Links
Worth remembering
Things I've built, and the 233 news stories from 2024 onwards that shaped how I work: AI models and coding agents, .NET, the web platform, mobile, cloud, security and tech in Saudi Arabia. Each one links to its original source.
My projects
issam.si
My corner of the web: who I am, what I've worked on, and the news from my field I keep coming back to.
- Next.js 16
- React 19
- TypeScript
- CSS
- Vercel
In the field
October 2026
A faster, lighter C# Dev Kit
Rebuilt C# Dev Kit opens solutions in about a second with a fraction of the memory, making VS Code viable for big repos.
Mistral introduces Mistral Large 4
1T-parameter multimodal MoE trained in Europe; preview API now, weights promised by end of October.
Next.js 16.4 recommends Cache Components for every app
New apps enable Cache Components by default ahead of Next.js 17; adds ensureStatic and agent-driven upgrades.
September 2026
Google introduces Gemini 4 Argon
Google's next-generation frontier model raises max output to 1M tokens; initial access goes to cyber defenders.
Vite+ 1.0: a unified, MIT-licensed web toolchain
One CLI and config covering runtime and package manager management, dev, build, test and lint.
Anthropic releases Claude Opus 5.5
Fable 5.1-level performance at about 40% lower running cost than Opus 5.
OpenAI launches GPT-6 Sol and Luna following GPT-6 Astra
GPT-6 tiers at half the API price of the 5.6 series, bringing Astra-level reliability to cheaper models.
EU Cyber Resilience Act reporting obligations take effect
Manufacturers selling software in the EU must report exploited vulnerabilities within 24 hours; open-source stewards have lighter duties.
React 19.3: stable View Transitions and Fragment Refs
<ViewTransition>, Fragment refs, a browser() API for client-only rendering and Trusted Types support.
Tailwind Labs joins Shopify
Tailwind CSS remains MIT-licensed with long-term maintenance funded by Shopify.
Announcing .NET 11 Release Candidate 1
Go-live licensed RC: C# 15 unions stabilized, Native AOT and container publishing improvements in the SDK.
August 2026
Kubernetes v1.37 "Garhwal" released
Pod Certificates and Cluster Trust Bundles go GA, putting mTLS certificate issuance into core Kubernetes.
C# 15 preview: union types and closed hierarchies
Unions, closed hierarchies, extension indexers and labeled break/continue arrive with .NET 11 in November.
Cursor is acquired by SpaceX
The leading AI editor gains access to SpaceX's GPU fleet to train its own coding models.
Dart 3.13 ships primary constructors (alongside Flutter 3.47)
Stable primary constructors cut class boilerplate; Flutter 3.47 shipped the same day.
Auto mode becomes the default in Claude Code
A classifier replaces most permission prompts; Anthropic reports it caught 89% of dangerous commands vs 13.6% by humans.
Next.js 16.3 brings Instant Navigations
Partial Prefetching, up to 90% less dev memory, TS 7 type checking and root params for i18n segments like [lang].
July 2026
EU begins enforcing AI Act and transparency rules from 2 August 2026
Apps must disclose AI interactions and machine-mark AI-generated content when serving EU users.
MCP 2026-07-28 spec makes the protocol stateless
Drops sessions and handshakes, adds header-based routing and multi round-trip requests, deprecates sampling and roots.
Official MCP C# SDK v2.0
Next major version of the MCP SDK; check for breaking changes if you host MCP servers in ASP.NET Core.
Hugging Face details an intrusion by an escaped OpenAI eval agent
An agent broke out of its sandbox via a registry zero-day and ran a multi-day attack; a case study in agent containment.
US adds UAE to Country Group A:5 for advanced computing exports
Puts the UAE among the most trusted US export destinations, easing access to advanced AI chips for regional clouds.
Moonshot AI announces Kimi K3 open-weight model
2.8T-parameter model billed as the first open 3T-class release, with a 1M-token context.
OpenAI releases the GPT-5.6 family: Luna, Terra and Sol
OpenAI moves to named capability tiers, each with a 1M-token context window.
TypeScript 7.0 released: the native Go compiler
8-12x faster full builds and a new parallel --watch; options deprecated in 6.0 are removed.
June 2026
Vercel can now run any Dockerfile
Containerized backends can now deploy and autoscale on Vercel with pay-per-CPU pricing, next to frontends.
.NET 8 and .NET 9 reach end of support on 10 Nov 2026
No security patches for .NET 8 or 9 after 10 Nov 2026; production services should be on .NET 10.
Android 17 released
Apps targeting API 37 can no longer opt out of large-screen resizability, and new APIs are now Compose-only.
Anthropic releases Claude Fable 5 and restricted Claude Mythos 5
Mythos-class capability made generally available, with classifiers routing risky cyber/bio queries to a safer model.
.NET at Microsoft Build 2026
Build 2026 .NET sessions: C# union types, .NET 11 runtime and SDK, and AI building blocks.
VoidZero (Vite, Vitest, Rolldown, Oxc) joins Cloudflare
Vite stays MIT and vendor-neutral, with a $1M Cloudflare fund for the ecosystem.
Duende IdentityServer v8 with modular add-ons and new pricing
.NET 10-only major release with SAML add-ons and new Lite/Standard tiers; relevant when weighing OpenIddict vs Duende.
GitHub launches the Copilot desktop app
Agent-native desktop app for running parallel agents in isolated worktrees with cloud and local sandboxes.
May 2026
OpenTelemetry graduates in the CNCF
Graduation signals that OTel's core specs and APIs are mature enough to standardize on for long-term production use.
Flutter 3.44: Swift Package Manager by default and Hybrid Composition++
SwiftPM replaces CocoaPods by default for iOS/macOS builds, and Android platform views move to OS compositing.
Postmortem: TanStack npm supply-chain compromise
pull_request_target plus cache poisoning let attackers steal an OIDC token and publish 84 versions with valid provenance.
EU agrees Digital Omnibus delaying AI Act high-risk obligations
High-risk AI rules move to Dec 2027 (Annex III) and Aug 2028 (Annex I), changing compliance plans for EU products.
Rolldown 1.0 is stable
The Rust bundler behind Vite 8 is production-ready with Rollup plugin compatibility.
Node.js 26 released with Temporal enabled by default
Temporal replaces Date for robust date/time handling; V8 14.6 adds Map.getOrInsert and Iterator.concat.
April 2026
DeepSeek previews V4 Pro and V4 Flash open-weight models
1.6T-parameter MoE with 1M-token context by default; API compatible with OpenAI and Anthropic formats.
OpenAI releases GPT-5.5
Agent-focused flagship with a 1M-token context, released six weeks after GPT-5.4.
Kubernetes v1.36 "Haru": user namespaces reach GA
User namespaces, SELinux mount labelling and fine-grained kubelet authorization went GA, tightening pod isolation.
Meta Superintelligence Labs launches proprietary Muse Spark model
Meta's new frontier model is proprietary, unlike its open-weight Llama releases; API is in private preview.
Anthropic previews Claude Mythos to defenders via Project Glasswing
First frontier model held back from general release for its ability to find and exploit zero-days.
Microsoft Agent Framework 1.0 released
Production-ready, stable agent APIs for .NET with multi-agent orchestration, A2A and MCP interop.
Google releases Gemma 4 open models under Apache 2.0
Gemma moves to Apache 2.0; the 31B and 26B MoE models are strong options for local and on-prem deployment.
North Korea-linked actor compromises the Axios npm package
A hijacked maintainer account published two Axios versions that pulled in a malicious dependency via postinstall.
March 2026
Next.js 16.2 ships a stable Adapter API for all platforms
A public, versioned build-output contract and test suite make self-hosting and non-Vercel deploys first-class.
TypeScript 6.0 released as the bridge to TypeScript 7
strict by default, ESNext modules and deprecations of baseUrl, AMD/UMD and ES5 targets ahead of the Go-based 7.0.
Trivy scanner and GitHub Actions compromised by TeamPCP
A security scanner became the attack vector: 75 of 76 trivy-action tags were force-pushed to a credential stealer.
Vite 8 ships with Rolldown as its single bundler
The Rust-based Rolldown replaces esbuild plus Rollup, with up to 10-30x faster production builds.
Node.js moves to one major release per year, every release LTS
Starting with Node 27, odd/even lines end; an Alpha channel replaces odd releases for early testing.
CVE program funding secured, easing fears of a repeat crisis
CISA moved CVE to a protected budget line, avoiding a second funding cliff when MITRE's extension ended in March 2026.
Official MCP C# SDK reaches v1.0
Stable API for MCP servers and clients with full 2025-11-25 spec support and improved authorization discovery.
February 2026
The React Foundation launches under the Linux Foundation
React, React Native and JSX move from Meta to vendor-neutral governance backed by eight platinum members.
Cloudflare outage on February 20, 2026 (BYOIP prefixes withdrawn)
A cleanup task read a missing parameter as 'all prefixes' and withdrew about 25% of BYOIP routes for six hours.
Google releases Gemini 3.1 Pro
More than doubled Gemini 3 Pro's ARC-AGI-2 score to a verified 77.1%.
Interop 2026 focus areas announced
20 focus areas including container style queries, advanced attr(), scroll-driven animations and the Navigation API.
Flutter 3.41 decouples Material and Cupertino and adds public release windows
Design-library updates can now ship outside SDK releases, and release dates are now published ahead of time.
.NET 11 Preview 1 is now available
Kicks off .NET 11 with runtime-level async, Zstandard compression and collection expression arguments.
State of JavaScript 2025 results
13,000 respondents: TypeScript dominance grows, Vite overtakes webpack and AI-generated code nears 30%.
January 2026
CSS anchor positioning becomes Baseline with Firefox 147
Tooltips, menus and popovers can be positioned in pure CSS across all engines, replacing JS positioning libraries.
December 2025
Cloudflare "Code Orange: Fail Small" resilience plan
After two global outages, Cloudflare commits to staged, auto-rolled-back config deploys; useful for any team's change process.
Docker Hardened Images become free and open source
More than 1,000 minimal, low-CVE base images are now free under Apache 2.0, which lowers the cost of hardening containers.
Kubernetes v1.35 "Timbernetes": in-place Pod resize reaches GA
Pods can change CPU and memory without restarting; this is also the last release that supports cgroup v1.
GitHub Actions pricing update: hosted runner cuts, self-hosted fee postponed
Hosted runner prices fell up to 39% in January 2026; a proposed per-minute fee for self-hosted runners was postponed after backlash.
Trump signs executive order to preempt state AI laws
Creates an AI Litigation Task Force against state AI rules, adding uncertainty to US state compliance.
The successful end of the kernel Rust experiment
Kernel maintainers agreed Rust is no longer experimental but a permanent part of Linux.
Anthropic donates MCP to the new Agentic AI Foundation
MCP, AGENTS.md and goose moved under a Linux Foundation fund co-founded by Anthropic, OpenAI and Block.
npm classic tokens revoked; session-based auth now default
All legacy npm tokens stopped working; CI publishing must use granular tokens or OIDC trusted publishing.
Cloudflare outage on December 5, 2025
A body-parsing change rushed out to mitigate the React Server Components CVE broke about 28% of HTTP traffic for 25 minutes.
Critical RCE in React Server Components (React2Shell, CVE-2025-55182)
CVSS 10 unauthenticated RCE in RSC deserialisation affected React 19 and Next.js apps; exploited in the wild within days.
Bun is acquired by Anthropic
Bun stays MIT-licensed and open source, now backed by a company whose CLI tooling ships on it.
Mistral releases Mistral 3 family under Apache 2.0
Mistral Large 3 (675B MoE) plus 3B-14B Ministral models give a permissive open-weight European option.
November 2025
MCP November 2025 spec adds tasks and simpler auth
Experimental async tasks, Client ID Metadata Documents, URL-mode elicitation and sampling with tools.
Anthropic releases Claude Opus 4.5
Frontier Opus model at a third of the previous price ($5/$25) and a new effort parameter.
Shai-Hulud worm returns, leaking secrets to 25,000 GitHub repos
The second wave ran in preinstall scripts, so even failed installs executed it; disable lifecycle scripts in CI where possible.
G42 receives US approval for advanced AI chip exports
US export licences moved Stargate UAE from plan to deployment under a regulated compliance environment.
Cloudflare outage on November 18, 2025
An oversized Bot Management feature file pushed to every edge node caused hours of global HTTP 5xx errors.
Google launches Antigravity, an agent-first IDE
Editor plus a manager view for orchestrating multiple agents that report through plans and artifacts.
Google launches Gemini 3
Gemini 3 Pro shipped the same day across the Gemini app, Search AI Mode and the developer API.
Introducing C# 14
Extension members (properties, static members), the field keyword and null-conditional assignment ship with .NET 10.
Anthropic disrupts espionage campaign run through Claude Code
A state-backed group used an agentic coding tool to automate 80-90% of an intrusion campaign.
Flutter 3.38 and Dart 3.10: dot shorthands and iOS 26 support
Adds Dart dot shorthands, analyzer plugins, iOS 26/Xcode 26 support and predictive back on Android by default.
Announcing .NET 10 (LTS)
The new LTS baseline, supported until 10 Nov 2028; the upgrade target for .NET 8 and 9 services.
Aspire 13 released
Largest Aspire release: first-class Python/JavaScript, multi-format connection strings and new deployment tooling.
Kubernetes announces retirement of Ingress NGINX
No releases or security fixes after March 2026; clusters on ingress-nginx should plan a move to Gateway API.
Visual Studio 2026 is generally available
New IDE generation with a redesigned UI, faster load times and deeper Copilot integration; VS 2022 extensions work.
Collins names 'vibe coding' its word of the year
Karpathy's February 2025 term for prompt-driven coding without reading the code went mainstream.
Microsoft and G42 announce 200 MW UAE data centre expansion
Part of Microsoft's $15.2bn UAE investment, adding Azure AI and cloud capacity in the Gulf by end of 2026.
What's new in EF Core 10
Named query filters, SQL Server 2025 vector and json types, complex types as JSON and LeftJoin support.
October 2025
Aspire expands into a polyglot platform
Aspire becomes a stack-agnostic orchestrator for building, observing and deploying distributed apps.
Azure Front Door post-incident review: global connectivity outage
Incompatible config metadata exposed a latent data-plane bug that crashed AFD edge sites worldwide for about eight hours.
Cursor 2.0 ships with its own Composer model
Agent-centric UI running parallel agents in git worktrees, plus an in-house model tuned for fast agentic edits.
GitHub announces Agent HQ for third-party coding agents
Agents from Anthropic, OpenAI, Google, Cognition and xAI managed from one mission control inside GitHub.
Groq powers HUMAIN One, an agent-based enterprise OS
HUMAIN's first enterprise product replaces apps with voice-driven agents for HR, finance and procurement.
Vitest 4 makes Browser Mode stable
Component tests in real browsers, visual regression assertions and Playwright traces are now first-class.
Next.js 16: Turbopack by default and Cache Components
Turbopack becomes the default bundler and 'use cache' introduces an explicit, opt-in caching model.
Valkey 9.0 released
The BSD-licensed Redis fork added hash-field expiry, atomic slot migration and multi-DB clustering, beyond a drop-in clone.
AWS post-event summary: DynamoDB DNS failure in us-east-1
A race condition in DynamoDB DNS automation left an empty record and cascaded to EC2, Lambda, NLB and much of the internet.
Claude Code on the web runs tasks in cloud sandboxes
Parallel cloud-run coding tasks with automatic PRs and network and filesystem isolation.
Anthropic introduces Agent Skills
SKILL.md folders loaded on demand; published as an open cross-tool standard in December 2025.
Same-document view transitions reach Baseline
With Firefox 144, document.startViewTransition works in all major engines for SPA route animations.
Claude Code adds plugins
Bundles of slash commands, subagents, MCP servers and hooks that teams can share through marketplaces.
React Compiler 1.0 is stable
Automatic build-time memoization is production-ready, reducing the need for manual useMemo and useCallback.
AMD and OpenAI announce 6 GW GPU partnership
Makes AMD Instinct a second large-scale GPU source for OpenAI, starting with MI450 in H2 2026.
Microsoft Agent Framework preview
Successor to Semantic Kernel and AutoGen for building AI agents and workflows in .NET.
React 19.2 released
Adds <Activity>, useEffectEvent, cacheSignal and partial pre-rendering primitives to stable React.
September 2025
Anthropic releases Claude Sonnet 4.5 and the Claude Agent SDK
Top SWE-bench Verified score and 61.4% on OSWorld at the same $3/$15 price as Sonnet 4.
California enacts SB 53 frontier AI transparency law
First US state law requiring frontier developers to publish safety frameworks and report critical incidents.
Claude Code SDK renamed Claude Agent SDK
The harness behind Claude Code exposed as a general SDK with subagents, compaction, tools and MCP.
PostgreSQL 18 released with asynchronous I/O
Async I/O, uuidv7(), virtual generated columns and OAuth auth; md5 passwords are deprecated in favor of SCRAM.
2025 DORA report: State of AI-assisted Software Development
DORA finds AI amplifies existing team strengths and weaknesses, and it introduces a seven-practice AI Capabilities Model.
GitHub: our plan for a more secure npm supply chain
npm moves to mandatory 2FA, short-lived granular tokens and OIDC trusted publishing; package publishers must migrate.
OpenAI and NVIDIA announce 10 GW partnership with up to $100B investment
One of the largest compute commitments ever, with the first gigawatt on Vera Rubin due in H2 2026.
Trusted Publishing comes to NuGet.org
Publish packages from CI with short-lived OIDC tokens instead of long-lived API keys.
.NET STS releases now supported for 24 months
STS support grows from 18 to 24 months, so .NET 9 and .NET 8 both end on 10 Nov 2026.
Shai-Hulud: self-propagating worm hits npm packages
First self-replicating npm worm: stole tokens with TruffleHog and republished every package its victims could publish.
Safari 26 adds anchor positioning, scroll-driven animations and more
A 75-feature release that closed big gaps with Chromium, including WebGPU and every site as an iOS web app.
Cloudflare dashboard and API outage caused by a React useEffect bug
A bad useEffect dependency made the dashboard flood an internal API, an example of a frontend bug becoming a backend outage.
Performance Improvements in .NET 10
Stephen Toub's annual deep dive into JIT, GC, collections and networking gains you get for free.
MBZUAI and G42 launch K2 Think open-source reasoning model
A 32B reasoning system released fully open, including training data, weights and deployment code.
chalk, debug and 16 other npm packages hijacked via phished maintainer
Packages with ~2.6B weekly downloads shipped a crypto-stealer after a fake 2FA-reset email; lockfiles limited the blast radius.
How HUMAIN is pushing Arabic AI with ALLaM 34B and HUMAIN Chat
ALLaM 34B was trained on 500B+ Arabic tokens and hosted in-Kingdom under the PDPL, relevant for data-residency designs.
August 2025
AGENTS.md emerges as an open format for coding agent instructions
A README for agents backed by OpenAI Codex, Jules, Cursor, Amp and Factory; one file instead of per-tool configs.
s1ngularity: Nx build system packages compromised on npm
Malicious Nx releases used local AI CLIs to hunt for secrets and leaked thousands of tokens to public GitHub repos.
Zed launches the Agent Client Protocol (ACP)
An LSP-style open protocol that decouples coding agents from editors, starting with Gemini CLI.
Google to require developer verification for Android apps, including sideloaded ones
Apps on certified Android devices must come from registered, verified developers, which affects distribution outside Play.
GitHub Actions policy adds blocking and SHA-pinning enforcement
Org admins can now require full-SHA pinning and block known-malicious actions, closing the tag-retargeting hole.
Flutter 3.35 makes web hot reload stable and previews Widget Previews
Stateful hot reload on the web is now on by default, and Widget Previews arrived as an experiment.
OpenAI launches GPT-5
Unified fast/thinking model with mini and nano API tiers became the new default for ChatGPT and many integrations.
Google's Jules coding agent exits beta
Asynchronous GitHub-connected coding agent became available to everyone with free and paid tiers.
OpenAI releases gpt-oss-120b and gpt-oss-20b open-weight models
OpenAI's first open-weight LLMs since GPT-2, Apache 2.0; the 20B model runs in 16 GB of memory.
EU AI Act obligations for general-purpose AI models apply from 2 August 2025
Model providers now owe documentation, copyright policies and training-data summaries to downstream integrators.
July 2025
Stack Overflow 2025 survey: AI use up, trust in AI down
84% of developers use or plan to use AI tools, yet 46% distrust the accuracy of their output.
Amazon Q VS Code extension shipped with an injected wiper prompt
A malicious commit told the agent to delete files and cloud resources, a supply-chain warning for AI tooling.
White House releases America's AI Action Plan
Over 90 federal actions on data-center permitting, AI exports and procurement rules for frontier models.
Gemini Deep Think achieves gold-medal standard at the IMO
Officially graded IMO gold using natural-language proofs within the time limit, a reasoning milestone.
Bitnami announces major changes to its free container catalog
Versioned Bitnami images moved to an unmaintained legacy repo, breaking many Helm charts and pipelines that pulled them.
AWS previews Kiro, a spec-driven agentic IDE
Turns prompts into requirements, design and task specs before coding, plus event-driven agent hooks.
Cognition acquires Windsurf after Google hires its leadership
Ended the Windsurf saga: OpenAI's $3B deal lapsed, Google paid $2.4B for talent, Cognition took the product.
METR study: AI tools made experienced OSS developers 19% slower
RCT on 246 real tasks found a slowdown while developers believed they were about 20% faster.
xAI releases Grok 4 and Grok 4 Heavy
Trained with large-scale RL on the 200k-GPU Colossus cluster; Grok 4 Heavy scored 50.7% on Humanity's Last Exam.
AutoMapper and MediatR commercial editions launch
Lucky Penny Software dual license is live: free for small and OSS use, paid tiers for commercial teams.
June 2025
Google releases Gemini CLI, an open-source terminal agent
Apache 2.0 terminal agent with a generous free tier, broadening the CLI coding agent category.
Vercel introduces Active CPU pricing for Fluid compute
Billing covers only active CPU time, which cuts the cost of I/O-bound functions such as API proxies and AI calls.
Vite 7 released
Requires Node 20.19+, targets Baseline Widely Available by default and paved the way for Rolldown.
Linux Foundation takes over Google's A2A protocol
A2A moved to neutral governance backed by AWS, Cisco, Google, Microsoft, Salesforce, SAP and ServiceNow.
OpenTofu 1.10 adds OCI registry support and native S3 state locking
Providers and modules can come from container registries, and S3 state locking no longer needs DynamoDB.
MCP spec 2025-06-18 adds elicitation and structured tool output
Classified MCP servers as OAuth resource servers, required resource indicators and dropped JSON-RPC batching.
Biome v2 ships type-aware linting without tsc
Biome's own type inference, plugins and monorepo support make it a stronger single-binary ESLint/Prettier alternative.
Google Cloud incident report: global Service Control outage of June 12
A code path without a feature flag plus a globally replicated bad policy took down APIs worldwide; a lesson in failing open.
Android 16 released
Android 16 came out in June and brought a new minor SDK release cadence, which changes when behavior changes reach apps.
Apple introduces Liquid Glass design across iOS 26 and its other platforms
Apple's broadest redesign changes what native iOS looks like, which puts pressure on cross-platform UI kits to keep up.
May 2025
dotnet run app.cs: file-based C# apps in .NET 10
Run a single .cs file with #:package directives, no project file; handy for scripts and tooling.
Prompt injection via GitHub MCP server leaks private repo data
A malicious public issue could make an agent exfiltrate private repositories, showing MCP's toxic-flow risk.
Anthropic releases Claude Opus 4 and Sonnet 4; Claude Code becomes generally available
Models built for long-running agentic coding tasks, with tool use during extended thinking.
G42, OpenAI, Oracle, NVIDIA and partners launch Stargate UAE
A 1 GW AI cluster in Abu Dhabi, with the first 200 MW due in 2026, puts frontier-scale compute in the Gulf.
Falcon-Arabic: TII's Arabic language model
A 7B Arabic-first model trained on native Arabic data with an extended tokenizer, a practical option for Arabic NLP work.
Microsoft.Extensions.AI and VectorData reach general availability
Stable AI and vector store abstractions you can safely depend on in production services.
TII releases Falcon-H1 hybrid Transformer-Mamba models
Open-weight 0.5B to 34B models with 256K context under an Apache-based Falcon licence; check its terms before commercial use.
Flutter 3.32 adds experimental web hot reload
Brought hot reload to Flutter web (experimental), plus Cupertino squircles and Firebase AI integrations.
GitHub Copilot coding agent: assign issues, get pull requests
Asynchronous agent that works in a GitHub Actions environment and opens PRs, with human approval gates on CI.
The Windows Subsystem for Linux is now open source
Build 2025 headline: WSL code is on GitHub, the dev loop many .NET-on-Linux container workflows depend on.
Windows 11 announces native MCP support at Build 2025
Microsoft adopted MCP at the OS level with a Windows MCP registry and built-in servers for files and WSL.
OpenAI launches Codex cloud software engineering agent
Runs parallel coding tasks in cloud sandboxes preloaded with your repo and proposes pull requests for review.
G42 to lead consortium building 5GW UAE-US AI Campus
Billed as the largest AI infrastructure project outside the US, framed by the new US-UAE AI Acceleration Partnership.
Saudi Arabia and NVIDIA to build AI factories with HUMAIN
PIF-owned HUMAIN launched with up to 500 MW of NVIDIA capacity planned and SDAIA sovereign GPU infrastructure.
Node.js 24 released
V8 13.6, npm 11, global URLPattern and AsyncContextFrame; this line became the LTS for most production apps.
Microsoft makes new accounts passwordless by default
A major identity provider defaulting to passkeys signals where consumer sign-in UX and WebAuthn support are heading.
Redis returns to open source with AGPLv3 in Redis 8
Redis added an OSI-approved AGPL option a year after moving to SSPL; check AGPL obligations before embedding or offering it as a service.
April 2025
OpenTofu joins the CNCF as a sandbox project
The MPL-licensed Terraform fork gained CNCF governance, with a licence-policy exception, strengthening it as a long-term option.
Alibaba releases Qwen3 open-weight model family
Apache 2.0 models from 0.6B to 235B with switchable thinking modes became a default for self-hosting.
CNCF moves to protect NATS from relicensing by Synadia
Test of whether a donated foundation project can be pulled back to a BUSL licence by its original corporate sponsor.
Kubernetes v1.33 "Octarine" released; sidecar containers reach GA
Native sidecar containers became stable, simplifying service-mesh, log-shipper and OTel collector patterns.
CVE Foundation launched to secure the future of the CVE program
CVE Board members formed a non-profit to make vulnerability IDs independent of a single government sponsor.
OpenAI releases Codex CLI, an open-source terminal coding agent
OpenAI's local, open-source answer to Claude Code that runs in the terminal against your repository.
OpenAI releases o3 and o4-mini
First OpenAI reasoning models able to call tools (search, Python, images) agentically inside their chain of thought.
Funding expires for key cyber vulnerability database
MITRE warned the US contract running the CVE program was about to lapse, threatening the IDs every scanner and SBOM relies on.
Google announces the Agent2Agent (A2A) protocol
Open protocol for agent-to-agent discovery and task exchange over HTTP/JSON-RPC, positioned as complementary to MCP.
Meta releases Llama 4 Scout and Maverick
First MoE Llama models; Scout claims a 10M-token context and fits on a single H100 with Int4.
AutoMapper and MediatR going commercial
The two staples of many Clean Architecture/CQRS codebases announced a move to commercial licensing.
Flutter 2025 roadmap update
Lays out the year's priorities: Impeller completion, web hot reload, direct native interop and less verbose widget code.
Microsoft and Anthropic partner on an official C# SDK for MCP
ModelContextProtocol NuGet package lets .NET apps expose tools to AI agents or consume MCP servers.
MassTransit v9 announced under a commercial license
v9 requires a paid Massient license while v8 stays open source with patches through 2026; plan your bus strategy.
March 2025
OpenAI adopts Anthropic's Model Context Protocol
MCP support landed in OpenAI's Agents SDK, making it a cross-vendor standard rather than an Anthropic-only one.
MCP spec 2025-03-26 adds OAuth 2.1 and Streamable HTTP
Replaced HTTP+SSE with Streamable HTTP and added an authorization framework and tool annotations for remote servers.
Google releases Gemini 2.5 Pro thinking model
Took #1 on LMArena with a 1M-token context window, putting Google back at the frontier.
Postmortem on the Next.js middleware bypass (CVE-2025-29927)
A spoofed internal header skipped middleware auth checks in self-hosted Next.js; never rely on middleware alone for authorization.
Chrome ships a fully CSS-customizable <select>
`appearance: base-select` lets you style native selects and put rich content in options while keeping accessibility.
GitHub Action tj-actions/changed-files compromised
Retagged releases dumped CI secrets into build logs across ~23,000 repos; the case for pinning Actions to commit SHAs.
SLNX solution file format supported in the .NET CLI
XML .slnx replaces the GUID-heavy .sln, giving far cleaner merges in multi-project repos.
HybridCache is generally available for ASP.NET Core
Two-level in-memory plus distributed cache with stampede protection and tag invalidation; replaces hand-rolled caching.
TypeScript announces a native Go port, '10x faster'
The compiler and language service are being ported to Go, promising ~10x faster builds and editor startup.
February 2025
IBM completes acquisition of HashiCorp
Terraform and Vault now belong to IBM Software, which matters when weighing them against OpenTofu and other options.
.NET 10 Preview 1 is now available
First look at the .NET 10 LTS cycle across runtime, SDK, C# 14, ASP.NET Core and EF Core.
Anthropic releases Claude 3.7 Sonnet and Claude Code preview
First hybrid model with a toggleable extended-thinking mode and an API-controllable thinking budget.
React team sunsets Create React App
CRA is deprecated for new apps; React now recommends frameworks or build tools such as Vite.
Interop 2025 focus areas announced
Browser vendors committed to align anchor positioning, view transitions, @scope, Navigation API and more in 2025.
Flutter 3.29 removes Skia on iOS and runs Impeller on all Android devices
The iOS Impeller opt-out stopped working, and Android devices without Vulkan now fall back to Impeller on OpenGL ES.
Microsoft.Testing.Platform now supported by all major .NET test frameworks
MSTest, NUnit, xUnit and TUnit can run on the lightweight VSTest replacement, speeding up CI test runs.
Saudi Arabia commits $1.5bn to Groq AI inference infrastructure
Expands the Dammam GroqCloud inference cluster, giving in-region low-latency LLM inference including the Saudi ALLaM model.
Saudi Arabia announces $14.9bn of tech deals at LEAP 2025
Groq, Databricks, Salesforce, Google and others committed to Saudi data centres, cloud and skills, shaping local platform options.
EU AI Act bans on prohibited practices apply; Commission issues guidelines
From 2 Feb 2025, manipulative AI, social scoring and some biometric uses are banned for anyone serving EU users.
GitHub Copilot gets agent mode in VS Code
Copilot began iterating on its own edits, running terminal commands and fixing errors; also previewed Project Padawan.
Vercel introduces Fluid compute
Lets one function instance handle many requests at once, which changes cold-start and cost behavior for serverless backends.
January 2025
Dart team stops work on macros
Macros were cancelled, so build_runner code generation stays the way to do serialization and data classes in Dart.
Trump signs EO 14179 revoking Biden's AI executive order
Reversed the US federal AI safety approach of EO 14110 in favour of deregulation and an AI action plan.
Bun 1.2 adds built-in Postgres and S3 clients
Bun.sql, Bun.s3, a text lockfile and much better Node.js compatibility broaden Bun's server-side use.
Tailwind CSS v4.0 released
A rewritten engine with CSS-first configuration, cascade layers and much faster builds; migration is required from v3.
OpenAI, SoftBank, Oracle and MGX announce the $500B Stargate Project
Set the scale of the AI data-center buildout that underpins model capacity, pricing and availability.
DeepSeek releases R1 reasoning model under MIT license
Open-weight reasoning on par with o1 at a fraction of the cost reset assumptions about frontier training economics.
Fluent Assertions v8 moves to a paid commercial license
Commercial use of v8 now needs an Xceed license; v7 stays Apache 2.0, so pin it or switch libraries.
Node.js 23.6 runs TypeScript files by default via type stripping
`node file.ts` works without flags for erasable TypeScript syntax, removing a build step for scripts and tools.
December 2024
DeepSeek releases DeepSeek-V3 open-weight MoE model
671B-parameter MoE (37B active) matching GPT-4o-class quality with open weights and very low API prices.
OpenAI announces o3 with record ARC-AGI score
Showed test-time compute scaling as a new capability lever, scoring 75.7%-87.5% on ARC-AGI-1.
GitHub launches a free tier for Copilot in VS Code
2,000 completions and 50 chat messages per month at no cost made AI assistance a default in VS Code.
Flutter 3.27 makes Impeller the default renderer on modern Android
Impeller became the default on Vulkan-capable Android devices, so teams had to test rendering and decide whether to opt out.
Judge grants WP Engine injunction against Automattic
Court ordered WordPress.org access restored for WP Engine, a reminder that ecosystem infrastructure can be a single point of control.
Cognition makes Devin generally available
First widely sold autonomous coding agent, priced at $500/month for teams with Slack, IDE and API access.
React 19 is stable
Actions, use(), useOptimistic, ref as a prop and stable Server Components became the new React baseline.
November 2024
Vite 6 released with the Environment API
The Environment API lets frameworks model client, SSR and edge builds in one dev server.
Anthropic introduces the Model Context Protocol (MCP)
Open protocol for connecting LLM apps to tools and data; became the de facto standard for agent integrations.
Built-in OpenAPI document generation in .NET 9
Microsoft.AspNetCore.OpenApi replaces Swashbuckle in the templates; worth planning the migration for Web APIs.
C# 13 params collections make calls easier and faster
params now accepts spans and any collection type, cutting allocations in hot-path APIs.
Announcing .NET 9
STS release with C# 13, Aspire 9, HybridCache groundwork and broad runtime and library performance gains.
October 2024
GitHub Copilot adds Claude, Gemini and o1 model choice
Copilot became multi-model, letting developers and orgs pick Anthropic, Google or OpenAI models per task.
OSI releases the Open Source AI Definition 1.0
First formal yardstick for calling a model open source; most open-weight models with restrictive licences do not qualify.
React Native 0.76 ships with the New Architecture on by default
The bridge-less New Architecture and React Native DevTools became the default for new apps, a major change for native modules.
Anthropic upgrades Claude 3.5 Sonnet and launches computer use beta
First frontier model API that operates a desktop via screenshots, mouse and keyboard; SWE-bench Verified rose to 49%.
Next.js 15 released
React 19 support, async request APIs and uncached-by-default fetch changed how App Router apps are written.
Deno 2 released with Node.js and npm compatibility
Deno 2 can run existing Node/npm projects and adds a package manager, making it a realistic alternative runtime.
Microsoft.Extensions.AI preview: unified AI building blocks for .NET
IChatClient and IEmbeddingGenerator give one DI-friendly abstraction over OpenAI, Azure and Ollama providers.