Signup here for the newsletter to get the weekly digest right into your inbox.
weeklyfoo #153 is here: your weekly digest of all webdev news you need to know! This time you'll find 37 valuable links in 5 categories! Enjoy!
🚀 Read it!
- Bug blindness: Why developers and power users stop noticing the bugs that drive normal users away by Dan Luu / engineering,quality / 34 min read
📰 Good to know
- The rise and fall of agent civilizations: Three secret AI civilizations started and were wiped out inside OpenAI over three months by Dwarkesh Patel / ai,agents / 23 min read
- Understanding ChatGPT Work: What the subscription-only tier adds - code execution with internet access, a headless browser, persistent files and parallel sub-agents by Simon Willison / ai / 12 min read
- I accidentally turned LLM memory into program analysis: Swapping fuzzy agent memory for a Datalog fact store that supports incremental reasoning in vulnerability research by pwning.systems / ai,security / 21 min read
- Omarchy any user process can escalate to root: A default Docker configuration let any user process become root - fixed in version 4.0.1 by 0xcc / security,linux / 5 min read
- The depths of JavaScript - Minesweeper in 247 bytes: How a playable 8x8 Minesweeper with flags and cascading blanks was squeezed into a single line of JavaScript by yui and DNEK / javascript,codegolf / 17 min read
- pnpm 12 rewritten in Rust, same commands and lockfile: The Rust rewrite is stable and nearly all v11 commands, flags and lockfile format carry over by Zoltan Kochan / nodejs,tooling,rust / 12 min read
- htmx 4.0, the first major release in two years: Rebuilt on the Fetch API, with opt-in attribute inheritance, morphing swaps and a new hx-partial element by Carson Gross / html,htmx,frontend / 10 min read
- How Zod 4.5 cut memory per schema by 9x: Method memoization took a bare z.string() from 7.5KB of heap down to 784 bytes by Colin McDonnell / typescript,performance / 4 min read
- Breaking Claude Code Opus 5 auto mode: Prompt injection against auto mode landed 60-80% of the time, so it is a speed bump and not a security boundary by Johann Rehberger / ai,security,promptinjection / 13 min read
- How to build a diffusion language model: Generating whole sequences at once with iterative refinement, variable-length output and error correction by Kuleshov Group / ai,ml,deepdive / 34 min read
- Read your own writes off the primary with WAIT FOR: Naive replica reads were stale 992 times out of 1000 even over loopback - WAIT FOR gets that to zero for 1-2ms by Radim Marek / postgres,database / 19 min read
- 23x faster inserts with UUID v7 in Postgres 18: Switching a billion-row table to uuidv7(), and the exclusive lock and jittered retry loop the switchover needed by Andrew Atkinson / postgres,performance / 10 min read
- The MCP tax - what each server costs before your first prompt: Measuring the context every MCP server eats, and how schema deferral changes the bill by okaneland / ai,mcp,context / 10 min read
- Improving alignment and security practices: What went wrong in third-party evaluation environments in July and August, and the containment that followed by Anthropic / ai,security / 22 min read
- How Turbopack chunks your JavaScript: Merging small chunks inside route groups took nextjs.org from 96 requests down to 38 without shipping more code by Next.js / javascript,bundler,performance / 11 min read
- Making AI coding cheaper without sacrificing task quality: Shorter tool output can cost more when the agent has to reopen files, so compress the logs and leave the source alone by GitHub / ai,agents,context / 23 min read
🧰 Tools
- GitHub Agentic Workflows: Event-triggered and scheduled AI jobs alongside your deterministic CI/CD, with guardrails and support for Claude Code, Copilot, Gemini and Codex by GitHub / github,ci,ai
- vgpu: A TypeScript library for WebGPU with typed shader imports and a compact GPU-first API that also runs headless in Node.js by Vercel Labs / typescript,webgpu,graphics
- lane: A git worktree manager that preserves your build cache and leaves durable notes for your agents by Luke Edwards / git,cli,agents
- Rspack 2.2, Rsbuild 2.2 and Rslint 0.9: Faster builds and HMR, shorter module IDs, and Rslint now implements every rule and preset from typescript-eslint by Rspack / bundler,rust,tooling
- Speedlify2: Self-hostable continuous measurement of Lighthouse scores, Core Web Vitals and Axe accessibility on GitHub Actions and Pages by Zach Leatherman / performance,tooling
- pgterm: htop for all your Postgres databases - a Rust TUI with background health checks and views for queries, indexes and tables by Alex Shapalov / postgres,cli,rust
- pg_shmemviz: Visualize Postgres shared memory in the browser - allocations, struct fields, padding and raw bytes read from DWARF by Bertrand Drouvot / postgres,debugging
- Drydock: Diff built npm tarballs against the last published version, flagging install scripts, network access and new binaries by Jovi De Croock / npm,security,supplychain
- srvx 1.0: Export one fetch handler taking a Request and returning a Response, then run it unchanged on Node, Deno or Bun by Pooya Parsa / nodejs,server,javascript
- SimpleWebAuthn 14.0: The passkeys library verifies post-quantum ML-DSA passkeys and prefers ML-DSA-44 at registration on Node 24.7 and up by Matthew Miller / auth,passkeys,security
- Tailcat: Netcat over Tailscale's data plane without its control plane - WireGuard tunnels, NAT hole punching and DERP relay, no account needed by Tailscale / networking,cli,go
- cn: A drop-in replacement for clsx and tailwind-merge that precompiles Tailwind's conflict rules into lookup tables, and can trim itself to only the rules you use by shadcn and Aiden Bai / tailwind,javascript,css
- Mantine 9.6: A lightbox, an ActionBar for contextual bulk actions and four new chart types including waffle, gauge and candlestick by Mantine / react,ui,components
- styled-components to StyleX codemod: The codemod Linear built and used for its own migration by Kenneth Skovhus / react,css,codemod
- Storybook 10.6: The component workshop adds CLI bindings so agents can drive Storybook's tools and skills by Storybook / react,storybook,agents
🤪 Fun
- It takes 5 cloud services to hear my doorbell: A video doorbell upgrade that needed five different clouds to fix a problem the doorbell itself created by Vishal Ghaisas / fun,homeautomation / 3 min read
- The AI interface museum: A visual history of how humans learned to talk to, look through, create with and delegate work to machines by Kyle Jeong / ai,history,design / 5 min read
📺 Videos
- DHH on the future of programming: There are decades where nothing happens and weeks where decades happen - a long conversation on where the craft goes next by Lex Fridman and David Heinemeier Hansson / programming,ai,video
- Postgres is not slow, your storage is: A POSETTE 2026 talk benchmarking local NVMe against network storage and where the latency compounds by Sai Srirampur / postgres,performance,video
- Why is everyone moving to StyleX?: Scott and Wes on why the extra rigidity that annoys humans is exactly what agents thrive on by Syntax / react,css,video
Want to read more? Check out the full article here.
To sign up for the weekly newsletter, visit weeklyfoo.com.
Top comments (0)