Devs this week: Next.js 16.2 ships 400% faster dev, Vite 8 unifies on Rolldown, and TypeScript 6.0 bridges to native

Next.js 16.2 brings 400% faster dev startup and AI tooling, Vite 8 unifies on Rust-based Rolldown for 10–30x faster builds, and TypeScript 6.0 prepares for its Go rewrite. Plus: Swift goes Android, Expo drops legacy architecture, and an npm supply chain attack hits React Native.

Devs this week: Next.js 16.2 ships 400% faster dev, Vite 8 unifies on Rolldown, and TypeScript 6.0 bridges to native

This was a packed week for web and mobile developers. Three major releases dropped — Next.js 16.2, Vite 8, and TypeScript 6.0 — each pushing performance and developer experience forward in meaningful ways. Meanwhile, Swift 6.3 quietly became a cross-platform story with its official Android SDK, and a supply chain attack reminded everyone that npm install is still a trust exercise.

1. Next.js 16.2: 400% faster dev startup and AI-ready tooling

Source: nextjs.org/blog/next-16-2

Next.js 16.2 is a substantial minor release. Dev server startup is roughly 400% faster than 16.1, and a React core contribution to RSC rendering makes HTML output 25–60% faster in real apps. New developer-facing features include server function logging in dev, a redesigned 500 error page, next dev --inspect for attaching a Node.js debugger, and Link transition types. On the AI front, Next.js now auto-generates an AGENTS.md file with versioned docs for coding agents, forwards browser logs to the terminal (useful for agent workflows), and ships experimental agent devtools. Turbopack improvements include Server Fast Refresh, tree shaking of dynamic imports, and Subresource Integrity support.

2. Vite 8 ships with Rolldown as its unified Rust-based bundler

Source: Vite 8.0 Released (Medium)

Vite 8 marks the biggest architectural shift in the project's history: it replaces the dual-bundler model with Rolldown, a single Rust-based bundler delivering 10–30x faster builds while maintaining full plugin compatibility. Other highlights include integrated Vite Devtools for debugging and analysis, built-in tsconfig paths support (no more plugins), browser console forwarding to the terminal, and automatic support for TypeScript's emitDecoratorMetadata. Vitest 4.1 shipped alongside it with Vite 8 support.

3. TypeScript 6.0: the bridge release toward the Go rewrite

Source: devblogs.microsoft.com

TypeScript 6.0 is a transitional release before the upcoming 7.0 Go-based native compiler. It changes defaults to strict: true and types: [], improves subpath imports, adds types for the Temporal API and Map.prototype.upsert, and lays groundwork for the native rewrite that promises 10x compile-time improvements for large codebases. If you have non-strict projects, now is the time to start migrating.

4. Swift 6.3 releases with official Android SDK

Source: swift.org/blog/swift-6.3-released

Swift 6.3 shipped on March 24 with the first official Swift SDK for Android. You can now compile Swift into native Android binaries, integrate Swift code into Kotlin/Java apps via Swift Java JNI Core, and update your Swift packages to support Android targets. The release also adds the @c attribute for exposing Swift functions to C, improvements to embedded environments, and more flexible C interop. Combined with the Skip framework going fully open source earlier this year, Swift as a cross-platform language is becoming a real option.

5. Expo SDK 55: end of the Legacy Architecture era

Source: expo.dev/changelog/sdk-55

Expo SDK 55 drops Legacy Architecture support entirely — if you haven't migrated to the New Architecture, this is your deadline. The release includes React Native 0.83, brings Jetpack Compose support to beta in Expo UI, aligns SwiftUI APIs with Apple conventions, introduces Shared Objects & Shared Refs for native data interaction, and delivers smaller OTA update payloads through Hermes bytecode diffing. Brownfield integration for mixing React Native into existing native apps also gets first-class support.

6. Glassworm supply chain attack hits React Native npm packages

Source: aikido.dev

On March 16, two popular React Native packages — react-native-country-select and react-native-international-phone-number — were backdoored with a multi-stage Windows credential and crypto stealer, triggered automatically during npm install. The combined packages had nearly 30,000 weekly downloads. The malware skips systems with Russian language markers, a pattern consistent with Russian-speaking threat actors. The broader Glassworm campaign has also been linked to 150+ compromised GitHub repositories and VS Code extensions. Audit your lockfiles and check your CI runners.

7. Safari 26.4 ships CSS Grid Lanes (formerly Masonry) and anchor positioning fixes

Source: webkit.org

Safari 26.4 is a significant browser release. CSS Grid Lanes (the layout system formerly called Masonry) lands in production, alongside refinements to Anchor Positioning, various CSS zoom fixes, and support for math functions within img elements. Separately, the light-dark() CSS function is being extended to support images (not just colors), shipping in Firefox 150 and Chrome 148 — a welcome simplification for theme-switching logic.

8. Storybook 10.3 adds MCP for AI-assisted component development

Source: storybook.js.org

Storybook 10.3 ships with MCP (Model Context Protocol) support, Vite 8 compatibility, Next.js 16.2 support, and ESLint 10. The MCP integration is the standout feature: it exposes your component library as machine-readable context for AI coding agents, includes an autonomous correction loop where agents run interaction and accessibility tests and fix their own bugs, and benchmarks show it produces better code with fewer tokens. If you use AI-assisted coding alongside a design system, this is worth setting up.

9. Google patches two Chrome zero-days exploited in the wild

Source: thehackernews.com

Google fixed CVE-2026-3910 (V8 implementation flaw, CVSS 8.8) and CVE-2026-3909 (Skia out-of-bounds write, CVSS 8.8), both exploited in the wild and allowing remote code execution via crafted HTML. If you haven't updated Chrome this week, do it now. These also affect Chromium-based browsers like Edge.

10. React Native multi-threading matures: Worklets 0.8 and Reanimated 4.3

Source: github.com/software-mansion

Worklets 0.8 makes Bundle mode easier to use, unlocking complex background thread operations beyond animations. The new Shareable primitive — extracted from Reanimated — provides runtime-bound shared memory across threads for general-purpose use cases. Reanimated 4.3 adds CSS animations for SVG, Shared Values on multiple threads, and improved type safety. Together, these releases signal that React Native's multi-threading story is moving from experimental to production-ready.