Stay ahead in web development: latest news, tools, and insights #135

#webdev #weeklyfoo #javascript #node

Signup here for the newsletter to get the weekly digest right into your inbox.

weeklyfoo #135 is here: your weekly digest of all webdev news you need to know! This time you'll find 35 valuable links in 4 categories! Enjoy!

🚀 Read it!

Structured Prompt-Driven Development: Treating AI prompts as first-class version-controlled artifacts to make LLM-assisted changes governable, reviewable, and reusable by Martin Fowler / ai, engineering, prompting / 37 min read

📰 Good to know

Selective Test Execution at Stripe: How Stripe runs only 5% of tests per CI build in a 50M-line Ruby monorepo — C++ file access tracking selects exactly which tests to run based on changed code paths by Stripe Engineering / engineering, ci, testing / 2 min read
Thoughts and Feelings Around Claude Design: Figma's locked-down format kept it out of AI training data while LLMs learned code — the source of truth is shifting back to code, making Figma look pre-AI by Sam Henri Gold / ai, design / 7 min read
The Woes of Sanitizing SVGs: How Scratch's repeated manual SVG sanitization failures led to XSS and HTTP leaks — and why iframe+CSP sandboxing is the only sustainable path by muffin / security, frontend / 16 min read
Agent Memory Patterns: The three types of mutable memory for agents — Files, Memory Blocks, and Skills — and how editable memory makes agents dramatically more capable by Tim Kellogg / ai, agents / 8 min read
AI Fluency Index: Anthropic studied 9,830 Claude conversations and identified 24 fluency behaviors — only 30% of users set collaboration terms upfront, showing most are stuck at the prompt-and-fix level by Anthropic / ai, research / 14 min read
How AI Is Changing Operating Systems: Ubuntu's approach to AI hardware enablement — native CUDA packaging, NPU support, x86_64 architecture variants, and early plans for agentic workflows at the OS level by Gergely Orosz / engineering, ai, linux / 14 min read
TypeScript 7.0 Beta: 10x Faster Compilation: The Go-powered TypeScript port in beta — about 10x faster compiler performance, already close to production-ready by Microsoft / typescript, javascript / 20 min read
GitHub Actions Is the Weakest Link: How insecure defaults make Actions a major supply chain attack vector — and what maintainers can do today without waiting for GitHub to fix the defaults by Andrew Nesbitt / security, ci, supply-chain / 12 min read
Scroll-Driven Animations: Deep dive into the new CSS animation-timeline API for native scroll-driven animations without JavaScript by Josh W. Comeau / css, frontend, animation / 20 min read
Why Ghostty Is Leaving GitHub: Mitchell Hashimoto moves Ghostty off GitHub after 18 years due to frequent outages affecting professional collaboration by Mitchell Hashimoto / tools, engineering, opinion / 5 min read
What's Actually New in JavaScript: All the useful features from ES2025 and ES2026 in one place: iterator helpers, Promise.try, Map.getOrInsert, Temporal, and more by Neciu Dan / javascript, frontend / 35 min read
Building Pi and What Makes Self-Modifying Software Fascinating: Mario Zechner and Armin Ronacher on automation bias, declining AI code quality, and why junior engineers are more valuable than AI agents by Gergely Orosz / ai, agents, engineering, opinion / 9 min read
The End of Responsive Images: Mat Marquis reflects on 14 years of srcset/sizes headaches — the new sizes=auto for lazy-loaded images is now cross-browser and eliminates manual calculations entirely by Mat Marquis / css, frontend, responsive / 20 min read
Constructable Stylesheets and adoptedStyleSheets: One Parse, Every Shadow Root: Create CSSStyleSheet objects in JavaScript and share them across Shadow DOM — parse CSS once per component class instead of per element by Rob Levin / css, web-components, frontend / 14 min read
React Compiler at 18 Months: Eighteen months in, the compiler's real wins are eliminating forgotten-dependency bugs and missing memos — not benchmark speedups. Adoption blockers in brownfield apps and what's next by Sascha Bäuerlein / react, javascript, engineering / 12 min read
The Last Software Engineer: As AI agents automate implementation, engineering value shifts to judgment — what to build and why, and owning the consequences of those decisions by Epic Product Engineer / ai, engineering, opinion / 10 min read
The End of Just Ask Sarah: AI agents only know their context window — the shift from human institutional memory to explicit machine-readable docs reveals a new kind of technical debt called intent debt by Simme / ai, agents, documentation / 8 min read
Copy Fail (CVE-2026-31431): Critical Linux kernel flaw since 2017 — unprivileged local users gain root access via a Python script, posing severe risk to container clusters without kernel update or disabling algif_aead by security researchers / security, linux / 5 min read
Fresh 2.3: Deno's full-stack framework gains first-class WebSocket support, ships zero JS for static pages, and adds one-attribute View Transitions API integration by Bartek Iwańczuk / javascript, deno, frontend / 10 min read
The Pulse: Token Spend Breaks Budgets: Companies are hitting AI token budget overruns and switching strategies — from real-time measurement to cheaper models and local alternatives by Gergely Orosz / ai, engineering / 17 min read
Firefox Maker Pushes Back Against Google's Prompt API: Mozilla argues Chrome's built-in LLM Prompt API harms web interoperability and neutrality — the API lets web pages directly prompt a browser-provided language model by Mozilla / browser, ai, standards / 11 min read

🧰 Tools

AIMAC: Tests 43 AI models by prompting them to build web pages and auditing the output for accessibility violations by AIMAC / ai, accessibility, testing
Awesome Harness Engineering: Awesome list for AI agent harness engineering: tools, patterns, evals, memory, MCP, permissions, observability, and orchestration. by ai-boost / ai, tools
Skills: Skills for Real Engineers. Straight from my .claude directory. by Matt Pocock / skills, ai
wuphf: Slack for AI employees that build and maintain their own wiki. Get Claudes, Codexes, OpenClaws and local LLMs to collaborate and do your work autonomously while never losing context. by wuphf.team / ai, agents
Dirac: Open-source AI coding agent for VS Code and CLI that cuts API costs by 64.8% through AST manipulation and optimized context curation by dirac-run / ai, coding, tools
Pi: Minimalist self-modifying AI coding agent built for stability — designed because Claude Code became unpredictable as features accumulated by Mario Zechner / ai, agents, tools
Honker: Postgres NOTIFY/LISTEN semantics for SQLite — low-latency cross-process events without a daemon or broker by Russell Romney / databases, sqlite, tools
OpenSpec: Spec-driven development framework that adds a lightweight specification layer between humans and AI coding assistants — align on requirements before any code is written by Fission AI / ai, tools, github
Perry: Cross-platform TypeScript compiler that compiles directly to native executables without a runtime by perryts / typescript, tools
Pu.sh: Minimalist coding-agent harness in 400 lines of shell script — a lightweight alternative to heavier AI coding frameworks by pu.sh / ai, agents, tools

📺 Videos

Prompting 101: Anthropic's applied AI team just showed how to actually prompt Claude properly. by Hannah Moran, Christian Ryan / ai, anthropic
Design at Scale at Ramp: Diego Zaks on how Ramp uses AI at 1,500 people — 99.5% daily usage, 1,500 internal apps in six weeks, non-engineers writing 12% of production code by UX Tools / ai, design, agents
OpenClaw for Designers: Tommy's walkthrough of his AI agent harness for designers — SOUL.md, USER.md, MCP connections to Figma and Slack, and what it actually costs to run a self-improving design stack by UX Tools / ai, design, agents