Thoughts on AI, the tech stack, and the indie hacker journey.
CVE-2026-23479 is a use-after-free bug in Redis that can lead to remote code execution. It lived in the code from version 7.2.0 through 8.6.2 — about two years — and an autonomous AI tool is what finally found it. If you run your own Redis, you're probably on a vulnerable build. Here's the fix and the config check that matters more.
Everyone repeats '15% under the Small Business Program' like it settles the question. In 2026 it doesn't. Apple's EU fees are mid-restructure, layered, and region-dependent, and the effective cut on your first dollar now depends on where your users are and which options you opt out of.
Deno 2.7 stabilized the Temporal API, added official Windows-on-ARM builds, and shipped npm overrides, with over 2 million npm packages now working. The runtime-war content cycle says 'switch.' For a solo operator shipping product, the boring answer is almost always: don't.
Gemini CLI stops serving consumer requests on June 18, 2026 — one day from now. The replacement, Antigravity CLI, is a closed-source Go binary. The migration is annoying; the real cost is what it teaches you about building on free vendor tooling.
OpenCode, built by the SST team, is now the most-starred open-source coding agent — model-agnostic, terminal-native, 75+ providers. Stars aren't a reason to switch. But the week Google kills a free CLI overnight is a good week to think about what 'model-agnostic' is actually worth.
2025 set an all-time record for SaaS acquisitions — up 28% year over year, with 72% of targets AI-tagged. The micro-acquisition market now moves faster than seed rounds. And most indie products are structurally unsellable, because 'build to sell' is a discipline almost nobody runs.
The Copilot SDK went GA on June 2 across Node.js, Python, Go, .NET, Rust, and Java, with an Agent Tasks REST API close behind. You can now embed a coding agent into your own product without building the orchestration. The catch is what it bills on, and what it quietly owns.
Mellum2 is a 12B Mixture-of-Experts model, Apache 2.0, 2x faster than similar open models, and JetBrains is blunt that it's not a frontier replacement. The right lesson isn't 'self-host to cut your Claude bill.' It's that the high-frequency 80% of your pipeline wants a small focal model, not a genius.
Mastercard's Agent Pay for Machines launched June 10 with 31 partners including Stripe, Cloudflare, and Coinbase. The pitch is that your next customer is a machine. The infrastructure is real. The revenue is not — yet. Here's the one cheap thing worth doing now.