Plus another RSC vulnerability yields new React and Next.js releases.

#​473 — May 8, 2026

Read on the Web

Together with  Meticulous
 React Status

Projecting React — Tanner Linsley (he of TanStack) spent a day prompting an AI agent to regenerate React’s public API as a ~9KB runtime scoped to TanStack Start, and quietly shipped it on his blog and tanstack.com, where it runs at 2–3× the speed of stock React. But the most interesting part is why he isn’t properly releasing it (though it is on npm if you're curious).

Tanner Linsley

💡 It's also noteworthy that Tanner didn't find Preact to be a good, lighter 'drop-in' replacement for React due to its slow drift away over the years.

Still Writing Tests Manually? Meticulous AI Is Here — Notion, Dropbox, Wiz and LaunchDarkly now use a testing paradigm they can’t work without. Built by former Palantir engineers, Meticulous automatically creates an evolving suite of E2E UI tests, delivering exhaustive coverage with no developer effort.

Meticulous sponsor

Next.js May 2026 Security Releases — More security woes, but ones quickly addressed by upgrading to Next.js 15.5.18 and 16.2.6. All RSC users should also upgrade React (see box below). Users who applied Cloudflare’s WAF rules in response to prior RSC CVEs remain protected by them.

Jimmy Lai (Vercel)

💡 React 19.2.6, 19.1.7, and 19.0.6 have also been released to address this React Server Components-related DoS vulnerability.

IN BRIEF:

  • 📱 Expo SDK 56 Beta is now available. Speed and stability are the highlights, with much faster iOS builds, faster Android app startup times, and the Jetpack Compose (Android) and SwiftUI (iOS) APIs in Expo UI are stable.

  • 🤖 Vercel has open sourced deepsec, a security harness for LLMs to perform security vulnerability scans on large repos.

  • React Router v7.15.0 has been released with a variety of API tweaks to prepare for a React Router v8 release 'in the next month or two.'

Introducing TanStack Form — A clean introduction to TanStack Form, walking through the headless-architecture mental model: state and validation in TanStack's hands, rendering entirely in yours.

Adam Rackis

From React to Web Components: A Migration That Saved 100KB“How I migrated a site from React to native Web Components, why that worked better than I expected, and how the patterns I used along the way grew into a small library called nanotags.”

Pavel Grinchenko (Evil Martians)

Faster Dashboards Start with Faster Queries — TimescaleDB extends Postgres so dashboards query live data at scale. No pipeline, no stale state. $1000 credit to start.

Tiger Data (creators of TimescaleDB) sponsor

🏖️ What I Saw at React Miami 2026 – React Router, Remix, and the use of AI all popped up as common topics. Brooks Lybrand

📄 Who Owns the Tree? RSC as a Protocol, Not an Architecture Tanner Linsley

📄 Untangling Dialogs in React Router David Adams

🛠  Code, Tools & Libraries

MapLibre React Native: Render Interactive Vector Tile Maps — A library for creating maps with MapLibre Native for Android and iOS. It started as a fork of rnmapbox, but now focuses on MapLibre as the MapLibre and Mapbox SDKs continue to diverge.

MapLibre Project

shadcn CLI 4.7: Package Imports and Registry Target Aliases — Now supports package.json#imports for installing components, rewriting imports, and resolving third-party registries. Registry items also gain files[].target aliases for when you want a registry to drop components into specific folders.

shadcn / Vercel

🗓️ React DayPicker 10.0: A Component to Create Date Picker Controls — There are countless date selection components, but few match DayPicker’s maturity, accessibility, and ability to be sculpted into whatever you need. GitHub repo.

Giampaolo Bellavite

  • html-react-parser 6.1 – HTML to React parser that converts HTML strings into React elements. v6.1 adds Content Security Policy (CSP) support.

  • Jotai 2.20.0 – The primitive, flexible state management solution for React "improves performance in high-throughput scenarios".

  • Classicy 0.9 – React component collection with a classic Mac OS-inspired retro style.

📰 Classifieds

Nimbalyst: Visual workspace for building with Claude Code & Codex. Integrate and manage sessions, tasks & files. Visually edit markdown, mockups, diagrams, code.


📸 Scan barcodes, QR codes and others directly in the browser using STRICH, a lean JS library. Free 30-day trial, try the demo app today!

📢  Elsewhere in the ecosystem