<h2>Must know</h2>
<ul>
<li><strong>OpenAI and Mistral drop high-velocity subagent models</strong>: OpenAI released GPT-5.4 mini and nano, targeting the ‘subagent’ market with a 400k context window and pricing as low as $0.20/1M input tokens. Not to be outdone, Mistral launched Leanstral, a 120B model specifically for formal code verification using the Lean language, claiming it can proof code for $36 compared to Claude Sonnet’s $549. Both releases signal a shift toward multi-model architectures where cheap, specialized models handle execution while larger models plan. <a href="https://app.daily.dev/feed-by-ids?id=6TGfnHW2k&amp;id=XdxpqgLtJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel 13 and Project Detroit bridge the language gap</strong>: Laravel 13 is now live, requiring PHP 8.3 and introducing a first-party AI SDK alongside native JSON:API resources and pgvector integration. Simultaneously, Oracle announced Project Detroit for OpenJDK, which embeds V8 and CPython runtimes directly into the JVM process using the Foreign Function and Memory API. This allows Java developers to execute Python AI libraries and JavaScript logic with heap isolation and better performance than previous bridging attempts. <a href="https://app.daily.dev/feed-by-ids?id=Tq7AY8USq&amp;id=aQEMjwL5W" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA CloudXR 6.0 brings RTX streaming to Vision Pro</strong>: NVIDIA and Apple have integrated CloudXR 6.0 with visionOS, allowing the Apple Vision Pro to stream high-fidelity, RTX-powered 3D applications from workstations or the cloud. The system uses dynamic foveated streaming to maintain 4K resolution while protecting user gaze privacy. Enterprise partners like BMW and Volvo are already using the Swift-based framework for automotive design reviews and digital twins. <a href="https://app.daily.dev/posts/Lajg4CAxX" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Firefox 149 adds a built-in 50GB free VPN and Sanitizer API</strong>: Launching March 24, the browser-only VPN targets privacy while the Sanitizer API aims to kill XSS at the platform level. <a href="https://app.daily.dev/posts/nPBbJz5BW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bun v1.3.11 introduces native OS-level cron scheduling</strong>: The update adds Bun.cron for cross-platform task scheduling and fixes over 100 bugs in the Windows ARM64 and HTTP/2 stacks. <a href="https://app.daily.dev/posts/DuG54Q8tB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vite 8 moves to Rolldown for 30x faster builds</strong>: The major release replaces Rollup/esbuild with a Rust-based core and introduces a Babel-free React plugin. <a href="https://app.daily.dev/feed-by-ids?id=db4oA9qt6&amp;id=V8fBkmgAD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangSmith Sandboxes isolate untrusted agent code</strong>: New ephemeral microVM environments allow secure execution of agent-generated code with native LangChain integration. <a href="https://app.daily.dev/posts/Uz5xAKtF3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL 18 begins the end of MD5 encryption</strong>: The upcoming release deprecates MD5 in favor of SCRAM-SHA-256, issuing warnings for any new or altered users using the legacy hash. <a href="https://app.daily.dev/posts/nekgWU5A0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Glimmer DSL for Web challenges React in Rails SPAs</strong>: The Ruby-in-the-browser framework is gaining traction as a React replacement, offering a pure Ruby frontend stack for Rails developers. <a href="https://app.daily.dev/feed-by-ids?id=f0mRGgVBi&amp;id=XvbhZsBlz" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare D1 and SQLite FTS5 power hybrid search</strong>: New implementation patterns combine vector search with lexical BM25 via Reciprocal Rank Fusion for better exact-match results. <a href="https://app.daily.dev/posts/ewvLp6hhM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The $12.5 million band-aid for AI slop</strong>: Big Tech is patting itself on the back for funding a Linux Foundation initiative to help maintainers triage the ‘overload’ of AI-generated bug reports. It’s a classic arsonist-funded fire department: OpenAI and Anthropic provide the tools to flood GitHub with low-quality PRs, then donate a rounding error to help volunteers clean up the mess. Greg Kroah-Hartman might endorse it, but maintainers are still the ones stuck in the ‘slop’ trenches. <a href="https://app.daily.dev/posts/LS9KJQCC0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>World’s AgentKit is a digital power of attorney nobody asked for</strong>: Tools for Humanity (formerly Worldcoin) is trying to pivot its iris-scanning ‘Orb’ into a verification layer for AI shopping agents. They’re framing it as ‘agentic commerce’ security, but with their token down 76%, it looks more like a desperate bid for relevance in the AI hype cycle. Trusting a crypto-identity project to act as your legal ‘power of attorney’ for automated purchases is a bold move for anyone who values their bank account. <a href="https://app.daily.dev/posts/63OP7gZFo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The ‘Vibe Coding’ security debt is coming due</strong>: GitGuardian reports that AI service credential leaks surged 81% last year, with Claude Code-assisted commits leaking secrets at double the baseline rate. While ‘vibe coders’ celebrate shipping MVPs in hours, they’re accumulating ‘AI blind spot debt’ by ignoring basic governance and architectural resilience. We’re essentially automating the creation of security vulnerabilities at machine speed and calling it productivity. <a href="https://app.daily.dev/feed-by-ids?id=085ZOrcxF&amp;id=b6eTbr5Mu" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
