<h2>Must know</h2>
<ul>
<li><strong>TypeScript 6.0 bridges the gap to a Go native future</strong>: TypeScript 6.0 has officially launched as the final version built on a JavaScript codebase, serving as a bridge to the Go-native TypeScript 7.0. This release introduces TC39 Stage 4 proposals like the Temporal API and Map upsert methods, while significantly cutting build times by up to 50% through new default tsconfig changes. Major deprecations include ES5 targets and legacy module systems like AMD and UMD, signaling a hard pivot toward modern ESM standards. <a href="https://app.daily.dev/feed-by-ids?id=kynZFJI6r&amp;id=OcEvvfkzR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Stitch pushes vibe design into production</strong>: Google Stitch has received a massive update, enabling developers to generate interactive prototypes and exportable design systems directly from natural language or URLs. The tool now integrates with Gemini for voice-driven design and exports design markdown files specifically formatted for AI coding agents like Claude. This shift toward ‘vibe design’ is already impacting the industry, with reports from Fireship suggesting significant layoffs at Tailwind CSS as demand for traditional frameworks softens. <a href="https://app.daily.dev/feed-by-ids?id=cvG2DaNPM&amp;id=vDejXlEPp" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Malicious litellm release poisons AI developer workstations</strong>: A critical supply chain attack hit the litellm package on PyPI, where a malicious version exfiltrated SSH keys and cloud credentials from thousands of developer machines. The malware was discovered after it triggered a fork bomb in the Cursor editor via an MCP plugin, highlighting the extreme risks of deep dependency trees in AI-assisted workflows. Affected users must rotate all credentials immediately, as the malware specifically targeted Kubernetes service account tokens for lateral movement. <a href="https://app.daily.dev/feed-by-ids?id=xt7JWjaFB&amp;id=9roAdsa2z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Next.js 16.2 optimizes for speed and AI agents</strong>: Next.js 16.2 delivers 400% faster dev server startups and includes a default <a href="http://agents.md" target="_blank" rel="noopener nofollow">agents.md</a> file to provide better context for AI coding assistants. <a href="https://app.daily.dev/posts/pLH5NluEB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Native CSS light-dark function gains image support</strong>: The CSS light-dark function is expanding to support images, allowing you to swap logos and background assets without media query boilerplate. <a href="https://app.daily.dev/posts/koAZAFlkr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Astro 6.0 unifies development and production runtimes</strong>: Astro 6.0 features a rewritten dev server that perfectly matches production runtimes like Cloudflare Workers and adds automatic font self-hosting. <a href="https://app.daily.dev/posts/QG6z68w6t" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>React Navigation 8.0 brings native icon sets</strong>: React Navigation 8.0 Alpha adds support for over 9,000 native SF and Material symbols alongside a new inactive screen behavior property. <a href="https://app.daily.dev/posts/cYGCHWEHN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Storybook MCP lets AI agents browse your components</strong>: Storybook 10.3 introduces an MCP server that gives AI agents full intelligence over your existing component library and accessibility tests. <a href="https://app.daily.dev/posts/x35UlTAAf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pinterest swaps JavaScript carousels for native CSS</strong>: Pinterest reduced its carousel code by 90% and improved load times by 15% by ditching JavaScript in favor of native CSS scroll snap. <a href="https://app.daily.dev/posts/OmQ3qCuNd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>IntelliJ IDEA makes core web features free</strong>: JetBrains is making core web development features free in IntelliJ IDEA, including React support and integrated tooling for Vite and ESLint. <a href="https://app.daily.dev/posts/qYptuJh4r" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cursor gets caught rebranding Chinese AI models</strong>: Cursor recently ‘forgot’ to mention that its shiny new Composer 2 model was actually built on Moonshot AI’s Kimi k2.5, a Chinese open-weight model. While they claim their own compute did the heavy lifting, the lack of transparency is a classic case of rebranding someone else’s homework to avoid the geopolitical awkwardness of being powered by a Chinese LLM. It’s a bold move to sell ‘innovation’ while hiding the engine under a tarp. <a href="https://app.daily.dev/feed-by-ids?id=6IlX0UUsy&amp;id=2O2HmWwMM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA DLSS 5 faces backlash for AI aesthetic</strong>: NVIDIA is currently trying to convince the world that DLSS 5 is a ‘graphics breakthrough,’ but developers and gamers are calling it ‘AI slop’ that flattens lighting and washes out textures. Jensen Huang’s defense that this is ‘neural rendering’ doesn’t change the fact that it often undermines the artistic intent of the original creators. It turns out that hallucinating pixels isn’t the same thing as actually rendering them. <a href="https://app.daily.dev/feed-by-ids?id=DLHx86Ehh&amp;id=BsIJ2t6dP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GRC startup Delve accused of fabricating audits</strong>: Delve, a YC-backed compliance startup, is facing allegations that it basically ran a ‘fake audit mill’ by copy-pasting conclusions for hundreds of customers. Leaked data shows 99.8% identical boilerplate across reports, meaning companies paying for ‘automated compliance’ might actually be buying a one-way ticket to HIPAA and GDPR liability. It’s the ultimate ‘vibe coding’ outcome: a polished dashboard that hides a complete lack of actual work. <a href="https://app.daily.dev/feed-by-ids?id=48Uy5BKcM&amp;id=S4r4Sj7sx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
