Topic
The Node.js permission model gained --allow-net in v25 (October 2025). This guide shows how to scope file, network and process access in production, using the 2026 npm supply-chain attacks as motivation.
Manu Shukla 
On 14 July 2026 the Linux Foundation launched the x402 Foundation with 40 members, from AWS to Visa. We compare x402 to Google's AP2 and OpenAI's ACP, and give an adopt-now-versus-wait call by use case.
Manu Shukla 
Node 18 and 20 have reached end of life, Next.js 15 ends October 21, 2026, and React Native, Flutter and iOS enforce migrations this year. A 2026 playbook for modernizing an aging web or mobile stack.
Manu Shukla 
On July 29, 2026, Node.js patched HIGH-severity flaws across the 26.x, 24.x and 22.x lines, days after Next.js shipped its own. Which version to run and how to patch fast without breaking production.
Manu Shukla 
Next.js 16 made Turbopack the default and rebuilt caching around the use cache directive. TanStack Start reached its v1 release candidate on Vite and TanStack Router. Here is how the two React frameworks actually differ
Manu Shukla 
TypeScript 7.0 is generally available and 8-12x faster, but typescript-eslint, ts-jest and Vue, Svelte and Astro template checks cannot run on it until 7.1. Here is a phased plan to get the speed now without breaking
Manu Shukla 
The x402 protocol and Cloudflare's Monetization Gateway let APIs, SaaS and publishers charge AI agents per request in stablecoins. A 2026 guide to pricing models, setup, the HTTP 402 flow, and when to charge, block
Manu Shukla 
Headless CMS licence pages are easy to read and easy to misread. Sanity Growth is $15 per seat per month with 25k documents; the increased-quota add-on is another $299. Here is what a Sanity and Astro build actually
Manu Shukla 
Astryx, shadcn/ui and MUI now sit at 9.1k, 119k and 98.4k GitHub stars. Only one is Beta, only one has a price tag, and all three ship agent tooling. Here is the decision, with the numbers behind it.
Manu Shukla 
The Reserve Bank of India (Digital Lending) Directions, 2025 are not a policy document you hand to legal. They specify what your app may read from a phone, where data may sit, and how money must move. Here is the build
Manu Shukla 
Most Indian B2B SaaS products are not legally in scope for the European Accessibility Act. Their buyers ask for WCAG 2.2 conformance anyway. Here is how to tell the two apart, and what an audit that survives procurement
Manu Shukla 
The 200 ms INP threshold has not moved, whatever the 2026 update posts claim. Here is what Google's own documentation says, what redBus changed to lift sales by 7%, and how to find the same wins in your own stack.
Manu Shukla 
Compliance guides tell Indian teams that EN 301 549 v3.2.1 is the EAA's harmonised standard, that v4.1.1 lands in October 2026, and that non-EU sellers must appoint an EU representative. The legal text says otherwise
Manu Shukla 
Four of the 13 Next.js advisories published in May 2026 let attackers reach protected pages without passing middleware. Patching to 16.2.5 does not close all of them, and the reason is Turbopack.
Manu Shukla 
The RBI authentication directions took effect on 1 April 2026, but the cross-border card-not-present provisions have their own date: 1 October 2026. Two separate mechanisms are due, plus BIN registration with the card
Manu Shukla 
Precursor is Cloudflare's continuous, session-level bot detection for Enterprise Bot Management, live since July 13, 2026. Turnstile is the free challenge widget. This guide shows which to switch on, and when to run
Manu Shukla 
The digital rupee stopped chasing UPI on volume and became programmable money. Here is how fintech teams integrate e-rupee wallets, conditional welfare tokens, offline NFC and cross-border CBDC rails in 2026.
Manu Shukla 
NPCI's OC-215 guidelines cap balance checks at 50 per day, account lists at 25, and status checks at 3 per transaction. Here is how to re-architect a UPI app around the limits: caching, webhooks over polling, AutoPay
Manu Shukla 
India's NPCI is designing a Unified Agent Protocol so AI agents can be registered and authorised to make UPI payments, pending RBI approval. For fintech teams, prep starts now: identity, limits and logs.
Manu Shukla 
India's Account Aggregator network spans 1,120 regulated entities and 450 million fulfilled consents. A technical guide to the consent artefact, ReBIT APIs, FIU eligibility and the DPDP consent manager overlap.
Manu Shukla 
Next.js 16 shipped 21 October 2025 and turns Turbopack on by default, deletes synchronous request APIs, and renames middleware. Here is every breaking change that will stop your build, with the codemods that fix them.
Manu Shukla 
WordPress 7.1 is set for 19 August 2026, with the iframed editor planned for block themes first. apiVersion 3 changes no API, and most blocks need no changes. What actually breaks, and how to test.
Manu Shukla 
OpenAI and Stripe's ACP and Google's UCP now overlap enough that one checkout core plus two thin adapters is the sane build. The March 2026 pullback changes which adapter you ship first.
Manu Shukla 
MCP's 2026-07-28 spec is the largest revision since launch and it breaks things: the initialize handshake and Mcp-Session-Id are gone. Three ways to expose legacy systems to AI agents, and what each actually costs.
Manu Shukla 