Atlassian

AWS Fundamentals

Dan Vega

GamesIndustry.biz

InfoQ

JetBrains

<h2>Must know</h2>
<ul>
<li><strong>GlassWorm malware hits Open VSX and GitHub</strong>: A sophisticated supply-chain campaign is exploiting the Open VSX registry and GitHub by publishing clean extensions that later pull malicious dependencies. Socket researchers identified over 72 malicious extensions impersonating tools like ESLint, Prettier, and Claude Code, which use invisible Unicode characters to hide payloads. The malware leverages VS Code’s automatic dependency installation to silently deliver loaders, making manual auditing of extension updates critical for dev environment security. <a href="https://app.daily.dev/feed-by-ids?id=yKzLDg3bN&amp;id=7qAB3XlzU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agentic engineering shifts from code to orchestration</strong>: New tools like CMAX and Superset are emerging to manage multiple AI coding agents in parallel, treating them as infrastructure consumers rather than just chat interfaces. This shift, highlighted by Simon Willison and Wix Engineering, moves the developer’s role toward problem definition and system design while using TDD as a primary verification mechanism for agent-generated code. Organizations are now being advised to extend platform engineering to include structured MCP tool schemas and dedicated memory infrastructure for these autonomous agents. <a href="https://app.daily.dev/feed-by-ids?id=ALuLcDJZk&amp;id=z0VqCmHFA&amp;id=UUgRQXsUQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Temporal API reaches Stage 4 in ECMAScript 2026</strong>: The TC39 committee has officially advanced the Temporal API to Stage 4, finally providing a modern, immutable replacement for the long-broken JavaScript Date object. This specification includes built-in time zone support and predictable date arithmetic, with browser support already landing in Firefox and Chromium. TypeScript 6.0 will include native type definitions for the new types, marking the end of a decade-long development effort by Bloomberg, Google, and Microsoft. <a href="https://app.daily.dev/posts/WsjtjDMl5" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenJarvis brings local first AI agents to personal devices</strong>: A Stanford-developed framework using Rust and multiple backends like vLLM to run 88% of reasoning tasks on-device with 5x efficiency gains. <a href="https://app.daily.dev/posts/UjBsvfRxN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Avalonia UI 12.0 drops legacy .NET support</strong>: The new preview requires .NET 8, adds Mac Catalyst support, and transitions the VS Code extension to a paid, closed-source model. <a href="https://app.daily.dev/feed-by-ids?id=I5gILgxNy&amp;id=RDfVaJWvK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Z80 Sans font disassembles opcodes via OpenType</strong>: A novel project uses OpenType substitution and positioning tables to turn a font into a functional Z80 assembly disassembler. <a href="https://app.daily.dev/posts/NHBet6OKX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Atlassian Rovo boosts retrieval with Llama Nemotron</strong>: Fine-tuning NVIDIA’s 1B model on Jira-specific data yielded a 40% uplift in semantic search quality for enterprise work graphs. <a href="https://app.daily.dev/posts/q8F6oyyrv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pushduck simplifies type safe file uploads</strong>: A universal TypeScript library supporting 16+ frameworks and multiple storage providers to eliminate AWS SDK boilerplate. <a href="https://app.daily.dev/posts/xiGGOItVN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ConfigClarity offers zero backend DevOps auditing</strong>: A suite of browser-based tools for auditing Docker, SSL, and firewalls entirely client-side to ensure sensitive configs never leave the machine. <a href="https://app.daily.dev/posts/0XeW2Rx4B" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>WordPress 7.0 adds native custom CSS and dimensions</strong>: The update introduces first-class block support for width, height, and per-instance custom CSS scoped via unique hashes. <a href="https://app.daily.dev/feed-by-ids?id=3xregKloE&amp;id=v2k0fI8Iw" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Amazon blames users for AI induced outages</strong>: After internal AI tools like Amazon Q and Kuro wiped production environments and killed millions of orders, Amazon’s brilliant solution was to blame ‘user error’ and mandate senior sign-offs. This comes right after laying off 16,000 engineers, proving that management thinks you can replace expertise with a $200B bet on next-token predictors and a prayer. It’s a masterclass in corporate gaslighting: firing the people who know how the system works and then acting surprised when the ‘magic’ code-bot deletes the database. <a href="https://app.daily.dev/feed-by-ids?id=Nu2d4YyjL&amp;id=PUmEAEdtU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The 30 minute app is a vibe coding lie</strong>: While influencers scream about building startups in a lunch break, real-world ‘vibe-coding’ benchmarks show it still takes 100+ hours to handle UI edge cases, AWS infra, and security. ‘Vibe-coding’ is just a fancy term for prompt engineering until the hallucinations stop, and it turns out you still need an actual engineer to fix the launch-day failures. If your ‘AI-generated’ app doesn’t have a human-in-the-loop for the boring stuff like error handling, it’s just a very expensive prototype. <a href="https://app.daily.dev/feed-by-ids?id=8mHkiEYNC&amp;id=fGgNFxUDn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>IPv4x is the network protocol that shouldn’t be</strong>: A new ‘thought experiment’ proposes IPv4x, a 128-bit extension to IPv4, because apparently, we’d rather reinvent the wheel than finish the IPv6 migration we started 30 years ago. It’s a classic case of ‘backward compatibility’ fetishism that ignores the massive technical debt of updating every DNS and DHCP server on the planet just to avoid learning a new address format. Sometimes a ‘missed opportunity’ is actually just a bad idea that rightfully died in a whiteboard session. <a href="https://app.daily.dev/posts/MgAj9qPB2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
