<h2>Must know</h2>
<ul>
<li><strong>React Foundation launches as React 19 Compiler enters beta</strong>: Meta has officially transferred React, React Native, and JSX governance to the new React Foundation under the Linux Foundation, with members including Microsoft, Vercel, and Amazon. Simultaneously, the React Compiler (formerly React Forget) has entered opt-in beta for React 19, automating memoization through build-time static analysis. Senior developers should prepare to shift from manual dependency array management to auditing codebases for purity violations to ensure compiler compatibility, as reported by SitePoint and Mozilla Hacks. <a href="https://app.daily.dev/feed-by-ids?id=7oOsPWKdE&amp;id=SMQ3UiuDW&amp;id=faoa6Ox4J" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Native Popover and Navigation APIs reach baseline status</strong>: The browser-native Popover API and Navigation API have reached Baseline status across all major engines, offering standardized ways to handle tooltips and client-side routing without heavy library overhead. The Navigation API provides a centralized NavigateEvent that simplifies SPA logic, while the Popover API handles focus management and ARIA states automatically. According to web.dev and Smashing Magazine, these APIs significantly improve accessibility and performance by reducing reliance on custom JavaScript coordinate calculations. <a href="https://app.daily.dev/feed-by-ids?id=vJbLTzl0J&amp;id=y3CA6PAEt&amp;id=sbI8yURHP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical security updates for npm and minimatch</strong>: npm CLI 11.10.0 has introduced a <code>minimumReleaseAge</code> setting, allowing teams to enforce a cooldown period for new packages to mitigate zero-day supply chain attacks. This follows the discovery of three high-severity ReDoS vulnerabilities in minimatch, a foundational package with 472 million weekly downloads, which could stall the Node.js event loop. Socket recommends immediate patching via their CLI or upgrading to the latest backported versions to prevent potential service denial. <a href="https://app.daily.dev/feed-by-ids?id=Tw6GntfNF&amp;id=EvvwDJaxE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Firefox 148 ships Sanitizer API for native XSS protection</strong>: The new <code>setHTML()</code> method provides a built-in way to sanitize untrusted HTML before DOM insertion, effectively replacing the dangerous <code>innerHTML</code> property. <a href="https://app.daily.dev/feed-by-ids?id=KqWqtubfZ&amp;id=fa8JvzcTg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Oxfmt beta claims 30x faster formatting than Prettier</strong>: This Rust-powered formatter aims for 100% Prettier compatibility and has already been adopted by the Vue and Vercel core teams. <a href="https://app.daily.dev/feed-by-ids?id=8i6IuWF7s&amp;id=UVsfLKgRe" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js 25.8.0 adds permission auditing and SQLite limits</strong>: The latest current release introduces a <code>--permission-audit</code> flag and enhances the built-in SQLite module with configurable resource limits. <a href="https://app.daily.dev/posts/RjnXphTRh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Zustand outperforms Context API in complex editor migration</strong>: A migration from React Context to Zustand resulted in a 30% interaction latency reduction by eliminating cascading re-renders through granular subscriptions. <a href="https://app.daily.dev/posts/ienS0UzWs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Safari Technology Preview 238 adds CSS :open support</strong>: The update also includes WebAssembly JavaScript Promise Integration and threaded time-based animation resolution for smoother UI performance. <a href="https://app.daily.dev/posts/NUI8NcsFJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TanStack Hotkeys enters alpha with type-safe shortcuts</strong>: The new library offers cross-platform compatibility and automatic prevention of default browser behaviors for scoped hotkeys. <a href="https://app.daily.dev/posts/pvk8gHZBF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Svelte March update introduces server-side error boundaries</strong>: The framework also gained <code>createContext</code> for programmatic component instantiation and official support for Vite 8. <a href="https://app.daily.dev/posts/VHR0VC2mr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Cloudflare AI-generated Next.js fork is a security gamble</strong>: Cloudflare’s ‘VNext’ is a reimplementation of Next.js built in one week using AI for $1,100 in tokens. While they brag about 94% API coverage, Vercel’s leadership has rightly pointed out that ‘vibe-coding’ a core framework runtime is a recipe for subtle security vulnerabilities and architectural ‘slop’ that isn’t production-ready. <a href="https://app.daily.dev/feed-by-ids?id=zaBGmltYg&amp;id=zaBGmltYg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailwind CSS is apparently dying because of AI</strong>: The Tailwind team laid off 75% of their engineers, claiming AI tools like Copilot are killing their documentation traffic and revenue. It’s a bold move to blame the robots for a business model that relied on people paying for components they can now just describe to a chatbot, but calling it the end of utility CSS is a bit of a stretch. <a href="https://app.daily.dev/feed-by-ids?id=o7ayyfPeQ&amp;id=peaMJGK0d" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The 10x developer is dead, long live the AI director</strong>: Hype-merchants are claiming AI agents have made the ‘10x developer’ concept moot, turning us all into ‘directors’ of autonomous code-monkeys. In reality, senior engineers are spending 91% more time reviewing the resulting ‘AI slop,’ proving that generating code was never the bottleneck—understanding it is. <a href="https://app.daily.dev/feed-by-ids?id=dMpIU74OH&amp;id=hkaXT487w" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
