Luis Torres

full stack dev. looking for new job opportunities.

[Luis Torres @4Ndr3w10000]

Node 26.8.2 shipped 9 September with OpenSSL 3.5.8 and Undici 8.10.2.

It also deprecates Server.prototype._listen2. If you have old code reaching into that private hook, this is the cheap moment to move off it, before it goes away.

[Luis Torres @4Ndr3w10000]

Two settings worth knowing in Claude Code 2.1.267.

maxEffortLevel caps effort across every provider, so an agent cannot burn xhigh on trivial work.

--system-prompt-snapshot off renders the system prompt fresh instead of reusing the cached snapshot.

[Luis Torres @4Ndr3w10000]

Claude Code 2.1.267: parallel tool calls were getting dropped when resuming sessions over 5MB.

If long agent runs looked like they silently skipped work after a resume, that was the cause, not your prompt. Same release stops large Workflow schemas being refused in auto mode.

[Luis Torres @4Ndr3w10000]

Claude Code 2.1.267 fixes a fail open bug: when a managed settings file could not be read, the policy admitted everything instead of nothing.

If you push managed settings to a fleet, denying by default is the entire point of that file. Worth upgrading before your next audit.

[Luis Torres @4Ndr3w10000]

Claude Code 2.1.266 fixes a 2.1.265 regression. CLAUDE_CODE_USE_GATEWAY triggers gateway sign-in only when both ANTHROPIC_BASE_URL and ANTHROPIC_AUTH_TOKEN are set, which is what the docs always said.

If your proxy setup broke and you pinned back, upgrade instead.

[Luis Torres @4Ndr3w10000]

Next.js 16.4 canaries are building out the loaders API. It now takes a version, and it exposes a .resolve method. SWC went to v78 in canary.21.

If you maintain a custom loader, track these canaries now rather than porting everything the week 16.4 goes stable.

[Luis Torres @4Ndr3w10000]

Node 24.21.0 LTS landed yesterday with a non-throwing MIMEType.parse.

Malformed Content-Type headers show up constantly, so every upload handler I write wraps MIMEType in a try/catch. That wrapper can go.

Same release speeds up net.BlockList.

[Luis Torres @4Ndr3w10000]

Glamsterdam reprices three things at once. EIP-8037 raises state creation, EIP-7976 raises the calldata floor, EIP-7981 raises EIP-2930 access list cost.

If your contract writes a lot of fresh storage or leans on access lists, your gas math moves. Benchmark on a devnet first.

[Luis Torres @4Ndr3w10000]

MCP auth detail worth patching. SEP-2468: authorization servers return iss per RFC 9207, and the client has to validate it before redeeming the code.

That closes the authorization server mix-up hole. If you hand-rolled your MCP client, you almost certainly skipped this check.

[Luis Torres @4Ndr3w10000]

Claude Code 2.1.265 caps saved tool results at 1 GB and now tells you when it truncates.

Long agentic runs used to quietly drop an earlier tool result and you would never know. Now there is a notice.

Read it before you start blaming the model for forgetting.

[Luis Torres @4Ndr3w10000]

Building sampling or elicitation into an MCP server? Server to client requests are moving to Multi Round-Trip Requests.

The point is dropping the always open bidirectional stream. Design for a request that comes back later, and stop assuming the socket is still there.

[Luis Torres @4Ndr3w10000]

Next.js 16.3: experimental.turbopackCjsTreeShaking

Turbopack only tree-shook ESM before this, so unused imports and exports inside your CommonJS dependencies shipped to the browser. It goes on by default in a later release. Flip it now and diff the bundle.

[Luis Torres @4Ndr3w10000]

CertiK's Hack3d numbers, published 4 September: $1.3B lost across DeFi in eight months, and compromised private keys passed smart contract bugs as the leading vector for the first time on record.

Drift and KelpDAO were $575M of it. Neither was a contract flaw.

[Luis Torres @4Ndr3w10000]

If you maintain an MCP server, the clock started on 2026-07-28.

Roots, Sampling and Logging are deprecated and keep working for at least twelve months. Legacy HTTP+SSE gets a year long offramp. Dynamic Client Registration is deprecated in favor of CIMD.

[Luis Torres @4Ndr3w10000]

Node 26.8.0 added ZipEntry, ZipFile and ZipBuffer to zlib. Zip reading and writing in core, so adm-zip and jszip come off the dependency list.

Same release: TracingChannel is stable, and SQLite StatementSync got close() and Symbol.dispose.

[Luis Torres @4Ndr3w10000]

MCP's 2026-07-28 revision retired the initialize/initialized handshake and the Mcp-Session-Id header.

Each request carries its protocol version, client identity and capabilities in _meta.

Your server sits behind a round robin LB with no shared session store.

[Luis Torres @4Ndr3w10000]

Glamsterdam locked its EIP bundle at the final devnet. Ten proposals, headlined by EIP-7732 for proposer-builder separation and EIP-7928 for block-level access lists.

The target behind the bundle: a 200M gas limit floor, up from the 60M range today.

[Luis Torres @4Ndr3w10000]

Node 26 removed --experimental-transform-types entirely.

If a script or a build step leaned on it to run TypeScript enums or namespaces directly, that path is gone in 26.

Check the flag before you bump, not after the deploy.

[Luis Torres @4Ndr3w10000]

Node's release model changes with Node 27. One major a year instead of two, and every release becomes LTS.

Ship in April, LTS in October, version number matching the calendar year.

The odd-means-experimental rule is gone. LTS windows stay at 30 months.

[Luis Torres @4Ndr3w10000]

Running Claude Code under zsh? Upgrade to 2.1.260.

Before it, Bash permission checks auto-approved commands that hid a command substitution inside a REPORTTIME, REPORTMEMORY or DIRSTACKSIZE assignment.

Those prompt for approval now.