<h2>Must know</h2>
<ul>
<li><strong>Claude Code adds parallel agents and batch migrations</strong>: Anthropic has updated its CLI tool, Claude Code, with new <code>/simplify</code> and <code>/batch</code> commands to handle large-scale refactoring. The <code>/batch</code> command uses git worktrees to run dozens of isolated agents in parallel, each capable of managing its own files and submitting PRs. According to Anthropic, these updates also include HTTP hook handlers for CI/CD integration and a new <code>/copy</code> command for clipboard management. <a href="https://app.daily.dev/posts/sq7rTuWl2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical ReDoS vulnerabilities found in minimatch</strong>: Three high-severity vulnerabilities (CVE-2026-27904, 27903, 26996) were patched in the <code>minimatch</code> npm package, which sees nearly 500 million weekly downloads. These flaws involve catastrophic backtracking in regex patterns that can stall the Node.js event loop for several seconds. Socket has released free certified patches that can be applied via their CLI without requiring a full dependency tree upgrade. <a href="https://app.daily.dev/feed-by-ids?id=2WnWCE8iO&amp;id=89yzay3k6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Svelte March update brings createContext and Vite 8</strong>: The latest Svelte monthly update introduces <code>createContext</code> for programmatic component instantiation and adds support for TrustedHTML in expressions. SvelteKit has been upgraded to support Vite 8 and now includes a match function for reverse route resolution. The Svelte blog also noted that the Svelte CLI has officially adopted <code>better-auth</code> as a core addon. <a href="https://app.daily.dev/posts/VHR0VC2mr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Laravel OG Image simplifies social previews</strong>: Spatie’s new package uses Chromium to turn Blade components into Open Graph images with automatic meta tag injection. <a href="https://app.daily.dev/posts/146Njtqrp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Numpy TS brings 94 percent of NumPy to JavaScript</strong>: A new zero-dependency, tree-shakeable library ports 476 NumPy functions to TypeScript with full type safety. <a href="https://app.daily.dev/posts/BeXCm33Q8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fluent UI Blazor 5.0 RC1 aligns with Windows 11 design</strong>: The update drops legacy dependencies to reduce bundle size and introduces a new area-based layout system. <a href="https://app.daily.dev/posts/9f2cNaMhv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gleam Gathering highlights simplicity over hype</strong>: The first Gleam conference focused on the language’s ‘boring’ stability and its growing ecosystem for Erlang and JS targets. <a href="https://app.daily.dev/posts/saEXLDYMU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Argo CD 3.3 adds PreDelete hooks for safer GitOps</strong>: The release enables predictable teardown sequences and shallow cloning to speed up monorepo fetching. <a href="https://app.daily.dev/posts/J931yCKTd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Netflix solves container launch bottlenecks on modern CPUs</strong>: Engineers upstreamed a fix to containerd that reduces mount operations from O(n) to O(1), bypassing global VFS locks. <a href="https://app.daily.dev/posts/cKVVAN6ve" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Terminal UIs see a resurgence in C sharp</strong>: Modern libraries like Spectre.Console are making rich CLI dashboards a viable, low-resource alternative to web-based internal tools. <a href="https://app.daily.dev/posts/VYdZeG20W" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The AWS SDK for .NET is a memory leak factory</strong>: A massive code audit of the AWS SDK for .NET revealed nearly a million violations, including widespread misuse of IDisposable that guarantees memory leaks in production. The SDK contains over 12,000 blocks of cloned code and 8,000 missing unit tests, making it a masterclass in ‘do as I say, not as I code’ from a trillion-dollar company. If you’re trusting this in a high-throughput environment, you’re essentially volunteering for an uncompensated on-call shift. <a href="https://app.daily.dev/posts/mIeiA4aYa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare uses AI to clone Next.js in a weekend</strong>: Cloudflare is bragging about using AI agents to rebuild a Next.js-compatible framework by passing its own open-source test suites. While they claim 4x faster builds, the resulting ‘Vinxi’ framework conveniently leaves out minor details like static pre-rendering. It’s a classic case of ‘we automated the easy parts and called it a revolution’ while ignoring the architectural complexity that makes the original actually useful. <a href="https://app.daily.dev/posts/5XUEq41aC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Web development is quietly returning to PHP</strong>: Industry pundits are framing the convergence of React frameworks toward SSR and file-based routing as a ‘return to PHP’s strengths.’ In reality, we’ve just spent a decade over-engineering the frontend only to realize that sending HTML from a server was a solved problem in 2004. Calling this ‘industry maturity’ is a polite way of saying we finally stopped hitting ourselves in the head with a hammer. <a href="https://app.daily.dev/posts/S646eUkOf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
