Devlin Duldulao

🇵🇭🇸🇯 DaloyJS creator
• engineer at trainer at published book author at

[Devlin Duldulao @devlinduldulao]

Thanks, @voxxed_thess, for taking this photo. My books are already outdated, but they look good here. And I look like a local rapper from Manila. 😆 😎

[Devlin Duldulao @devlinduldulao]

@hecodesforme @daloyjs Thank you for this. Yes, it is in the App({multipart}) right now, but it will also be in the https://t.co/sGvfPwSSx2("upload", {bodyLimitBytes}) for example this weekend.

[Devlin Duldulao @devlinduldulao]

Do you know @daloyjs already enables secure headers, a body limit, request timeouts, safe JSON parsing, and CSRF/CORS guards by default when you create a new App()? So you don’t have to set anything up, and your agent won't forget anything 😄. #SecureByDefault

[Devlin Duldulao @devlinduldulao]

@hecodesforme @daloyjs The default is 1 MiB, and anything larger gets a 413 Payload Too Large.

[Devlin Duldulao @devlinduldulao]

A @daloyjs REST API server will refuse to boot in production if mcpRoutes() has no auth and public is not set. #SecureByDefault #MCPSecurity

[Devlin Duldulao @devlinduldulao]

Because AI is disrupting some jobs, a fallback can be a Mexican and Asian restaurants. 😂 Now we have a backup plan.

[Devlin Duldulao @devlinduldulao]

Of the eight JS backend frameworks we compared (Express, Koa, Fastify, NestJS, Hono, Elysia, Feathers, DaloyJS), @daloyjs is the only one that enables both an application-level request timeout and hardened security headers by default. No extra middleware, no config.

[Devlin Duldulao @devlinduldulao]

Nice meeting you again brother!

[Juan Martínez @juandadotdev]

Today I met some of my idols at @jsconfmx

Long live frontend 🔥@aurorascharff @devlinduldulao & Daniel Roe

[Devlin Duldulao @devlinduldulao]

The RSC Queen Aurora Scharff 👸 doing her live coding presentation again about what RSCs can do in @nextjs today at @jsconfmx.

[CodeRabbit @coderabbitai]

New in CodeRabbit Secure:

Deep Scan now follows a vulnerability across your linked repos, then replays the exploit in a throwaway sandbox to prove it's real before it flags anything.

Hendrik walks through this and everything else in the new update:

[Next.js @nextjs]

The Next.js site has a new look!

We've redesigned the homepage, /docs, /blog, and more, with a consistent design that keeps the focus on the content.

https://t.co/S5DGXywqm5

A few highlights ↓

[Devlin Duldulao @devlinduldulao]

CodeRabbit is a big help for DaloyJS.

[CodeRabbit @coderabbitai]

1,049,817 open-source code reviews in September, a new monthly record!

That's 2.49x April's volume and up 14.4% from August.

"Not using it today would be like racing Formula One without a seatbelt or helmet." – @tannerlinsley, creator of TanStack

[Aurora Scharff @aurorascharff]

Live demo: https://t.co/D1YWFsgRTH
Source code: https://t.co/rCBF0ZEpfy

Learn how to keep pages static: https://t.co/9pN6kSWlix

𝚎𝚗𝚜𝚞𝚛𝚎𝚂𝚝𝚊𝚝𝚒𝚌 API: https://t.co/eECOdvmyVU

Read our 16.4 announcement: https://t.co/tyFeFsxKIC

[Devlin Duldulao @devlinduldulao]

On my way to Berlin @nextappdevcon to present my newest topic. See you there. #daloyjs

[Devlin Duldulao @devlinduldulao]

@erikras Sayote in the Philippines. After cutting it in half, rub the surfaces together to remove the sticky, irritating, milky sap.

[Devlin Duldulao @devlinduldulao]

I'll be at @jsconfmx on October 29–30 in Guadalajara 📷, with my talk "Streaming Micro-Frontends: React 19 Suspense Meets Module Federation".

Use code JS-AMIGOS for 15% off until September 30

Tickets 📷 https://t.co/9GL6Tvm1dh

[Devlin Duldulao @devlinduldulao]

@matteocollina @ReactAlicante @NodeConfEU Bologna is the best.

[Devlin Duldulao @devlinduldulao]

The RSC Quee 👸 @aurorascharff is in the house and will do a crazy presentation again today at @ReactAlicante about how to create a SPA like navigation in @nextjs plus the agent skills files you needed for your nextjs apps. 🙌🏽

[Devlin Duldulao @devlinduldulao]

The @dotJS is on quick break. Excited to present here in less than an hour from now.

[Devlin Duldulao @devlinduldulao]

@aurorascharff I wish this is how fast airline booking websites when you use it.

[Aurora Scharff @aurorascharff]

Next.js 16.3 Instant Navigations lets you balance reusable content with fresh or personalized data while keeping navigation responsive, like a SPA.

I built https://t.co/kxWA7YXltj to try this in a common multi-step flow. Cache Components mark reusable flight data with 𝚞𝚜𝚎 𝚌𝚊𝚌𝚑𝚎. Partial Prefetching brings it into the browser before you click, including URL-specific content with 𝚙𝚛𝚎𝚏𝚎𝚝𝚌𝚑={𝚝𝚛𝚞𝚎}.

Async React keeps search and booking actions responsive with 𝚞𝚜𝚎𝙾𝚙𝚝𝚒𝚖𝚒𝚜𝚝𝚒𝚌, 𝚜𝚝𝚊𝚛𝚝𝚃𝚛𝚊𝚗𝚜𝚒𝚝𝚒𝚘𝚗, and 𝚞𝚜𝚎𝙰𝚌𝚝𝚒𝚘𝚗𝚂𝚝𝚊𝚝𝚎. Server Functions write and refresh data with 𝚞𝚙𝚍𝚊𝚝𝚎𝚃𝚊𝚐. 𝚅𝚒𝚎𝚠𝚃𝚛𝚊𝚗𝚜𝚒𝚝𝚒𝚘𝚗 animates loading and confirmation.

I’m also testing 𝚞𝚗𝚜𝚝𝚊𝚋𝚕𝚎_𝚙𝚛𝚎𝚏𝚎𝚝𝚌𝚑() and 𝚞𝚗𝚜𝚝𝚊𝚋𝚕𝚎_𝚗𝚊𝚟𝚒𝚐𝚊𝚝𝚒𝚘𝚗() to refine what waits for navigation, like search results and live seat availability.

See the source and learn more below ↓