Adding module federation support to t3 would be a huge unlock for the ability to add things without having to manage everything. If a plugin system like ChatGPT has was based on it with slots that would make things super easy. I know I'd use the hell out of it @ScriptedAlchemy
Ok so it’s official ChatGPT has lost its place on my Home Screen and now t3 is here. Only hope @theo can keep it going like mad. Loving it
Zack Chapple retweeted
rsbuild-plugin-cloudflare v0.0.1
An experimental prototype that lets you run an rsbuild dev server inside workerd, and build apps that can be deployed with the cf cli. Built on the Vite plugin's internals
Try it out with your TanStack Start apps today
github.com/james-elicx/rsbui…
Zack Chapple retweeted
Excited to see a Cloudflare plugin for Rsbuild! Give it a try with TanStack Start and share your feedback
rsbuild-plugin-cloudflare v0.0.1
An experimental prototype that lets you run an rsbuild dev server inside workerd, and build apps that can be deployed with the cf cli. Built on the Vite plugin's internals
Try it out with your TanStack Start apps today
github.com/james-elicx/rsbui…
This looks like a great opportunity. I know we applied and listed our VCs. Will need to give some updates if / when we get accepted as to how the usage scales
@SpaceXSI now has a Grok for Startups program. Startups get one credit balance across Grok, Grok Build, Grok Bot and the Grok API, sized for six to twelve months of real usage.
20% lands on approval and the other 80% is released automatically once you're up and running, with hands-on onboarding and a direct line to the startups team.
VCs and accelerators can join as partners to get a guaranteed minimum credit grant for the startups they back.
Zack Chapple retweeted
In the next release, Rspack will support `codeFilter` for loaders ⚡
Run a loader only on modules containing specific code, such as a "use foo" directive.
Skip unnecessary transforms and speed up your builds
Just tried for the first time, holy crap, fast, easy, may need to open a few PR's for some things I'd love to see but bro, good work.
Over the last several days been watching the team get t3 pilled. There is a lot for a founder to learn from @theo on this journey from a product and business perspective.
I feel like this should be turned into a paid course for founders.
Zack Chapple retweeted
🚨 BREAKING: Node.js just dropped its OWN security bombshell.
4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers.
→ 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity.
→ REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely.
→ TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions.
→ Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to.
→ THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates.
→ RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches.
→ PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers.
PHP AND Node.js both facing major security disclosures on the SAME DAY.
If you run a website or application, TODAY is the day to check your servers.
And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated.
Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨
Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk.
→ NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS.
→ TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity.
→ Attackers could potentially take control of vulnerable servers remotely, without authentication.
→ Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed.
→ EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately.
→ Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured.
→ WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk.
→ Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated.
The vulnerabilities are CONFIRMED. The full technical details remain secret.
Tomorrow, the race between hackers and defenders begins.
This could get ugly. FAST.
Thank you @NorthsideHosp Cherokee for helping get me fixed up. Going home today, I won’t miss the food but I do appreciate the doctors and staff who helped me.
Zack Chapple retweeted
If you aren’t sure if you are protected for php2shell we are making it one click to check.
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
Zack Chapple retweeted
Tried tsrs, the Rust port of TypeScript 7 by @Cloudflare and @voidzerodev, on our monorepo at @ZephyrCloudIO.
Type-check, 36 tsconfig projects, cold:
25.8s → 8.5s (3x faster)
Peak memory on the largest project: 2.3 GB → 0.9 GB
Module federation type generation, 7 remotes:
12.4s → 4.0s (3.1x faster)
Peak memory on the largest remote: 1.4 GB → 0.6 GB
Zack Chapple retweeted
We just shipped an updated T3 Code Stable release with over 1,400 changes 🤯
Quick highlight reel of my favorites:
- Massive perf wins on desktop and mobile
- Add a project to another machine from the "Run on" menu
- EAS Simulator remote hosts for iOS dev
- PR diffs now show code vs tests vs docs at a glance
- Idle Claude threads compact early so the cache stays warm (beta)
- Mobile got a big native pass. It finally feels native
- `t3 doctor` can reclaim database space
- `t3 connect` now checks your machine is reachable, and errors say how to fix them
- Webhook tasks got filters and dedupe
- Skill discovery is much more reliable
- Tons of Windows, terminal, and scroll fixes
Least favorite: I caved, LaTeX renders on web and mobile
Also heads up, we're getting a bit more experimental with how we treat Nightly, so now would be a good time to move back to stable :)
Zack Chapple retweeted
I wanna thank @theo for T3Code which has enabled me to juggle harnesses efficiently enough to smoke 2 claude max accounts and a gpt pro account in 2 days.
Zack Chapple retweeted
🫡
Introducing tsrs: a Rust port of the TypeScript compiler 🦀
We are not forking TypeScript!
◆ In close collaborating with the TypeScript team
◆ Up to 8x faster than TS 7.0 & ~70% less memory
◆ Runs in WASM, so it works in your browser & on Workers
◆ Soon part of the Oxc toolchain
npx tsrs
blog.cloudflare.com/typescri…
the cloudflare connect registration needs some love. registered digitally so I can watch the @eastdakota keynote from the hospital and the page is no where obvious enough what I need to actually click to watch. Any of my @CloudflareDev @Cloudflare friend able to drop me the link?
First spinal epidural procedure (and hopefully last) is done. Now we wait 24 hours to see how it goes and if I can go home.
Zack Chapple retweeted
Cloudflare is taking ownership of tsrs, a port of TypeScript to Rust. It's 8x faster and uses 70% less memory than TypeScript 7.0.
We are not forking TypeScript – we are working with the TypeScript team and as a result 7.1 is already ~2.5x faster, too.
blog.cloudflare.com/typescri…
