Trusted Publishing - RubyGems Guides
Protecting rubygems.org from the outside in: DoS prevention and compromised passwords - RubyGems Blog
GitHub - hashicorp/go-version: A Go (golang) library for parsing and verifying versions and version constraints.
A Go (golang) library for parsing and verifying versions and version constraints. - hashicorp/go-version
Stamp It! All Programs Must Report Their Version
Recently, during a production incident response, I guessed the root cause of an outage correctly within less than an hour (cool!) and submitted a fix just to rule it out, only to then spend many hours fumbling in the dark because we lacked visibility into version numbers and rollouts… 😞
GitHub - Camil-H/cli-agent-lint: Is your CLI ready for AI agents? Automated checks to ensure optimum agentic CLI use: don't block agents, don't waste tokens, ensure safe use.
Is your CLI ready for AI agents? Automated checks to ensure optimum agentic CLI use: don't block agents, don't waste tokens, ensure safe use. - Camil-H/cli-agent-lint
Solod: Go can be a better C
Announcing Fuik: a webhook engine for Rails
Fuik automatically captures webhook payloads and provides a beautiful UI to process them.
GitHub - Rails-Designer/fuik: Rails engine that catches and stores webhooks from any provider · GitHub
Rails engine that catches and stores webhooks from any provider - Rails-Designer/fuik
Mitigating supply chain attacks | pnpm
Sometimes npm packages are compromised and published with malware. Luckily, there are companies like [Socket], [Snyk], and [Aikido] that detect these compromised packages early. The npm registry usually removes the affected versions within hours. However, there is always a window of time between when the malware is published and when it is detected, during which you could be exposed. Fortunately, there are some things you can do with pnpm to minimize the risks.
Executable - The Elegant Bundler for Libraries
The Elegant Bundler for Libraries
npm trusted publishing now supports CircleCI - GitHub Changelog
npm trusted publishing now supports CircleCI as an OIDC provider, joining GitHub Actions and GitLab CI/CD. Maintainers publishing from CircleCI workflows can now eliminate stored credentials entirely and authenticate directly…
You can't cancel a JavaScript promise (except sometimes you can) - Inngest Blog
A promise that never resolves is a surprisingly clean way to interrupt an async function.
Hegel
A universal property-based testing protocol and family of libraries, built on Hypothesis
Why Senior Engineers Choose Boring Go Over Exciting Rust
How a $3.2M production disaster taught us that technical excellence doesn’t always align with...
LalitMaganti/syntaqlite: A parser, formatter, validator, and language server for SQLite SQL. Built on SQLite's own grammar and tokenizer
A parser, formatter, validator, and language server for SQLite SQL. Built on SQLite's own grammar and tokenizer - LalitMaganti/syntaqlite
Perfetto - System profiling, app tracing and trace analysis
AIコーディングが精神を壊す|erukiti
いわゆるAI疲れは、2024年ごろから言われはじめ、2025年から深刻化しはじめた。AI疲れには、キャッチアップ疲れと、判断疲れの二種類があると言われている。(2024年ころのAI疲れはキャッチアップ疲れの方が比率としては大きかった気がする。) AIコーディングは特にAI疲れを引き起こしやすい。 今のAIは、人間に良く似ているが、全く違う知性である 「判断」が、大量に高速に、そして強度の高く、常に求められるようになった。そして油断すると結果だけを提示されるので、判断するための根拠・材料を集めるコストがバカにならない AI時代は、人間からアウトプットの場を奪う
You, too, can make a boilerplate
Adapt your own patterns and processes into a reusable piece of content.
Open source security at Astral
Insights and guidance from our engineering team on how Astral secures its tools.
Canvas 内に直接 HTML を描画できる HTML in Canvas API について
HTML in Canvas API は WICG で提案されている API で、Canvas 内に直接 HTML を描画できるようにするものです。現在の `` 要素にはリッチテキストや HTML コンテンツを描画する標準的な方法が存在しないという課題があります。この記事では HTML in Canvas の使用方法やユースケースについて説明します。
大規模にエージェントを構築する Claude Managed Agents を試してみた
Claude Managed Agents は Claude を自律的なエージェントとして動作させるためのハーネスとインフラストラクチャーを提供します。長時間かかるタスクや非同期のタスクを実行するために使用するのが想定されています。この記事では実際に Claude Managed Agents を試してみた内容を紹介します。
Maestri · A new kind of terminal app
Orchestrate multiple AI agents, terminals, sketches and notes on one infinite canvas. Built for macOS.
aallan/vera: Vera: a programming language designed for LLMs to write
Vera: a programming language designed for LLMs to write - aallan/vera
Vera — A language designed for machines to write
A programming language where verification is a first-class citizen. Mandatory contracts, algebraic effects, typed slot references. Compiles to WebAssembly — runs at the CLI or in any browser.
The advisor strategy: Give Sonnet an intelligence boost with Opus | Claude
Pair Opus as an advisor with Sonnet or Haiku as an executor, and get Opus-level intelligence in your agents at a fraction of the cost.
DHH’s new way of writing code
David Heinemeier Hansson shares why he shifted to an agent-first AI workflow, and what it means for how software is built and who builds it.
Cycles of disruption in the tech industry: with software pioneers Kent Beck & Martin Fowler
Parallels between technology shifts in the past decades and what we’re seeing with AI. Also: ways to avoid burnout when working with AI agents, TDD back in style, and more.
Anthropic’s Project Glasswing—restricting Claude Mythos to security researchers—sounds necessary to me
Anthropic didn’t release their latest model, Claude Mythos (system card PDF), today. They have instead made it available to a very restricted set of preview partners under their newly announced …
Project Glasswing: Securing critical software for the AI era \ Anthropic
A new initiative to secure the world’s most critical software and give defenders a durable advantage in the coming AI-driven era of cybersecurity.
Claude Mythos Preview \ red.anthropic.com
