<h2>Must know</h2>
<ul>
<li><strong>Next.js 16.2 swaps JSON parsing for recursive walks</strong>: Vercel has released Next.js 16.2, claiming up to 60% faster HTML rendering by replacing standard JSON.parse reviver callbacks with pure JavaScript recursive walks for server component payloads. The update also targets a 400% faster dev server startup and introduces an ‘<a href="http://agents.md" target="_blank" rel="noopener nofollow">agents.md</a>’ file by default to provide context for AI coding tools. Experimental agent dev tools now allow these AI assistants to access browser-level data like component trees and network requests via the shell. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor launches Composer 2 with context compaction</strong>: Cursor’s new in-house coding model, Composer 2, introduces a ‘self-summarization’ technique that compresses its context window to 1,000 tokens when limits are hit, reportedly reducing errors by 50% compared to sliding windows. The company claims it outperforms Claude 4.6 on Terminal-Bench 2.0 while being significantly cheaper at $0.50 per million input tokens. This release marks their first use of continued pre-training before reinforcement learning to stabilize the base model’s coding logic. <a href="https://app.daily.dev/posts/mIKxoNmwG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Interlock ransomware hits Cisco via zero day</strong>: The Interlock ransomware group exploited a critical zero-day vulnerability (CVE-2026-20131) in Cisco Secure Firewall Management Center for over a month before a patch was available. Amazon’s MadPot honeypot identified the attack chain, which allows remote code execution via deserialization and carries a maximum CVSS score of 10. Security teams are urged to patch immediately as the group is actively targeting healthcare and government sectors. <a href="https://app.daily.dev/posts/kS1FWAP6y" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Heroku CLI v11 completes ESM migration</strong>: The architectural overhaul moves to oclif v4 and Node.js 22, delivering faster execution and a new semantic color system. <a href="https://app.daily.dev/posts/2swWgPS9c" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google AI Studio adds vibe coding and Cloud Run deployment</strong>: A new ‘Build Mode’ generates full-stack apps from natural language and deploys them directly to Google Cloud. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Prompts adds streaming and task primitives</strong>: Version 0.3.15 introduces native CLI spinners, real-time incremental output, and macOS desktop notifications. <a href="https://app.daily.dev/posts/sAfCpHwiB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangSmith rebrands Agent Builder to Fleet</strong>: The platform now focuses on enterprise-scale agent management with tiered permissions and centralized human-in-the-loop inboxes. <a href="https://app.daily.dev/posts/fnry81udE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Ruby SDK gains bulk S3 directory transfers</strong>: New methods for recursive uploads and downloads automate multipart handling and parallelism for Ruby developers. <a href="https://app.daily.dev/posts/tlRI3NVwm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Checkmarx launches AI orchestration for DevSecOps</strong>: A new framework manages five specialized AI agents to automate vulnerability triage and code remediation. <a href="https://app.daily.dev/posts/PE8tBh7Qo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Neo4j Aura Agent simplifies GraphRAG</strong>: The low-code platform auto-generates agent configurations from graph schemas and integrates with Claude Desktop via MCP. <a href="https://app.daily.dev/posts/mc7JPTHNY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The vibe coding marketing offensive</strong>: Google is unironically trying to make ‘vibe coding’ a thing in AI Studio, promising that ‘natural language’ is the only syntax you’ll ever need. It’s a classic attempt to rebrand ‘prompt engineering’ into something that sounds like a lifestyle choice rather than a desperate struggle with non-deterministic output. Expect a wave of ‘vibe-native’ startups that fall apart the moment they hit a bug that requires actual debugging skills. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Enterprise AI security as the new silver bullet</strong>: Clearly AI is pitching a ‘100% coverage’ security review platform that supposedly turns weeks of auditing into 15 minutes of AI magic. Claiming to replace manual security audits with an ‘AI consultant’ is a bold move in an industry where LLMs still hallucinate basic logic. It’s the ultimate ‘shift-left’ fantasy: just let the machine sign off on the compliance docs so humans can ignore the actual risks faster. <a href="https://app.daily.dev/posts/WMSEuyIhJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The AI agent disclosure theater</strong>: A survey shows 88% of game workers want AI disclosure on storefronts, while Valve only cares if the AI is ‘player-facing.’ We’re arguing over labels while the industry uses these tools to churn out assets that 80% of the same workers find ‘unacceptable.’ It’s a performative debate about transparency in a production pipeline that is increasingly becoming a black box of generated noise. <a href="https://app.daily.dev/posts/nnizOg9IY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
