Weekly React ecosystem roundup covering TanStack Start gaining momentum with Rsbuild support and adoption by Lovable AI builder, React Compiler Rust port nearing merge, and critical security patches for React Router and Remix (7 CVEs including RCE, CSRF, XSS). Notable releases include TanStack Form 1.33 with FormGroup API, XState Store 4.0, React Aria Components 1.18, shadcn UI 4.9/4.10, and React Hook Form 7.77. On the React Native side, App.js Conf 2026 highlights include Gesture Handler 3.0 rebuilt for New Architecture, Swift Package Manager support replacing CocoaPods, and Expo EAS Observe for production performance monitoring. Other ecosystem news covers Node.js 26.3 with permission.drop() API, npm 11.16 supply chain security improvements, Astro 6.4 with Rust-based Markdown processor, and Yarn 4.16.
