Safari 27 beta lands 58 new features including WebAssembly JSPI and a rewritten ESM loader, while Rolldown 1.0 — the Rust bundler powering Vite 8 — delivers build speeds 10-30x faster than Rollup after VoidZero joined Cloudflare.
Bot traffic now exceeds human traffic at 57% of web requests per Cloudflare, and Stack Overflow launched Stack Overflow for Agents to prevent AI coding agents from repeatedly reinventing the same bug fixes and architectural patterns.
Biome v2.5 hits 500 lint rules with cross-file CSS-class analysis, while Angular 22 ships OnPush by default and a new WebMCP API letting Angular services register as browser-native AI agent tools.
Harry Roberts exposes how a preload hint can silently expand the TBT Window and inflate Total Blocking Time scores, while Addy Osmani argues that loop engineering with tools like Codex and Claude Code demands more — not less — developer judgment.
VoidZero — the team behind Vite, Rolldown, and Oxc — is joining Cloudflare, while cross-document View Transitions land in Chrome, Edge, and Safari enabling pure-CSS page animations for multi-page apps.
A wave of npm supply-chain attacks hit the ecosystem in early June: the Miasma worm compromised 57 packages using a novel Phantom Gyp technique, while @redhat-cloud-services packages shipped a self-spreading credential harvester.
Atlassian's Hardik Pandya outlines a three-layer approach — Markdown specs, design tokens, and audit scripts — to make design systems AI-ready, while NNG maps four distinct design roles AI has created.
Five Weekly Digest editions showed runtimes, CSS, and agent workflows getting faster while self-spreading package attacks and review bottlenecks enlarged the cost of every mistake.
Ability Summit 2026 panelists from GitHub and Deque argue that fixing accessibility at PR stage is already too late, while a new Axe Aggregate Reporter tool consolidates axe-core Playwright results into a single shareable report.
Express.js patches three critical multiparty DoS CVEs (upgrade to 4.3.0 immediately), while Astro 6.4 ships a pluggable Markdown pipeline with a new Rust-based processor, Satteri, cutting build times by over a minute.
Chrome 148 is experimenting with Declarative Partial Updates for native out-of-order HTML streaming without JavaScript, and Google I/O 2026 debuted Web MCP — exposing website functionality as agent-callable tool APIs.
CrowdStrike took down GlassWorm, a supply chain campaign that trojanized VS Code extensions to steal developer credentials from 300+ GitHub repos, while DeepSeek slashed V4-Pro prices 75%, further intensifying the AI pricing war.