ClickHouse

CNCF

Daily Dose of Data Science | Avi Chawla | Substack

ElixirStatus

Expedia Group Tech

freeCodeCamp

<h2>Must know</h2>
<ul>
<li><strong>AI coding agents are still pretty dumb, need human babysitters</strong>: Turns out, those fancy AI coding agents like Cursor’s Composer, while great for speeding up development, still need a lot of human oversight. Engineers using these tools report that while AI-generated code often passes initial reviews, it can lead to unmaintainable codebases lacking architectural coherence. The real challenge isn’t just generating code, but ensuring it’s actually good and fits into the bigger picture, as highlighted by Cursor’s own engineering post and various developer panels. So, for now, your job is safe, but you might be spending more time orchestrating AI than coding yourself. <a href="https://app.daily.dev/feed-by-ids?id=FG4y5lmMt&amp;id=MVxk3C8r1&amp;id=NAHzSpYqv&amp;id=W6qwFXBzp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React server components are a security nightmare</strong>: If you’re using React Server Components, especially with Next.js, you might want to check your security. Multiple denial-of-service vulnerabilities (CVE-2026-23864) have been found, allowing attackers to crash servers with crafted HTTP requests. Even worse, the React2Shell vulnerability (CVE-2025-55182, CVE-2025-66478) allows server-side code execution and has been actively exploited in the wild to deploy malware. Vercel has implemented WAF mitigations, but immediate upgrades to patched versions are crucial. This is a widespread issue given the popularity of these frameworks, so don’t drag your feet. <a href="https://app.daily.dev/feed-by-ids?id=igYAcLEa7&amp;id=PeVwqMgPR&amp;id=ie5iik7vo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js app crashes due to hidden circular dependencies</strong>: A Node.js application experienced intermittent crashes under high load, initially misattributed to monitoring tools. The real culprit? A circular dependency between services that lazy loading masked during startup. The issue only surfaced under stress, causing an AssertionError. The fix involved rearchitecting the services to break the cycle, proving that even with modern tools, understanding your dependency graph is critical, especially in high-concurrency environments. This is a classic example of how architectural debt can bite you when you least expect it. <a href="https://app.daily.dev/posts/Qi1nz2r3E" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Docker sandboxes for AI coding agents now on macOS</strong>: Docker Sandboxes now offers microVM-based isolation for AI coding agents like Claude Code and Gemini CLI on macOS, allowing them to operate securely with full system access within their own dedicated virtual machines, with Windows and Linux support planned. <a href="https://app.daily.dev/posts/6YdOupFK7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ChatGPT code execution environment gets a massive upgrade</strong>: OpenAI’s ChatGPT code execution environment now supports Bash commands, multiple new programming languages (JavaScript, Ruby, Go, Java, Swift, C++), and allows users to install Python and JavaScript packages via internal proxies, significantly expanding its utility for developers. <a href="https://app.daily.dev/posts/7V1v7MpYn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft releases winapp tool for Windows developers</strong>: Microsoft has launched ‘winapp,’ a command-line tool designed to simplify Windows app development outside Visual Studio by automating SDK management, manifest creation, and packaging, though developer community reactions remain skeptical about its ability to solve core complexity issues. <a href="https://app.daily.dev/posts/xa7n8KICk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KDE Plasma desktop now runs on Apple M3 chips</strong>: The KDE Plasma desktop environment is now compatible with Apple M3 chips, thanks to the Fedora Asahi Remix and the efforts of the Asahi Linux project contributors, marking a significant milestone for Linux on Apple Silicon. <a href="https://app.daily.dev/posts/cxEiHEruW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ktor 3.4 enhances HTTP client and documentation</strong>: Ktor 3.4 introduces duplex streaming for the OkHttp client, an HttpRequestLifecycle plugin for automatic request cancellation, and a new runtime API for dynamic Swagger documentation generation, alongside Zstd compression support. <a href="https://app.daily.dev/posts/FLMxxYChP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS launches EC2 G7e instances with Blackwell GPUs</strong>: AWS has announced new Amazon EC2 G7e instances featuring NVIDIA Blackwell GPUs, delivering 2.3x better inference performance and supporting AI/ML models up to 70 billion parameters, alongside updates to Amazon Corretto and Elastic Container Registry. <a href="https://app.daily.dev/posts/lbS5HEqo8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DuckDB 1.4.4 LTS focuses on stability and performance</strong>: DuckDB 1.4.4 LTS has been released, focusing on bugfixes, performance improvements, and security patches, addressing correctness issues in various join types and fixing multiple crash scenarios, with no major new features but an emphasis on stability. <a href="https://app.daily.dev/posts/4NWUdLPx5" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will solve all your math problems, just trust us</strong>: Apparently, Numina-Lean-Agent, Opus 4.5, and GPT-5.2 are so smart they can solve all Putnam 2025 math problems and autonomously generate zero-day exploits. This ‘industrialization’ of cyber espionage and ‘transformative’ economic impact is all according to the Import AI newsletter, which, conveniently, provides no direct references or empirical data. It’s almost like they’re trying to scare us into believing AI is omnipotent, probably to justify those exorbitant safety budgets. Just remember, the same folks predicted AI would replace all software engineers by now. <a href="https://app.daily.dev/posts/QxbydGQJy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open source is dying because AI coders don’t read docs</strong>: The Frontend Masters Blog and some peer-reviewed research are claiming that AI coding tools are killing open source. Apparently, developers are now ‘vibe coding’—assembling software without bothering to read documentation or interact with maintainers. This has led to an 80% revenue drop and 75% staff layoffs at Tailwind CSS. So, AI makes developers lazy, open source projects starve, and we all end up with lower quality software. Who could have predicted that giving people tools to avoid understanding things might have consequences? <a href="https://app.daily.dev/feed-by-ids?id=3KjVRqoNX&amp;id=YRC8HFFhU&amp;id=aDodkq3hd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated code is the new fast fashion, because who needs quality?</strong>: According to some very concerned articles, AI-generated code is turning software development into ‘fast fashion’—prioritizing speed and metrics over quality, leading to ‘mediocre, narrow, and rote engineering.’ They’re calling it ‘vibe coding,’ where LLMs churn out inconsistent, inefficient, and disposable code. So, while you’re busy orchestrating your AI agents, remember that you might just be contributing to a mountain of digital landfill. But hey, at least it was fast, right? <a href="https://app.daily.dev/feed-by-ids?id=dABjwqV7N&amp;id=vz4g5mSDD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
