

🔒 Security update: Check out the May 2026 Security Releases for Express Stay safe out there 🫡 expressjs.com/en/blog/2026...

I’m happy to announce that Express.js documentation has a new look! 🎉 This was a huge team effort with more than a year of work behind it. Thanks to everyone involved for the support and dedication that made this launch possible. expressjs.com/en/blog/2026...

god, 20 PRs that are just AI-generated spam in the Express repo. With the little time I can dedicate to it, I still have to deal with that.

My first design in KiCad to send off for manufacturing a board for my Electronics 1 final project. It might not be much, but wow, I’m really happy to have learned this.

Over a year of work is almost ready, exciting surprises are coming from Express.

The thing people may not realize is that the best way to secure the supply chain is to secure the maintainers. And the best way to secure the maintainers is to pay them and give them a laptop, health insurance, and maybe even a desk to sit at.

I used to think meetings in open source were important. After being involved in webpack, I’ve realized they’re not. I feel more comfortable there than in projects where meetings feel mandatory and bureaucratic. While occasional meetings help with next steps, they shouldn’t be the norm.

Thanks Anthropic for the 6 months of Claude Max 20x.

This thing of going to sleep at 1am and waking up at 4am on Wednesdays is going to affect me somehow.

I’m getting tired of people using AI to contribute to open source the wrong way. If you use AI, at least check for existing PRs, be transparent, and understand what you’re doing. Maintainers don’t have unlimited time. Please be considerate.

Si usas o planeas usar Clawdbot/OpenClaw (o el nombre que termine teniendo la próxima semana), échale un vistazo a este video (youtu.be/QFhDB3UEFm8?...), súper recomendado. La seguridad es lo primordial, por encima de todo. Es una herramienta excelente y le tengo muchísimo hype.

And what if we rewrote Express in Rust?

January was a pleasant and productive month in open-source: many things got done, like new releases of iconv-lite, improvements in Express and Webpack, performance optimizations, and much more. If you want to see everything that happened 👇 bjohansebas.me/blog/2026-ja...

Enero fue un mes agradable y bonito en open-source, se trabajaron muchas cosas, como nuevas releases de iconv-lite, mejoras en Express y Webpack, optimizaciones de rendimiento y mucho más. Si quieres ver todo lo que pasó 👇 bjohansebas.me/es/blog/2026...

Fun fact, you can send the ETag header as a section trailer, wow.

I definitely did not expect this, Astro joining Cloudflare. I'm really happy for Astro and they’ll surely do amazing things within Cloudflare, and I hope that over the years they continue to keep the promise that it will remain open governance. blog.cloudflare.com/astro-joins-...

After months (yes, months, because I have a life beyond open source) I finally finished the draft PR I had to add HTTP/2 support to on-finished, also thanks to the help of my Express teammates. Feel free to review it, any help is welcome. github.com/jshttp/on-fi...

🎉 The codemods to migrate Express to version 5 are now available on codemod.com! 👉 Run the recipe: npx codemod@latest @expressjs/v5-migration-recipe 👉 More codemods here: codemod.link/express #expressjs #codemods #javascript #nodejs

Keeping the cat in the bag

Okay, today I spent time organizing the webpack security group. Tomorrow I’ll do the same with the Express TypeScript group.

🚀 [email protected] has been released! 🎉 ⚠️ Breaking: - Node <18 & safe-buffer removed 🛑 - Native TextDecoder now used 🖥️ ✨ Improvements: - Backend abstraction for Uint8Array 🌐 - GBK table updated 📜 github.com/pillarjs/ico...

🚀 [email protected] has been released! 🎉 📦fixed the TypeScript definitions to correctly reflect the library's CommonJS exports github.com/pillarjs/ico...

Luckily, npm ignores .env files when publishing, otherwise, I’d be worried right now.

With a lot of interest in reviewing this PR once it’s ready, @aviv.sh github.com/nodejs/nodej...

happy new year!🎉

In the next major version of iconv-lite, it will use TextDecoder. With this, we are working to get closer to the specification, although there is still a lot of work to be done. github.com/pillarjs/ico...

I’ve updated my CV, now available on my website 🌐 English: bjohansebas.me/cv Spanish: bjohansebas.me/es/cv The best part: I only edit a JSON file to keep it up to date, without redoing anything 😅 (thanks to whoever gave me the idea a long time ago!)

He actualizado mi CV, ahora disponible en mi sitio web 🌐 Inglés: bjohansebas.me/cv Español: bjohansebas.me/es/cv Lo mejor: solo edito un JSON para mantenerlo al día, sin rehacer nada 😅 (¡gracias a quien me dio la idea hace mucho tiempo!)

Ugh, I lost my Twitter account 😬, now trying to get it back 🙄

🎄✨ Merry Christmas! 🎅🎁

I broke the Ethernet connection throughout my house.

My GitHub in 2025, not bad for a year when I was away from the computer quite a lot compared to previous years. git-wrapped.com/profiles/bjo...

I did really well in the university’s object-oriented programming course, score 50/50.

🚀 iconv-lite 0.7.1 released 🎉 - Improved type definitions and added missing APIs 🧩 github.com/pillarjs/ico...

For moments like this, I’m so proud to be part of this amazing team ❤️ github.com/expressjs/ex...

raw-body 2.5.3 has been released! 🚀 🔧Now uses ~ for dependencies, reducing the need to publish new versions for patch updates 📦History and security files are no longer included, making the package smaller github.com/stream-utils...

All release lines of raw-body in the v0 and v1 ranges have been deprecated on npm 🚫. If you are using any of these versions, please update to a supported version (v2 or v3) 🔧. If you need help, please open an issue or contact me 🙌

I’ve decided to be happy and propose removing Node.js 0.6 from the CI. I don’t want to keep struggling to find a nice way to run Node.js 0.6 in 2025. github.com/jshttp/mime-...

raw-body 3.0.2 has been released! 🚀 🔧Now uses ~ for dependencies, reducing the need to publish new versions for patch updates 📦History and security files are no longer included, making the package smaller github.com/stream-utils...