☝( ◠‿◠ )☝ weeklyfoo 160 is here!

● weeklyfoo

Issue #160 · 26 Oct 2026 · 40 links

The web dev week,
in one coffee.

Everything worth your attention from the past seven days, in 4 categories. Read it Monday, get back to building.

Read it first

Predicate locks sank their Postgres-backed metadata store, so Materialize dropped SERIALIZABLE for 3x write throughput and proved the design in Lean

Petros Angelatos · postgres, distributed-systems, formal-methods · 26 min read

Scaling the D1 control plane for millions of SQLite databases without routing every query through a central bottleneck

Cloudflare · cloudflare, databases, scale · 42 min read

Cloudflare dropped average AI code review cost from $2.43 to $0.77, mostly by ordering messages so first requests actually hit the prompt cache

Cloudflare · ai, llm, cost · 34 min read

A model-agnostic agent harness on Postgres, Temporal and S3 with session state independent of disposable sandboxes, async steering, subagents and shared tracing

Ramp · ai, agents, architecture · 1 min read

10,000+ restaurant sites moved to Astro and Cloudflare Workers with React islands, menu-page p75 LCP went from 5.4s to 0.7s

Owner · performance, astro, react · 11 min read

A multipart POST exhausts memory mid-parse, then the shutdown cleanup follows a planted pointer and runs the attacker's payload, regardless of the app on top

Wiz · security, php · 15 min read

Anthropic · security, cryptography, ai · 16 min read

Wendell Adriel · reliability, backend, distributed-systems · 18 min read

Cloudflare · typescript, rust, tooling · 23 min read

Microsoft · typescript, release · 27 min read

Vercel · security, nextjs, react · 3 min read

Jake Archibald · images, performance, web · 69 min read

Tom Kincaid · postgres, databases, release · 13 min read

Jeremy Schneider · postgres, reliability, replication · 10 min read

Railway · security, devops · 3 min read

Anthropic · ai, security, verification · 22 min read

Node.js · security, nodejs · 10 min read

Fly.io · storage, infrastructure · 9 min read

Hosts thousands of isolated throwaway Postgres databases in one process, cloned from a template in milliseconds, for agent sandboxes and per-PR tests

PGRun · postgres, testing, ai

Wraps your Next.js or Vite config to tint the favicon per environment so you see at a glance where you are

Ryan George · dx, nextjs, vite

Sphinx Sphinx · ai, agents, code-review

Mac.apk kksimp · macos, android, tools

Pele Pele · diagrams, svg, javascript

ExcaliClaw ExcaliClaw · diagrams, mcp, ai

Chartist 2.0 Gion Kunz · charts, svg, javascript

Maplair Simon Legner · maps, javascript, library

rich-input Bramus Van Damme · web-components, ui, javascript

DocumentDB 1.0 DocumentDB · postgres, mongodb, databases

Scroll-triggered animations debugger Bramus Van Damme · css, devtools, animation

POUR David Yarham · accessibility, a11y, tools

TanStack AI 1.0 TanStack · ai, typescript, library

Pixel Rob Pruzan · react, terminal, cli

Reylo Colin McDonnell · typescript, sql, databases

dquickts Stencil Labs · typescript, runtime

Motion scopeMotion Motion · animation, react

Chaining semantic quirks in pretty-printers and deobfuscators turns the cleaned-up output into a different program

Robert Vähhi · javascript, security, fun · 19 min read

Anthony Fu · fonts, typography, opentype · 0 min read

Benchmarking how well LLMs debug a half-million line C++ codebase, where they still lag at debugging versus writing

Greg Law, Mark Williamson · ai, cpp, debugging

ViteConf · vite, javascript, conference

Kevin Powell · css, colors, frontend

Got a link for us?

Reply and tell us. We can't include everything but we'll look at anything you send. Thanks!

Sponsorship or advertising? [email protected]

Did you like this weeklyfoo?

Your opinion matters. We want to hear you.