The Download: Bun acquired by Anthropic, React2Shell, GPT 5.2 & more

Quick Overview

The developer tool runtime Bun was acquired by AI company Anthropic, which plans to use Bun as infrastructure for Claude Code and future AI coding products, while the Model Context Protocol (MCP) was donated to the Linux Foundation's Agentic AI Foundation to ensure its vendor-neutral future; additionally, a critical Remote Code Execution (RCE) vulnerability, CVE-2025-55182, affecting server-side use of ReactJS in Next.js was disclosed and patched, and OpenAI's GPT-5.2 model became available in public preview for GitHub Copilot.

Key Points: Bun, the JavaScript runtime, has been acquired by Anthropic, which will use it to power Claude Code and future AI coding products. The Model Context Protocol (MCP) was donated by Anthropic to the Linux Foundation's new Agentic AI Foundation (AAIF) to maintain its open-source, vendor-neutral status. A critical RCE vulnerability, CVE-2025-55182 (React2Shell), affecting server-side use of ReactJS in Next.js was disclosed and patched, with proof-of-concepts already circulating. OpenAI's GPT-5.2 model is now in public preview for GitHub Copilot, focusing on long context and front-end UI generation for Copilot Pro, Plus, Business, and Enterprise tiers. GitHub Project Spotlight featured 'Just A Job App,' an open-source tool for tracking job applications automatically from email, and 'SummerCart64,' an open-source N64 flashcart project. The creator of Marmite, a static site generator, was highlighted for making a simple, developer-friendly tool that reads Markdown files and outputs static HTML. The video concluded with the host sharing her personal picks of 2025, including the F1 Race Replay Python application for visualizing Formula 1 telemetry.

Context: The video presents a roundup of recent news and highlights from the developer and open-source community, covering major announcements in AI tooling, software security, and notable open-source projects. Host Christina Warren provides updates on Bun's acquisition, the status of the Model Context Protocol (MCP), a critical security vulnerability in Next.js, and new AI model releases, concluding with project spotlights.