<h2>Must know</h2>
<ul>
<li><strong>The AI coding productivity illusion and the review bottleneck</strong>: Recent data from DORA and GitClear suggests that while AI assistants like Cursor and Copilot feel faster, they actually increase task completion time by 19% for experienced devs due to a 41% spike in bugs and 1.7x more code issues. This surge in AI-generated ‘slop’ has nearly doubled PR merge volumes and review times, creating a massive human bottleneck that traditional review processes can’t handle. To combat this, teams are adopting ‘harness engineering’—using deterministic scripts and validators to wrap agents—and enforcing strict 400-line PR limits to prevent a total collapse of code quality. <a href="https://app.daily.dev/feed-by-ids?id=0NLiScdCr&amp;id=0Vz2gZlLu&amp;id=7IViTTBob&amp;id=9fjqmS2tl&amp;id=aOvKIunu6&amp;id=dY0aWbl1Q&amp;id=j9xbJHG6b&amp;id=n9edvJZWP&amp;id=o7qcycgq0&amp;id=oQW4dGvDn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 regression threatens PostgreSQL performance</strong>: An AWS engineer has sounded the alarm after discovering that the Linux 7.0 development kernel slashes PostgreSQL throughput by nearly 50% on Graviton4 hardware. The issue stems from restricted kernel preemption modes that force the database to spend excessive time in user-space spinlocks. While a patch to restore the previous defaults was proposed, kernel maintainers are currently pushing back, suggesting PostgreSQL should instead adopt the new Restartable Sequences (RSEQ) extension before the stable kernel ships in two weeks. <a href="https://app.daily.dev/posts/6AiZJ4eYv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Axios supply chain attack and the fragility of npm</strong>: The ubiquitous Axios library, which sees over 100M weekly downloads, was briefly compromised after an attacker hijacked a maintainer account to inject a malicious dependency. The ‘plain cryptojs’ package was designed to exfiltrate AWS/GCP secrets and local credentials before being patched within four hours. This incident serves as a critical reminder for infrastructure engineers to pin versions in lock files and avoid immediate updates of mission-critical packages. <a href="https://app.daily.dev/posts/X7PCk5NAZ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Absurd brings durable execution to Postgres</strong>: Armin Ronacher’s Absurd system proves that keeping complexity in SQL allows for a 1,400-line TypeScript SDK compared to Temporal’s 170,000-line equivalent. <a href="https://app.daily.dev/posts/2SBXsxFzn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Andrej Karpathy proposes the LLM-maintained wiki</strong>: The ‘llm-wiki’ pattern uses agents to automate the maintenance of structured markdown files, solving the ‘wiki rot’ that usually kills personal knowledge bases. <a href="https://app.daily.dev/feed-by-ids?id=7o1BSKg72&amp;id=OhMZS4gFM&amp;id=fEZOib5I2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Biome migration slashes pre-commit times by 92%</strong>: Replacing the ESLint and Prettier combo with a Biome-first hybrid setup reduced hook execution from 27 seconds to under 2 seconds in a large monorepo. <a href="https://app.daily.dev/posts/fsuVXtmDX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TurboQuant brings 6x vector compression to the browser</strong>: A new WASM package enables SIMD-accelerated vector quantization in Node.js and browsers, preserving dot products for fast similarity searches. <a href="https://app.daily.dev/posts/h7ZO3PZhH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Xogot brings Godot to iOS via SwiftUI</strong>: Miguel de Icaza’s team successfully virtualized global variables to bypass iPadOS process constraints, enabling a native Godot editor on mobile. <a href="https://app.daily.dev/posts/w2syDQua7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TinyOS offers a full RTOS kernel under 10KB</strong>: This ultra-lightweight kernel includes a POSIX-like filesystem and full MQTT stack, targeting resource-constrained ARM and RISC-V IoT devices. <a href="https://app.daily.dev/posts/5LG3qkOF4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SolidStart 2.0 enters the chat</strong>: Ryan Carniato is detailing the next major evolution of the SolidJS meta-framework, focusing on full-stack performance and DX improvements. <a href="https://app.daily.dev/posts/j9z1tHGuF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The vibe-coding slop apocalypse</strong>: We are currently witnessing the ‘App Store-ification’ of software, where AI tools allow non-technical ‘solopreneurs’ to flood the market with low-quality, hallucinated apps. As Awesome Coding points out, lowering the barrier to entry doesn’t create better software; it just creates a sea of ‘slop’ where 1% of quality products are buried under 99% of AI-generated garbage. If your business model is ‘prompting a wrapper into existence,’ you’re not an engineer; you’re a lottery player with a high API bill. <a href="https://app.daily.dev/posts/2fJ0hB1Cy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Confidential computing is a marketing fairytale</strong>: Cloud providers love promising that ‘even we can’t see your data’ using SGX and TEEs, but the reality is a graveyard of side-channel attacks like TDXRay and TEE.Fail. These technologies were never designed for multi-tenant cloud environments, yet they’re being sold as the ultimate security layer for billion-dollar AI weights. It’s a classic case of repurposing desktop hardware for the cloud and hoping nobody notices the architectural mismatch until the next $1,000 exploit drops. <a href="https://app.daily.dev/posts/G0e9QgsuJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The CMS is dead until you need to actually edit something</strong>: Agencies are currently pitching ‘AI-powered migrations’ from WordPress to custom Next.js stacks as if managing content via a JSON file in a GitHub repo is a feature for non-technical users. As one 20-year veteran notes, replacing a battle-tested CMS with a fragile web of AI-generated JavaScript just trades ‘old’ problems for ‘dependency hell’ and vendor lock-in. It turns out that ‘headless’ often just means ‘the marketing team can’t change a typo without a Jira ticket.’</li>
</ul>
