Page 6 of 6. 110 briefs in the archive, newest first.
Google announced WebMCP, an open standard turning websites into agent toolkits, and built-in Gemini Nano in Chrome for on-device AI. Here's what the agentic web means for how we build and how users interact with our applications.
1 source
Two long-awaited CSS features landed in Chrome 147: border-shape for non-rectangular element borders, and element-scoped view transitions that animate individual components without full-page transitions. Here's how they work and what they replace.
1 source
Microsoft shipped the TypeScript 7.0 beta with a ground-up Go rewrite. The new native compiler is roughly 10x faster and uses shared-memory multi-threading. Here's what changes for your toolchain and how to prepare for the 6.0 → 7.0 jump.
2 sources
A coordinated security disclosure on May 6 patched 12 vulnerabilities across Next.js, including middleware bypass, XSS, and SSRF. Patches were NOT backported to 13.x or 14.x. If you haven't upgraded to 15.x or 16.x, now is the time.
1 source
RSCs flip the traditional component model on its head. Components now run on the server by default, client interactivity becomes opt-in. Here's what changes for how you think about data fetching, bundle size, and composition.
1 source
CVE-2026-42826 lets unauthenticated attackers extract sensitive data from Azure DevOps with zero user interaction. CVSS score of 10.0, the highest possible. Here's what's exposed and how to check if you're patched.
2 sources
Position tooltips, popovers, and dropdowns relative to any anchor element , without a single line of JavaScript. Native anchor positioning replaces a decade of third-party positioning libraries.
1 source
The React Foundation officially launched under the Linux Foundation, making React, React Native, and JSX community-governed projects. Meta is no longer the sole owner. Here's why this matters for the ecosystem's long-term health.
2 sources
Middleware is no longer constrained to the Edge runtime subset. Fluid Compute gives you the full Node.js API surface while keeping the same global latency profile. Auth, feature flags, and geo-routing just got simpler.
1 source
A coordinated campaign injected malicious code into 14 widely-used npm packages last week. We break down the affected packages, detection steps for your lockfile, and the one CI flag that catches this.
1 source
Weekday mornings. 60-second reads. Unsubscribe anytime.