Coffee Mug logo

The Code Brew's Weekly Newsletter - Week 16

Welcome back to The Code Brew! 🚀 Critical Update: A major vulnerability in React Server Components (React2Shell) is making waves—read the threat briefs now. In other big news, MCP has joined the Linux Foundation, standardizing the future of AI agents, and GPT 5.2 is live. We also have .NET 10 networking improvements, a public beta for Rust on Vercel Functions, and a new monthly availability report from GitHub. Dive in!

This Week’s Favourites

Pattern guards for a protocol - Ploeh Blog

Denial of Service and Source Code Exposure in React Server Components - React Blog

That Time I Tried Explaining HTML and CSS to My 5-Year Old Niece - CSS Tricks Blog

Dotnet, C#, Azure

DbContext is Not Thread-Safe: Parallelizing EF Core Queries the Right Way - Milan Jovanovic Blog

Trying out the Zed editor on Windows for .NET and Markdown - Andrew Lock Blog

GitHub Runners might not be a good benchmark baseline - Steven Giesel blog

.NET and .NET Framework December 2025 servicing releases updates - Microsoft Dotnet Blog

.NET 10.0.1 - Dotnet Runtime GitHub Release

Resolving Overload Ambiguity with Collection Expressions - Meziantou Blog

.NET 10 Networking Improvements - Microsoft Dotnet Blog

“Classic” .NET Domain Events with Wolverine and EF Core - Jeremy D. Miller Blog

Aggregates in DDD: Model Rules, Not Relationships - Code Opinion

AI

From Chatbot to Code Threat: OWASP’s Agentic AI Top 10 and the Specialized Risks of Coding Agents - Legit Security Blog

GPT 5.2 models now available on Vercel AI Gateway - Vercel blog

The Best MCP Servers for Developers in 2026 - Builder.io Blog

Speed is nothing without control: How to keep quality high in the AI era - Github Blog

MCP joins the Linux Foundation: What this means for developers building the next era of AI tools and agents - Github Blog

GPT 5.1 Codex Max now available on Vercel AI Gateway - Vercel blog

AI-powered React2Shell vulnerability upgrades are now available - Vercel blog

The new identity of a developer: What changes and what doesn’t in the AI era - Github Blog

AI Automation in Design Systems: A Practical Guide for Product Teams - Builder.io Blog

Microsoft Learn MCP Server Elevates Development - Microsoft Dotnet Blog

Misc

GitHub Availability Report: November 2025 - Github Blog

Fragments Dec 11 - Martin Fowler Blog

v4.1.18 - Tailwindcss GitHub Release

Vote for the web features you want to see - web.dev Blog

Let’s talk about GitHub Actions - Github Blog

Vercel launches partner certification - Vercel blog

React Server Components security update: DoS and Source Code Exposure - Vercel blog

React2Shell and related RSC vulnerabilities threat brief: early exploitation activity and threat actor techniques - Cloudflare blog

Developer Update - December 2025 - Supabase GitHub Release

Creating Scroll-Based Animations in Full view() - CSS Tricks Blog

v3.4.19 - Tailwindcss GitHub Release

Node.js 24 LTS is now available on Sandbox - Vercel blog

Unified security actions dashboard - Vercel blog

November 2025 Baseline monthly digest - web.dev Blog

Shifting left at enterprise scale: how we manage Cloudflare with Infrastructure as Code - Cloudflare blog

FastAPI Lifespan Events are now supported on Vercel - Vercel blog

Inside Workflow DevKit: How framework integrations work - Vercel blog

Python Workers redux: fast cold starts, packages, and a uv-first workflow - Cloudflare blog

Rust runtime now in public beta for Vercel Functions - Vercel blog

Weekly Update 481 - Troy Hunt Blog

Cloudflare outage on December 5, 2025 - Cloudflare blog

Introducing Platform Elements - Vercel blog

Resources for protecting against ‘React2Shell’ - Vercel blog

Leaving Intel - Brendad Gregg Blog

YouTube Videos

The New Cross Platform C# IDE is INSANE - Nick Chapsas Youtube

Using Logic Apps as MCP Servers for your AI Application - John Savill Youtube

Azure Update - 5th December 2025 - 10% more fancy edition - John Savill Youtube