Front-End Fire

• 125: The RSC Vulnerabilities Keep Coming

  Hot on the heels of the first critical vulnerability discovered in React applications using RSCs last week, two more vulnerabilities have surfaced, which is not uncommon. Even if you already updated for the critical vulnerability, you will need to update again.In lighter news, Anthropic donates MCP to the Agentic AI Foundation, just one year after introducing it to the world. MCP’s rise has been meteoric: 10,000 active public MCP servers, adoption by ChatGPT, Cursor, Gemini, Copilot, VS Code, and more, and now stewardship by the AAIF, which is under the Linux Foundation.With all the great things coming to CSS lately, the Chrome Dev team created a great CSS Wrapped write up highlighting the big features for 2025. Of the 22 new features added, invoker commands, popover enhancements, and customizable select dropdowns are some of the most exciting additions.Timestamps:2:29 - More vulnerabilities in RSCs6:36 - Anthropic donates MCP to the Agentic AI Foundation16:04 - CSS 2025 wrap up25:05 - Disney to allow characters on Sora29:42 - What’s making us happyNews:Paige - Anthropic donates MCP to the Agentic AI FoundationJack - More vulnerabilities in RSCs discoveredTJ - CSS Wrapped 2025Lightning News: Disney will allow characters on Sora AI video generatorWhat Makes Us Happy this Week:Paige - Twinkly Christmas LightsJack - 3D printed underwear for the multiboard desk organizationTJ - MammothThanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.Front-end Fire websiteBlue Collar Coder on YouTubeBlue Collar Coder on DiscordReach out via emailTweet at us on X @front_end_fireFollow us on Bluesky @front-end-fire.comSubscribe to our YouTube channel @Front-EndFirePodcast

  --------  

  40:57

  --------

  40:57
• 124: TanStack Enters the AI Arena—Meet TanStack AI

  This week TanStack joins the AI wars with the alpha release of TanStack AI: an open-source AI SDK with a unified interface across multiple providers. TanStack AI is an open-source ecosystem of libraries and standards, and it is client, server, and AI provider agnostic, to make building AI-enabled apps accessible to all.In a surprise move, AI company Anthropic acquires JavaScript runtime Bun to accelerate its development of Claude Code. Apparently, Bun has been central to Claude Code reaching $1 billion in run-rate revenue in just six months, and Anthropic’s brought the team in house to keep the momentum going.And it’s been another rough week for security in JavaScript. First, a new self-replicating, credential stealing malware attack, dubbed Shai-Hulud 2.0, swept the npm ecosystem and compromised 800 npm packages in the process, and then a critical security vulnerability was discovered for any React projects using React Server Components. Just remember to lock down your dependencies and install those patches ASAP, folks.Timestamps:1:22 - TanStack AI9:12 - Anthropic buys Bun21:03 - Shai-Hulul 2.0 on npm and an RSC vulnerability30:23 - What’s making us happyNews:Paige - Shai-Hulud 2.0 on npm and RSC vulnerabilityJack - TanStack AITJ - Anthropic buys Bun (Bun post) (Anthropic post)What Makes Us Happy this Week:Paige - The Durrells TV seriesJack - Essentialism bookTJ - Dungeon Crawler Carl book seriesThanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.Front-end Fire websiteBlue Collar Coder on YouTubeBlue Collar Coder on DiscordReach out via emailTweet at us on X @front_end_fireFollow us on Bluesky @front-end-fire.comSubscribe to our YouTube channel @Front-EndFirePodcast

  --------  

  44:59

  --------

  44:59
• 123: Is Google’s Antigravity IDE a Game-Changer or Just Another Fork?

  Another week, another new AI IDE. This week, Google released the Antigravity IDE (yet another VS Code fork) which offers unique twists like “cross-surface” agents, user feedback to agent-generated artifacts, and a view of all agents across any workspace.The team behind the Unistyles cross-platform library just debuted Uniwind for all the React Native devs who want to use Tailwind styling in their native apps. Uniwind brings Tailwind-style className support to RN at build time, and has a custom, high-performance CSS parser to handle both Tailwind 4 and plain CSS files. Prisma 7.0 is out, and so is Rust from its codebase. The team completely rebuilt it in TypeScript to cut down on its bundle size and the communication layer between Rust and the JS runtime that was actually slower than just JavaScript through and through.In Lightning News, even if you don’t develop in Angular, the Angular v21 dev release video is worth a watch, Cloudflare had a big Internet outage this week, Firefox has teased AI in its browser “the Firefox way”, and the State of React Survey 2025 is open now (please vote for Front-end Fire in the Podcasts section!).Timestamps:1:27 - Prisma 7.09:35 - Uniwind12:18 - Antigravity27:32 - Angular v21 release video29:20 - Cloudflare outage37:11 - Firefox gets an AI window38:47 - State of React survey open40:36 - What’s making us happyNews:Paige - UniwindJack - Prisma 7.0TJ - AntigravityLightning News:Firefox gets an AI windowCloudflare had a big outageThe State of React Survey 2025 is now openAngular v21 Dev Release videoWhat Makes Us Happy this Week:Paige - Upcoming holidays and seeing familyJack - StroboClip HD for the guitarTJ - Dungeon Crawler Carl bookThanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.Front-end Fire websiteBlue Collar Coder on YouTubeBlue Collar Coder on DiscordReach out via emailTweet at us on X @front_end_fireFollow us on Bluesky @front-end-fire.comSubscribe to our YouTube channel @Front-EndFirePodcast

  --------  

  48:56

  --------

  48:56
• 122: Snapchat Drops Valdi—A New Challenger to React Native?

  In a surprise move, Snapchat open sources its cross-platform UI Valdi. Valdi lets devs write UI components in TypeScript then compiles them to native views on iOS, Android, and macOS, offers instant hot reload without recompiling, and integrates well into already existing native apps. GitHub Universe 2025 wrapped up just a few weeks ago, and it had a bunch of new AI agent updates to share. Think: a single source to manage agents across GitHub, Mobile, CLI, and VS Code, custom agents with tailored prompts and tools, new Copilot integrations and agentic code review, and Plan Mode. TanStack DB released v0.5 and Query-Driven Sync. With Query-Driven Sync, a component’s query is the API call and DB handles the fetching, caching, and updating, and provides different sync modes for different use cases. Chapter Markers:0:47 - Snapchat open sources cross-platform tool Valdi7:08 - GitHub Universe updates15:45 - TanStack DB query-driven sync19:54 - GitHub eliminates toasts22:49 - Firefox has an updated mascot24:09 - Vibe coding named word of the year33:26 - What’s making us happyNews:Paige - Snapchat open sources cross-platform UI ValdiJack - TanStack DB query-driven syncTJ - GitHub Universe recapLightning News:GitHub eliminates toasts from their designsFirefox has an updated mascotVibe coding named word of the yearWhat Makes Us Happy this Week:Paige - Holiday light displaysJack - Cursor ComposerTJ - Inflatable dragon yard decorationThanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.Front-end Fire websiteBlue Collar Coder on YouTubeBlue Collar Coder on DiscordReach out via emailTweet at us on X @front_end_fireFollow us on Bluesky @front-end-fire.comSubscribe to our YouTube channel @Front-EndFirePodcast

  --------  

  44:21

  --------

  44:21
• 121: Chrome DevTools Gets AI Superpowers

  This week is a news roundup while cohost Jack is away for a hackathon in SF. First up, is how Chrome DevTools has added AI to its panels. Now users can ask Gemini to explain console errors, make CSS changes via in the elements tab, and explain traces collected in the performance panel.HTMX has also jumped from v2 to v4 (alpha), rebuilding the internals after 5 years of maintaining the project. Upgrades include: going from XMLHttpRequests to fetch, explicit attribute inheritance, and improved history caching.Angular’s meta-framework AnalogJS also just launched 2.0 which offers file-based routing, better Vite ecosystem support, and unified SSR, SSG, and islands-style hydration in one cohesive setup.Rumor has it that next year Apple will be using Gemini to drive Siri, as it continues to try and get Apple Intelligence to work reliably.GitHub has officially disabled classic token creation for npm publishing in an effort to reign in the supply chain attacks we’ve reported on for the last few months. And last but not least, a company called NEO has a home assistant robot available for preorder now. The robot can clean, fold laundry, do dishes, and so on, but here’s the kicker: it’s a human piloting it remotely. Is this really the robot enhanced future we imagined?Timestamps:1:16 - Chrome DevTools gets a bunch of AI features8:39 - htmx v4 alpha14:25 - AnalogJS 2.017:09 - Apple allegedly to use Gemini to drive Siri22:13 - GitHub disables classic token creation for npm27:38 - NEO home robot35:58 - What’s making us happyNews:Paige - HTMX goes right from v2 to v4 (alpha)TJ - Chrome DevTools gets a bunch of AI featuresLightning News:AnalogJS 2.0Apple allegedly to use Gemini to drive SiriGitHub’s disabled classic token creation for npmNEO home robotWhat Makes Us Happy this Week:Paige - The Survivalists novelTJ - Pokemon Legends Z–A gameThanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.Front-end Fire websiteBlue Collar Coder on YouTubeBlue Collar Coder on DiscordReach out via emailTweet at us on X @front_end_fireFollow us on Bluesky @front-end-fire.comSubscribe to our YouTube channel @Front-EndFirePodcast

  --------  

  42:13

  --------

  42:13

Meer Technologie podcasts

Trending Technologie -podcasts

Over Front-End Fire