Get the next post in your inbox
Frontend, AI and how teams ship. No spam, ever.
Quick hits
CopilotKit lets agents draw UI from your own components
CopilotKit's new Generative UI (October 29, from CopilotKit, not GitHub Copilot) ships 70 catalog components, generative surfaces outside chat, streaming text and UI together, A2UI v1.0 and AG-UI support, design-system theming and an Inspector. A markdown mode lets the agent write UI inside a normal chat reply. Why it matters: your design system becomes the vocabulary the model speaks, and the agent can only render components you registered.
New Generative UI · Releases · Markdown mode docs
CopilotKit logo for CopilotKit lets agents draw UI from your own components
A Next.js skill that ships less JavaScript
The new Next.js agent skill (October 28) gives a coding agent the Turbopack module graph, so it can find imports that defeat lazy loading, duplicated dependencies and failed tree shaking. Vercel reports nearly 2 MB of client JavaScript removed or deferred, with snapshot verification. Why it matters: bundle weight is the most direct lever on load time, and an agent can now find it for you.
Next.js logo for A Next.js skill that ships less JavaScript
Vercel CI enters beta
Vercel CI (October 28) runs only the affected tasks and uses Remote Cache. Vercel reports 2 to 6 times faster push-to-pass. Why it matters: slow pipelines are where frontend teams lose the most hours, and this is a CI built around the monorepo graph.
Vercel logo for Vercel CI enters beta
TanStack AI 1.0
TanStack AI reached 1.0 on October 23 with a stable core, an experimental agent harness and the deprecated APIs removed. Per This Week In React it brings 23 provider adapters and first-class React bindings such as useChat(). Why it matters: a framework-agnostic way to build AI features that commits to API stability.
TanStack logo for TanStack AI 1.0
GPT-6.1 Terra adds computer use and lands in GitHub Copilot
OpenAI's GPT-6.1 Terra (October 26) adds computer use and visual reasoning, and it is available in GitHub Copilot. Why it matters: a model that can look at a screen is useful for UI testing and front-end review, so run it on your own repo before you change defaults.
OpenAI announcement · GitHub changelog
OpenAI logo for GPT-6.1 Terra adds computer use and lands in GitHub Copilot
TanStack Redact: a smaller React runtime to try
TanStack says Redact keeps React's component model in a browser runtime that renders synchronously, and a Vite plugin swaps it in without changing imports. Its docs measure the default bundle at 23,311 bytes gzipped against 69,162 for React 19.3.0, as runtime sizes, not whole-app sizes. The trade-off is no concurrent scheduling. Why it matters: it is the cheapest experiment in this issue, so try it on a branch and measure your own bundle.
Bundle size docs · Redact on GitHub
TanStack logo for TanStack Redact: a smaller React runtime to try
Security
Patch Node.js for the Brotli decoder bug
What happened: a crafted Brotli stream can make Node's decoder write past the end of a buffer, which can crash the process, leak memory or run code.
Node.js rates CVE-2026-111497 High. It applies when your app decompresses Brotli data that an attacker can control with node:zlib, such as request bodies or fetched third-party content. It affects 26.x, 24.x and 22.x, and the October release lists v26.12.1, v24.22.1 and v22.23.4. The same release fixes three more High issues in DNS and TLS hostname checks (CVE-2026-105482, CVE-2026-105483 and CVE-2026-106069). Why it matters: server-side rendering, route handlers and backend-for-frontend services all run on Node. Check which version your CI and hosting really use, then upgrade and redeploy.
Node.js October 2026 security releases
Next.js has a security release planned for November 3
Heads up: the Next.js blog says a security release is planned for November 3, covering 7 medium-severity vulnerabilities, with details private until release day. Why it matters: find out who deploys your Next.js apps and clear time on Tuesday.
Frontend excellence
Scroll-driven animations reach Firefox
Firefox 159 ships CSS scroll-driven animations, which Chrome (115) and Safari (26) already had, so all three major engines now support them. Why it matters: progress bars, reveal effects and sticky headers can move from scroll listeners to plain CSS. Keep a fallback until your own browser data says you can drop it.
Firefox 159 on MDN · Firefox 159 release notes
Firefox logo for Scroll-driven animations reach Firefox
What an agent pays to build the same app in 12 frameworks
Nolan Lawson built the same Pokédex app with Claude in 12 JavaScript frameworks, with a conformance test suite, and compared the cost. Why it matters: it is a concrete data point for choosing a framework when agents write much of the code. Read it with its caveats in mind: results vary between runs, and a content-heavy app may behave differently.
The AI cost of JavaScript frameworks
JavaScript logo for What an agent pays to build the same app in 12 frameworks
TypeScript 7.1 beta stabilizes the API editor tooling waits on
The TypeScript team announced the 7.1 beta on October 20: es2026 becomes a stable target, and a new TypeScript API ships for building tooling on the Go-based compiler, with entry points like typescript/sync. Visual Studio Magazine reports this is the API Volar, the Svelte language service and typescript-eslint have been waiting on. Why it matters: if you use Vue, Svelte or Angular, install typescript@beta on a branch and see what your build says.
TypeScript 7.1 beta announcement · Visual Studio Magazine
TypeScript logo for TypeScript 7.1 beta stabilizes the API editor tooling waits on
Node.js 26 is now LTS
Node.js says 26.13.0 moves 26.x into Long Term Support (Lithium), supported through the end of April 2029, with no changes from 26.12.1 beyond metadata. Why it matters: LTS is the line most teams may run in production, and 26.12.1 already carries the Brotli fix above.
Logos: Simple Icons, trademarks of their owners.
Get the next issue in your inbox: subscribe to the newsletter. More articles: enpitech.dev/blog.
Nir
Node.js logo for Node.js 26 is now LTS
