--- title: Octane launches as a compiled React alternative, Nuxt... description: Dominic Gannaway announced Octane, a compiled successor to Inferno that supports React's programming model without a virtual DOM or manual dependency arrays —... canonical: https://daily.dev/posts/octane-launches-as-a-compiled-react-alternative-nuxt-patches-critical-rce-belkqfogt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Octane launches as a compiled React alternative, Nuxt patches critical RCE | daily.dev og:description: Dominic Gannaway announced Octane, a compiled successor to Inferno that supports React's programming model without a virtual DOM or manual dependency arrays —... og:url: https://daily.dev/posts/octane-launches-as-a-compiled-react-alternative-nuxt-patches-critical-rce-belkqfogt og:image: https://api.daily.dev/og/posts/BELkQfogT.png og:image:alt: Octane launches as a compiled React alternative, Nuxt patches critical RCE og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Octane launches as a compiled React alternative, Nuxt patches critical RCE **[Web Digest](https://daily.dev/sources/webdev_digest)** · 4 min read · 1 upvotes · 0 comments ## Summary Dominic Gannaway announced Octane, a compiled successor to Inferno that supports React's programming model without a virtual DOM or manual dependency arrays — early benchmarks put it alongside Solid and vanilla JS. Nuxt pushed security patches across versions 4.5.1 and 3.21.10 fixing eight vulnerabilities, including a critical unauthenticated RCE in DevTools and a high-severity server-side RCE when vue.runtimeCompiler is enabled. Kimi K3's 2.8T open-weight model dropped with a #1 ranking on the Frontend Code Arena, though self-hosting requires 64 H100s. TypeScript 7's parallel type checker hit 7.5x faster builds on a real 1.3M-line codebase. ## Content **TLDR:** Dominic Gannaway announced Octane, a compiled successor to Inferno that supports React's programming model without a virtual DOM or manual dependency arrays — early benchmarks put it alongside Solid and vanilla JS. Nuxt pushed security patches across versions 4.5.1 and 3.21.10 fixing eight vulnerabilities, including a critical unauthenticated RCE in DevTools and a high-severity server-side RCE when vue.runtimeCompiler is enabled. Kimi K3's 2.8T open-weight model dropped with a #1 ranking on the Frontend Code Arena, though self-hosting requires 64 H100s. TypeScript 7's parallel type checker hit 7.5x faster builds on a real 1.3M-line codebase. --- ## Octane: compiled React-compatible framework from the Inferno author Dominic Gannaway announced Octane, a compiled successor to Inferno that keeps React's programming model — hooks, Suspense, Actions — but drops the virtual DOM, Rules of Hooks, and manual dependency arrays. The compiler infers what your code captures and generates reactivity itself. It ships with TanStack, React Three Fiber, Lynx, and StyleX integrations, plus a compatibility layer for dropping Octane components into existing React apps. Currently in alpha, beta expected soon. Early testers report benchmark parity with Solid, Remix V3, and vanilla JS. [Read more](https://daily.dev/feed-by-ids?id=6Gl3JsuUv&id=JfKIpkYBm&id=KbjjLf1AU) ## Nuxt 4.5.1 and 3.21.10 patch eight vulnerabilities including critical DevTools RCE Nuxt released security patches across 4.5.1, 3.21.10, and @nuxt/devtools 3.3.1 fixing eight vulnerabilities. The most urgent: an unauthenticated RCE in DevTools exposed via the Vite HMR socket, and a server-side RCE via server island props when vue.runtimeCompiler is enabled. Additional high-severity issues include a route rule authorization bypass via case-sensitive matching and cross-user payload disclosure on cached pages in 4.x. If you use authenticated pages with Nuxt caching, purge CDN and edge caches after upgrading. [Read more](https://daily.dev/posts/xdlBhO0fF) ## Kimi K3: 2.8T open-weight model tops Frontend Code Arena, requires 64 H100s to self-host Moonshot AI released Kimi K3 weights on July 27 — 2.8 trillion total parameters, 104B active per token via MoE, 1M token context, and a Modified MIT license. It scores 57 on the Artificial Analysis Intelligence Index (behind Claude Fable 5 at 60) and ranks first on the Frontend Code Arena with an Elo of 1,679. Moonshot claims roughly Claude Fable 5 parity on coding at about a third of the cost per token, though it runs four times slower. The infrastructure reality: ~1.4TB of weights and 64 H100s across eight servers to self-host, so most teams will use an inference provider. [Read more](https://daily.dev/posts/dXT19nYW1) ## TypeScript 7 hits 7.5x faster builds via parallel type checking TypeScript 7 ships parallel type checking that splits files across concurrent checkers. On the VS Code codebase — 1.3 million lines, ~8,000 files — TypeScript 6 took ~50 seconds; TypeScript 7 finishes in ~6.5 seconds. On a 16-core machine that drops to ~4.5 seconds, a 12x improvement at roughly the same memory footprint. The default spins up four concurrent checkers. [Read more](https://daily.dev/feed-by-ids?id=t4MNzhMSw&id=xNLHmdNYn) --- ## Also notable - **TanStack Table V9 beta: tree-shakable features, TanStack Store state, ~5kb minimum bundle:** TanStack Table V9 beta rebuilds the architecture around opt-in tree-shakable features (minimal table starts at ~5kb), replaces internal state management with TanStack Store for fine-grained re-render control, and includes a useLegacyTable hook for gradual migration — the rewrite was partly triggered by React Compiler stable breaking V8 patterns. [Read more](https://daily.dev/posts/VG00OY4OM) - **React Compiler v1.0 makes most manual memoization unnecessary, three exceptions remain:** React Compiler v1.0 (stable since October 2025) automates memoization more precisely than useMemo, useCallback, and React.memo, with only three cases still requiring manual intervention: third-party referential equality, try/catch blocks, and explicit useEffect dependency control. [Read more](https://daily.dev/posts/sfdRxWm6z) - **CodePen 2.0: real file system, one-click deployment to *.codepen.app, Vite-powered build pipeline:** CodePen 2.0 is a full rebuild adding a real file system (no more three-file limit), ES module imports across files, one-click deployment to *.codepen.app subdomains with custom domain support, and a visual Blocks compiler for Sass, TypeScript, Tailwind, Vue, and Lightning CSS — all powered by Vite under the hood. [Read more](https://daily.dev/posts/uS8BWGekD) - **WordPress 7.1 ships August 19 with client-side image processing via WebAssembly, producing ~15% smaller JPEGs:** WordPress 7.1 moves image compression, resizing, and format conversion to the browser using wasm-vips in Chromium 137+, producing roughly 15% smaller JPEGs via MozJPEG-style encoding and adding HEIC/AVIF support regardless of server configuration — with automatic server-side fallback in Firefox and Safari. [Read more](https://daily.dev/posts/kOahkF6iO) - **Jotai v2.20 reworks store internals for high-throughput performance, lays groundwork for v3:** Jotai v2.20 ships a significant internal rework of its store building blocks targeting high-throughput performance, and explicitly sets the stage for a v3 major version with architectural changes ahead. [Read more](https://daily.dev/posts/HqMdp2Omu) ## Similar posts on daily.dev - [Octane — React's programming model, compiled](https://daily.dev/posts/octane-react-s-programming-model-compiled-qwcnaetmq) · Hacker News · 2 upvotes · 0 comments - [Octane – React's programming model, compiled](https://daily.dev/posts/octane-react-s-programming-model-compiled-dv9fcewt5) · Hacker News · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#webdev](https://daily.dev/tags/webdev), [#react](https://daily.dev/tags/react), [#typescript](https://daily.dev/tags/typescript), [#nuxt](https://daily.dev/tags/nuxt) [View this post on daily.dev](https://daily.dev/posts/octane-launches-as-a-compiled-react-alternative-nuxt-patches-critical-rce-belkqfogt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/octane-launches-as-a-compiled-react-alternative-nuxt-patches-critical-rce-belkqfogt","headline":"Octane launches as a compiled React alternative, Nuxt patches critical RCE","text":"Dominic Gannaway announced Octane, a compiled successor to Inferno that supports React's programming model without a virtual DOM or manual dependency arrays — early benchmarks put it alongside Solid and vanilla JS. Nuxt pushed security patches across versions 4.5.1 and 3.21.10 fixing eight vulnerabilities, including a critical unauthenticated RCE in DevTools and a high-severity server-side RCE when vue.runtimeCompiler is enabled. Kimi K3's 2.8T open-weight model dropped with a #1 ranking on the Frontend Code Arena, though self-hosting requires 64 H100s. TypeScript 7's parallel type checker hit 7.5x faster builds on a real 1.3M-line codebase.","url":"https://daily.dev/posts/octane-launches-as-a-compiled-react-alternative-nuxt-patches-critical-rce-belkqfogt","datePublished":"2026-07-28T04:18:41.399Z","dateModified":"2026-07-28T04:19:02.696Z","author":{"@type":"Organization","name":"Web Digest","logo":"https://media.daily.dev/image/upload/s--C833eNQW--/f_auto,q_auto/v1773839396/logos/webdev_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/webdev_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/webdev_digest","name":"Web Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Web Digest","item":"https://daily.dev/sources/webdev_digest"},{"@type":"ListItem","position":3,"name":"Octane launches as a compiled React alternative, Nuxt patches critical RCE"}]} ```