React 19.3 Stable & Chrome 153 Two-Week Cadence & .NET 11 RC1 & AWS Lambda 90-Minute Timeout

React 19.3 ships with stable View Transitions and Fragment Refs, Chrome moves to two-week release cycles, .NET 11 RC1 debuts with C# 15, and AWS Lambda extends timeouts to 90 minutes for long-running workloads.

Frameworks & Libraries

React 19.3 is now stable with View Transitions and Fragment Refs graduating from experimental status. The release also adds browser API support, Trusted Types, and improvements like rendering directly in Server Components. react-dom now fires onReset after Server Actions and includes support for onFullscreenChange/Error events and the SVG maskType property. Read more

Languages & Runtimes

.NET 11 RC1 is available with go-live support, including stabilized C# 15, JSON union support, and cross-platform improvements. SignalR's TypeScript client can now refresh authentication without reconnecting, and Blazor Server circuits can update refreshed identities and claims. Read more
CVE-2026-71328 and CVE-2026-69522: Heap-based buffer overflow vulnerabilities affect .NET 6.0.0 through 6.0.45. Upgrade to .NET Runtime ≥8.0.31, ≥9.0.20, or ≥10.0.12, or use Microsoft.DiaSymReader.Native ≥18.9.0-beta1.26405.2. Read more

Browser & Web Platform

Chrome 153 officially launches Google's new two-week major release cadence (up from four-week cycles), marking a shift toward faster shipping. The update includes native IAMF 3D spatial audio, XML parsing engine migration to Rust, and optimizations for CSS single-axis scroll containers. ChromeOS will omit odd version numbers to stay in sync, while the Extended Stable channel continues on eight-week cycles. Read more
CVE-2026-87491: An actively exploited out-of-bounds write in Chrome's V8 engine (CVSS medium severity) allows remote attackers to execute arbitrary code inside the browser sandbox via crafted HTML. Chrome 153.0.8010.36+ patches the flaw discovered by Jihyeon Jeong of Seoul National University. This is the seventh Chrome zero-day exploited in 2026. Read more
CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, CVE-2026-85046 join CVE-2026-87491 as Chrome zero-days exploited in the wild this year, affecting CSSFontFeatureValuesMap, Skia, V8, and WebGPU. Read more

DevOps & Cloud

AWS Lambda now supports 90-minute function timeouts for asynchronous and event source mapping (ESM) invocations on Lambda Managed Instances, a 6x increase from 15 minutes. Enables data processing, media transcoding, AI inference, and batch workloads without re-architecting. Configure via AWS Console, CLI, APIs, or Infrastructure as Code. Read more
AWS Private CA EKS add-on and Connector for Active Directory now available in AWS GovCloud (US-East/West). Simplifies certificate automation for government workloads via cert-manager integration and FIPS 140-3 Level 3 HSM-backed private keys. Read more
Amazon Connect now lets managers set workload-type-specific capacity limits for Tasks and Emails instead of blanket channel-level concurrency rules. Classify contacts by complexity and assign independent limits—e.g., 3 concurrent simple tasks vs. 1 complex task. Read more
Amazon SageMaker Feature Store adds feature-level writes, eliminating read-modify-write patterns. Update individual features in a single request without rewriting entire records, reducing latency and cost. Multiple pipelines can now independently update the same record. Read more
AWS Transform custom enables automated migration of legacy WCF services to ASP.NET Core Web API. Agentic AI handles API/service migrations, framework upgrades, and refactoring at scale on AWS infrastructure. Read more
Amazon Bedrock Managed Knowledge Base adds CheckIngestedDocumentAcl and GetIngestedDocumentAcl APIs plus console debugging for document-level access control. Self-service auditing eliminates guesswork when users can't find expected documents in retrieval results. Read more

Databases & Data

ClickHouse Managed Postgres now available in Private Preview on Google Cloud with native Postgres-to-ClickHouse CDC via pg_clickhouse extension for unified queries. Replication latency measured in seconds, staying in-region with ClickPipes. Read more
Prisma 8 is built as the first agent-native ORM for developer-AI collaboration, with parallel execution of Prisma 7 and 8 against the same database for incremental migration. Prisma 7 receives bug fixes and security updates for 12 more months. Read more
Supabase now integrates with Google Gemini Enterprise as a prebuilt connector for natural-language queries on projects. Real-time data retrieval with read-only/destructive annotation; IT/ops can check metrics without dashboard access. Read more

Security

BlueMoon exploit kit used by four China-nexus spy groups within a week, chaining CVE-2026-85046 (V8 type confusion), an unpatched V8 sandbox escape, and CVE-2026-85880 (Windows ALPC heap buffer overflow). Microsoft patched CVE-2026-85880 in September 2026 Patch Tuesday. Read more

Dev Tools & IDEs

Warp's code editor now integrates Language Server Protocol (LSP) support for Rust (rust-analyzer), Go (gopls), Python (pyright), TypeScript/JavaScript, and C/C++ (clangd). Hover info, go-to-definition, find references, diagnostics, and format-on-save all work in the terminal without leaving the IDE. Read more
Warp's coding agent detects and surfaces code diffs inline within the Agentic Development Environment. Uses codebase context indexing (Git-tracked, no storage on Warp servers), project rules, and a dedicated code review flow for generating, editing, and managing code. Read more