Sebastian Silbermann

Sebastian Silbermann

@sebbie.dev

nextjs @vercel.com, @react.dev at night, @testing-library.com core | testing + a11y first | he/him

1K followers183 following59 posts

Sebastian Silbermann reposted

Devon Govett
@devongovett.me

New React Aria release! 🧭 New NavigationTree component, perfect for sidebars. Supports expandable items, sections, keyboard navigation, action buttons, etc. ⌛️ Menu async load more 📝 TokenField selection updates 📱 iOS overlay positioning fixes react-aria.adobe.com/releases/v1-...

Sebastian Silbermann reposted

Carlo Zottmann
@zottmann.dev

💯 > Blaming #GDPR for the cookie banner is like blaming the health inspector for the roaches. The banner is deliberate vandalism, a dark pattern engineered to exhaust you before you can learn anything about the #surveillance apparatus humming behind the "OK." matduggan.com/you-know-gdp... #privacy

matduggan.comYou Know GDPR Is Good Based on Who Hates ItFDR has always been one of my favorite presidents, second maybe to Lincoln. Both were men the establishment assumed were one of them until, to their horror, they governed like they weren't. Both could...

Sebastian Silbermann reposted

Next.js
@nextjs.org

Next.js 16.3 is now available! • Up to 90% less memory in dev • Faster builds, type checking, and rendering • Better tooling for AI agents • Custom error boundaries • Instant Navigations for SPA-like responsiveness nextjs.org/blog/next-16-3 Here's what's new ↓

Sebastian Silbermann reposted

Ivan Akulov
@iamakulov.com

Possibly one of the most impressive Safari bugs I’ve run into lately: Going back (with a swipe) in *any* React app that uses Navigation API freezes the page for three seconds. What’s fun is the main thread is not frozen, only the rendered page is.

Sebastian Silbermann reposted

tierney cyren
@bnb.im

it is incredibly stupid to generate blog posts with llms anyone can output the same thing with the same prompts. If they’re interested in reading that, let them write the prompts. if it’s a writing skill issue on your end… failing at writing is how you get better at writing.

daniel r(ooooooh) in nyc 🇺🇸@danielroe.dev

it's time

Sebastian Silbermann reposted

Aurora Scharff
@aurorascharff.no

Cache Components surface errors as you build when something dynamic would block your shell, nudging you toward a more performant app. The shell loads instantly while dynamic parts stream, and on this demo every route lands in the green. We're working hard to make them easier to adopt!

Aurora Scharff@aurorascharff.no

My React Summit talk is up: What RSCs Can Do in Next.js Today. To show it, I built a music player, open source and deployed on an early preview of Next.js 16.3. 🎵 next-beats.dev Watch the talk for the full walkthrough, and check the key patterns in code below ↓ gitnation.com/contents/wha...

gitnation.comWhat RSCs Can Do in Next.js Today by Aurora Scharff<span>Building app-like UX on the web has historically meant reaching for an SPA. You ship the data layer to the browser, manage a client cache, juggle loading states, coordinate mutations, and write ...

Sebastian Silbermann reposted

rich harris
@rich-harris.dev

There are two ways to resolve the cognitive dissonance of being on Twitter while also caring about all the awful shit happening because of Twitter 1. Leave Twitter 2. Stop caring Profoundly disappointing how many people I like seem to have chosen the latter

Sebastian Silbermann
@sebbie.dev

I personally would recommend reviewing actions/checkout with a custom ref input instead. actions/checkout is the way to escape trust boundaries. In pull_request_target events that's fork -> upstream. But in workflow_dispatch events actions/checkout allows running in protected GH environments.

James@43081j.com

most of these github actions driven breaches are because of pull_request_target. here's some tips of what to look for when reviewing your own workflows. worth noting - it is safe, and necessary, when used correctly 🧵

Sebastian Silbermann
@sebbie.dev

If you treat your default branch as something that went through PR review, you better make sure your workflow_dispatch doesn't do a checkout with a custom input.

Sebastian Silbermann reposted

Next.js
@nextjs.org

Next.js is used by millions of developers across every major cloud. Making it work well everywhere is on us. Here's what we've built with Netlify, Cloudflare, OpenNext, AWS, and Google Cloud, and the commitments we're making. nextjs.org/nextjs-acro...

nextjs.orgNext.js Across Platforms: Adapters, OpenNext, and Our CommitmentsNext.js 16.2 introduces a stable Adapter API, a public adapter test suite, and a working group for more consistent deployment across platforms.

Sebastian Silbermann reposted

Nicolò Ribaudo
@nicr.dev

The "export defer" TC39 proposal aims to introduce a similar optimization *at the language level*, so that you can rely on it in all the tools and environments that you might run your code with. Just because you need one thing from a module, you shouldn't pay the cost of all the others!

github.comGitHub - tc39/proposal-deferred-reexportsContribute to tc39/proposal-deferred-reexports development by creating an account on GitHub.
VoidZero@voidzero.dev

Why did adding ONE component make your build drastically slower? The answer is often: Barrel files. Luckily, you can enable Lazy Barrel Optimization in @vite.dev 8 and @rolldown.rs do bring your build time back to normal. Want to know more? Check the video & docs rolldown.rs/in-depth/laz...

Sebastian Silbermann reposted

Barry Pollard
@tunetheweb.com

From Chrome 145 (on general release next week!), DevTools we will start to show so called "soft" navigations and "Soft LCP" in the Performance Panel traces. These are for SPAs which don't do a full page load, but instead "fake it" by updating the current page and pushing a new history entry. 1/5 🧵

Sebastian Silbermann reposted

Wyatt Johnson
@wyattjoh.ca

Just ported my personal site over to @astro.build with a custom @bun.sh adapter I wrote 🚀 👋 I'm currently looking for my next role, so if you're hiring, reach out! - Astro + Bun for blazing fast SSR - Supports ISR and SWR - Hosted behind @cloudflare.social github.com/wyattjoh/ast...

github.comGitHub - wyattjoh/astro-bun-adapter: Astro adapter for Bun with optimized static file serving and ISR (Incremental Static Regeneration)Astro adapter for Bun with optimized static file serving and ISR (Incremental Static Regeneration) - wyattjoh/astro-bun-adapter

Sebastian Silbermann reposted

Ryan "UnionToTuple" Cavanaugh
@searyanc.dev

Your TypeScript year in review You "silenced" 417 errors with `as any` that turned into runtime errors as soon as the code ran TypeScript printed 4,693 error messages. 26 of them made sense You spent 98 minutes waiting for tsc to run. During this time you spent 544 minutes reading social media

Sebastian Silbermann reposted

Vercel
@vercel.com

We paid $1 million to hackers to harden our firewall defenses. Today we're telling the story of how we strengthened our WAF, disclosing a runtime mitigation layer for the first time, and how we partnered with @Hacker0x01 to defend against React2Shell. vercel.com/blog/our-mi...

vercel.comOur $1 million hacker challenge for React2Shell - VercelWe paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.

Sebastian Silbermann reposted

Daishi Kato
@daishikato.com

⛩️ Waku v0.27.3 has been released. - Dependency updates addressing the critical React Server Components security vulnerability - Various small improvements All users should update immediately: github.com/wakujs/waku/...

github.comUpdate instructions for CVE-2025-55182 · wakujs waku · Discussion #1823References https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components https://www.facebook.com/security/advisories/cve-2025-55182 GHSA-fv66-9v8q-g76r Affected vers...

Sebastian Silbermann reposted

dan
@danabra.mov

fantastic explanation by @storyhb.com, also maybe first example i remember of a feature being more immediately useful (in a sense) self-hosted compared to serverless/vercel

github.comNext 16.0: "Use cache" is ignored in dynamic routes · Issue #85240 · vercel/next.jsLink to the code that reproduces this issue https://github.com/leo-cheron/next16-cache To Reproduce Create a Next.js 16 app with dynamic routes (e.g., app/[locale]/page.tsx) File: app/[locale]/page...

Sebastian Silbermann reposted

P(aul) Frazee
@pfrazee.com

One of the huge perks of working at a software company is, when there's something about the product that bothers you personally, you can get your hands dirty and find out why it's basically impossible to get fixed

Sebastian Silbermann reposted

Next.js
@nextjs.org

Next.js 16 • Cache Components • Turbopack enabled by default • Turbopack file system caching (beta) • Optimized navigations and prefetching • Improved caching APIs • Build Adapters API (alpha) • React 19.2 nextjs.org/blog/next-16

Sebastian Silbermann reposted

daniel:// stenberg://
@bagder.mastodon.social.ap.brid.gy

I am awarded a gold medal by the Royal Swedish Academy of Sciences for my work on #curl https://daniel.haxx.se/blog/2025/10/21/a-royal-gold-medal/

daniel.haxx.seA royal gold medal_The Royal Swedish Academy of Sciences_ (IVA, the same org that selects winners for three of the Nobel prize categories) awards me a gold medal 2025 for my work on curl. This academy, established 1919 by the Swedish king Gustav V, has been awarding _great achievers_ for over one hundred years and the simple idea behind the awards is, as quoted from their website: > Gold medals are awarded every year to people who, through outstanding deeds, have contributed to creating a better society. I am of course humbled and greatly honored to have been selected as a receiver of said award this year. To be recognized as someone who **have contributed to creating a better society** , selected by top people in competition with persons of remarkable track records and achievements. Not too shabby for a wannabe-engineer like myself who did not even attend university. There have been several software and tech related awardees for this prize before, but from what I can tell I am the first Open Source person to receive this recognition by the academy. ## Justification The Academy’s justification is given in Swedish (see below) but it should be translated roughly like this: _System developer Daniel Stenberg is awarded the IVA Gold Medal for his contributions to software development, where he has been central to internet infrastructure and free software. Through his work with curl, the tool that is now used by billions of devices worldwide, he has enabled reliable and secure data transfer over the internet. Not just between programs in traditional computers, but everything from smartphones and cars, to satellites and spacecraft._ The original Swedish “motivering”: _Systemutvecklare Daniel Stenberg tilldelas IVAs Guldmedalj för sina insatser inom mjukvaruutveckling där han haft en central betydelse för internetinfrastruktur och fri programvara. Genom sitt arbete med curl, verktyget som i dag används av miljarder enheter världen över, har han möjliggjort tillförlitlig och säker dataöverföring över internet. Inte bara mellan program i traditionella datorer utan allt från smartphones och bilar, till satelliter och rymdfarkoster._ ## The ceremony The associated award ceremony when the physical medal is handed over happens this Friday at the Stockholm City Hall‘s Blue Hall, the same venue used for the annual Nobel Prize banquet. I have invited my wife and my two adult kids to participate in those festivities. ## A _second_ medal indeed Did I not already receive a gold medal? Why yes, I did eight years ago. Believe me, it does not _get old_. This is something I can get used to. But yes: it is beyond crazy to get one medal in your life. Getting _two_ is simply incomprehensible. This is also my _third_ award received within this calendar year so I completely understand if you already feel bored by my blog posts constantly banging my own drum. See European Open Source Achievement Award and Developer of the year for the two previous ones. ## The medal I wanted to include a fine high resolution image of the medal in this post, but I failed to fine one. I suppose I will just have to make a few shots by myself after Friday and do a follow-up post!
Sebastian Silbermann
@sebbie.dev

I don't know how a migration helper from a static json file the new flat config can fail so horribly. Does anybody have a successful migration story for a non-trivial .eslintrc.json to flat config?

Sebastian Silbermann reposted

Ricky
@ricky.fm

Part 2 is on the schedule, I’m just going to start the demo over and finish the talk from there

Ricky@ricky.fm

Part 2 will be at React Conf tomorrow

Sebastian Silbermann reposted

dan
@danabra.mov

cool post!

Sanity@sanity.io

styled-components maintenance mode doesn't have to mean panic mode. Our engineer @codey.bsky.social made performant community forks. Linear's already seeing 40% faster renders with zero code changes. Not a permanent fix, but it buys you time to migrate properly. www.sanity.io/blog/cut-sty...

sanity.iostyled-components maintenance mode: A 40% faster fork | SanityAfter styled-components entered maintenance mode, we forked it with React 18's useInsertionEffect. Result: 40% faster renders for Linear. Open source solution.