☕️ OpenAI's Ultrafast mode runs GPT-5.6 faster

Hi there, this is your daily ☕️ DevShot.

In today's DevShot:

⚡ OpenAI's Ultrafast mode runs GPT-5.6 faster

🤖 Gemini 3.7 Flash cuts price 50%

🛠️ Vercel opens its v0 AI app builder to developers

🔓 Node.js creator open-sources Durable Objects

📦 npm 12 disables install scripts by default

🇨🇳 China's Z.ai launches an open coding model to rival OpenAI

Plus: 🎁 5 other news you might like, 🛠️ 5 tutorials, 🧰 6 tools, and 📚 5 papers.

• OpenAI has launched GPT-5.6 Sol Ultrafast mode, which runs its frontier model at up to 750 output tokens per second, roughly 14x quicker than Standard processing, without dropping to a smaller or less capable model.
• The speedup comes from Cerebras' Wafer-Scale Engine and its 44GB of on-chip SRAM, cutting the data-movement bottlenecks that cap inference on GPU systems; it cleared Humanity's Last Exam's 2,500 questions in about 11 hours versus 78 for Fable 5.
• OpenAI pitches Ultrafast for incident response, coding, real-time support, and research iteration, and uses it internally to analyze logs during incidents, but Cerebras capacity is limited, so interested customers must apply and be vetted for workload fit.

• Google's Gemini 3.7 Flash ships at half the price of its predecessor while posting broad gains over 3.6 Flash across coding, web development, and reasoning over knowledge-heavy documents.
• On coding, it hits higher first-pass accuracy and stronger debugging and issue resolution, scoring 43.6% versus 34.4% on FrontierCode 1.1 Main and 65.3% versus 49.0% on DeepSWE v1.1.
• For UI generation it matches reference screenshots or design systems more closely, reaching a 1588 Elo on WebDev Arena, and jumps to 34% on the GDP.pdf document benchmark from 22%.

• Vercel has moved its v0 API to general availability, giving developers programmatic access to the AI app-building agent to send prompts, generate and edit application files, run them in a Sandbox, and get an embeddable preview URL.
• Each app is organized around a chat that tracks state, so follow-up messages reuse the same chat ID, while synchronous, asynchronous, and streaming requests expose individual agent actions like file edits, searches, and Bash commands.
• Apps can be created from GitHub repos, ZIP archives, or file sets, then deployed to a Vercel project, with MCP servers, up to three skills, and integrations for invoking v0 inside other agents via the AI SDK or eve framework.

• Ryan Dahl, creator of Node.js, has open-sourced celld, a self-hosted implementation of Cloudflare's Durable Objects and Workers that stays compatible with their JavaScript APIs while removing any dependence on Cloudflare's backend infrastructure.
• Written in Rust and JavaScript under Apache 2, celld swaps Cloudflare's backend for S3-compatible storage and the Tokio runtime, gives each object its own SQLite copy, and runs JavaScript, TypeScript, and WebAssembly-compiled Rust, Go, or Zig.
• Dahl estimates 100 resident cells cost ~$49/month on a DigitalOcean droplet versus $415 on Cloudflare, though Cloudflare counters that idle Durable Objects run about $21; notably, the GitHub page bans AI-generated contributions.

• npm 12 now blocks dependency install and lifecycle scripts from running by default, requiring developers to review pending scripts, approve trusted ones, and commit the resulting allowlist in package.json before builds proceed.
• The release also blocks implicit builds for packages with a build file, plus scripts from git, file, link and https tarball dependencies, and closes a path where a Git dependency could override the Git executable.
• Available behind warnings since npm 11.16.0, the change trails pnpm, yarn 4.10 and bun 1.3; researchers warn approval fatigue could turn deny-by-default into a click-through prompt, as scripts drove ~53% of malicious npm attacks last year.

• Zhipu has released GLM-5.3, which it claims is now the strongest open-weights coding model, with the largest performance gains showing up in agent-based coding tasks compared to its predecessor.
• Built on the same base as GLM-5.2, all improvements come from extended post-training, including cybersecurity data that let the model chain exploitation steps and uncover 2,436 vulnerabilities across 269 projects, some 40 years old.
• The model is available now via the GLM Coding Plan and works with agents like ZCode, Claude Code, and OpenCode, with weights slated to go open source in two weeks once security reviews finish.