Next in Dev

Anthropic announced an unreleased AI model called Claude Mythos Preview that has found thousands of zero-day vulnerabilities in every major operating system and web browser. They say it's too dangerous to release. Meanwhile, Anthropic lost a key court ruling in its ongoing fight with the Pentagon over military AI guardrails. Also this week: Cursor 3.0 brings parallel agents and design mode, Next.js ships a critical security patch (with some irony attached), TanStack introduces code mode for composable tool execution, Payload 3.82 lands with new hooks and drag-and-drop components, plus updates from shadcn, Figma, Claude Code, and Railway.

Next in Dev is a weekly newsletter and podcast covering modern web development. Subscribe at nlvcodes.com or wherever you listen to podcasts.

Hosted on Acast. See acast.com/privacy for more information.

Anthropic accidentally leaked the entire Claude Code source code through an NPM packaging error. Plus Railway's new CDN leaked authenticated user sessions, Google launched a Gemini switching tool and Gemma 3 under Apache 2.0, Cloudflare announced a TypeScript CMS they're calling a WordPress successor (on April 1st), and Payload shipped an LLM evaluation suite.

0:00 Intro

0:26 Anthropic leaked Claude Code's source code

1:45 Railway's CDN leaked authenticated sessions

2:28 Google's Gemini switching tool

3:02 Google Gemma 3 goes Apache 2.0

3:30 Cloudflare's WordPress successor

4:20 Payload 3.81 LLM evaluation suite

4:47 Claude Code updates (7 releases)

5:16 Figma Make Kits & Make Attachments

5:42 Astro 6.1

5:49 TanStack Router signal graph

6:02 Outro

Hosted on Acast. See acast.com/privacy for more information.

OpenAI published a safety blog for Sora, then killed the entire product the next day and rug pulling Disney's $1B partnership in the process. Plus, Cursor got caught hiding that Composer 2 is built on an open source Chinese model, a federal judge called out the Pentagon's Anthropic ban, GitHub is opting you into AI training data, and Next.js finally addressed its biggest criticism with the new Adapter API.

0:00 OpenAI kills Sora

2:04 The real reason OpenAI is pivoting

2:31 Cursor's transparency problem

3:23 Open source attribution matters

4:19 Pentagon vs Anthropic, Part ???

5:58 GitHub trains on your code now

7:13 Next.js Adapter API changes everything

8:50 Figma opens canvas to AI agents

9:35 Rapid fire: Payload, WebStorm, TanStack, Claude Code, Railway

Hosted on Acast. See acast.com/privacy for more information.

Anthropic is suing the US government after being labeled a "supply chain risk," AI found 22 high-severity Firefox bugs in just two weeks, Astro 6 dropped with a completely rebuilt dev server, and there's major tooling news across Cloudflare, shadcn, Cursor, Figma, and more.

This week in web development and AI news: the Anthropic lawsuit against the Trump administration, Claude's automated security scanning on the Firefox codebase, OpenAI acquiring Promptfoo, Apple Music AI transparency tags, Astro 6's new Vite Environment API and Cloudflare adapter, shadcn CLI v4 with AI agent skills, Cloudflare's new Browser Rendering crawl endpoint, Cursor plugins, Figma MCP updates, Claude Code releases, Next.js 16.2 canary progress, Railway, and Dokploy updates.

0:00 Intro

0:24 Anthropic sues the government

2:07 Claude finds 22 Firefox bugs

3:25 The Anthropic Institute

4:16 OpenAI acquires Promptfoo

5:08 Apple Music AI transparency tags

6:37 Astro 6

7:49 Cloudflare Browser Rendering API

8:15 shadcn CLI v4

8:52 Cursor plugins

9:11 Figma updates

9:44 Claude Code, Next.js, Railway, Dokploy

10:59 Outro

Hosted on Acast. See acast.com/privacy for more information.

Sam Altman told CNBC he shares Anthropic's safety principles. Less than 24 hours later, OpenAI signed a government contract without those principles and posted about it like a win. Here's why that matters if you build with AI.

Hosted on Acast. See acast.com/privacy for more information.

Vercel's CEO called Cloudflare's new Next.js reimplementation "vibe-coded," and I have thoughts. Plus Cursor agents now get their own virtual machines, ChatGPT is serving ads on the first prompt, and Anthropic drops version 3 of its Responsible Scaling Policy.

This is Next in Dev. It's a weekly roundup of everything happening in web development, AI tooling, and the platforms developers actually use.

https://nlvcodes.com

0:00 - Introduction

0:22 - Cloudflare rebuilt Next.js in a week

1:45 - Vercel's response (glass houses)

2:37 - Cloudflare's 6-hour outage

3:06 - Figma Make connectors

3:26 - Next.js 16.2.0 canary roundup

4:10 - Cursor agents get virtual machines

4:56 - ChatGPT ads on first prompt

5:12 - Anthropic Responsible Scaling Policy v3

6:04 - Railway DDoS protection + domains

7:15 - Claude Code auto-memory + updates

8:09 - Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

Anthropic's Pentagon contract is on the rocks, Figma now connects directly to Claude Code, and Tailwind CSS finally ships v4.2.0 after months of silence. Plus Payload CMS v3.77, Perplexity dropping ads, Cursor's new plugin marketplace, and more from the modern web dev world.

This is Next in Dev, a weekly roundup of everything happening in web development, AI tooling, and the platforms developers actually use.

0:00 - What's Coming Up

0:13 - Payload CMS v3.77

1:27 - Figma + Claude Code

2:17 - Next.js canary updates

2:49 - Dokploy

3:23 - Tailwind CSS v4.2.0

4:01 - Perplexity drops ads

4:31 - OpenClaw founder joins OpenAI

4:46 - Cursor 2.5 plugin marketplace

5:19 - Anthropic vs the Pentagon

5:52 - Claude Sonnet 4.6

6:18 - Anthropic & Infosys

6:39 - Claude Code updates

7:17 - Gemini AI music generation

7:50 - Railway updates

8:18 - Final Thoughts and Next Steps

Hosted on Acast. See acast.com/privacy for more information.

This week in web development: Payload patches critical SQL injection vulnerabilities affecting Drizzle-based database adapters, Next.js ships 10 canary releases focused on Turbopack infrastructure and server-side HMR, and Anthropic commits to covering electricity cost increases caused by their AI data centers. Payload issued critical security patches for SQL injection vulnerabilities in version 3.73 and 3.74. This affects Drizzle-based adapters with JSON/rich text fields with read access set to anything but false in Postgres/SQLite with serial IDs. OpenAI is beginning to test ads in ChatGPT's free and Go tiers. Cursor released Composer 1.5 with 20x more reinforcement learning than v1, and Railway launches one-click Cloudflare DNS integration plus horizontal scaling without deployment cycles.0:00 Payload CMS Security Patches1:17 Payload v3.7.6 Release1:47 Shadcn/ui Blocks Update2:00 Next.js Canary Releases3:15 Cloudflare Markdown for Agents4:32 AWS Infrastructure Updates5:39 Dokploy v0.27 Stability Release6:12 OpenAI Ad Testing in ChatGPT6:49 Cursor Composer 1.57:55 Anthropic Nonprofit Access & Energy Commitment9:24 Claude Code Updates10:03 Google Gemini 3 Deep Think10:37 Railway Deployment Improvements12:00 Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

In this episode of Next in Dev, I cut through the noise of the latest AI agent arms race to find what actually matters.

- Anthropic releases Claude Opus 4.6

- OpenAI counters with the GPT-5.3 Codex and a dedicated macOS app

- Payload 3.74/3.75

- shadcn’s new first-class RTL support

Payload's skill live: https://youtube.com/live/3UDiLVe0PFA

00:00 Payload CMS 3.74 & 3.75:

02:00 Figma news

02:50 Shadcn news

03:27 Next.js news

03:54 Cloudflare news

04:34 The OpenClaw Experiment: A Security Nightmare?

05:15 OpenAI news

06:29 Anthropic’s Ad-Free Promise

07:11 Claude Opus 4.6

08:07 Claude Code & Xcode

08:36 Gemini’s Ad Strategy

09:10 Railway Postgres Metrics & Flow Visualizer

09:55 Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

Payload 3.73 is here with Next.js 16 support, SQLite performance upgrades, and a new migration command for relational databases. We also dive into the latest Next.js security patches, Figma’s new glass effects, and Cursor’s sub-agent architecture for faster execution. Plus, all the latest news about the AI that matters.

Chapters:

00:00 Payload News

02:13 Figma News

02:47 Shadcn News

03:08 Next.js News

03:42 OpenAI News

04:19 Cursor News

05:27 Anthropic News

05:50 Claude Code News

06:17 Gemini News

06:53 Railway News

07:23 Astro News

07:51 Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.