Update _i18n/ja/_posts/2025/2025-08-31-bun-v1.2.21-apollo-client-v4-nx.md

Author: github-actions[bot]

_i18n/ja/_posts/2025/2025-08-31-bun-v1.2.21-apollo-client-v4-nx.md

@@ -0,0 +1,195 @@
+---
+title: "2025-08-31のJS: Bun v1.2.21、 Apollo Client v4、nxパッケージへのサプライチェーン攻撃"
+author: "azu"
+layout: post
+date: 2025-08-31T09:27:04.484Z
+category: JSer
+tags:
+- nodejs
+- ESLint
+- express
+- Bun
+- GraphQL
+
+---
+
+JSer.info #746 - - [Bun v1.2.21 | Bun Blog](https://bun.com/blog/bun-v1.2.21)
+- [Release @apollo/client@4.0.0 · apollographql/apollo-client](https://github.com/apollographql/apollo-client/releases/tag/%40apollo%2Fclient%404.0.0)
+- [Migrating to Apollo Client 4.0 - Apollo GraphQL Docs](https://www.apollographql.com/docs/react/migrating/apollo-client-4-migration)
+- [Malicious versions of Nx and some supporting plugins were published · Advisory · nrwl/nx](https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c)
+- [Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware - StepSecurity](https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware)
+
+----
+
+{% include inline-support.html %}
+
+----
+
+<h1 class="site-genre">ヘッドライン</h1>
+
+----
+
+## ESLint v9.34.0 released - ESLint - Pluggable JavaScript Linter
+[eslint.org/blog/2025/08/eslint-v9.34.0-released/](https://eslint.org/blog/2025/08/eslint-v9.34.0-released/ "ESLint v9.34.0 released - ESLint - Pluggable JavaScript Linter")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">ESLint</span> <span class="jser-tag">ReleaseNote</span></p>
+
+ESLint v9.34.0リリース。
+`--concurrency=auto`でmultithread lintingのサポート
+
+
+----
+
+## Bun v1.2.21 | Bun Blog
+[bun.com/blog/bun-v1.2.21](https://bun.com/blog/bun-v1.2.21 "Bun v1.2.21 | Bun Blog")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">Bun</span> <span class="jser-tag">ReleaseNote</span></p>
+
+Bun v1.2.21リリース。
+`Bun.SQL`がMySQL/MariaDB/SQLite/PostgreSQLを利用できるように、YAMLのネイティブサポート、Bun.secrets`の追加。
+
+`Bun.build` APIで`--compile`をサポート、`bunx`が`--package`フラグをサポートなど
+
+
+----
+
+## Release @apollo/client@4.0.0 · apollographql/apollo-client
+[github.com/apollographql/apollo-client/releases/tag/%40apollo%2Fclient%404.0.0](https://github.com/apollographql/apollo-client/releases/tag/%40apollo%2Fclient%404.0.0 "Release @apollo/client@4.0.0 · apollographql/apollo-client")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">JavaScript</span> <span class="jser-tag">library</span> <span class="jser-tag">ReleaseNote</span> <span class="jser-tag">GraphQL</span></p>
+
+Apollo Client 4.0リリース。
+React依存を`@apollo/client/react`に分離しコアをフレームワーク非依存化、`ApolloClient`で`link`必須化/`uri`等のショートカット削除など。
+エラーハンドリング刷新し`ApolloError`廃止しエラーごとに用意したクラスへ変更、Linkは関数からクラス化、RxJSを標準Observable実装に採用。
+`dataState`プロパティでクエリ結果がわかるように、`@defer`のサポート、`localState`オプションの追加、React Compilerでコンパイル済みのHooksの公開。
+TypeScriptの名前空間型整理/厳格化とツリーシェイク改善、SSR API刷新(`prerenderStatic`)。
+`useLazyQuery`のAPIの変更、`useQuery`から`onCompleted`と`onError`を削除。
+マイグレーションのためのCodemodも提供している。
+
+- [Migrating to Apollo Client 4.0 - Apollo GraphQL Docs](https://www.apollographql.com/docs/react/migrating/apollo-client-4-migration "Migrating to Apollo Client 4.0 - Apollo GraphQL Docs")
+
+----
+
+## Malicious versions of Nx were published · Advisory · nrwl/nx
+[github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c](https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c "Malicious versions of Nx were published · Advisory · nrwl/nx")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">nodejs</span> <span class="jser-tag">security</span> <span class="jser-tag">ReleaseNote</span></p>
+
+`nx`パッケージのマルウェアを含むバージョンが公開された問題。
+次のバージョンには問題があるため、対応が必要になっている
+
+- 21.5.0
+- 20.9.0
+- 20.10.0
+- 21.6.0
+- 20.11.0
+- 21.7.0
+- 21.8.0
+- 20.12.0
+
+- [Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware - StepSecurity](https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware "Supply Chain Security Alert: Popular Nx Build System Package Compromised with Data-Stealing Malware - StepSecurity")
+
+----
+
+## Announcing Rspack 1.5 - Rspack
+[rspack.rs/blog/announcing-1-5](https://rspack.rs/blog/announcing-1-5 "Announcing Rspack 1.5 - Rspack")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">rspack</span> <span class="jser-tag">ReleaseNote</span></p>
+
+Rspack 1.5リリース。
+Node.js 16のサポート終了。
+Barrel fileの最適化、`watchpack`の代わりにネイティブ実装を追加、`@rspack/browser`でブラウザでのbundleをサポート。
+RustでRspackを拡張するbindingをかけるように、定数のインライン化をサポートなど
+
+
+----
+
+## Node.js v22.19.0 (LTS) 
+[nodejs.org/en/blog/release/v22.19.0](https://nodejs.org/en/blog/release/v22.19.0 "Node.js v22.19.0 (LTS) ")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">nodejs</span> <span class="jser-tag">rlee</span></p>
+
+Node.js v22.19.0リリース。
+`NODE_USE_SYSTEM_CA=1`を追加、`--experimental-wasm-modules`のフラグを外す変更、`zstdCompress`の辞書をサポートなど
+
+
+----
+
+## Node.js v24.7.0 (Current)
+[nodejs.org/en/blog/release/v24.7.0](https://nodejs.org/en/blog/release/v24.7.0 "Node.js v24.7.0 (Current)")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">nodejs</span> <span class="jser-tag">ReleaseNote</span></p>
+
+Node.js v24.7.0リリース。
+`node:crypto`でPost-Quantum CryptographyとしてML-KEM/ML-DSAをサポート、Web Cryptography APIのサポートの改善。
+single executable applicationsで`execArgv`などフィールドのサポートなど
+
+
+----
+
+## August 25, 2025 Release – React Spectrum Releases
+[react-spectrum.adobe.com/releases/2025-08-25.html](https://react-spectrum.adobe.com/releases/2025-08-25.html "August 25, 2025 Release – React Spectrum Releases")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">React</span> <span class="jser-tag">library</span> <span class="jser-tag">ReleaseNote</span></p>
+
+React Spectrum August 25, 2025 Release。
+Popover/Tooltipのorigin-aware overlayアニメーション追加、AutocompleteをRC化、`GridListSection`の追加など
+
+
+----
+<h1 class="site-genre">アーティクル</h1>
+
+----
+
+## Run Express.js on Cloudflare Workers
+[jross.me/run-express-js-on-cloudflare-workers/](https://jross.me/run-express-js-on-cloudflare-workers/ "Run Express.js on Cloudflare Workers")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">nodejs</span> <span class="jser-tag">express</span> <span class="jser-tag">article</span></p>
+
+Cloudflare Workersの`enable_nodejs_http_server_modules`フラグでexpressが動作するようになったという話
+
+
+----
+
+## The Power Of The Intl API: A Definitive Guide To Browser-Native Internationalization — Smashing Magazine
+[www.smashingmagazine.com/2025/08/power-intl-api-guide-browser-native-internationalization/](https://www.smashingmagazine.com/2025/08/power-intl-api-guide-browser-native-internationalization/ "The Power Of The Intl API: A Definitive Guide To Browser-Native Internationalization — Smashing Magazine")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">i18n</span> <span class="jser-tag">JavaScript</span> <span class="jser-tag">article</span></p>
+
+Intl APIについて
+
+
+----
+
+## The Complete Guide to Self-Hosting Next.js at Scale — @dlhck
+[dlhck.com/thoughts/the-complete-guide-to-self-hosting-nextjs-at-scale](https://dlhck.com/thoughts/the-complete-guide-to-self-hosting-nextjs-at-scale "The Complete Guide to Self-Hosting Next.js at Scale — @dlhck")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">Next.js</span> <span class="jser-tag">article</span></p>
+
+Next.jsをセルフホスティングする時に気をつけるべき点についてや設定についてなど
+
+
+----
+<h1 class="site-genre">ソフトウェア、ツール、ライブラリ関係</h1>
+
+----
+
+## sidequestjs/sidequest: Sidequest is a modern, scalable background job processor for Node.js applications.
+[github.com/sidequestjs/sidequest](https://github.com/sidequestjs/sidequest "sidequestjs/sidequest: Sidequest is a modern, scalable background job processor for Node.js applications.")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">nodejs</span> <span class="jser-tag">library</span></p>
+
+Node.jsでバックグラウンドジョブを処理するライブラリ。
+`node:worker_threads`を使った実装になっている
+
+- [Sidequest.js](https://sidequestjs.com/posts/intro-to-sidequest/ "Sidequest.js")
+
+----
+
+## adamhl8/filterql: A tiny query language for filtering structured data
+[github.com/adamhl8/filterql](https://github.com/adamhl8/filterql "adamhl8/filterql: A tiny query language for filtering structured data")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">JavaScript</span> <span class="jser-tag">library</span> <span class="jser-tag">search</span></p>
+
+データのスキーマを定義して、検索を行うDSLを提供するライブラリ。
+一致検索、比較、ソートなどを行う検索演算子に対応している。
+
+
+----
+
+## image-js/image-js: Image processing and manipulation in JavaScript
+[github.com/image-js/image-js](https://github.com/image-js/image-js "image-js/image-js: Image processing and manipulation in JavaScript")
+<p class="jser-tags jser-tag-icon"><span class="jser-tag">JavaScript</span> <span class="jser-tag">Image</span> <span class="jser-tag">library</span></p>
+
+JavaScriptで画像処理を行うライブラリ。
+Node.jsとブラウザで動作し、PNG/JPEG/TIFFなどの画像の読み書きや、ピクセル単位の処理、フィルター、マスクなど画像処理を提供している
+
+
+----