iiinova — where your digital self keeps evolving

Reposted by Lenz Weber-Tronic

François Best @francoisbest.com · 25/09/2026

Haven't been active much here, sorry, AI-in-OSS burnout is real. How do you care when nobody else does? When nobody engages? When all the human connection is gone? When all you read is AI slop? I want to go back to coding for fun. Because whatever this is, it's very much _not_ fun.

1611111

Lenz Weber-Tronic @phry.dev · 17/07/2026

*spends HOURS reproducing a browser crash* Claude chuggs along *finally nailed it down, wants to create a reproduction for a bug report* Anthropic: API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy. This request triggered cyber-related safeguards.

112

Lenz Weber-Tronic @phry.dev · 14/07/2026

`@apollo/client` and ecosystem, as well as the `rover` package are on staged releases, too. drydock.org by @jovidecroock.com is a great tool in our workflow for verifying released before we publish them. Definitely recommended.

drydock.org

Drydock: pre-publish package review

Drydock lets npm, PyPI, and VS Code maintainers review the exact package artifact before a staged publish or gated release goes live.

032

Lenz Weber-Tronic @phry.dev · 01/07/2026

This was fun, thanks for having me @jeff.auriemma.xyz! :)

141

Reposted by Lenz Weber-Tronic

Jeff Auriemma @jeff.auriemma.xyz · 01/07/2026

I sat down with @phry.dev to discuss Open Source contributions and how AI is impacting it. Thanks Lenz! youtu.be/krcyBLiXPzo?...

youtu.be

Open source and AI with Lenz Weber-Tronic

YouTube video by Jeff Auriemma

042

Lenz Weber-Tronic @phry.dev · 17/06/2026

Use `npm stage publish` they said. It worked great. Use `npm stage approve` they said. "error 409 Conflict" they said. A `graphql-tag` release with `graphql` 17 support might take a little bit longer than expected.

120

Reposted by Lenz Weber-Tronic

Seb ⚛️ ThisWeekInReact.com @sebastienlorber.com · 10/06/2026

JS devs - Time to celebrate 🎊 🥂 All modern package managers will block postinstall scripts by default : 📦 npm v12 🆕 📦 pnpm 10 📦 Yarn 4.14 📦 Bun 📦 Deno 📦 Aube This doesn't solve everything, but should greatly reduce the ability for supply chain worms to spread github.blog/changelog/20...

312724

Lenz Weber-Tronic @phry.dev · 28/05/2026

If you like weird TypeScript type gymnastics, you're gonna love what we did in Apollo Client 4.2! www.apollographql.com/blog/whats-n...

apollographql.com

What's New in Apollo Client 4.2 - Apollo GraphQL Blog

360

Reposted by Lenz Weber-Tronic

François Best @francoisbest.com · 21/05/2026

Staged publishing TL;DR 1. You replace `npm publish` with `npm stage publish` 2. It puts the tarball in a staging area for review 3. You approve it via the CLI or web It will land in npm@^11.15.0. I've already turned off non-staged publishing in @nuqs.dev (in the Trusted Publishing settings).

3494

Reposted by Lenz Weber-Tronic

Mark Erikson @acemarke.dev · 15/05/2026

It's Redux release day! Shipped RTK 2.12.0, React-Redux 9.3.0, and Reselect 5.2.0 . Biggest highlights: - RTK skills files - `connect` is now officially deprecated! Don't use it! :) - Fixed trusted publishing github.com/reduxjs/redu... github.com/reduxjs/reac... github.com/reduxjs/rese...

github.com

Release v2.12.0 · reduxjs/redux-toolkit

This feature release adds RTK usage skills files (via TanStack Intent) exports the RTK Query hook options types for reusability, fixes issues with infinite query status flags and batching handling,...

0123

Reposted by Lenz Weber-Tronic

Jeff Auriemma @jeff.auriemma.xyz · 28/04/2026

Open source isn't just software, it's the community around the software. You can't vibe code that other part

042

Lenz Weber-Tronic @phry.dev · 20/04/2026

Replay has always been, and continues to be, pure magic.

041

Reposted by Lenz Weber-Tronic

patak @patak.cat · 16/04/2026

If you're European, you now have a great and well-funded PDS in EU soil, governed by EU laws, run by awesome folks. Moving your account to Eurosky is easy, and you won't notice the difference afterwards. Please take a few minutes and do the jump 🇪🇺

1217760

Lenz Weber-Tronic @phry.dev · 13/04/2026

Hey @en-js.bsky.social, I know you're all working on the rust version, and that's great - but are there any plans to release another stable of the babel plugin? From what I see in the playground, it has advanced a lot since 1.0. I would love to use that, but can't justify using the canary.

010

Reposted by Lenz Weber-Tronic

Maël Nison @mael.dev · 10/04/2026

I'm working on a feature called package maps for Node.js - it's leveraging everything I learned about package resolution these past six years, in a design that's both simple and flexible enough to be backward compatible with existing installs. I'm very excited about this! github.com/nodejs/node/...

github.com

loader: implement package maps by arcanis · Pull Request #62239 · nodejs/node

This PR adds a new --experimental-package-map=<path> flag letting Node.js resolve packages using a static JSON file instead of walking node_modules directories. node --experimental-package-ma...

13428

Reposted by Lenz Weber-Tronic

Apollo GraphQL @apollographql.com · 27/03/2026

If you already have a GraphQL API, you’re closer to AI agents than you think. Apollo MCP Server exposes your existing operations as MCP tools — with schema validation, protocol translation, and secure execution built in. No backend changes required. apollographql.pulse.ly/2r6ufpirne

apollographql.pulse.ly

How to Build AI Agents Using Your GraphQL Schema - Apollo GraphQL Blog

371

Lenz Weber-Tronic @phry.dev · 18/03/2026

I can't remember when I last noped out of something that fast.

110

Lenz Weber-Tronic @phry.dev · 16/03/2026

Something I brewed up over the weekend: ``` npx skills@latest add reduxjs/redux-toolkit ``` Have fun with those skills :)

131

Reposted by Lenz Weber-Tronic

Apollo GraphQL @apollographql.com · 24/02/2026

Apollo GraphQL is joining the @aaif.io as a Silver member. The infrastructure for agentic AI should be open. We’re in. apollographql.pulse.ly/y5tbwajp9h #MCP #AgenticAI #AAIF #GraphQL #OpenStandards

074

Reposted by Lenz Weber-Tronic

Axel Rauschmayer (also on 🦣) @dr-axel.de · 19/02/2026

JavaScript—making regular expressions easier to read: const RE_API_SIGNATURE = new RegExp( String.raw` ^ (?<prefix> new \x20 | get \x20 )? (?<name> [ A-Z a-z 0-9 _ . \[ \] ]+ ) `.replaceAll(/\s+/g, ''), 'v' ); exploringjs.com/js/book/ch_r...

exploringjs.com

Regular expressions (RegExp) • Exploring JavaScript (ES2025 Edition)

121

Reposted by Lenz Weber-Tronic

eskimojo @eskimojo.bsky.social · 19/02/2026

Incredibly hyped to announce Schema Benchmarks, a project I've been steadily working on in collaboration with @fabianhiller.com! It aims to provide a central and transparent resource for many of the metrics that matter for schemas, including bundle size and runtime performance 😄

2154

Lenz Weber-Tronic @phry.dev · 18/02/2026

TypeScript type of the day ``` export type LazyType<T> = T & { [K in "" as never]: LazyType<never> }; ```

490

Reposted by Lenz Weber-Tronic

Seb ⚛️ ThisWeekInReact.com @sebastienlorber.com · 10/02/2026

TypeScript doesn't have "Render Types" (unlike Flow, more opinionated toward JSX) This plugin proposes to implement render types constraints as an ESLint plugin Cool idea 👌 This could improve type-safety and prevent many React composition mistakes

1153

Lenz Weber-Tronic @phry.dev · 04/02/2026

I've put a lot of work into that apollo-client skill. It contains our latest recommendations on best practices - so if you want to tune out 10 years of outdated blog articles that went into AI training data, add this skill :)

020

Lenz Weber-Tronic @phry.dev · 04/02/2026

I really applaud the work on @npmx.dev, but I just tried the page, and I find it to be extremely overstimulating. It's a *lot* of information on the page at once, and there's no clear distinction between what is "npmx" and "package readme". Hidden buttons and functionality are everywhere.

2151

Reposted by Lenz Weber-Tronic

VoidZero @voidzero.dev · 03/02/2026

🚀 Lazy Barrel Optimization in Rolldown Barrel files, files that re-export from other modules, are common in modern JavaScript projects but a nightmare for your build time. Rolldown now has Lazy Barrel Optimization to fix this. Here's how it works 🧵

28612

Reposted by Lenz Weber-Tronic

Rob Palmer @robpalmer.bsky.social · 31/01/2026

TypeScript excitement 😉 Congrats to @jakebailey.dev on updating upstream tsc to default to an unpinned *latest* yearly edition of ES20xx. Heading for TS 6.0 🎉 This mean less transpilation of new JS features & more use of native language features provided by JS engines 👍 github.com/microsoft/Ty...

github.com

Default `target` to "latest standard", deprecate ES5 by jakebailey · Pull Request #63067 · microsoft/TypeScript

target now defaults to ScriptTarget.LatestStandard, which is an alias to the most recent standardized ES version, currently ES2024 (until we add ES2025). target=ES5 is now deprecated. #63066 got mo...

28212

Reposted by Lenz Weber-Tronic

Apollo GraphQL @apollographql.com · 28/01/2026

Real-world results from using response caching in Apollo GraphOS Router 👇 Faster responses. Less subgraph traffic. Read More: apollographql.pulse.ly/9fibh5u8ab

021

Lenz Weber-Tronic @phry.dev · 05/01/2026

Spending the day closing PRs to bump "vulnerable dependencies" from `^2.1.1` to `^2.1.2` . It's a bit of a shame that security scanners highlight vulnerable packages, but don't explain that you can just bump transitive dependencies without the need to update dependents.

030

Reposted by Lenz Weber-Tronic

Ryota Murakami @ryota-murakami.bsky.social · 04/01/2026

I created a middleware called redux-storage-middleware github.com/laststance/r... because redux-persist hadn’t been maintained for a long time. Internally, it’s inspired by atomWithStorage from Jotai. (Big thanks to @dai_shi!)

github.com

GitHub - laststance/redux-strorage-middeware: SSR-safe Redux middleware for LocalStorage persistence with hydration control

SSR-safe Redux middleware for LocalStorage persistence with hydration control - laststance/redux-strorage-middeware

121

Reposted by Lenz Weber-Tronic

MichiganTypeScript @michigantypescript.com · 02/01/2026

🥳 TypeSlayer is out! celebrate by posting what your type graph looks like! it legit has an actual leaderboard now: so bonus points if you win lol 🏆🏆 run: `npx typeslayer` source: github.com/dimitropoulo...

28221

Reposted by Lenz Weber-Tronic

Apollo GraphQL @apollographql.com · 19/12/2025

Check out how we've been experimenting building ChatGPT apps using Apollo MCP Server and Apollo Client. apollographql.pulse.ly/n564sxjexh Let us know what you think ⬇️ #MCP #AgenticAi #ChatGPT #OpenAI #GraphQL #AI #DevTools

042

Lenz Weber-Tronic @phry.dev · 19/12/2025

Watching Claude trying to set up Jest 30 and JSDOM 27 is heartbreaking.

050

Lenz Weber-Tronic @phry.dev · 19/12/2025

Hey @augmentcode.com, your free Open Source plan page at augmentcode.com/opensource seems to be non-existent. Is that on purpose? It's still linked to at www.augmentcode.com/blog/augment...

020

Reposted by Lenz Weber-Tronic

ArkType @arktype.io · 16/12/2025

🚨Standard JSON Schema v1 just dropped🚨 🟢libraries can now accept ArkType wherever they need JSON Schema 🟢100% type-safe with inference built-in 🟢day one support from AI SDK 🟢TanStack AI and MCP SDK support imminent

3333

Lenz Weber-Tronic @phry.dev · 15/12/2025

It should be way more normal to talk about this stuff. Thank you Corbin. Also, make sure to read the full series, playfulprogramming.com/collections/...

playfulprogramming.com

Humanizing Engineering

Exploring the intersection of technology and humanity in engineering practices.

172

Reposted by Lenz Weber-Tronic

jviide.iki.fi @jviide.iki.fi · 12/12/2025

To recap, NPM allows 2FA TOTP token reuse within the token’s validity window. I reported this and was told it’s a “known low-risk issue” and that they “don’t consider this to present a significant security risk.” So, let’s look at how this seemingly small issue could be leveraged by a phisher. 1/

32313

Reposted by Lenz Weber-Tronic

MichiganTypeScript @michigantypescript.com · 11/12/2025

⚔️introducing TypeSlayer⚔️ A #typescript type performance benchmarking and analysis tool. A summation of everything learned from the benchmarking required to make the Doom project happen. It's got MCP support, Perfetto, Speedscope, Treemap, duplicate package detection, and more.

139622

Reposted by Lenz Weber-Tronic

Rob Palmer @robpalmer.bsky.social · 11/12/2025

TypeScript excitement 😉 The infamous Dimitri is cooking up a slick type analysis tool called TypeSlayer 🔥 "If you have a large enough project, there are performance problems where you can shave 100 seconds off CI by making a 5 line change. The problem is knowing out where to make that change."

0403

Reposted by Lenz Weber-Tronic

Martin Bonnin @mbonnin.net · 10/12/2025

Come to the API standards booth at apidays Paris, we have stroopwafels!

081

Reposted by Lenz Weber-Tronic

Dominik 🔮 @tkdodo.eu · 07/12/2025

5 years ago today, I got an email that would change my professional life forever. I obviously didn't know it at that time. But this is when it all started...

GitHub notification

@tannerlinsley has invited you to collaborate on tannerlinsley/react-query repository

21203

Reposted by Lenz Weber-Tronic

Matt Kane @mk.gg · 05/12/2025

The original React2shell PoC is now public. This is as bad as it gets – full RCE. You must upgrade now. There are mitigations in place in CDNs including Cloudflare, Netlify, Vercel and AWS (and sites on Workers aren't vulnerable to this sort of attack), but there are variants in the wild now.

github.com

GitHub - lachlan2k/React2Shell-CVE-2025-55182-original-poc: Original Proof-of-Concept's for React2Shell CVE-2025-55182

Original Proof-of-Concept's for React2Shell CVE-2025-55182 - lachlan2k/React2Shell-CVE-2025-55182-original-poc

36719

Reposted by Lenz Weber-Tronic

TANSTACK @tanstack.com · 04/12/2025

📣 TanStack AI Alpha is here! ✨ Framework agnostic 🤖 Provider agnostic 🧠 Type safe 🔧 Isomorphic tools 🛠 Devtools 🌐 Open protocol 📦 JS, Python, PHP ⚛️ React, Solid, Vanilla 🌀 OpenAI, Anthropic, Gemini, Ollama, ++ Official blog post: tanstack.com/blog/tanstac... Docs: tanstack.com/ai

tanstack.com

TanStack AI Alpha: Your AI, Your Way | TanStack Blog

The TanStack team is excited to announce the alpha release of , a framework-agnostic AI toolkit built for developers who want control over their stack. Let's be honest. The current AI landscape has a....

58317

Reposted by Lenz Weber-Tronic

Martin Bonnin @mbonnin.net · 04/12/2025

The @apollographql.com team will be at #apidays Paris 🥐 in just a few days. Come say hi and discuss all the #GraphQL things 👋 www.apidays.global/events/paris

042

Reposted by Lenz Weber-Tronic

Tom Sherman @tom.sherman.is · 04/12/2025

For anyone that missed it, the React Server Components critical vulnerability has a name and website now Please refer to this before sharing any supposed POCs react2shell.com

react2shell.com

React2Shell (CVE-2025-55182/CVE-2025-66478)

47618

Reposted by Lenz Weber-Tronic

React @react.dev · 03/12/2025

There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. react.dev/blog/2025/12...

react.dev

Critical Security Vulnerability in React Server Components – React

The library for web and native user interfaces

714691