Coffee Mug logo

The Code Brew's Weekly Newsletter - Week 4

Welcome to the fourth issue of The Code Brew's Weekly Newsletter! This week, we're kicking things off with a question: what's the weirdest thing you could host a website on? How about a disposable vape? Yes, really. It’s a perfect reminder of the incredible creativity in our community. On a more serious note, the top story is a critical security alert: the Shai-Hulud npm attack has compromised over 40 packages. We've got the links you need to understand the impact. In other security news, GitHub is looking to the future with post-quantum security for SSH, and Cloudflare published a fascinatingly deep dive into their recent API outage. For our .NET developers, Microsoft just dropped a huge announcement: STS releases will now be supported for 24 months, a big win for stability and long-term planning. We also take a peek at the new null-conditional assignment operator coming in C# 14 and dive into Vertical Slice Architecture with Milan Jovanovic. The AI conversation is still buzzing, with Vercel explaining vibe coding and GitHub showing you how to integrate its new coding agent. And for the CSS wizards, we're asking: is it finally time to un-Sass? Plus, a look at the 'most hated' new CSS feature: trigonometric functions! Ready to dive in? Grab your mug, and let’s get to it.

This Week’s Favourites

In response to a developer asking about systems - Phil Eaton Blog

The “Most Hated” CSS Feature: cos() and sin() - CSS Tricks Blog

Hosting a website on a disposable vape - Hacker news

Dotnet, C#, Azure

What’s New in C# 14: Null-Conditional Assignments - Ivan Kahl Blog

Update on Wolverine 5 and CritterWatch - Jeremy D. Miller Blog

Event Enrichment in Marten Projections - Jeremy D. Miller Blog

Automating Microsoft Graph Deployments Using Azure DevOps - Cloudtips blog

Supporting platform-specific .NET tools on old .NET SDKs: Exploring the .NET 10 preview - Part 8 - Andrew Lock Blog

.NET STS releases supported for 24 months - Microsoft Dotnet Blog

LinkedIn Benchmarks again - Steven Giesel blog

Working and Testing Against Scheduled Messages with Wolverine - Jeremy D. Miller Blog

Introducing auto model selection (preview) - Visual Studio

Application Insights Code Optimizations for .NET Apps - Microsoft Dotnet Blog

Vertical Slice Architecture Is Easier Than You Think - Milan Jovanovic Blog

Misc

5 ways to integrate GitHub Copilot coding agent into your workflow - Github Blog

Scale to one: How Fluid solves cold starts - Vercel blog

The RUM Diaries: enabling Web Analytics by default - Cloudflare blog

What you need to know about vibe coding - Vercel blog

“Shai-Hulud” npm Attack: What You Need to Know - Legit Security Blog

A Fresh Look & an AI AppSec Teammate - Legit Security Blog

Is it Time to Un-Sass? - CSS Tricks Blog

How to generate (actually good) designs with AI - Builder.io Blog

AI agents at scale: Rox’s Vercel-powered revenue operating system - Vercel blog

Prompt Files and Instructions Files Explained - Microsoft Dotnet Blog

Generate static AI SDK tools from MCP servers with mcp-to-ai-sdk - Vercel blog

Builds now start up to 30% faster - Vercel blog

Meet the GitHub MCP Registry: The fastest way to discover MCP Servers - Github Blog

7 Levels of Context Engineering for Designers - Builder.io Blog

Introducing Vercel Drains: Complete observability data, anywhere - Vercel blog

Post-quantum security for SSH access on GitHub - Github Blog

Greyscale-box test-driven development - Ploeh Blog

Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare’s SASE platform - Cloudflare blog

Regex for Email Validation? Think Again! - Code Opinion

A deep dive into Cloudflare’s September 12, 2025 dashboard and API outage - Cloudflare blog

Weekly Update 469 - Troy Hunt Blog

LongCat-Flash Chat model is now supported in Vercel AI Gateway - Vercel blog

New Vercel CLI login flow - Vercel blog

What Can We Actually Do With corner-shape? - CSS Tricks Blog

Building personal apps with open source and AI - Github Blog

Introducing x402-mcp: Open protocol payments for MCP tools - Vercel blog

YouTube Videos

Assembly Info is tricky in .NET - Nick Chapsas Youtube

Simplified packages are awesome in .NET - Nick Chapsas Youtube

IsAssignableTo is awesome in .NET - Nick Chapsas Youtube

CI/CD .NET properties are awesome - Nick Chapsas Youtube

Deterministic builds in .NET are awesome - Nick Chapsas Youtube

Azure Update - 12th September 2025 - John Savill Youtube

HackerNews Posts

WASM 3.0 Completed - Hacker news

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised - Hacker news

Grapevine cellulose makes stronger plastic alternative, biodegrades in 17 days - Hacker news

Heart attacks may be triggered by bacteria - Hacker news

UTF-8 is a brilliant design - Hacker news

Fartscroll-Lid: An app that plays fart sounds when opening or closing a MacBook - Hacker news

Reddit Posts

Handling Tenured Deadweight as a Newcomer - Reddit Experienced Devs

Cookies vs You. Who wins in 30 seconds? 🍪 - Reddit Web dev

Blazor, Visual Studio 2026, .NET 10 RC 1, Aspire and HOT RELOAD - Reddit Dotnet

What are these founders supposedly working 18 hours a day actually doing? - Reddit Experienced Devs

i just implemented oauth in my app! is this enough? - Reddit Web dev

Anyone here using a Postman alternative for .NET projects? - Reddit Dotnet

How is the job market in your area? - Reddit Experienced Devs

A* algorithm combined with a Binary Heap - Reddit Web dev

Why is PostgreSQL ? - Reddit Dotnet

Inexperienced in .NET - Is this architecture over-engineered or am I missing something? - Reddit Dotnet

Using LLMs for simple tasks? - Reddit Experienced Devs

Does the “Ultimate React project” exist? - Reddit Web dev

Timezone Tracker for remote teams (Free tool) - Reddit Web dev

Are we still using Refit? Is there something else that has taken over? - Reddit Dotnet

Reviewing someone else’s AI slop - Reddit Experienced Devs

The death of specialization - Reddit Experienced Devs

just made my first SaaS! 🎉 - Reddit Web dev

What would your “dream setup” look like for a new .NET development team? - Reddit Dotnet

Anyone else dealing with “estimation by AI” on your team? - Reddit Experienced Devs

Sam Altman says Developers Make Record Salaries, But Future of Programming Jobs Is Unclear - Reddit Web dev

What really differentiates junior, mid, and senior developers? - Reddit Dotnet

Incrementalist v1.1.0 released - 10x faster incremental builds for large .NET solutions - Reddit Dotnet

For the 6th year in a row, Blazor multhreading will not be in the next version of .NET - Reddit Dotnet

A 5 min weekly habit completely changed my performance review and got me a bigger raise - Reddit Experienced Devs

How do so many media downloader websites manage to get around the CORS policy? - Reddit Web dev