TLDR Dev

TLDR DEV 2025-11-20

6 sections17 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

Sponsored

NATIVE SIGN-IN WITH APPLE FOR EXPO

Say hello to frictionless authentication for your iOS users! Clerk's Expo SDK now offers true native Sign in with Apple support [4], meeting Apple's requirements for third-party sign-in while providing a seamless experience focused on privacy and ease-of-use.

go.clerk.comSponsor

02ARTICLES & TUTORIALS

THE $1,000 AWS MISTAKE

Geocodio, a geocoding service, experienced a $1,000 AWS bill due to unexpected data transfer charges through a NAT Gateway when syncing data to S3. The team learned that traffic between EC2 and S3, even within the same region, can route through the NAT Gateway and incur costs. The solution was to implement VPC Gateway Endpoints for S3, which provide a free, direct route, bypassing the NAT Gateway.

geocod.io7 min read

PARTIAL PRERENDERING

Next.js's Partial Prerendering (PPR) is a new rendering paradigm that optimizes performance by serving static parts of a page immediately while allowing dynamic components that need request data to render on the server. The first implementation in Next.js 14 used error throwing to detect request data access, but this caused issues with existing applications that had try/catch blocks and retry logic. The updated approach in Next.js 15 switches to a Promise-based system where request APIs like `cookies()` and `headers()` become asynchronous and return never-resolving promises during prerendering.

wyattjoh.ca8 min read

03OPINIONS & ADVICE

JUST JAVASCRIPT

"Just JavaScript" is code that works without custom transforms, allowing devs to understand and refactor their code easily. Svelte and React are not "just JavaScript" due to their unique languages/semantics and custom transforms, respectively. However, Remix 3 adheres to this principle.

pedrocattori.com6 min read

WHY TRADITIONAL SAAS PLAYBOOKS FAIL FOR AI-NATIVE PRODUCTS

Traditional SaaS go-to-market strategies don't work for AI-native products. Unlike traditional SaaS, which focuses on perfect MVPs, narrow customer profiles, and monetization-first approaches, AI-native products require breaking these rules by launching imperfect products, building viral distribution channels first, and targeting broader early customer profiles who can provide feedback and social sharing. AI-native companies must prioritize building "omnipresent" distribution channels and momentum over traditional metrics like product-market fit and willingness to pay.

blog.logrocket.com8 min read

WHAT AI IS REALLY FOR

The AI boom is overhyped, potentially a bubble, and may not deliver on its grand promises, especially in design. While AI can be useful in small-scale applications, its implementation doesn't actually result in as many savings as expected. Instead, the true motive behind the AI frenzy is the acquisition of resources like land, energy, and water needed to power massive data centers.

chrbutler.com12 min read

04LAUNCHES & TOOLS

Sponsored

ACCELERATING INNOVATION WITH LOVABLE AND ATLASSIAN

New and exciting AI capabilities are helping developers unleash their creativity faster than ever. Having systems in place keeps AI outputs structured, useful, and reusable.

atlassian.comSponsor

In the meantime, check out another can't-miss event from Atlassian, focused on strategies to future-proof your engineering org: The modern

atlassian.com

BUILDING MORE WITH GPT-5.1-CODEX-MAX

OpenAI's GPT-5.1-Codex-Max is an advanced agentic coding model built on an updated reasoning foundation and designed for long-running, detailed software engineering tasks. The model can operate across multiple context windows, enabling project-scale refactors and deep debugging sessions. GPT-5.1-Codex-Max is available in Codex.

links.tldrnewsletter.com8 min read

FUMADOCS

FumaDocs is a documentation framework built on Next.js that uses TypeScript, MDX, and Tailwind CSS. It provides utilities, a UI, and features of Next.js App Router. FumaDocs includes built-in components and integrations, focusing on a user-friendly mobile responsive experience.

fumadocs.devTool

05MISCELLANEOUS

CAN AI MODELS BE JAILBROKEN TO PHISH ELDERLY VICTIMS? AN END-TO-END EVALUATION

AI can be used to scam elderly people. These journalists successfully jailbroke AI models like Meta and Gemini to generate phishing emails, which were then sent to elderly participants, resulting in 11% being phished. The journalists also investigated real-world AI scam factories in Southeast Asia and found that victims were using AI chatbots to conduct scams.

simonlermen.substack.com4 min read

AUTOMATED NPM SECRET ROTATION IN GITHUB ACTIONS

NPM recently announced that all long-lived tokens are being revoked and new tokens will only be valid for a maximum of 90 days, creating challenges for automated publishing workflows. While the proper solution is to upgrade to trusted publishing (OIDC), a tool called "github-update-secret" automatically rotates secrets across all repositories to buy time until each project can be properly migrated. This tool iterates through all repositories with admin access and updates any matching secret names with new values.

michaelheap.com3 min read