TMiR 2025-03: Next had an auth vulnerability, TypeScript is porting to Golang
Job market: FRED data, Layoffs.fyiConferences (React, Javascript)React Native Connection April 3 + 4, 2025 Paris, FranceReact Miami, Apr 17-18CityJS London April 23-25 London, UKApp.js Conf May 28-30 Kraków, PolandCityJS Athens May 27-31 Athens, GreeceSquiggleConf 2025 CFP closes May 23Sponsored by Infinite RedNew releasesTypeScript 5.8Typescript Release with GoReact Native 0.78 - React 19 and moreNext 15.2Tanstack Form 1.0Zeego v3Material UI v7"Slot pattern" for overriding internalsParcel v2.14XState Store v3Better Auth v1.2Main ContentLynx being releasedRelease blogSecurity vulneratibility in Next.js: CVE-2025-29927Original researcher reportCVEs and the NVD ProcessPostmortem on Next.js Middleware bypassNext.js and Coordinated DisclosureYou should know this before choosing Next.jsReact Native 0.78 - React 19 and moreReact Native Core Contributor Summit 2024 RecapTypeScript compiler Golang rewrite??Github discussion and on reddit too⚡ Lightning round ⚡JSC being extracted from RN Corenode-modules.dev v0.4.0Fernando Rojo joining Vercel as Head of MobileNext vs TanStack (Router + Vite)Expo’s AI StrategyLaravel launched “starter kits” including ReactReact Native Enterprise FrameworkState of React Native 2024
- Job market: FRED data, Layoffs.fyi
- Conferences (React, Javascript)
- React Native Connection April 3 + 4, 2025 Paris, France
- React Miami, Apr 17-18
- CityJS London April 23-25 London, UK
- App.js Conf May 28-30 Kraków, Poland
- CityJS Athens May 27-31 Athens, Greece
- SquiggleConf 2025 CFP closes May 23
- Sponsored by Infinite Red
- New releases
- Main Content
- ⚡ Lightning round ⚡
- (00:00) - TSIR_March 2025
- (00:45) - Job market: [FRED data](https://fred.stlouisfed.org/series/IHLIDXUSTPSOFTDEVE), [Layoffs.fyi](https://layoffs.fyi/)
- (01:28) - Conferences ([React](https://react.dev/community/conferences), [Javascript](https://confs.tech/javascript))
- (01:29) - [React Native Connection](https://reactnativeconnection.io/) April 3 + 4, 2025 Paris, France
- (01:36) - [React Miami](https://www.reactmiami.com/), Apr 17-18
- (01:49) - [CityJS London](https://london.cityjsconf.org/) April 23-25 London, UK
- (01:55) - [App.js Conf](https://appjs.co/) May 28-30 Kraków, Poland
- (02:06) - [CityJS Athens](https://athens.cityjsconf.org/) May 27-31 Athens, Greece
- (02:13) - [SquiggleConf 2025 CFP](https://2025.squiggleconf.com/cfp) closes May 23
- (03:19) - [Sponsored by Infinite Red](https://infinite.red/)
- (04:24) - New releases
- (04:26) - [TypeScript 5.8](https://devblogs.microsoft.com/typescript/announcing-typescript-5-8/#the---erasablesyntaxonly-option)
- (05:00) - [Typescript Release with Go](https://devblogs.microsoft.com/typescript/typescript-native-port)
- (06:26) - [React Native 0.78 - React 19 and more](https://reactnative.dev/blog/2025/02/19/react-native-0.78)
- (06:44) - [Next 15.2](https://nextjs.org/blog/next-15-2)
- (07:07) - [Tanstack Form 1.0](https://tanstack.com/blog/announcing-tanstack-form-v1)
- (07:54) - [Zeego v3](https://github.com/nandorojo/zeego/releases/tag/v3.0.1)
- (09:04) - ["Slot pattern" for overriding internals](https://mui.com/material-ui/customization/overriding-component-structure/)
- (10:45) - [Parcel v2.14](https://x.com/devongovett/status/1902022923764076808)
- (12:33) - [XState Store v3](https://stately.ai/blog/2025-02-26-xstate-store-v3)
- (13:11) - [Better Auth v1.2](https://www.better-auth.com/changelogs/1-2)
- (14:31) - [Lynx being released](https://lynxjs.org/)
- (14:33) - [Release blog](https://lynxjs.org/blog/lynx-unlock-native-for-more)
- (18:20) - [Original researcher report](https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware)
- (20:36) - [CVEs and the NVD Process](https://nvd.nist.gov/general/cve-process)
- (25:03) - [Postmortem on Next.js Middleware bypass](https://vercel.com/blog/postmortem-on-next-js-middleware-bypass)
- (27:00) - [Next.js and Coordinated Disclosure](https://sxlijin.github.io/2025-03-23-next-js-and-coordinated-disclosure)
- (30:17) - [You should know this before choosing Next.js](https://eduardoboucas.com/posts/2025-03-25-you-should-know-this-before-choosing-nextjs/)
- (31:37) - [React Native 0.78 - React 19 and more](https://reactnative.dev/blog/2025/02/19/react-native-0.78)
- (34:27) - [React Native Core Contributor Summit 2024 Recap](https://reactnative.dev/blog/2025/02/03/react-native-core-contributor-summit-2024)
- (36:42) - [TypeScript compiler Golang rewrite??](https://devblogs.microsoft.com/typescript/typescript-native-port/)
- (41:23) - [Github discussion](https://github.com/microsoft/typescript-go/discussions/411) and [on reddit too](https://www.reddit.com/r/javascript/comments/1j8s441/comment/mh7ms9n/)
- (44:50) - ⚡ Lightning round ⚡
- (44:52) - [JSC being extracted from RN Core](https://github.com/react-native-community/javascriptcore)
- (45:22) - [node-modules.dev v0.4.0](https://bsky.app/profile/antfu.me/post/3ljubvzvwec2w)
- (46:00) - [Fernando Rojo joining Vercel as Head of Mobile](https://x.com/rauchg/status/1896943726486032783)
- (46:41) - [Next vs TanStack (Router + Vite)](https://www.kylegill.com/essays/next-vs-tanstack/)
- (47:46) - [Expo’s AI Strategy](https://expo.dev/ai/strategy)
- (48:39) - [Laravel launched “starter kits” including React](https://laravel.com/docs/12.x/starter-kits)
- (49:36) - [React Native Enterprise Framework](https://enterprise-framework.callstack.com/)
- (50:36) - [State of React Native 2024](https://results.stateofreactnative.com/en-US/)
Creators and Guests
Host
Mark Erikson
An engineer maintaining Redux and Redux Toolkit, working at Replay.io to make smarter AI chat bots and debuggers using time travel.
Host
Mo
Head of Mobile at Theodo, a software consultancy that does native app development for iOS and Android
Producer
Carl Vitullo
Solopreneur just vibing, posts are probably bullshit. Community lead at Reactiflux, the largest chat community of React professionals.
