Arnaud Barré

@arnaud-barre.bsky.social

Vite team member and maintainer of React plugins

We published three security advisories affecting the dev server. Only apps using --host are affected. Update now to the patched versions: - Vite 8.0.5 / 7.3.2 / 6.4.2 - Vite+ 0.1.16 Links to each vulnerability report below.

Bugbot from cursor (manual review request, no summary) is incredible. What's funny is that half of the time the suggested fix is not what I want. I think that, in the long term, using AI with autocomplete + review is better than AI writing code + human review.

Really interesting research from auvred on type-aware linting: github.com/auvred/hybri... This is the next frontier for developer tooling: cross-language interoperability and finding the right tradeoffs to make for extensibility/performance.

GitHub - auvred/hybrid-type-aware-linting-performance: Performance evaluation of different approaches for bridging tsgo with JS

Performance evaluation of different approaches for bridging tsgo with JS - auvred/hybrid-type-aware-linting-performance

github.com

Node.js is moving to one major release per year starting with Node 27! 🚀 ✅ Simpler: Every release becomes LTS. ✅ Predictable: Version numbers now align with the year. ✅ New: A 6-month Alpha channel for early testing. https://bit.ly/4rnosLg

Node.js — Evolving the Node.js Release Schedule

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org

It's sad that on I get to download 72k of .jpg instead of the 11k of .avif that Jake uploaded. Their was so much effort in greeting better image format, but as soon as you leave your own code you can't use them. Today I created a business profile on Google maps, .wepb was not allowed 😞

Jake Archibald@jakearchibald.com · 5mo ago

btw, bsky is recompressing these as JPEG, so (in particular) the AVIF result looks worse than it really is. Here's the actual AVIF in use hacks.mozilla.org/2026/02/laun...

I can't believe that using GPT 5.2 directly on GH to ask question about a specific repo is so badly implemented, the AI answer with completely hallucinated code that doesn't match anything from the codebase

BildBild