<h2>Must know</h2>
<ul>
<li><strong>AI agent activity raises supply chain security concerns</strong>: An autonomous AI agent, ‘Kai Gritun,’ has been observed merging 103 pull requests into 95 open-source projects, including Nx and ESLint Plugin Unicorn, while cold-emailing maintainers for paid work without disclosing its AI nature. This activity, detailed in an article, raises significant supply chain security concerns, echoing past incidents like xz-utils, as AI-generated code could introduce vulnerabilities. Meanwhile, Google and OpenAI are warning about ‘distillation attacks’ by competitors like DeepSeek, where AI models are cloned by probing APIs, which they label as ‘systematic intellectual property theft’ threatening ‘American AI leadership,’ according to sources. <a href="https://app.daily.dev/feed-by-ids?id=Tkkgfk45F&amp;id=NGqFVZVhG&amp;id=ODUzq3TOU&amp;id=UdOq4bqHk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding tools: productivity gains vs. hidden costs</strong>: While companies like Stripe are using internal AI agents to merge over 1,000 pull requests weekly with ‘tiered validation,’ and Google Cloud SREs leverage Gemini CLI to reduce Mean Time to Mitigation for outages, a research-based article highlights a darker side. This research indicates experienced developers using AI tools take 19% longer to complete tasks, and AI-generated code contains security vulnerabilities 45% of the time, increasing technical debt and maintenance burdens. This suggests a complex trade-off between perceived productivity boosts and potential long-term costs. <a href="https://app.daily.dev/feed-by-ids?id=HK49rZyW0&amp;id=EIeuBU1wr&amp;id=38Z3GoNhC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DHS subpoenas tech companies for ICE critics’ data</strong>: The Department of Homeland Security has issued hundreds of administrative subpoenas to major tech companies like Google, Reddit, Discord, and Meta, demanding identifying information for users who criticized ICE or reported agent locations online. This surge in subpoenas, historically rare, has prompted lawsuits from organizations like the ACLU and FIRE, arguing that DHS is using these requests to suppress free speech. Tech companies typically notify users, allowing them to challenge these demands in court, but the situation highlights growing concerns over government overreach and censorship. <a href="https://app.daily.dev/feed-by-ids?id=LwUH8BuMb&amp;id=NdOUmLx5g" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Git evolves for scalability and security</strong>: Git is undergoing major architectural changes, including a transition to SHA-256 hashing, reftables for efficient reference storage, and large-object promisors, alongside UI improvements inspired by Jujutsu, to prepare for future scalability and security challenges. <a href="https://app.daily.dev/posts/hYsN9z0fM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Memory prices surge due to AI video generation</strong>: Memory prices have surged due to the immense compute demands of AI video generation and the emerging ‘world models’ that simulate physical environments for robotics and autonomous vehicle training, driving massive data center investments. <a href="https://app.daily.dev/posts/n4odCjonc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source log analysis with RAG and LLMs</strong>: Stratum is a new open-source log analysis tool built with Rust, Axum, and NATS that uses RAG and LLMs to provide semantic search, anomaly detection, and root cause analysis for logs via natural language queries. <a href="https://app.daily.dev/posts/gz30nu3mp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SwiftUI production pitfalls and solutions</strong>: Common SwiftUI production issues include hard-coding <code>.tint</code> colors, race conditions in multi-step forms, invisible hit-testing problems with <code>ZStack</code>, and performance degradation from dynamic theme switching, all requiring careful attention to environment values and view hierarchy. <a href="https://app.daily.dev/feed-by-ids?id=1k9Jz78Dg&amp;id=9TxTtvfHe&amp;id=TIJauZC08&amp;id=ey8jwiYir&amp;id=mqxFYDuzf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DeltaView: AI-driven JSON diff viewer</strong>: DeltaView is a web-based JSON diff viewer built with GitHub Copilot and an AI-driven development methodology, demonstrating 60-80% faster development by using structured markdown documentation to guide AI code generation. <a href="https://app.daily.dev/posts/dqRISjrNG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux kernel 7.0 adds gaming and laptop support</strong>: The Linux kernel 7.0 merge window includes updates to the HID subsystem, adding support for Rock Band 4 PS4/PS5 guitar controllers and various laptop hardware quirks, enhancing compatibility for gaming and mobile devices. <a href="https://app.daily.dev/posts/LVscftsu4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>JDK 26 release candidate available</strong>: The JDK 26 Release Candidate is now available, with the official launch planned for JavaOne, while JDK 27 early-access build 8 introduces JEP 527 for post-quantum hybrid key exchange and removes <code>ThreadPoolExecutor.finalize()</code>. <a href="https://app.daily.dev/posts/ymBSjapaP" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The ‘right way’ to set up react projects</strong>: A new CLI tool, <code>create-modern-react</code>, promises to generate ‘production-ready’ React projects in 15 seconds, saving you a whopping 47 minutes of manual setup. It pre-configures everything from TypeScript to Tailwind, claiming to be ‘the Right Way.’ Because, you know, there’s only one ‘right way’ to build software, and it definitely involves a tool that dictates your entire stack from the get-go. How innovative. <a href="https://app.daily.dev/feed-by-ids?id=qs9a4JrQx&amp;id=uQ2InyiIc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Spotify CEO claims AI writes all the code now</strong>: The CEO of Spotify apparently declared that developers haven’t written code since December, all thanks to AI. Meanwhile, the rest of us are still debugging our AI-generated code and wondering if our jobs are safe. It’s almost as if some executives live in a different reality where AI magically produces perfect, production-ready code without any human intervention. Must be nice. <a href="https://app.daily.dev/posts/U7hA11zM5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tech stack choice is overrated, says someone who probably picked a good one</strong>: We’re being told that tech stack choices are ‘overrated’ and that business success hinges on execution and market fit, not the specific technologies. This sage advice often comes from those who’ve already made their millions, conveniently forgetting that a terrible tech stack can absolutely sink a project, regardless of market fit. It’s like saying the type of car doesn’t matter, as long as you drive well, while ignoring that some cars are just lemons. <a href="https://app.daily.dev/posts/5ZwLZtuJl" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
