Page 4 of 6. 110 briefs in the archive, newest first.
Deno 2.9 ships the experimental deno desktop command, compiling Next.js, Astro, Fresh, and other framework apps into native desktop binaries with auto-updates, plus CSS module imports and post-quantum crypto in Web Crypto.
1 source
Opus 5 is the new default model in Claude Code at the same $5/$25 pricing as Opus 4.8, scoring within 0.5% of Fable 5 on CursorBench 3.2 for half the cost per task.
3 sources
CVE-2026-44907 (CVSS 7.5) allows unauthenticated remote attackers to trigger CPU exhaustion and OOM conditions via crafted HTTP requests to Server Function endpoints.
2 sources
Next.js shipped its first pre-announced monthly security release on July 20, patching 9 vulnerabilities (4 high severity) across v16.2.11 and v15.5.21.
1 source
Microsoft Edge 151 swaps its legacy C++ XML parser for a Rust implementation, eliminating memory-corruption bugs in DOMParser and SVG parsing. Also ships CSS alpha() and Shadow DOM reference targets.
1 source
Running npx shadcn init now selects Base UI instead of Radix, with docs and scaffolding surfacing Base UI first. Radix remains fully supported and not deprecated.
1 source
Vite patches CVE-2026-39363 (arbitrary file read via dev server WebSocket) and CVE-2026-39364 (server.fs.deny bypass), affecting versions 6.x, 7.x, and 8.x. Fixed in 6.4.2, 7.3.2, and 8.0.5.
2 sources
React Compiler v1.0 shifts performance optimization from a runtime engineering problem to a build-time step, making manual memoization the exception rather than the rule. Here is when you still need it—and when to let go.
2 sources
Astro 7.0 rewrites the .astro compiler in Rust, upgrades to Vite 8 with the Rolldown bundler, and replaces the remark/rehype Markdown pipeline with a native Rust processor called Sätteri.
1 source
Safari Technology Preview 247 bundles an MCP server with 17 tools that let AI coding agents inspect the DOM, capture screenshots, read console output, and run JavaScript against a live browser, all running locally with no data leaving your machine.
1 source
SvelteKit now accepts its full config inside vite.config.js, making svelte.config.js optional. This is a preview of how SvelteKit 3 will require Vite native configuration, alongside typed environment variables and File object support in remote functions.
1 source
Vercel shipped Next.js 16.3 in preview with partial prefetching for instant route transitions, bundled AGENTS.md for AI tooling, and a React-introspecting agent browser that lets coding agents inspect component state at runtime.
1 source
Date pickers, accessibility compliance, and AI-generated spaghetti code top the list of frustrations from 120+ senior developers surveyed at JSNation and React Summit, even as AI coding tools reach mainstream adoption.
1 source
Vite+ Beta bundles Vite 7, a runtime, and a package manager into a single workflow with smart caching and a migration CLI, targeting teams tired of stitching together separate build, run, and dependency tools.
1 source
Seven new JavaScript features reach stage 4, including precise floating-point math, built-in Base64 for binary data, and cross-realm error detection. Temporal and Explicit Resource Management slip to ES2027.
1 source
AI tool adoption among developers hit 84% this year, but deployment still assumes Git fluency, terminal comfort, and DNS knowledge. The "vibe coding" movement has outpaced the deploy tooling.
1 source
The threat group behind the Miasma worm has expanded its attack surface to VS Code extensions, using them as a vector to compromise GitHub accounts and inject malicious code into open source projects.
2 sources
The :open pseudo-class is now supported in every major browser, letting you style open states of <dialog>, <details>, and <select> without JavaScript or custom attribute toggling.
2 sources
At JSNation's 2026 Open Source Awards, TanStack Start was recognized for rethinking full-stack React, while TanStack AI won for its TypeScript-first, provider-agnostic AI SDK with 265 E2E tests across 10 providers.
1 source
A staged migration with 95% config reuse let Yelp swap Webpack for Rust-powered Rspack, cutting integration builds in half and enabling portable CI caching that Webpack could not support.
1 source
Weekday mornings. 60-second reads. Unsubscribe anytime.