In partnership with
Domain Names + Web and Email Hosting Done Right
Tired of overpaying GoDaddy or Namecheap? There's a smarter option with Porkbun!
Porkbun is the domain registrar trusted by creators, developers, entrepreneurs, and anyone who wants low prices without the nonsense or the forced upsells.
Here's why so many people are making the move to the Bun:
• Most domains sold at cost
• Low, transparent registration and renewal pricing
• Free features like WHOIS privacy and SSL certificates
• Powerful web and email hosting options
• Real human support 24/7, 365 days a year
• Named the #1 domain registrar by Forbes Advisor and USA Today
Whether you're launching a business, building a personal brand, starting a side project, or creating your very first website, Porkbun makes the whole thing easy.
What's up, everyone? This week, Cloudflare created a whole browser inside Workers, OpenAI slows down its next model, and Railway starts patching Postgres for you. Let's dive in.
You currently have {{rp_num_referrals}} referrals.
Cloudflare built a browser no person will ever look at. Kitesurf runs in V8 isolates on Workers, and the team removed everything only humans need in a browser. What's left is a rendering engine and a CSS parser written in Rust and compiled to WebAssembly. It speaks the Chrome DevTools Protocol, so Puppeteer and Playwright keep working once you add browser=kitesurf to the endpoint. It's free in beta through Browser Run.
OpenAI slowed development on Astra after its own evaluations came back. The Critical cybersecurity level in OpenAI's Preparedness Framework describes a model that finds and builds working zero-day exploits in hardened systems with no person involved, and runs attacks from a one-line goal. OpenAI has not concluded that Astra is there. It said it cannot rule it out, and that was enough to pause internal work falling short of the stricter controls, harden the model weights, and bring in government agencies and outside safety groups to test.
Railway will patch Postgres for you now when a CVE lands and a known fix exists. The platform applies it and emails you after. The team also opened Cloud Agents in beta, managed machines that run whichever agent you already pay for, around the clock, driven from your laptop, terminal, or phone, and promoted straight to production when the work is done. Update the CLI and start with railway ca.
Payload released v3.87.1 and v3.88.0 since the last issue. v3.87.1 answers two published advisories, bumping mongoose and the Model Context Protocol SDK, and updates undici alongside them. It also stops Lexical from losing the link drawer's form state, and connects to the right Next.js dev HMR endpoint for your version. In v3.88.0, copying a row in the admin panel could pull values from the row beside it, which the team fixed by tightening how clipboard prefixes match. Multipart content-type parsing no longer backtracks. The MCP plugin's API keys collection got stricter access control defaults.
Want to learn more about Payload and how to apply it to your project? Check out my course, Payload Essentials. The course walks you step-by-step through a full Payload and Next.js project so you can go from zero lines of code to a production website ready to deploy.
I believe high-quality education should be as accessible as possible to everyone, no matter where in the world they live. So, purchasing power parity is built in to the price. If you don't see a banner with a discount and believe you should, please let me know!
Astro 7.2 added incremental static builds behind an experimental flag, so a build can skip pages whose code and data have not changed. Turn on experimental.incrementalBuild, then opt a route in by returning a cacheKey for each path from getStaticPaths(). For a content collection, entry.digest fits, because it changes when the entry does. Astro covers the code side itself by hashing the route's module graph, layouts and components and imported packages included, and reuses a page only when the hash and the key both match the last build. Routes without a cacheKey render every time, so existing projects build exactly as they do today.
Anthropic started marking what Claude writes as machine-generated, to meet the European Union AI Act transparency code that took effect on August 2. Claude models launched in the EU on or after that date embed watermarks in the text, and generated files carry signed provenance metadata where the format supports it. The marking follows Claude everywhere it runs, including through Amazon, Google, and Microsoft. California's AI Transparency Act arrives next year with a narrower scope.
ALSO THIS WEEK
shadcn's CLI reached 4.18.0, and registries can now live in
package.jsoninstead ofcomponents.json. 4.17.0 added SOCKS proxy support throughALL_PROXY.TanStack released Solid candidates,
@tanstack/solid-start2.0.0-rc.0 and@tanstack/solid-query6.0.0-rc.0.
What did I miss? There's so much happening in modern web dev that I know I missed something. Please share your thoughts in the comments or reply to this email. I want to address your suggestions and may include them in future newsletters.
Thanks for reading. See you next time.