📜 Next.js Server Actions are public-facing API endpoints: Server Actions can be called from Curl commands, the action ids can easily leak. They should be treated with the same security precautions as traditional public API endpoints.
growl.dev
Next.js Server Actions are public-facing API endpoints
Are Server Actions publicly accessible by everyone? Dive into what Server Actions are under the hood, and why they should be used cautiously.
👍1
📜 Your React Meta-Framework Feels Broken, Here's Why: RedwoodSDK tries to remove useless abstraction layers, conventions and other magic things that exist in Next.js and Remix.
Rwsdk
Your React Meta-Framework Feels Broken, Here's Why | RedwoodSDK
Lets shine the spotlite on some of the true fullstack features of RedwoodSDK.
📦 Docusaurus 3.8: Continues the work on faster builds, adds support for CSS Cascade layers, both behind “Future Flags”.
docusaurus.io
Docusaurus 3.8 | Docusaurus
We are happy to announce Docusaurus 3.8.
📦 Storybook 9.0: After many betas/RCs, it's finally out, but no official blog post yet.
GitHub
Release v9.0.0 · storybookjs/storybook
9.0.0
Storybook 9.0 is here
This is a huge release focused on testing and bundle size.
Component testing
👆 Interactions
♿️ Accessibility
👁️ Visual changes
🛡️ Coverage
🪶 48% lighter bundle
🏷️ Ta...
Storybook 9.0 is here
This is a huge release focused on testing and bundle size.
Component testing
👆 Interactions
♿️ Accessibility
👁️ Visual changes
🛡️ Coverage
🪶 48% lighter bundle
🏷️ Ta...
📦 TanStack Query v5.77: Adds
maxChunks to keep in the cache for streamed queries.GitHub
Release v5.77.0 · TanStack/query
Version 5.77.0 - 5/24/25, 7:23 AM
Changes
Feat
maxChunks (#9184) (9973e0f) by Dominik Dorfmeister
Chore
✂️: remove ts-node to make knip happy (719db35) by TkDodo
remove baseUrl from tsConfig, as...
Changes
Feat
maxChunks (#9184) (9973e0f) by Dominik Dorfmeister
Chore
✂️: remove ts-node to make knip happy (719db35) by TkDodo
remove baseUrl from tsConfig, as...
📜 TypeScript Native Previews: Microsoft announced the go rewrite of TypeScript a few months ago. Nightly builds for this rewrite will now be published, and can be used with a CLI or a VS Code extension. JSX support has been added, and it’s still ~10 times faster than the JS version.
Microsoft News
Announcing TypeScript Native Previews
Previews of the native TypeScript port are now available on npm and for VS Code through the Visual Studio Marketplace!
📜 Do Not Assert on Requests: The creator of msw explains what he recommends instead of checking the body/header of sent requests in tests
Epic Web Dev
Do NOT Assert on Requests (Do This Instead)
Test UI outcomes, not API requests. Mock network calls in setup, but assert on what users actually see and experience, not implementation details.
📦 Firefox 139 - Temporal, hidden=until-found, dialog.requestClose(): The first browser to support the stage 3 Temporal API!
MDN Web Docs
Firefox 139 for developers - Mozilla | MDN
This article provides information about the changes in Firefox 139 that affect developers. Firefox 139 is the current Beta version of Firefox and ships on May 27, 2025.
📦 JSPM 4.0 - Standards based import map package management: A quite innovative project for shipping frontends with no build step.
jspm.org
JSPM - JSPM 4.0 Release
JSPM 4.0 release post featuring a refreshed local development workflow for modern standards