Windsurf 2.0 integrates Devin as a cloud coding agent on every plan, Netlify drops seat-based pricing in response to AI-driven developer growth, and Linux 7.0 ships with Rust support no longer experimental and an official AI-generated-code contribution policy.
ES2026 reaches Stage 4 with the Temporal API and explicit resource management, while TanStack Start debuts an RSC model that sidesteps the React2Shell CVE affecting Next.js, and Node.js 24.15.0 stabilizes require(esm) as LTS.
Matthias Ott argues for unifying design and engineering in a single practitioner, while Carmen Ansio coins creative bypass to name how AI tooling silently forks design systems, and Shopify's Polaris team used the Pi autoresearch agent to cut CI build time by 65%.
Storybook 10.3 introduces MCP for React so AI agents can build production UI directly from real stories and tests; Nielsen Norman Group reframes AI agents as first-class users of the products we design.
GitButler raised a $17M Series A from a16z to rebuild version control for agentic workflows, while an AI-powered bot called hackerbot-claw achieved confirmed RCE in six public repos including aquasecurity/trivy via GitHub Actions exploits.
Chrome 147 ships the new border-shape property as a decoration-preserving alternative to clip-path, while CSS linear() enables true spring physics animations with no JavaScript at runtime.
The axios npm package was compromised via a hijacked maintainer account, deploying a cross-platform RAT to over 100 million weekly downloads; Bun v1.3.12 ships built-in WebView automation and Bun.cron() scheduling.
Addy Osmani introduces Agentic Engine Optimization (AEO) for structuring docs for AI agent consumption, and MDN rebuilds its frontend from a React SPA to Lit web components with Rspack cutting dev start time from two minutes to two seconds.
Netguru's guide defines four core design system pattern types — navigation, forms, data display, and feedback — while Squarespace shipped native video and audio lazy loading by contributing patches to Chrome 147.
CSS position:sticky gains per-axis scroll container tracking in Chrome 148, and three new CSS features — @starting-style, transition-behavior, and interpolate-size — eliminate JavaScript show/hide animations.
axios npm was compromised via a hijacked maintainer account deploying a RAT to 100M weekly downloads, and IoliteLabs VSCode extensions planted a multi-stage backdoor on 27,500 Solidity developers.
Alex Russell argues browsers and PWAs are the most powerful antitrust lever against mobile app-store monopolies, while WebAssembly WASI Preview 2 and WasmGC bring near-native edge performance to production in 2026.
