--- title: "A bad weekend for Next.js" publication: "React Status" issue: 422 published_at: "2025-03-26" canonical_url: "https://react.statuscode.com/issues/422" --- Plus React Native turns 10, and eighteen great talks from React Paris. | #​422 — March 26, 2025 [Read on the Web](https://react.statuscode.com/issues/) Together with [![Frontend Masters logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_300,h_70/e_make_transparent/co_white,e_outline:5/nk0tfdvalivacz8rw7rt.png)](https://frontendmasters.com/courses/dev-tools-v4/?utm_source=email&utm_medium=reactstatus&utm_content=devtoolsv4) React Status [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/hqbip2vdoitlzopqtaxi.jpg)](https://gemini.google.com/app) [Gemini: Google's AI App Adds 'Canvas' Mode for React Devs](https://gemini.google.com/app) — _Gemini_ is essentially Google’s answer to ChatGPT and now has a developer ‘canvas’ mode which can be used to create, iterate, and preview React and HTML code right in the browser. It’s free at a basic level, too, so if you have a Google account, you should get straight in. Google Gemini [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/500396c5.png)](https://frontendmasters.com/courses/dev-tools-v4/?utm_source=email&utm_medium=reactstatus&utm_content=devtoolsv4) [Master Chrome's DevTools](https://frontendmasters.com/courses/dev-tools-v4/?utm_source=email&utm_medium=reactstatus&utm_content=devtoolsv4) — Join Jon Kuperman for this video course diving into Chrome's DevTools. You'll go beyond console.log(), learning how to inspect, debug, and audit your web apps — tracking performance, identifying bottlenecks, making performance gains, and more. [Level up your DevTools skills](https://frontendmasters.com/courses/dev-tools-v4/?utm_source=email&utm_medium=reactstatus&utm_content=devtoolsv4). Frontend Masters sponsor [Next.js 15.2.3 Released Due to Security Vulnerability](https://socket.dev/blog/next-js-patches-critical-middleware-vulnerability) — This past weekend, a new version of Next.js was released to resolve a serious security vulnerability, which could allow the skipping of middleware (including that used for authentication). Self-hosted Next.js deployments need to be upgraded _immediately_. The news led to a lot of responses from [extensive HN threads](https://news.ycombinator.com/item?id=43448723) to [deep dives into the vulnerability](https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware), and [criticism of how it was all handled.](https://sxlijin.github.io/2025-03-23-next-js-and-coordinated-disclosure) Lee Robinson (Vercel) 💡 Vercel also followed up with [a postmortem on the middleware bypass](https://vercel.com/blog/postmortem-on-next-js-middleware-bypass), what they did, and what they're planning to do next. **IN BRIEF:** - 🎂 [Over on X,](https://x.com/sebastienlorber/status/1904670387096739992) Sebastien Lorber noticed that React Native just turned ten years old yesterday. - [Rsdoctor 1.0 has been released](https://rsdoctor.dev/blog/release/release-note-1_0). It's a build analyzer tailored for the Rspack ecosystem but fully compatible with the webpack ecosystem. ▶[React Query API Design: Lessons Learned](https://www.youtube.com/watch?v=l3PxErcKeAI) — You might know Dominik for all his work on React Query, TanStack Router, and his epic [React Query - The Bad Parts](https://tkdodo.eu/blog/react-query-the-bad-parts) series. Here, he walks us through the design choices made while building React Query and shares lessons and mistakes valuable to anyone building their own libraries. _(30 minutes.)_ Dominik Dorfmeister (TkDodo) 💡 This is just one of [_eighteen talks_ shared](https://www.youtube.com/playlist?list=PL53Z0yyYnpWitP8Zv01TSEQmKLvuRh_Dj) from last week's _React Paris_ event if you'd like to dig deeper. [Deploying a Next.js App to Production on Any Server](https://www.saybackend.com/blog/04-deploy-nextjs-to-production-without-vercel) — A popular article from last year that’s been updated for 2025 and Next.js 15. Kamrannetic [Find. Fix. Test: An Intro to App Monitoring with Sentry](https://sentry.io/resources/find-fix-test/?utm_medium=paid-community&utm_source=reactstatus&utm_campaign=fy26q1-demo-workshop&utm_content=demo-workshop-register) — Code-level visibility, from pre- to post-release, lets devs find and fix errors and slowdowns and deploy with confidence. Sentry sponsor 📄 [You Should Know This Before Choosing Next.js](https://eduardoboucas.com/posts/2025-03-25-you-should-know-this-before-choosing-nextjs/) Eduardo Bouças 📺 [React Server Components: Elevating Speed, Interactivity, and User Experience](https://www.youtube.com/watch?v=dA-8FY5xlbk) Aurora Scharff 📺 [Build Your Own Learning Management System with React Native](https://www.youtube.com/watch?v=fO3D8lNs10c) Simon Grimm 📄 [Is Vite Faster than Turbopack?](https://www.kylegill.com/essays/vite-vs-turbopack/) 🛠 Code, Tools & Libraries [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/poiy1xeashsprwn4bu3y.jpg)](https://carlosnz.github.io/json-edit-react/) [json-edit-react: Component to Edit and View JSON/Object Data](https://carlosnz.github.io/json-edit-react/) — An elegant, well presented component to take a JavaScript object, complete with nested objects, and show off the values, as well as allowing users to edit them. Has a neat demo on the homepage showing how flexible it is. [GitHub repo.](https://github.com/CarlosNZ/json-edit-react) Carl Smith [React Cookie Manager: A Customizable Component for Cookie Consent](https://github.com/hypershiphq/react-cookie-manager) — A well-documented solution that will automatically block tracking if necessary and can easily be customized. You can try the live demo [here](https://cookiekit.io/playground), which is also an interactive page demonstrating its features. hypership [react-anchorme 5.0: Links Up URLs and Emails in Text](https://github.com/potty/react-anchorme) — A component that uses [Anchorme.js](https://github.com/alexcorvi/anchorme.js) to detect linkable elements in text and create the links for them. Now supports React 19. Pavel Potáček - [React Scan 0.3.3](https://react-scan.com/) – Tool that scans for performance issues to help eliminate slow renders in your app. - [Koota 0.3](https://github.com/pmndrs/koota/releases/tag/v0.3.0) – Performant real-time ECS-based state management. - [react-native-root-toast 4.0](https://github.com/magicismight/react-native-root-toast) – Pure JS toast component for RN. - [merge-refs 2.0](https://github.com/wojtekmaj/merge-refs) – A function that merges React refs into one. - [Solito 4.4](https://github.com/nandorojo/solito) – React Native + Next.js. 📰 Classifieds [Meticulous automatically creates and maintains an E2E UI test suite with zero developer effort](https://www.meticulous.ai?utm_source=react_status&utm_campaign=march26th). Relied on by 1000s of orgs, including Dropbox, Lattice, Bilt Rewards and many more. --- 🔐 **Make your app an OAuth provider**: [Use Stytch](https://stytch.com?utm_source=go-newsletter&utm_medium=paid_sponsorship&utm_campaign=react-status-newsletter-03-26-2025&utm_content=primary-listing) to easily add 3rd party integrations, make your app agent ready, and enable data connectivity. 📢 Elsewhere in JavaScript A roundup of some other interesting stories in the broader JavaScript landscape, in case you've missed them: - [Bun 1.2.6 has been released](https://bun.sh/blog/bun-v1.2.6) with notable performance improvements for Express and Fastify, improved `node:crypto` compatibility, and even initial support for `node:test`. Now's a good time to see how your Node apps work (or not?) on the fast JavaScriptCore-based runtime. - [Building AI for a 'snake' game with Tensorflow.js](https://www.docker.com/blog/leveraging-docker-with-tensorflow/) looks at a way to use simple AI concepts from JavaScript. - ⚡ Can JavaScript help you save the environment, or at least some money on your electricity bill? Rob Tweed thinks so and [has coded up a way to automatically optimize his electricity tariff use.](https://github.com/robtweed/agility) Curated by Peter Cooper and Terence C. Gannon. A **[Cooperpress](https://cooperpress.com/)** publication. [Change your email address](https://react.statuscode.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://react.statuscode.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom