ibitCSS animation isn't faster because the math is cheaper. It's faster because it can run off the main thread entirely — and a JS library that hooks the same engine is just as smooth.
The HTML Sanitizer API moves XSS stripping into the engine that actually runs the HTML — closing a structural gap that DOMPurify could only paper over. But it's defense-in-depth, not a license to drop server sanitization.
Promise.all rejects, but it never cancels the tasks it was waiting on — which is how you end up with zombie fetches and connection slots that never free.
Minification is theater if you also publish the .map file — the sourcesContent field inlines your original code, comments and all. The honest fix is a boring CI check, not vigilance.
JavaScript's Temporal API finally fixes Date — but the real lesson is that the original bugs were never fixable at all. At web scale, the only repair is additive.