<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Bhavik Mehta — Blog</title>
    <link>https://bhavikmehta.dev/blog</link>
    <description>Thoughts on full-stack development, AI, and software engineering.</description>
    <language>en-us</language>
    <atom:link href="https://bhavikmehta.dev/feed.xml" rel="self" type="application/rss+xml" />
    <lastBuildDate>Sun, 31 May 2026 21:18:23 GMT</lastBuildDate>
    <item>
      <title><![CDATA[Gemini Spark vs Amazon Quick vs OpenClaw in 2026]]></title>
      <link>https://bhavikmehta.dev/blog/gemini-spark-amazon-quick-openclaw-compared</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/gemini-spark-amazon-quick-openclaw-compared</guid>
      <pubDate>Tue, 26 May 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Gemini Spark, Amazon Quick, and OpenClaw all promise to work for you as AI agents in 2026. Here is how they compare and which one actually fits your situation.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[GitHub Breach: How a VS Code Extension Became a Weapon]]></title>
      <link>https://bhavikmehta.dev/blog/github-vscode-extension-breach-2026</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/github-vscode-extension-breach-2026</guid>
      <pubDate>Wed, 20 May 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[A poisoned VS Code extension gave TeamPCP access to 3,800 GitHub repos. What happened, how to vet extensions, and how to lock down permissions before it's your machine.]]></description>
      <category>Engineering</category>
    </item>
    <item>
      <title><![CDATA[npm Supply Chain Attacks: What Happened and What to Do]]></title>
      <link>https://bhavikmehta.dev/blog/npm-supply-chain-attacks-2025-2026</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/npm-supply-chain-attacks-2025-2026</guid>
      <pubDate>Tue, 12 May 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Over 416 npm packages were compromised in waves from Sept 2025 to May 2026. Here is what happened, which packages are affected, and what to do now.]]></description>
      <category>Engineering</category>
    </item>
    <item>
      <title><![CDATA[SaaS Pre-Launch Audit: 5 Checks Before You Ship]]></title>
      <link>https://bhavikmehta.dev/blog/saas-pre-launch-audit-checklist</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/saas-pre-launch-audit-checklist</guid>
      <pubDate>Thu, 07 May 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[The five audits SaaS engineers skip before launch and pay for later: code reuse, security, performance, error handling, and cost exposure.]]></description>
      <category>Engineering</category>
    </item>
    <item>
      <title><![CDATA[AI Traffic Broke GitHub Twice in One Week]]></title>
      <link>https://bhavikmehta.dev/blog/ai-broke-github-twice-april-2026</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/ai-broke-github-twice-april-2026</guid>
      <pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Two GitHub incidents in April 2026 revealed what happens when AI agent traffic hits infrastructure built for human-pace commits. Here is the full breakdown.]]></description>
      <category>Engineering</category>
    </item>
    <item>
      <title><![CDATA[Salesforce Headless 360 Is the Most Important Platform Shift in 25 Years]]></title>
      <link>https://bhavikmehta.dev/blog/salesforce-headless-360-agentforce-end-of-browser</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/salesforce-headless-360-agentforce-end-of-browser</guid>
      <pubDate>Wed, 29 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Salesforce just made the browser optional. Here's why Headless 360 and Agentforce are about to reshape how software gets built, deployed, and consumed.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[Amazon Quick: AWS Launches Always-On Desktop AI]]></title>
      <link>https://bhavikmehta.dev/blog/amazon-quick-desktop-aws-ai</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/amazon-quick-desktop-aws-ai</guid>
      <pubDate>Tue, 28 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Amazon Quick is AWS's new desktop AI. It runs in the background, connects your files, calendar, and apps, and surfaces what matters before you even ask for it.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[MCP Toolbox for Databases: Wire AI Agents to Any DB]]></title>
      <link>https://bhavikmehta.dev/blog/google-mcp-toolbox-databases</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/google-mcp-toolbox-databases</guid>
      <pubDate>Mon, 27 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Google's MCP Toolbox for Databases connects AI agents to PostgreSQL, BigQuery, Spanner and more — with auth, connection pooling, and observability built in.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[The AI Agent Gold Rush: Miners and Shovel Sellers]]></title>
      <link>https://bhavikmehta.dev/blog/ai-agent-gold-rush</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/ai-agent-gold-rush</guid>
      <pubDate>Sun, 26 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Everyone's building AI agents in 2026. Most are shipping for-loops in a trench coat. Here's how to tell the difference—and when not to build at all.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[Anthropic's Mythos Finds 271 Firefox Security Bugs]]></title>
      <link>https://bhavikmehta.dev/blog/claude-mythos-mozilla-271-firefox-bugs</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/claude-mythos-mozilla-271-firefox-bugs</guid>
      <pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Mozilla patched 271 Firefox vulnerabilities found by Claude Mythos in a single pass — 12x more than the previous Claude model found. Here's what that actually means.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[Pretext: Faster Web Text Without DOM Reflow]]></title>
      <link>https://bhavikmehta.dev/blog/pretext-browser-text-rendering</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/pretext-browser-text-rendering</guid>
      <pubDate>Tue, 21 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Pretext is a 15KB library that measures and lays out text 300x faster by bypassing the DOM entirely. Here's why that matters.]]></description>
      <category>Engineering</category>
    </item>
    <item>
      <title><![CDATA[Vercel Breach 2026: The AI Tool That Opened the Door]]></title>
      <link>https://bhavikmehta.dev/blog/vercel-breach-ai-oauth-app-2026</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/vercel-breach-ai-oauth-app-2026</guid>
      <pubDate>Sun, 19 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[A compromised AI OAuth app breached Vercel in April 2026. Hackers are selling 580 employee records and API keys for $2M. Full breakdown and mitigation steps.]]></description>
      <category>Engineering</category>
    </item>
    <item>
      <title><![CDATA[Claude Opus 4.7: What's New and Why It Matters]]></title>
      <link>https://bhavikmehta.dev/blog/claude-opus-4-7-whats-new</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/claude-opus-4-7-whats-new</guid>
      <pubDate>Thu, 16 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Anthropic just dropped Claude Opus 4.7 — better vision, smarter coding, and a secret more powerful sibling. Here's what changed and what it means for you.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[Claude Mythos: The Model Anthropic Won't Release]]></title>
      <link>https://bhavikmehta.dev/blog/claude-mythos-anthropic-model</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/claude-mythos-anthropic-model</guid>
      <pubDate>Mon, 13 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Anthropic's Claude Mythos hits 93.9% SWE-bench and finds zero-days in every major OS — but you can't use it. Here's why, and what it means.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[LLM Calls to Autonomous Agents: Building with LangChain]]></title>
      <link>https://bhavikmehta.dev/blog/llm-to-agents-langchain</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/llm-to-agents-langchain</guid>
      <pubDate>Sat, 11 Apr 2026 00:00:00 GMT</pubDate>
      <description><![CDATA[Most LLM integrations plateau at single-turn Q&A. Here's how to build agents that reason, plan, and act across multi-step tasks using LangChain.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[Building an AI Code Review Tool with GPT-4]]></title>
      <link>https://bhavikmehta.dev/blog/building-ai-code-review</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/building-ai-code-review</guid>
      <pubDate>Wed, 15 Jan 2025 00:00:00 GMT</pubDate>
      <description><![CDATA[A deep dive into architecting an automated code review pipeline powered by GPT-4 — from prompt engineering to CI integration and handling edge cases at scale.]]></description>
      <category>AI</category>
    </item>
    <item>
      <title><![CDATA[Next.js Performance Patterns I Use on Every Project]]></title>
      <link>https://bhavikmehta.dev/blog/nextjs-performance-patterns</link>
      <guid isPermaLink="true">https://bhavikmehta.dev/blog/nextjs-performance-patterns</guid>
      <pubDate>Tue, 10 Dec 2024 00:00:00 GMT</pubDate>
      <description><![CDATA[Practical performance patterns for Next.js apps — from route-level code splitting and image optimization to server component strategies that cut bundle size in half.]]></description>
      <category>Engineering</category>
    </item>
  </channel>
</rss>