Next in Dev

The "safe" AI company leaked its code

Fri, 03 Apr 2026 12:00:00 GMT

Anthropic accidentally leaked the entire Claude Code source code through an NPM packaging error. Plus Railway's new CDN leaked authenticated user sessions, Google launched a Gemini switching tool and Gemma 3 under Apache 2.0, Cloudflare announced a TypeScript CMS they're calling a WordPress successor (on April 1st), and Payload shipped an LLM evaluation suite.

0:00 Intro

0:26 Anthropic leaked Claude Code's source code

1:45 Railway's CDN leaked authenticated sessions

2:28 Google's Gemini switching tool

3:02 Google Gemma 3 goes Apache 2.0

3:30 Cloudflare's WordPress successor

4:20 Payload 3.81 LLM evaluation suite

4:47 Claude Code updates (7 releases)

5:16 Figma Make Kits & Make Attachments

5:42 Astro 6.1

5:49 TanStack Router signal graph

6:02 Outro

Hosted on Acast. See acast.com/privacy for more information.

OpenAI Killed Sora

Fri, 27 Mar 2026 12:00:00 GMT

OpenAI published a safety blog for Sora, then killed the entire product the next day and rug pulling Disney's $1B partnership in the process. Plus, Cursor got caught hiding that Composer 2 is built on an open source Chinese model, a federal judge called out the Pentagon's Anthropic ban, GitHub is opting you into AI training data, and Next.js finally addressed its biggest criticism with the new Adapter API.

0:00 OpenAI kills Sora

2:04 The real reason OpenAI is pivoting

2:31 Cursor's transparency problem

3:23 Open source attribution matters

4:19 Pentagon vs Anthropic, Part ???

5:58 GitHub trains on your code now

7:13 Next.js Adapter API changes everything

8:50 Figma opens canvas to AI agents

9:35 Rapid fire: Payload, WebStorm, TanStack, Claude Code, Railway

Hosted on Acast. See acast.com/privacy for more information.

Anthropic is suing the government

Fri, 13 Mar 2026 12:00:00 GMT

Anthropic is suing the US government after being labeled a "supply chain risk," AI found 22 high-severity Firefox bugs in just two weeks, Astro 6 dropped with a completely rebuilt dev server, and there's major tooling news across Cloudflare, shadcn, Cursor, Figma, and more.

This week in web development and AI news: the Anthropic lawsuit against the Trump administration, Claude's automated security scanning on the Firefox codebase, OpenAI acquiring Promptfoo, Apple Music AI transparency tags, Astro 6's new Vite Environment API and Cloudflare adapter, shadcn CLI v4 with AI agent skills, Cloudflare's new Browser Rendering crawl endpoint, Cursor plugins, Figma MCP updates, Claude Code releases, Next.js 16.2 canary progress, Railway, and Dokploy updates.

0:00 Intro

0:24 Anthropic sues the government

2:07 Claude finds 22 Firefox bugs

3:25 The Anthropic Institute

4:16 OpenAI acquires Promptfoo

5:08 Apple Music AI transparency tags

6:37 Astro 6

7:49 Cloudflare Browser Rendering API

8:15 shadcn CLI v4

8:52 Cursor plugins

9:11 Figma updates

9:44 Claude Code, Next.js, Railway, Dokploy

10:59 Outro

Hosted on Acast. See acast.com/privacy for more information.

OpenAI's Principles Lasted Exactly 24 Hours

Sun, 01 Mar 2026 23:25:26 GMT

Sam Altman told CNBC he shares Anthropic's safety principles. Less than 24 hours later, OpenAI signed a government contract without those principles and posted about it like a win. Here's why that matters if you build with AI.

Hosted on Acast. See acast.com/privacy for more information.

Vercel called it "vibe-coded"

Fri, 27 Feb 2026 13:00:00 GMT

Vercel's CEO called Cloudflare's new Next.js reimplementation "vibe-coded," and I have thoughts. Plus Cursor agents now get their own virtual machines, ChatGPT is serving ads on the first prompt, and Anthropic drops version 3 of its Responsible Scaling Policy.

This is Next in Dev. It's a weekly roundup of everything happening in web development, AI tooling, and the platforms developers actually use.

https://nlvcodes.com

0:00 - Introduction

0:22 - Cloudflare rebuilt Next.js in a week

1:45 - Vercel's response (glass houses)

2:37 - Cloudflare's 6-hour outage

3:06 - Figma Make connectors

3:26 - Next.js 16.2.0 canary roundup

4:10 - Cursor agents get virtual machines

4:56 - ChatGPT ads on first prompt

5:12 - Anthropic Responsible Scaling Policy v3

6:04 - Railway DDoS protection + domains

7:15 - Claude Code auto-memory + updates

8:09 - Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

Anthropic vs the Pentagon

Fri, 20 Feb 2026 13:00:00 GMT

Anthropic's Pentagon contract is on the rocks, Figma now connects directly to Claude Code, and Tailwind CSS finally ships v4.2.0 after months of silence. Plus Payload CMS v3.77, Perplexity dropping ads, Cursor's new plugin marketplace, and more from the modern web dev world.

This is Next in Dev, a weekly roundup of everything happening in web development, AI tooling, and the platforms developers actually use.

0:00 - What's Coming Up

0:13 - Payload CMS v3.77

1:27 - Figma + Claude Code

2:17 - Next.js canary updates

2:49 - Dokploy

3:23 - Tailwind CSS v4.2.0

4:01 - Perplexity drops ads

4:31 - OpenClaw founder joins OpenAI

4:46 - Cursor 2.5 plugin marketplace

5:19 - Anthropic vs the Pentagon

5:52 - Claude Sonnet 4.6

6:18 - Anthropic & Infosys

6:39 - Claude Code updates

7:17 - Gemini AI music generation

7:50 - Railway updates

8:18 - Final Thoughts and Next Steps

Hosted on Acast. See acast.com/privacy for more information.

Security Patches, AI Ads & Infrastructure Changes You Need to Know

Fri, 13 Feb 2026 13:00:00 GMT

This week in web development: Payload patches critical SQL injection vulnerabilities affecting Drizzle-based database adapters, Next.js ships 10 canary releases focused on Turbopack infrastructure and server-side HMR, and Anthropic commits to covering electricity cost increases caused by their AI data centers. Payload issued critical security patches for SQL injection vulnerabilities in version 3.73 and 3.74. This affects Drizzle-based adapters with JSON/rich text fields with read access set to anything but false in Postgres/SQLite with serial IDs. OpenAI is beginning to test ads in ChatGPT's free and Go tiers. Cursor released Composer 1.5 with 20x more reinforcement learning than v1, and Railway launches one-click Cloudflare DNS integration plus horizontal scaling without deployment cycles.0:00 Payload CMS Security Patches1:17 Payload v3.7.6 Release1:47 Shadcn/ui Blocks Update2:00 Next.js Canary Releases3:15 Cloudflare Markdown for Agents4:32 AWS Infrastructure Updates5:39 Dokploy v0.27 Stability Release6:12 OpenAI Ad Testing in ChatGPT6:49 Cursor Composer 1.57:55 Anthropic Nonprofit Access & Energy Commitment9:24 Claude Code Updates10:03 Google Gemini 3 Deep Think10:37 Railway Deployment Improvements12:00 Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

Claude Opus 4.6 is HERE and more news

Fri, 06 Feb 2026 13:00:00 GMT

In this episode of Next in Dev, I cut through the noise of the latest AI agent arms race to find what actually matters.

- Anthropic releases Claude Opus 4.6

- OpenAI counters with the GPT-5.3 Codex and a dedicated macOS app

- Payload 3.74/3.75

- shadcn’s new first-class RTL support

Payload's skill live: https://youtube.com/live/3UDiLVe0PFA

00:00 Payload CMS 3.74 & 3.75:

02:00 Figma news

02:50 Shadcn news

03:27 Next.js news

03:54 Cloudflare news

04:34 The OpenClaw Experiment: A Security Nightmare?

05:15 OpenAI news

06:29 Anthropic’s Ad-Free Promise

07:11 Claude Opus 4.6

08:07 Claude Code & Xcode

08:36 Gemini’s Ad Strategy

09:10 Railway Postgres Metrics & Flow Visualizer

09:55 Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

GPT-4 is being put out to pasture and more news

Fri, 30 Jan 2026 13:00:00 GMT

Payload 3.73 is here with Next.js 16 support, SQLite performance upgrades, and a new migration command for relational databases. We also dive into the latest Next.js security patches, Figma’s new glass effects, and Cursor’s sub-agent architecture for faster execution. Plus, all the latest news about the AI that matters.

Chapters:

00:00 Payload News

02:13 Figma News

02:47 Shadcn News

03:08 Next.js News

03:42 OpenAI News

04:19 Cursor News

05:27 Anthropic News

05:50 Claude Code News

06:17 Gemini News

06:53 Railway News

07:23 Astro News

07:51 Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

Claude has a new constitution and more web dev news

Fri, 23 Jan 2026 13:00:00 GMT

Payload 3.72, Next.js 16, and Claude Code updates headline this week’s breakdown of essential web development news and security vulnerabilities. We explore Payload's new experimental per-locale publishing and the addition of depth parameters to MCP tools. On the performance side, Next.js continues its relentless focus on Turbopack and memory management.

The industry is also grappling with significant security scares: a two-character filtering error that nearly compromised the AWS console and a Cloudflare firewall bug related to certificate renewal. Meanwhile, OpenAI introduces the ChatGPT Go plan at $8 USD/month, powered by GPT 5.2 instant, while pivoting toward an ad-supported model for free users. Finally, we compare the latest CLI enhancements from Cursor and Claude Code, and look at Railway’s intuitive CLI overhaul.

Live stream mentioned: https://youtube.com/live/dDYkQ-fXJvw

Chapters:

00:00 - Payload News

00:50 - Shadcn News

01:12 - Next.js News

01:35 - Cloudflare News

02:01 - AWS News

02:26 - OpenAI News

03:22 - Cursor News

04:13 - Anthropic News

05:26 - Claude Code News

06:28 - Railway News

07:26 - Closing Thoughts and Next Steps

Hosted on Acast. See acast.com/privacy for more information.

2026 Bold Prediction

Fri, 02 Jan 2026 13:00:00 GMT

In this video, I’m sharing my 2026 bold predictions for the web development ecosystem and some major personal updates for the channel. We'll discuss the potential future of Payload CMS, the ever-changing AI landscape, and the rising challenges of cloud infrastructure complexity.

Here’s what I cover:

- My potential expansion into content beyond Payload CMS. I’m looking at TanStack, Astro, and general coding advice.

- Why I believe Payload will remain open source and how it will eventually power fully AI-generated sites in Figma.

- My thoughts on why copyright lawsuits and plagiarism accountability might finally slow down the current AI hype cycle.

- Why we should expect more internet outages in 2026 due to increasing system complexity and unvetted AI tools.

- Why Next.js will maintain its industry dominance throughout 2026, despite strong new competition.

Chapters:

00:00 - Introducing My Bold Predictions

00:26 - What will 2026 look like for me and my channel?

06:55 - My 2026 Predictions for Payload CMS

09:58 - My 2026 Predictions for Figma

11:17 - My 2026 Predictions for AI

13:03 - My 2026 Predictions for Internet Outages

13:55 - My 2026 Prediction for TanStack

14:32 - Closing Thoughts

Hosted on Acast. See acast.com/privacy for more information.

Cloudflare vows to stop breaking the internet and more news

Fri, 26 Dec 2025 13:00:00 GMT

This episode of Next in Dev covers the release of Payload CMS 3.69 and its new modular dashboards, the "Code Orange" resiliency push at Cloudflare, and JetBrains finally allowing developers to bring your own keys for AI features. I also dive into the holiday internet outage on December 24th, the latest legal battles between authors and AI companies like xAI, and Google's new Gemini integrations with NotebookLM.

⁠Get early access to videos and more exclusive perks

⁠⁠Subscribe to my newsletter⁠

00:00 - Payload CMS News

01:25 - Next.js News

01:51 - Cloudflare News

02:24 - AWS News

02:47 - AI News

03:46 - OpenAI News

04:46 - Cursor News

05:09 - Gemini News

05:43 - Railway News

07:15 - JetBrains News

07:42 - Closing Thoughts and Next Steps

Hosted on Acast. See acast.com/privacy for more information.

Payload CMS BREAKING Update & Next.js 16.1 is HERE! And more news.

Fri, 19 Dec 2025 13:00:00 GMT

This episode of Next in Dev breaks down the rapid-fire Payload CMS security patches, the official release of Next.js 16.1.0, and OpenAI’s massive infrastructure and coding news.

Payload CMS released versions 3.68.3 through 3.68.5 to address critical security vulnerabilities, mandating a minimum of Next.js 15.4.10 for all projects. This week also marked the official launch of Next.js 16.1, which stabilizes Turbopack for near-instant server restarts and introduces a built-in Bundle Analyzer to help you hunt down bloated dependencies. Meanwhile, the AI landscape continues to shift as OpenAI targets the enterprise with GPT-5.2-Codex and a massive $10 billion Amazon partnership, while shadcn/ui introduces a new CLI standard to help developers move beyond generic Tailwind designs.

00:00 - Payload CMS News

01:04 - Shadcn News

01:29 - Next.js News

02:12 - OpenAI News

04:19 - Anthropic News

04:54 - Thoughts on Cursor Migrating From a CMS

05:20 - Railway News

07:02 - Closing Thoughts and Next Step

Hosted on Acast. See acast.com/privacy for more information.

Sora Gets Star Wars, Fleet IDE Is Done, and Cloudflare Outage

Fri, 12 Dec 2025 17:00:00 GMT

Welcome to Next In Dev! This episode covers major updates across the web dev ecosystem, including new Payload CMS versions, another Cloudflare outage, and massive AI news from Disney and Anthropic.We dive into the new features and bug fixes in Payload CMS v3.67 and v3.68, focusing on new ways to save query presets with groupBy, the breaking changes to e-commerce guest carts, and early Turbo Pack support for Next.js 16 compatibility.

There's also a new vulnerability in Next.js. Be sure to update your version to a patched version.

Chapters:

00:00 - Payload CMS News

01:43 - Figma News

02:13 - Next.js News

02:29 - Cloudflare News

03:07 - OpenAI News

03:31 - Cursor News

04:03 - Anthropic News

04:49 - Railway News

05:31 - JetBrains News

06:28 - Closing Thoughts and Next Steps

Hosted on Acast. See acast.com/privacy for more information.

A dumber ChatGPT

Fri, 14 Nov 2025 17:00:00 GMT

In this episode, I cover the latest updates in modern web dev, including new Payload CMS releases. I also touch on Figma’s new Bengaluru office, and break down the Next.js 16.0.3 stability improvements. I also talk about OpenAI’s GPT-5.1 rollout, recent legal pressure on the company, and Railway’s new real-time notifications, template improvements, and RBAC updates.

Contact: nick@nlvogel.com

Course pre-launch: https://courses.nlvcodes.com/l/payload-cms-basics

Hosted on Acast. See acast.com/privacy for more information.

Slow news week and Railway magic

Fri, 07 Nov 2025 17:00:00 GMT

What’s up, everyone? Welcome to Next in Dev. In this issue, I cover a small change to Payload CMS, some AI fluff, and more Railway magic.

Prefer to read your web dev news? Subscribe to my newsletter: https://news.nlvcodes.com/

Contact at nick@nlvogel.com

Hosted on Acast. See acast.com/privacy for more information.

Magic Configuration

Fri, 31 Oct 2025 16:00:00 GMT

What’s up, everyone? Welcome to Next in Dev. In this episode, I’ll discuss exciting new updates from Payload and Railway and more.

Prefer to read your web dev news? Subscribe to my newsletter: https://news.nlvcodes.com/

Resources mentioned:

MCP plugin live stream

Hosted on Acast. See acast.com/privacy for more information.

The UNPOPULAR Opinion That Helps Users

Fri, 29 Aug 2025 14:00:00 GMT

Dark mode vs. light mode isn’t just a vibe, it’s accessibility. In this episode of Next in Dev, I explain when dark mode helps and when light mode is the better choice. I also share why I record in light mode and how I design for both experiences using Tailwind’s dark: utilities and prefers-contrast.

Hosted on Acast. See acast.com/privacy for more information.

ChatGPT 5 Flops and More Web Dev News You Missed

Fri, 22 Aug 2025 14:00:00 GMT

Weekly dev roundup: Next.js 15.5 cache changes, Turbopack/PPR updates, GPT-5 reality check, Payload 3.51–3.52, Figma AI tools, Tailwind fixes, Vercel runtime cache + Node 18 deprecation, Cursor & Railway news. I also cover Claude Sonnet 4’s 1M-token context, v0.app, and BotID.

Hosted on Acast. See acast.com/privacy for more information.

The ONLY AI Coder You'll Need

Fri, 15 Aug 2025 12:00:01 GMT

I tried Claude Code for 30 days. Here's what I learned.Is Claude Code worth paying for? Or is it just a money pit? I spent a month using it from the command line, and in this video I break down what I learned in that month. If you’re on the fence about AI coding tools, this will help you decide with less hype.

Hosted on Acast. See acast.com/privacy for more information.

Figma’s IPO + Cloudflare Blocks Perplexity: What You Need to Know

Fri, 08 Aug 2025 14:00:00 GMT

Payload CMS introduces soft-delete and moreFigma goes publicNext.js back-ports bug fixesRailway gains SOC 2 compliance and Cloudflare accuses Perplexity of stealth crawling

Hosted on Acast. See acast.com/privacy for more information.

Figma Acquires Payload CMS. Is it the end of the CMS?

Fri, 01 Aug 2025 12:00:00 GMT

Figma acquired Payload CMS. Is it the end of the open source project as we know it? I don’t think so. Many people have asked me what my thoughts are, so here’s a quick video that unpacks my perspective on the acquisition.

Hosted on Acast. See acast.com/privacy for more information.