DuckDB

EAWheel

freeCodeCamp

ITNEXT

JetBrains

Lobsters

<h2>Must know</h2>
<ul>
<li><strong>AI coding assistants: more planning, more bugs, more cost</strong>: AI coding assistants, while perceived as productivity boosters, actually demand significantly more upfront architectural planning and detailed specifications. A 2025 study revealed that teams using AI assistants took 19% longer to complete tasks, with code review times increasing by 91% and 45% of AI-generated code containing security vulnerabilities. This suggests that treating AI as a junior developer requiring clear direction, rather than an autonomous agent, is crucial to avoid an ‘architecture tax’ that negates perceived gains, as reported by The Miners. <a href="https://app.daily.dev/feed-by-ids?id=pYjmmMIkn&amp;id=MVxk3C8r1&amp;id=2tsKdG55u" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React server components hit with DoS vulnerabilities</strong>: Multiple high-severity denial-of-service vulnerabilities (CVE-2026-23864, CVSS 7.5) have been found in React Server Components, affecting React 19.0.x through 19.2.x and Next.js versions 13.x through 16.x. These flaws can be exploited via crafted HTTP requests, leading to server crashes or excessive CPU usage. Vercel has deployed WAF mitigations, but immediate upgrades to patched versions (React 19.0.4+, 19.1.5+, 19.2.4+) are recommended to fully address the issue, as reported by multiple sources. <a href="https://app.daily.dev/feed-by-ids?id=igYAcLEa7&amp;id=ie5iik7vo&amp;id=PeVwqMgPR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel 6.19 rolls back scheduler changes after performance hit</strong>: The Linux 6.19 kernel’s initial test versions enabled the NEXT_BUDDY feature for the EEVDF scheduler, but quickly faced reports of performance regressions in workloads like MySQL and SPECjbb. Benchmarks confirmed these issues, leading to the feature being disabled in the rc7 release candidate. This rollback highlights the kernel community’s rapid response to performance degradation, prioritizing stability over new, unproven features, according to Phoronix. <a href="https://app.daily.dev/feed-by-ids?id=85ivk605B&amp;id=mNRQJiXzS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Docker sandboxes microVM isolation for AI agents</strong>: Docker Sandboxes now offers microVM-based isolation for AI coding agents like Claude Code and Gemini CLI, allowing them to install packages and modify files without impacting the host system, currently available on macOS with Windows and Linux support planned. <a href="https://app.daily.dev/posts/6YdOupFK7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI upgrades ChatGPT code execution</strong>: OpenAI has enhanced ChatGPT’s code execution feature, enabling Bash commands and package installation via pip and npm within its sandboxed environment, now accessible to all users, including free-tier accounts. <a href="https://app.daily.dev/posts/7V1v7MpYn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft launches winapp CLI for Windows API complexity</strong>: Microsoft released ‘winapp,’ a command-line tool designed to simplify Windows app development outside Visual Studio by automating SDK management and app packaging, though developer feedback suggests skepticism about its ability to resolve long-standing platform issues. <a href="https://app.daily.dev/posts/xa7n8KICk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Uncloud Kubernetes alternative gains traction</strong>: Uncloud, an open-source deployment platform built on Docker, Caddy, and WireGuard, is gaining momentum among small teams as a simpler Kubernetes alternative, offering single-command deployments from source to production without container registries. <a href="https://app.daily.dev/posts/FrS1fa85P" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AMDGPU Linux driver adds HDMI VRR and ALLM gaming support</strong>: AMDGPU Linux kernel driver patches now introduce HDMI Variable Rate Refresh (VRR) and Auto Low Latency Mode (ALLM) for gaming on HDMI displays, aiming for feature parity with DisplayPort and Windows platforms despite HDMI Forum’s open-source restrictions. <a href="https://app.daily.dev/posts/bsF1QAXcQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js 25.5.0 released with security and feature updates</strong>: Node.js 25.5.0 is out, featuring an upgrade to NSS 3.119 root certificates, a new --build-sea flag for Single Executable Application generation, and an ‘ignore’ option for fs.watch, alongside various bug fixes and dependency updates. <a href="https://app.daily.dev/posts/BrQRGrBKE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KDE Plasma 6.6 shifts to systemd, ends FreeBSD support</strong>: KDE Plasma 6.6 beta introduces a systemd-logind dependent login manager, effectively ending FreeBSD support and signaling an increasing Linux-specific direction for the project, mirroring similar changes in GNOME. <a href="https://app.daily.dev/posts/satawafBY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cursor AI agents build a browser ‘from scratch’ (spoiler: they didn’t)</strong>: Cursor’s CEO proudly announced their AI agents built a fully functional web browser ‘from scratch’ in a week, generating over 3 million lines of code. Independent developers, however, quickly found the browser barely compiles, doesn’t work, and relies heavily on existing projects like Servo and QuickJS. Apparently, ‘from scratch’ now means ‘cobbled together by an AI with a massive token budget and zero originality,’ as reported by multiple sources. <a href="https://app.daily.dev/posts/DovPZUpOP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI will make open source unsustainable, say open source advocates</strong>: Tailwind CSS, a popular open-source project, reportedly saw an 80% revenue drop and laid off 75% of its staff because developers are using AI tools instead of documentation, where sponsorships live. Now, open-source advocates are calling for companies to commit $2,000 per developer annually to save ‘critical infrastructure.’ Because, you know, AI is great for productivity, but only if someone else is paying for the foundations it’s built on, as Frontend Masters reports. <a href="https://app.daily.dev/feed-by-ids?id=3KjVRqoNX&amp;id=YRC8HFFhU&amp;id=p61M36Xco" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated software tests: the illusion of quality</strong>: Some folks are now using large language models to generate software tests <em>after</em> the code is written, claiming it boosts coverage. But, as one expert points out, if you don’t validate these tests by seeing them fail, they’re just ‘ceremony’—a false sense of security. It’s like getting a participation trophy for testing; looks good on paper, but doesn’t actually mean anything, as discussed in a recent article. <a href="https://app.daily.dev/feed-by-ids?id=wLM9iDorf&amp;id=fCnYkdABA&amp;id=C8Y8HJc5B" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
