<h2>Must know</h2>
<ul>
<li><strong>Next.js 16.2 swaps JSON parsing for recursive walks</strong>: Vercel has released Next.js 16.2, claiming a 400% faster dev server startup and up to 60% faster HTML rendering by replacing standard JSON.parse revivers with a pure JavaScript recursive walk for server component payloads. The update also introduces an ‘<a href="http://agents.md" target="_blank" rel="noopener nofollow">agents.md</a>’ file by default to provide context for AI coding tools and experimental dev tools that expose browser-level data like network requests and component trees directly to agents via shell commands. This release signals a pivot toward making the framework natively ‘legible’ to AI-assisted workflows while squeezing performance out of the serialization layer. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor launches Composer 2 with context compaction</strong>: Cursor has debuted Composer 2, an in-house model that uses a ‘self-summarization’ reinforcement learning technique to compress its context window to 1,000 tokens when limits are hit. The company claims this reduces compaction errors by 50% compared to traditional sliding windows and allows the model to outperform Claude 3.5 Opus on terminal-based coding benchmarks. Priced significantly lower than top-tier frontier models, it represents a major push for specialized, long-horizon coding agents that can handle hundreds of sequential actions. <a href="https://app.daily.dev/posts/mIKxoNmwG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Interlock ransomware exploits Cisco zero day</strong>: A critical deserialization vulnerability in Cisco Secure Firewall Management Center (CVE-2026-20131) was exploited in the wild for 38 days before a patch was available. Amazon’s MadPot honeypot network identified the Interlock ransomware group as the primary actor, using the flaw to execute remote code and deploy reconnaissance scripts. Security teams are urged to apply the March 4 patch immediately, as the exploit carries a maximum CVSS score of 10. <a href="https://app.daily.dev/posts/kS1FWAP6y" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Google AI Studio adds vibe coding for full stack generation</strong>: A new Build Mode uses Gemini to generate frontend UI, backend logic, and deploy directly to Cloud Run from natural language prompts. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Heroku CLI v11 completes ESM migration</strong>: The architectural overhaul moves to Node 22 and oclif v4, delivering faster execution through improved tree-shaking and manifest caching. <a href="https://app.daily.dev/feed-by-ids?id=2swWgPS9c&amp;id=rnRadhI60" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>.NET 11 Preview 2 optimizes Kestrel and OpenTelemetry</strong>: The update delivers 20-40% throughput gains for Kestrel’s HTTP/1.1 parser and adds native tracing to <a href="http://ASP.NET" target="_blank" rel="noopener nofollow">ASP.NET</a> Core without extra libraries. <a href="https://app.daily.dev/posts/1t5Uposcx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LangSmith rebrands Agent Builder to Fleet</strong>: The platform now focuses on enterprise-scale agent management with tiered permissions, Slack bot identities, and centralized human-in-the-loop inboxes. <a href="https://app.daily.dev/posts/fnry81udE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Laravel Prompts adds streaming and task primitives</strong>: Extracted from Laravel Cloud, the new CLI tools support real-time incremental output and native desktop notifications for interactive terminal apps. <a href="https://app.daily.dev/posts/sAfCpHwiB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Neo4j Aura Agent simplifies GraphRAG deployment</strong>: The low-code platform auto-generates agent configurations from graph schemas and supports integration with Claude Desktop via MCP servers. <a href="https://app.daily.dev/posts/mc7JPTHNY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mystral Native brings WebGPU to standalone JS runtimes</strong>: This alpha runtime uses V8 and SDL3 to run WebGPU and Web Audio games natively on desktop without a browser wrapper. <a href="https://app.daily.dev/posts/YUabTxSP2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The vibe coding marketing offensive</strong>: Google is unironically trying to make ‘vibe coding’ a thing in AI Studio, which is just a fancy way of saying ‘we hope the LLM guesses your requirements correctly.’ It’s a classic attempt to rebrand prompt engineering for people who find the word ‘engineering’ too intimidating, while ignoring the inevitable technical debt of unmaintained, generated spaghetti code. <a href="https://app.daily.dev/posts/vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Checkmarx joins the AI security arms race</strong>: Checkmarx is now marketing an ‘orchestration framework’ for five different AI agents to solve the problem of too much AI-generated code. We are officially in the cycle where we use AI to find bugs in code written by AI, which was likely trained on buggy code to begin with. It’s turtles all the way down, but with more enterprise licensing fees. <a href="https://app.daily.dev/posts/PE8tBh7Qo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The great Next.js exodus narrative</strong>: Another ‘Why I left Next.js’ post is trending, this time for TanStack Start, claiming shipping velocity doubled in two weeks. While the App Router is certainly a polarizing abstraction, these ‘I switched frameworks and now my life is perfect’ stories usually omit the fact that any greenfield rewrite feels fast until you hit the same complex edge cases that made the first framework feel slow. <a href="https://app.daily.dev/posts/4nwi9O4T1" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
