TypeScript 7's Go-based compiler (Project Corsa) delivers 8-10x faster type-checking, while Biome cuts pre-commit hook times by 92% in large TypeScript monorepos.
Chrome 146 ships scroll-driven animations with the new trigger-scope property, while Josh W. Comeau demonstrates a pure-CSS sticky-header color-swap trick using position: sticky blockers — no JavaScript required.
Node.js patches nine CVEs across all active release lines, TypeScript 6.0 lands with built-in Temporal API types and positions itself as the final release before the Go-based Project Corsa compiler arrives in 7.0.
Storybook 10.3 introduces an MCP server for React that gives AI agents structured access to component metadata and live story previews, while Nielsen Norman Group draws a sharp line between AI-initiated generative UI and user-prompted vibe coding.
A self-propagating npm worm called CanisterWorm — spawned from the Trivy v0.69.4 supply-chain compromise — is backdooring packages across the ecosystem, while GitHub begins using Copilot Free and Pro interaction data for model training starting April 24.
Addy Osmani maps the shift to multi-agent coding orchestration at O'Reilly AI CodeCon, while research from METR and Google DORA reveals that AI-heavy teams take 19% longer on tasks despite perceiving a speedup — PR review bottlenecks absorb the gains.
Deque makes the case for pairing Axe DevTools automation with manual WCAG 2.2 testing, while OpenStatus rewrote its data table around a single createTableSchema declaration distributable via the shadcn registry.
CSS is replacing over 322 kB of JavaScript libraries — Anchor Positioning kills Floating UI, Scroll-Driven Animations replace GSAP ScrollTrigger — while light-dark() gains image support in Chrome 150 and Firefox 150.
Next.js 16.2 cuts dev startup by 87% and server render time by up to 60%, while VoidZero's Vite 8 — backed by the Rust-based Rolldown bundler — delivers 10-30x faster builds for teams like Linear and Beehiiv.
CCPA and GDPR enforcement sharpened — California won a $2.75M settlement against Disney — while Simon Willison outlined red-green TDD and sandboxed environments as the engineering practices that keep coding agents reliable.
Two critical npm supply-chain attacks — CanisterWorm hitting 44+ packages and Glassworm backdooring React Native phone-number libraries with 134,000 monthly downloads — arrived the same week GitHub re-enabled Dependabot malware alerting.
Addy Osmani's "comprehension debt" concept captures the week's sharpest insight: AI-assisted developers scored 17% lower on code comprehension tests, turning quality gates into throughput problems that WIP limits and TDD discipline can help counter.
