DDoS'ing the human brain AI made us mass produce code at a scale we never could before. More code, more problems, same brain. Somehow I'm more productive and more exhausted at the same time.

Some thoughts about AI-assisted coding and how it affects my brain. I'm more productive and more exhausted at the same time.

marvinh.dev/blog/ddosing...

The Hidden Blast Radius of the Axios Compromise - Socket The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

🧨 Axios only needed to be resolved somewhere in your dependency graph to affect you.

Semver + transitive deps + runtime installs = hidden blast radius.

If you only checked your project’s lockfile, you may still not know.

socket.dev/blog/hidden-... #nodejs #javascript

CSS or BS? Think you know CSS? Real property or made-up nonsense? 20 rounds. No mercy.

Rather than the same old boring internet pranks, I thought I'd build something more fun this April Fools.

CSS or BS. Can you tell your CSS properties names from BS?

www.keithcirkel.co.uk/css-or-bs

If you use GitHub (especially if you pay for it!!) consider doing this *immediately*

Settings -> Privacy -> Disallow GitHub to train their models on your code.

GitHub opted *everyone* into training. No matter if you pay for the service (like I do). WTH

github.com/settings/cop...

Having lived in France for a couple of years, my head is constantly confused by this word... It's pronounced differently in French than in English 🙈 Same for "Vue"

new post on my personal blog.

i think these three areas often go unexplained, so hopefully this explains why some of these packages exist. these are fine to exist but the majority of developers shouldn't have to pay the cost for them.

Firefox 149 release notes for developers (Stable) - Mozilla | MDN This article provides information about the changes in Firefox 149 that affect developers. Firefox 149 was released on March 24, 2026.

Firefox 149 is out now, and adds bunch of new web platform features, like

🎉 The CloseWatcher API
🎉 popover=hint (although I'm concerned about the spec'd behaviour)
🎉 hasUAVisualTransition on PopStateEvent
🎉 font-family: math
🎉 The CSP reporting API

And more!

developer.mozilla.org/en-US/docs/M...

TypeScript 6.0 is out 🎉

🔶 Temporal
🔶 Map#getOrInsert
🔶 RegExp.escape
🔶 #/ prefix for Package Imports

New defaults!
🔶 --target=ES2025
🔶 "use strict"
🔷 --strict

Deprecations!
🗑️ baseUrl, outFile
🗑️ import assertions
🗑️ `module` namespaces
🗑️ module: amd
🗑️ moduleResolution: node
🗑️ target: ES5

Announcing TypeScript 6.0 - TypeScript TypeScript 6.0 is now available! TypeScript 6 is a stepping-stone release, aligning with the upcoming native-speed 7.0 release.

TypeScript 6.0 is now available!

This release brings better type-checking for methods, new standard library features, new module features for Node.js, and more!

But most important, this release brings us one step closer to the upcoming native-speed 7.0!

devblogs.microsoft.com/typescript/a...

I'm thinking about a service that preselects the most appropriate language based on some user-specific data (e.g. browser language or location). If developers have different pre-selected languages, they might run into test execution issues if the UI on their machine is in another language

What are your thoughts on internationalization? I definitely get your point of view. In the context of I18N, using test IDs makes it easy to find the submit button no matter the used language. Like a dedicated selector for tests

Yesterday was my last day at Deno. It's rare you get to work with so many highly skilled peers in one place, but I'll be now cheering from the sidelines.

Not sure yet what comes yet. I'm officially looking for a job now!

Vite 8.0 is out! Vite 8 Release Announcement

⚡️ Vite 8.0 is here!
The most significant architectural change since Vite 2.

⏬ Powered by @rolldown.rs bringing faster production builds and more consistency
🛤️ New features such as tsconfig paths and emitDecoratorMetadata support

vite.dev/blog/announc...

Astro 6.0 | Astro Astro 6 is here with a refactored dev server, an experimental Rust compiler, live content collections, CSP, and more.

Astro 6 is here! We completely rebuilt the Astro dev server and build pipeline onto a new, more powerful runtime-agnostic architecture.

Plus: New Fonts API, CSP support, an experimental new Rust compiler, and more...

astro.build/blog/astro-6...

ECMAScript Euphoria! 🎉

We don't always post when a single proposal advances, but when we do, it's Temporal -> Stage 4.

Just days shy of 9 years from Stage 1, a herculean effort on the part of many champions, delegates, invited experts, and contributors, past and present. Thank you all! 🙌

Please note that Chrome pushed an update, and

YOUR DEV CONSOLE (history) MAY BE READ BY HUMAN REVIEWERS.

Sure, console should never be treated as a secure env, but I still fucking hate this.

Accessibility For Everyone by Laura Kalbag Read the book online for free.

My book, Accessibility For Everyone, is now free and online as a website.

accessibilityforeveryone.site

The book was first published by A Book Apart in 2017 but it holds up! It covers web accessibility for designers, developers, content folks, and really everyone who works in tech.

Firefox 147 release notes for developers (Beta) - Mozilla | MDN This article provides information about the changes in Firefox 147 that affect developers. Firefox 147 is the current Beta version of Firefox and ships on January 13, 2026.

Firefox 147 just landed & it's pretty huge in terms of web features:

🎉 CSS anchor positioning
🎉 The navigation API
🎉 View transition types
🎉 Brotli support in Compression/DecompressionStream
🎉 CSS module imports

And more!

developer.mozilla.org/en-US/docs/Mozilla/Firef...

We just published 6 CVEs identifying security vulnerabilities in React Router and Remix v2

We recommend updating to the latest appropriate versions:

React Router v7 -- 7.12.0
React Router v6 -- 6.30.3
Remix v2 -- 2.17.2

Details, links, and package ranges are listed below

🥳 TypeSlayer is out! celebrate by posting what your type graph looks like! it legit has an actual leaderboard now: so bonus points if you win lol 🏆🏆

run: `npx typeslayer`

source: github.com/dimitropoulo...

⚔️introducing TypeSlayer⚔️ A #typescript type performance benchmarking and analysis tool. A summation of everything learned from the benchmarking required to make the Doom project happen.

It's got MCP support, Perfetto, Speedscope, Treemap, duplicate package detection, and more.

Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week.

These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.

Critical Security Vulnerability in React Server Components – React The library for web and native user interfaces

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.

A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.

react.dev/blog/2025/12...

Progress on TypeScript 7 - December 2025 - TypeScript Earlier this year, the TypeScript team announced that we’ve been porting the compiler and language service to native code to take advantage of better raw performance, memory usage, and parallelism. Th...

We've got some updates on TypeScript 7! The new native port

- can type-check any project
- supports --build and --incremental
- has rich editor features implemented
- is still 10x faster

and is ready for you to try today!

devblogs.microsoft.com/typescript/p...

It's December 1st, which means that throughout the entire month you should reserve 5-10 minutes every day to read a fantastic article about HTML. ❤️‍🔥

Check out what's hidden behind the first door.

htmhell.dev/adventcalendar

State of React 2025 Take the State of React survey

The State of React 2025 survey just opened!

I’ll be very keen to see what the community thinks of some of the newer features like Actions, now that they’ve been available for a while.

Take it here:
survey.devographics.com/en-US/survey...

Type stripping is now stable.
Enjoy 🌞

Same in German. I hate it... Especially since the translations are pretty much always auto-translated and mostly vary between slightly off and awfully wrong. Especially on YouTube, it's horrible...

Yes, some (especially from Google) are buggy... Sadly, I can recommend the Google Search Fixer addon. I fear, not many developers test in Firefox for Android...

Interop Feature Ranking Rank the web platform features you care most about

As an experiment, we (the Firefox team) wanted to try a new way to get feedback on which Interop proposals matter most.

So, here's a web app where you can rank the proposals you care about, giving us data we can use when reviewing which ones to champion.

interop-rank.jakearchibald.com