Sebastian Silbermann

The "export defer" TC39 proposal aims to introduce a similar optimization *at the language level*, so that you can rely on it in all the tools and environments that you might run your code with.

Just because you need one thing from a module, you shouldn't pay the cost of all the others!

That information would you use from the component tree for a specific timeline entry? Do you need the whole tree or just the parent/owner stack?

Does this diagram help? It uses the React Performance Tracks to explain what React is doing, and what you'll see when you use the tracks:

github.com/reactjs/reac...

Screenshot of a performance trace in Chrome DevTools with a few additional "Nav*" and "LCP*" markers. Hovering over the "LCP*" shows this is a "Soft LCP" and in the Summary panel when you click on it you see "Soft Largest Contentful Paint" and a "Learn more about Soft Largest Contentful Paint" link.

From Chrome 145 (on general release next week!), DevTools we will start to show so called "soft" navigations and "Soft LCP" in the Performance Panel traces.

These are for SPAs which don't do a full page load, but instead "fake it" by updating the current page and pushing a new history entry.

1/5 🧵

GitHub - wyattjoh/astro-bun-adapter: Astro adapter for Bun with optimized static file serving and ISR (Incremental Static Regeneration) Astro adapter for Bun with optimized static file serving and ISR (Incremental Static Regeneration) - wyattjoh/astro-bun-adapter

Just ported my personal site over to @astro.build with a custom @bun.sh adapter I wrote 🚀

👋 I'm currently looking for my next role, so if you're hiring, reach out!

- Astro + Bun for blazing fast SSR
- Supports ISR and SWR
- Hosted behind @cloudflare.social

github.com/wyattjoh/ast...

Yarn 6 Preview Yarn is a modern JavaScript package manager focused on speed, security, and reliability.

It’s happening. Yarn 6 Preview is here 💫

Yes, we rewrote it in Rust 🦀⚡️

I'm incredibly excited for the future of our beloved package manager. See the benchmarks and plans in our latest post:

Inside Turbopack: Building Faster by Building Less Learn how we built Turbopack with incremental computation to scale development and builds to massive Next.js applications.

Learn how we built Turbopack with incremental computation to scale development and builds to Next.js applications of all sizes.
nextjs.org/blog/turbop...

Upgrade now:

Node.js 20.20.0
Node.js 22.22.0
Node.js 24.13.0
Node.js 25.3.0

Full technical deep dive in our blog post: nodejs.org/en/blog/vuln...

Statement by Federal Reserve Chair Jerome H. Powell YouTube video by Federal Reserve

Video message from Federal Reserve Chair Jerome H. Powell:
www.youtube.com/watch?v=KckG...
www.federalreserve.gov/newsevents/s...

Your TypeScript year in review

You "silenced" 417 errors with `as any` that turned into runtime errors as soon as the code ran

TypeScript printed 4,693 error messages. 26 of them made sense

You spent 98 minutes waiting for tsc to run. During this time you spent 544 minutes reading social media

Our $1 million hacker challenge for React2Shell - Vercel We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.

We paid $1 million to hackers to harden our firewall defenses.

Today we're telling the story of how we strengthened our WAF, disclosing a runtime mitigation layer for the first time, and how we partnered with
@Hacker0x01 to defend against React2Shell.

vercel.com/blog/our-mi...

Been working on a new microsite to teach Next.js patterns, and I just published a new one:

"Sharing data with Client Components"

See how to use promises to keep your page unblocked so it can be rendered (or prerendered) as early as possible.

Enjoy!

next-16-recipes.vercel.app/sharing-data...

which PRs? I can take a look next week.

Update instructions for CVE-2025-55182 · wakujs waku · Discussion #1823 References https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components https://www.facebook.com/security/advisories/cve-2025-55182 GHSA-fv66-9v8q-g76r Affected vers...

⛩️ Waku v0.27.3 has been released.

- Dependency updates addressing the critical React Server Components security vulnerability
- Various small improvements

All users should update immediately: github.com/wakujs/waku/...

Critical Security Vulnerability in React Server Components – React The library for web and native user interfaces

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it.

A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.

react.dev/blog/2025/12...

Next 16.0: "Use cache" is ignored in dynamic routes · Issue #85240 · vercel/next.js Link to the code that reproduces this issue https://github.com/leo-cheron/next16-cache To Reproduce Create a Next.js 16 app with dynamic routes (e.g., app/[locale]/page.tsx) File: app/[locale]/page...

fantastic explanation by @storyhb.com, also maybe first example i remember of a feature being more immediately useful (in a sense) self-hosted compared to serverless/vercel

It's working for me now

Hire Me in Japan — overreacted I'm looking for a new job.

i'm looking for a new job

One of the huge perks of working at a software company is, when there's something about the product that bothers you personally, you can get your hands dirty and find out why it's basically impossible to get fixed

The official home of the Python Programming Language

TLDR; The PSF has made the decision to put our community and our shared diversity, equity, and inclusion values ahead of seeking $1.5M in new revenue. Please read and share. pyfound.blogspot.com/2025/10/NSF-...
🧵

Next.js 16

• Cache Components
• Turbopack enabled by default
• Turbopack file system caching (beta)
• Optimized navigations and prefetching
• Improved caching APIs
• Build Adapters API (alpha)
• React 19.2

nextjs.org/blog/next-16

A royal gold medal _The Royal Swedish Academy of Sciences_ (IVA, the same org that selects winners for three of the Nobel prize categories) awards me a gold medal 2025 for my work on curl. This academy, established 1919 by the Swedish king Gustav V, has been awarding _great achievers_ for over one hundred years and the simple idea behind the awards is, as quoted from their website: > Gold medals are awarded every year to people who, through outstanding deeds, have contributed to creating a better society. I am of course humbled and greatly honored to have been selected as a receiver of said award this year. To be recognized as someone who **have contributed to creating a better society** , selected by top people in competition with persons of remarkable track records and achievements. Not too shabby for a wannabe-engineer like myself who did not even attend university. There have been several software and tech related awardees for this prize before, but from what I can tell I am the first Open Source person to receive this recognition by the academy. ## Justification The Academy’s justification is given in Swedish (see below) but it should be translated roughly like this: _System developer Daniel Stenberg is awarded the IVA Gold Medal for his contributions to software development, where he has been central to internet infrastructure and free software. Through his work with curl, the tool that is now used by billions of devices worldwide, he has enabled reliable and secure data transfer over the internet. Not just between programs in traditional computers, but everything from smartphones and cars, to satellites and spacecraft._ The original Swedish “motivering”: _Systemutvecklare Daniel Stenberg tilldelas IVAs Guldmedalj för sina insatser inom mjukvaruutveckling där han haft en central betydelse för internetinfrastruktur och fri programvara. Genom sitt arbete med curl, verktyget som i dag används av miljarder enheter världen över, har han möjliggjort tillförlitlig och säker dataöverföring över internet. Inte bara mellan program i traditionella datorer utan allt från smartphones och bilar, till satelliter och rymdfarkoster._ ## The ceremony The associated award ceremony when the physical medal is handed over happens this Friday at the Stockholm City Hall‘s Blue Hall, the same venue used for the annual Nobel Prize banquet. I have invited my wife and my two adult kids to participate in those festivities. ## A _second_ medal indeed Did I not already receive a gold medal? Why yes, I did eight years ago. Believe me, it does not _get old_. This is something I can get used to. But yes: it is beyond crazy to get one medal in your life. Getting _two_ is simply incomprehensible. This is also my _third_ award received within this calendar year so I completely understand if you already feel bored by my blog posts constantly banging my own drum. See European Open Source Achievement Award and Developer of the year for the two previous ones. ## The medal I wanted to include a fine high resolution image of the medal in this post, but I failed to fine one. I suppose I will just have to make a few shots by myself after Friday and do a follow-up post!

I am awarded a gold medal by the Royal Swedish Academy of Sciences for my work on #curl

https://daniel.haxx.se/blog/2025/10/21/a-royal-gold-medal/

View transitions are in every browser now ✨

sounds like a rewrite not migration

Do you have a PR to share?

I don't know how a migration helper from a static json file the new flat config can fail so horribly. Does anybody have a successful migration story for a non-trivial .eslintrc.json to flat config?

PRs welcome

Part 2 is on the schedule, I’m just going to start the demo over and finish the talk from there

React 19.2 – React The library for web and native user interfaces

React 19.2 is now available!

This release includes Activity, useEffectEvent, React Performance Tracks, partial pre-rendering, and more:

react.dev/blog/2025/10...