CSS-Tricks

DEVCLASS

Electron

Erlang Forums

ESLint

<h2>Must know</h2>
<ul>
<li><strong>Microsoft open sources XAML Studio for .NET UI prototyping</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation, aiming to accelerate prototyping and feedback loops for XAML-based UI development. This move, reported by Microsoft press releases, allows community contributions via GitHub and enhances integration with WinUI 3 and current .NET releases. The tool, now distributed as source code, is intended to be a ‘seed project’ for broader community collaboration, potentially extending support to platforms like Avalonia and Uno. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js addresses multiple CVEs with security fixes</strong>: Node.js released versions 20.20.0 LTS and 25.3.0, addressing several security vulnerabilities. These updates, detailed in Node.js project sources, include disabling <code>futimes</code> with the permission model, adding a default error handler for <code>TLSSocket</code>, and requiring full read/write permissions for symlink APIs. The releases also fix stack overflow exceptions in <code>async_hooks</code> and remove unsafe buffer creation, enhancing the runtime’s overall security posture. <a href="https://app.daily.dev/feed-by-ids?id=DwsoMgMKH&amp;id=WX4br4Zyw&amp;id=Yy5NFIIOM&amp;id=Zr0Dv9dwZ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS CodeBuild regex misconfiguration exposed repos to supply chain attack risk</strong>: Security researchers at Wiz discovered a critical vulnerability in AWS CodeBuild, dubbed CodeBreach, caused by improperly anchored regex patterns in webhook filters. This flaw, reported by Wiz and confirmed by AWS, allowed attackers to bypass security controls and potentially gain admin-level access to AWS GitHub repositories, including the AWS JavaScript SDK. AWS patched the issue within 48 hours, but the incident highlights persistent risks in CI/CD pipeline misconfigurations and the potential for widespread supply chain attacks. <a href="https://app.daily.dev/posts/q7gLeN4EH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Electron 40.0.0 released with Chromium and Node.js upgrades</strong>: Electron 40.0.0 is out, bringing upgrades to Chromium 144.0.7559.60, V8 14.4, and Node 24.11.1, alongside new features like HDR color space support and a hardware acceleration detection API. <a href="https://app.daily.dev/posts/VsVvB0iFk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust-analyzer 0.3.2761 improves flycheck and symbol indexing</strong>: Rust-analyzer version 0.3.2761 introduces flycheck triggering for non-workspace file modifications, fixes 13 issues, and enhances symbol indexing for macro-generated imports and path re-exports. <a href="https://app.daily.dev/posts/kEIknGK9T" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bun v1.3.6 brings new APIs and performance boosts</strong>: Bun v1.3.6 introduces new APIs for tarball creation/extraction and JSONC parsing, adds metafile and virtual files support to Bun.build, and delivers significant performance improvements across various operations. <a href="https://app.daily.dev/posts/Wx4br4Zyw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Next.js 16 stabilizes Turbopack and introduces AI debugging</strong>: Next.js 16 stabilizes Turbopack as the default bundler for faster builds and introduces AI-assisted debugging through Model Context Protocol (MCP) integration in DevTools, enabling AI agents to suggest fixes. <a href="https://app.daily.dev/posts/91xiEmcVe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>jQuery 4.0.0 drops old browser support and adds security features</strong>: jQuery 4.0.0, the first major update in nearly a decade, drops support for Internet Explorer 10 and older browsers, migrates to ECMAScript modules, and adds new security features like Trusted Types and Content Security Policy (CSP) support. <a href="https://app.daily.dev/feed-by-ids?id=AoIqFxdV4&amp;id=tiabwh937" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open sources XAML Studio for .NET UI prototyping</strong>: Microsoft has open-sourced XAML Studio under the .NET Foundation, aiming to accelerate prototyping and feedback loops for XAML-based UI development, enhancing integration with WinUI 3 and current .NET releases. <a href="https://app.daily.dev/posts/hUJrXK08w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ESLint expands language support and improves performance</strong>: ESLint expanded language support in 2025 with official CSS and HTML plugins, introduced multithreaded linting for 30-300% performance improvements, and integrated with AI tools like GitHub Copilot. <a href="https://app.daily.dev/posts/2lLhf9kl2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding agents: the new bottleneck is you</strong>: Apparently, AI coding agents are so fast that the bottleneck has shifted from execution to ‘problem definition and requirements gathering.’ So, instead of writing code, engineers now need to become ‘Product Engineers’ who are experts in user interviews and ‘strategic thinking.’ Because, you know, before AI, engineers just blindly coded without understanding anything. It’s almost like they’re saying AI is so good, it’s exposing how bad humans are at their jobs, or maybe, just maybe, it’s exposing how much ‘AI’ is just a fancy wrapper for ‘we still need smart people to tell it what to do.’ <a href="https://app.daily.dev/feed-by-ids?id=ruSCTD0Fh&amp;id=sifgyKGyd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code: faster, buggier, and making you slower</strong>: According to some ‘research,’ AI coding assistants generate 46% more code but double the bugs, increase churn, and actually make developers 19% slower. The core issue? AI optimizes for typing speed, not system design, leading to ‘technical debt’ and developers merging code they don’t understand. So, we’re paying for tools that make us feel faster while making us objectively worse. Brilliant. It’s like buying a car that goes 200 mph but only has a steering wheel and no brakes. <a href="https://app.daily.dev/feed-by-ids?id=5khP1Wt37&amp;id=J24eplQdr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MinIO’s open-source pivot: because ‘community’ means ‘build it yourself’</strong>: MinIO, the S3-compatible object storage solution, has decided that ‘open source’ now means they’re removing the web UI from the community version, stopping binary builds, and pushing users towards paid plans. If you want to use it, you can ‘build containers from source’ or use ‘community-maintained builds.’ It’s a bold strategy, Cotton, to redefine open source as ‘we’ll give you the ingredients, but you have to bake the cake yourself, and by the way, we’re selling pre-baked cakes now.’ <a href="https://app.daily.dev/feed-by-ids?id=BlaRu37xQ&amp;id=E5LbALony" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
