Post

React Weekly #41 is out! Here is what is driving discussions across frontend and mobile engineering this week: - Next.js 16.4 with leaner Turbopack output - Urgent CVE patch for TanStack Start - TanStack Charts reaching 1.0 - RN Skia 3.0 adopting Graphite - Deep dive into React Compiler limits

The Next.js 16.4 release focuses heavily on operational polish. Turbopack continues its diet with reduced output bundle footprints, alongside lazy compilation upgrades and tighter integration with React 19.3 and Cache Components.

🚨 Security notice for full-stack React teams: TanStack Start patched CVE-2026-102989, a reflected XSS vulnerability discovered in route parameter handling. Update your npm packages right away to protect active production apps.

Mobile graphics take a huge step forward with React Native Skia 3.0. The library now runs on Graphite, the next-gen Skia rendering architecture engineered for modern mobile GPU APIs like Metal and Vulkan.

Curious about what the React Compiler actually achieves under the hood? Jimmy Miller published an architectural deep dive that prototypes compiler optimizations to see where automated memoization delivers real gains—and where it falls flat.

We also cover the official 1.0 release of TanStack Charts for framework-agnostic data visualization, plus the Expo team's practical harness for testing whether coding agents reliably invoke developer tooling in CI.