Benchmarked on an M4 Mac mini: Ben Joffe's 2-instruction weekday hack beats plain %7 by 1.6-6.4x in clang, Rust, and V8, loses 3x in CPython. Plus a 25x V8 -0 deopt trap.
Tested on release day: drizzle-orm 3.9x, Effect 5.3x, lobe-chat 7.3x, the tsconfig hard errors, why --checkers 8 backfired on 16GB, and why Vue can't use TS7 yet
RFC 10008 makes QUERY a safe, idempotent HTTP method with a body. What it fixes over POST /search, how cache keys work, plus fetch, PHP, and Node.js handlers.
Ghost 3.24.0–6.19.0 Content API SQLi leaked Admin API keys and injected ClickFix loaders into posts. Patch to 6.19.1+, rotate keys, and grep post bodies.
Vitest's UI/api WebSocket skips Origin checks (CSWSH), so a malicious page can call saveTestFile and rerun to run code on your dev machine. Fixed in 1.6.1 / 2.1.9 / 3.0.5.
Bun PR #30412 merged a Zig-to-Rust rewrite into main: 6,755 commits, 1M+ lines, binaries 3–8 MB smaller. Try via bun upgrade --canary, with notes on the claude/* branch workflow and why memory safety, not speed, drove it.
CodePush shut down in March 2025. Compared EAS Update, self-hosted, and Stallion for React Native OTA — rollback, bundle signing, delta delivery — plus Unity AssetBundle parallels, TestFlight for personal apps, PWA Service Worker cache traps, and the lifecycle of deployed code.
Tested BMBrick's LEGO mosaic pipeline in Node + sharp with a 45-color palette: RGB nearest sprinkles 16% glitter and silver on photos, OKLab + material penalty wipes them out, and the original 0.15 is 7× overkill (0.02 is already enough).
Notes on Node.js 26.0.0 released May 5, 2026. Temporal is unflagged but Safari blocks frontend use (~69% browser coverage). V8 14.6, Undici 8, removed legacy APIs, and why most production apps should stay on 24 LTS until the October LTS cut.
REST polling at 1-second intervals collapses individual executions into OHLCV bars. A receive-queue-persist pipeline over WebSocket keeps every tick, and QUIC may stabilize the connection layer.
iPhone 17's HEIC adds new brand identifiers to the ftyp box, pushing it past exifr's hard-coded 50-byte guard. Here's a dynamic-import fallback to ExifReader, plus Null Island filtering and iloc pre-inspection to harden browser-only photo tools.
