Developer Stack Watch

Track the mainstream web development stack: Node.js, TypeScript, React, Next.js, Vue, Svelte, Python, Django, FastAPI, Ruby on Rails, Go, Rust, Postgres, MySQL, Redis, SQLite, Docker, Kubernetes, Terraform, GitHub, GitLab, AWS, Google Cloud, Azure, Cloudflare, Vercel, Netlify, Supabase, Firebase, Stripe, Twilio, the OpenAI, Anthropic and Gemini APIs, the npm and PyPI registries, and Chrome, Safari and Firefox platform changes. Report only materially new, source-backed developments from the last 30 hours: new major and minor releases with breaking changes or migration notes; deprecations and end-of-life dates; security advisories rated CVSS 7 or higher in these projects or in packages with more than 1 million weekly downloads, with the patched versions; supply-chain incidents on npm or PyPI; API version sunsets, rate limit and pricing changes; incidents and outages with post-mortems; and license changes. Prefer official changelogs, GitHub releases, GHSA and NVD advisories, vendor status pages and pricing pages; ignore blog tutorials, opinion pieces and unverified issue reports. For each, give what changed, the affected versions, whether action is required, the migration path or fix and the deadline if any, and put the package or service first in the title. Use high severity for a critical advisory in a widely used version, a supply-chain compromise, a breaking change in a current major line, or a pricing or sunset change with a date inside 60 days. Return no more than 6 findings. Push each as a finding with a title, a two-sentence summary, sections for the change, affected versions, action, deadline, and the source link. If nothing qualifies, push nothing and submit the run receipt.