P.01Node.js pushed security updates on June 18, 2026 across v22, v24, and v26, patching 12 CVEs. Two are high-severity auth bypasses. The most interesting is undici's HTTP response queue poisoning, which can send the wrong response to the wrong request on keep-alive connections.
P.02CVE-2026-12048 is a CVSS 9.3 stored XSS in pgAdmin 4 that lets a malicious PostgreSQL server inject JavaScript into your browser tab. Every version from 6.0 to 9.15 is affected. The fix is v9.16.
P.03On June 24, 2026, Qualcomm announced a $3.92B all-stock acquisition of Modular, the company behind the Mojo programming language and MAX inference engine. The bet: give AI developers a hardware-agnostic path that bypasses NVIDIA's CUDA lock-in. Here's what actually changes.
P.04Deno 2.9 ships deno desktop — a way to turn any web project into a native, distributable desktop app with no Electron boilerplate. Here's what it does, what it's good for, and when to keep using Tauri or Electron instead.
P.05Angular's enterprise comeback is real. Signals, standalone components, and zoneless change detection have changed what senior Angular skill looks like. Here's how to hire for it.
P.06DevSecOps is a distinct discipline from DevOps and from security engineering. Here's what the role actually covers, what skills to screen for, and why supply chain security is now the core competency.
P.07Svelte 5 runes changed the reactivity model in ways that matter for hiring. The talent pool is small but experienced. Here's how to find, screen, and evaluate Svelte developers.
P.08June 2026 Patch Tuesday is the largest monthly security release of the year: 206 CVEs, 37 rated Critical, three publicly disclosed zero-days, and a Splunk Enterprise RCE that attackers started exploiting within days of disclosure. Here's what to patch first.
P.09MiniMax M3, released June 1 2026, is the first open-weight model to combine frontier-tier coding performance, a 1-million-token context window, and native multimodality in a single model. Here's what it does, how it benchmarks, and why it matters.
P.10Next.js 16.3 preview landed June 25 with Instant Navigations — a set of tools that give server-rendered Next.js apps the snappy feel of a client-side SPA. Here's what changed, what it's built on, and when to use it.
P.11The three major frontend frameworks have all matured significantly and all make different tradeoffs. This is how we help clients choose — and why there is no universally right answer.
P.12New June 2026 data shows software engineer job listings up 30% with 67,000+ open roles — even as AI headlines focus on layoffs. Here's what the numbers actually show about who's hiring, which skills matter, and where the market is contracting.