直近1週間の更新
3/14 (土)

72 Malicious Open VSX Extensions Linked to GlassWorm Campaign Now Using Transitive Dependencies
Socket
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.
10時間前

1M context is now generally available for Opus 4.6 and Sonnet 4.6 Simon Willison's Weblog
<p><strong><a href="https://claude.com/blog/1m-context-ga">1M context is now generally available for Opus 4.6 and Sonnet 4.6</a></strong></p>Here's what surprised me:</p><blockquote><p>Standard pricing now applies across the full 1M window for both models, with no long-context premium.</p></blockquote><p>OpenAI and Gemini both <a href="https://www.llm-prices.com/#sel=gemini-3-1-pro-preview-200k%2Cgpt-5.4-272k%2Cgemini-3-...
13時間前

Quoting Craig Mod Simon Willison's Weblog
<blockquote cite="https://craigmod.com/essays/software_bonkers/"><p>Simply put: It’s a big mess, and no off-the-shelf accounting software does what I need. So after years of pain, I finally sat down last week and started to build my own. It took me about five days. I am now using the best piece of accounting software I’ve ever used. It’s blazing fast. Entirely local. Handles multiple currencies and pulls daily (historical) conversion rates. It’s able to ingest any CSV I throw at it ...
14時間前
3/13 (金)

Moving From Moment.js To The JS Temporal API
Articles on Smashing Magazine — For Web Designers And Developers
The way JavaScript handles time has evolved significantly, from the built-in `Date` API to Moment.js and now Temporal. The new standard fills gaps in the original `Date` API while addressing limitations found in Moment and other libraries. Joe Attardi shares practical “recipes” for migrating Moment-based code to the new Temporal API.
19時間前

The Index: Issue #172
Piccalilli - Everything
NES.cssA NES-themed CSS framework and it looks exactly as you'd expect it to.An immersive personal siteWe're all out here building blogs, while Jonathan is here building an immersive first-person world as a personal site.Your AI slop bores meIn a world looming with the threat of ai stealing your job, save humanity by stealing AI's job.A very interesting person-to-person "chat bot".BonsplitA handy looking tabs and layout splitting tool for macOS power users.BaseWatchWant to get alerted as soon as
20時間前

新時代のフロントエンドツールチェイン Vite+ を試してみた
azukiazusa のテックブログ2
Vite+ は Vite, Vitest, Oxlint, Oxfmt, Rolldown, tsdown といった人気のツールを統合し、開発, テスト, ビルド, リント, フォーマットなどのフロントエンド開発に必要な機能を1つのツールチェインで提供する新しいフロントエンドツールチェインです。この記事では実際に Vite+ をインストールして、プロジェクトのセットアップから開発、テスト、ビルドまでの一連の流れを試してみました。
21時間前

Shopify/liquid: Performance: 53% faster parse+render, 61% fewer allocations Simon Willison's Weblog
<p><strong><a href="https://github.com/Shopify/liquid/pull/2056">Shopify/liquid: Performance: 53% faster parse+render, 61% fewer allocations</a></strong></p>PR from Shopify CEO Tobias Lütke against Liquid, Shopify's open source Ruby template engine that was somewhat inspired by Django when Tobi first created it <a href="https://simonwillison.net/2005/Nov/6/liquid/">back in 2005</a>.</p><p>Tobi found dozens of new performance micro-opti...
1日前

データサイエンティスト一年目が学ぶこと
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
はじめに こんにちは。メディア統括本部 Data Science Center(DSC)の土井 悠生 ...
1日前

実装プラン作りの難しさを LLM × Linear で解決する ― Project壁打ちSkillの紹介
LegalOn Technologies Engineering Blog
はじめに こんにちは。プロダクト開発基盤チームのYoshioka(@tsuyogoro)です。 LLMによるコーディングが当たり前になり、チームでも人力でコードを書く場面は減ってきました。一方で、手戻りが起きやすいのは実装そのものより「実装の前」だという感覚は残っています。 何をどう分解するか どの順序で進めるか 依存関係や完了条件をどう定義するか ここが曖昧なままだと、あとから設計や優先順位が崩れ、「進んでいるのに進んでいない」状態になりがちです。こうした経験に心当たりのある方も多いのではないでしょうか。さらに計画フェーズは認知負荷が高く、人間がボトルネックになりやすい傾向があります。 そこ…
1日前

Women’s History Month: meet Nicole Scherbina, Senior Staff Manager of Product Operations
Blog on 1Password Blog
Women’s History Month is a time to recognize the women who are not only advancing their fields, but reshaping what leadership means within them. The theme guiding this year’s Women at 1Password Employee Resource Group (ERG), Leading the Change: Women Shaping a Sustainable Future, reflects that responsibility.One of the women leading that change within 1Password is Nicole Scherbina, Senior Staff Manager of Product Operations and a leader within our Women at 1Password ERG. Her perspective on leade
1日前

Atomic CRM March 2026 Updates
Marmelab Blog
Discover what's new in Atomic CRM 1.5, including SSO support, a new MCP server for AI assistants, enhanced mobile UX, and much more.
1日前

The NGINX Kubernetes Open Source Roadmap: First Half of 2026
NGINX Community Blog
Hello to our Kubernetes community! Over the past few months, the F5 NGINX Community and F5 NGINX Kubernetes teams have been working on reinvigorating our open source presence. One of our new initiatives involves having public roadmaps available through GitHub Projects boards for both the NGINX Ingress Controller and NGINX Gateway Fabric project! We also […]
1日前

Release Notes for Safari Technology Preview 239
WebKit
Safari Technology Preview Release 239 is now available for download for macOS Tahoe and macOS Sequoia.
1日前

MALUS - Clean Room as a Service
Simon Willison's Weblog
<p><strong><a href="https://malus.sh/">MALUS - Clean Room as a Service</a></strong></p>Brutal satire on the whole vibe-porting license washing thing (<a href="https://simonwillison.net/2026/Mar/5/chardet/">previously</a>):</p><blockquote><p>Finally, liberation from open source license obligations.</p><p>Our proprietary AI robots independently recreate any open source project from scratch. The result? <strong>Leg...
1日前

Coding After Coders: The End of Computer Programming as We Know It Simon Willison's Weblog
<p><strong><a href="https://www.nytimes.com/2026/03/12/magazine/ai-coding-programming-jobs-claude-chatgpt.html?unlocked_article_code=1.SlA.DBan.wbQDi-hptjj6">Coding After Coders: The End of Computer Programming as We Know It</a></strong></p>Epic piece on AI-assisted development by Clive Thompson for the New York Times Magazine, who spoke to more than 70 software developers from companies like Google, Amazon, Microsoft, Apple, plus other individuals including ...
2日前

Quoting Les Orchard Simon Willison's Weblog
<blockquote cite="https://blog.lmorchard.com/2026/03/11/grief-and-the-ai-split/"><p>Here's what I think is happening: AI-assisted coding is exposing a divide among developers that was always there but maybe less visible.</p><p>Before AI, both camps were doing the same thing every day. Writing code by hand. Using the same editors, the same languages, the same pull request workflows. The craft-lovers and the make-it-go people sat next to each other, shipped the same produc...
2日前

Continuous AI for accessibility: How GitHub transforms feedback into inclusion
The GitHub Blog
AI automates triage for accessibility feedback, allowing us to focus on fixing barriers—turning a chaotic backlog into continuous, rapid resolutions.The post Continuous AI for accessibility: How GitHub transforms feedback into inclusion appeared first on The GitHub Blog.
2日前
3/12 (木)

What to Expect During the Free Trial Period of CKEditor
CKEditor Ecosystem Blog
Use your CKEditor 14-day trial to test AI, collaboration, and export. Learn what’s included, how to get a license key, and what changes after it ends.
2日前

Collaborative Markdown
Frontend Masters Boost RSS Feed
Just two short long years ago, I wrote an article here called Document Collaboration (with Comments!). As a long-time blogger who helps others with their articles too, I’ve played with lots of tools to help with this flow. I put some options in that post, but none are perfect. The big names come with baggage […]
2日前

6 Malicious Packagist Themes Ship Trojanized jQuery and FUNNULL Redirect Payloads
Socket
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.
2日前

How to Monitor and Audit AI Decisions in a CI/CD Pipeline
Semaphore
As AI becomes part of CI/CD workflows, new questions emerge: When AI participates in pipeline decisions — whether for test selection, risk scoring, anomaly detection, or deployment approval — observability and auditability become critical. This article explains how to monitor and audit AI-driven decisions in CI/CD pipelines in a way that preserves traceability, rollback safety, […]The post How to Monitor and Audit AI Decisions in a CI/CD Pipeline appeared first on Semaphore.
2日前

Building dynamic toggletips using anchored container queries
Piccalilli - Everything
To add to the container query options that we already have (size queries, style queries, scroll-state queries), as well as the container query range syntax and many upgrades to all of the above, we can now use anchored container queries from Chrome 143.Chrome’s announcement post demonstrates how, if we were using anchor positioning, we could use anchored container queries to query the currently active fallback position (if any). They’ve provided a little demo in the post where a toggletip caret
2日前

CSS によるスクロールトリガーアニメーション
azukiazusa のテックブログ2
要素が画面内に入った時にアニメーションを開始するスクロールトリガーアニメーションは、これまでは JavaScript を使用して `Intersection Observer API` を利用する方法が一般的でした。JavaScript を使わずに CSS だけで実装を完結できるようになる `animation-trigger` という新しい CSS プロパティが登場しました。
2日前

Beyond `border-radius`: What The CSS `corner-shape` Property Unlocks For Everyday UI
Articles on Smashing Magazine — For Web Designers And Developers
For years, developers have been hacking around the limitations of `border-radius`, using clip-path, SVG masks, and fragile workarounds just to get anything other than round corners. The new `corner-shape` property finally changes that, opening the door to beveled, scooped, and squircle corners.
2日前

Announcing Cloudflare Account Abuse Protection: prevent fraudulent attacks from bots and humans
The Cloudflare Blog
Blocking bots isn’t enough anymore. Cloudflare’s new fraud prevention capabilities — now available in Early Access — help stop account abuse before it starts.
2日前

GitHub availability report: February 2026
1
The GitHub Blog
In February, we experienced six incidents that resulted in degraded performance across GitHub services.The post GitHub availability report: February 2026 appeared first on The GitHub Blog.
2日前

GCVE Launches Decentralized Publishing Ecosystem for Vulnerability Disclosure
Socket
The GCVE initiative operated by CIRCL has officially opened its publishing ecosystem, letting organizations issue and share vulnerability identifiers without routing through a central authority.
2日前

共変量を考慮した顧客利用率モデリング ― 分位点回帰によるTier設計
LegalOn Technologies Engineering Blog
はじめに はじめまして、株式会社LegalOn Technologies(職種: データ分析)の上野と申します。現在、データ分析チームに所属し、データとML/AIを用いた営業支援活動を行っております。 2つの既存サービス「LegalForce」と「LegalForceキャビネ」がひとつになり、次世代の法務AI「LegalOn」として産声を上げてから、早いもので2年が経とうとしています。 プロダクトの統合によって、利便性は大きく向上しました。と同時に、サービス形態の変更により、お客様との契約方法も大きくアップデートされております。この新しい環境の中で、弊社営業部門がお客様と密接で継続的なコミュニ…
2日前

CloudCannon Joins Astro as an Official CMS Partner
The Astro Blog
Announcing CloudCannon as an official Astro partner, sponsoring $4,000 each month toward the ongoing open-source maintenance and development of Astro.
2日前

App Hosting has in-console environment variables and faster builds
Firebase Blog
Manage environment variables in the Firebase console, and learn about a small change our engineering team made to improve build times for everyone.
2日前

How I use generative AI on this blog Evan Hahn (dot com)
Inspired by others, I’m publishing how I use generative AI to write this little blog.General feelings on generative AIGenerative AI, like any technology, has tradeoffs. I think the cons far outweigh the pros. In other words, the world would be better off without generative AI.Despite this belief, I use it. I’m effectively forced at work, but I also use LLMs to help write this personal blog. I think they can produce better writing if used correctly.Also: I want to be critical of this technology.
2日前

Taskfile: The Modern Alternative to Makefile That Will Change Your Workflow
Marmelab Blog
Taskfile is a tool inspired by Makefile written in Go. It was designed to address common problems encountered with Makefile, while offering a simpler and more readable syntax.
2日前

Nuxt 4.4
2
The Nuxt Blog
Nuxt 4.4 brings custom useFetch/useAsyncData factories, vue-router v5, a new accessibility announcer, typed layout props, build profiling, smarter payload handling, and much more.
2日前

Best SCIM providers for automated user provisioning in 2026
WorkOS Blog
A 2026 guide to the best SCIM providers for SaaS teams that need enterprise ready user provisioning.
2日前

Sorting algorithms Simon Willison's Weblog
<p><strong><a href="https://tools.simonwillison.net/sort-algorithms">Sorting algorithms</a></strong></p>Today in animated explanations built using Claude: I've always been a fan of animated demonstrations of sorting algorithms so I decided to spin some up on my phone using Claude Artifacts, then added Python's timsort algorithm, then a feature to run them all at once. Here's the <a href="https://claude.ai/share/2c09f6f7-57ed-47eb-af2e-fc39ddc4c39f">full...
2日前

Form-Associated Custom Elements in Practice
Frontend Masters Boost RSS Feed
When you make a Web Component for a form element, you've got a bit of extra work to do to make sure they participate on the form in expected ways.
2日前

Addressing GitHub’s recent availability issues
The GitHub Blog
GitHub recently experienced several availability incidents. We understand the impact these outages have on our customers and are sharing details on the stabilization work we’re prioritizing right now.The post Addressing GitHub’s recent availability issues appeared first on The GitHub Blog.
2日前

Introducing Agentic Observability in NGINX: Real-time MCP Traffic Monitoring
NGINX Community Blog
Today we’re announcing the availability of a new open source module that enables real-time insights into Model Context Protocol (MCP) traffic processed by NGINX. This capability empowers NGINX operators to trace and monitor activity from AI agents, enabling the ability to spot error-prone agents, high latency MCP tools, throughput disparities between MCP servers, and much […]
3日前
3/11 (水)

Quoting John Carmack Simon Willison's Weblog
<blockquote cite="https://twitter.com/ID_AA_Carmack/status/1405932642005041153"><p>It is hard for less experienced developers to appreciate how rarely architecting for future requirements / applications turns out net-positive.</p></blockquote><p class="cite">&mdash; <a href="https://twitter.com/ID_AA_Carmack/status/1405932642005041153">John Carmack</a>, a tweet in June 2021</p> <p>Tags: <a href="https://simonwillison.net/tags/john-car...
3日前

Abusing Customizable Selects
CSS-Tricks
Let’s go over a few demos using the new customizable <select> feature that may be wild, but also give us a great chance to learn new things in CSS.Abusing Customizable Selects originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
3日前

Node.js Moves to Annual Major Releases Starting with Node 27
Socket
The project is retiring its odd/even release model in favor of a simpler annual cadence where every major version becomes LTS.
3日前

Slashing agent token costs by 98% with RFC 9457-compliant error responses
The Cloudflare Blog
Cloudflare now returns RFC 9457-compliant structured Markdown and JSON error payloads to AI agents, replacing heavyweight HTML pages with machine-readable instructions. This reduces token usage by over 98%, turning brittle parsing into efficient control flow.
3日前

AI Security for Apps is now generally available
The Cloudflare Blog
Cloudflare AI Security for Apps is now generally available, providing a security layer to discover and protect AI-powered applications, regardless of the model or hosting provider. We are also making AI discovery free for all plans, to help teams find and secure shadow AI deployments.
3日前

The Index: Issue #171
Piccalilli - Everything
The value of z-indexA really pragmatic and systematic approach to z-index here.How to start a record collectionSome great recommendations here and as Mike says, "Congrats. I’m sorry."You probably shouldn’t be annotating focus orderA delightfully thorough piece by Eric here. Not many do it better.Animated dark mode transition with modern CSSDid you know that you can animate @property? You will by the end of this article.5 quick tips for giving better presentationsPlenty of very good advice here f
3日前

「Node.js は偶数バージョンが LTS」ではなくなる
mizdra's blog
長らく Node.js では偶数バージョン (v22, v24 など) が LTS としてメンテナンスされてました。しかし 2027/4 リリース予定の v27 以降はそうではなくなります。Node.js 公式ブログで、v27 以降に取り入れられる新しいリリーススケジュールについて説明されています。 Node.js — Evolving the Node.js Release Schedule かいつまんで説明すると: major リリースは年2回から年1回となる 奇数番号だけでなく全てのリリースが LTS となる 早期テスト目的で利用されてた奇数リリースは alpha チャンネルで代替される…
3日前

Chrome 147 beta
developer.chrome.com: Blog
Get a preview of the next Chrome release with this post detailing the features in the current beta.
3日前

When to use WebMCP and MCP
developer.chrome.com: Blog
Learn the different purposes of WebMCP and MCP, and how to use them together for agentic experiences.
3日前

創発的なコミュニケーションが生まれる新感覚の一日!React Tokyo フェス 2026 イベントレポート LINEヤフー Tech Blog (LY Corporation Tech Blog
皆さんこんにちは。花谷(@potato4d)です。今回は2月28日に開催された React Tokyo フェス 2026 について、LINEヤフーとしてスポンサーを行いました。本記事では、イベント本編...
3日前

社内におけるAI駆動開発の知見共有をテーマとしたLINEヤフー Development with Agents Meetup #1 東京を開催しました LINEヤフー Tech Blog (LY Corporation Tech Blog
2026年2月17日、当社主催の「LINEヤフー Development with Agents Meetup #1」を紀尾井町オフィスとオンラインの同時開催で実施しました。会場参加は定員100名で満...
3日前

Temporal: The 9-Year Journey to Fix Time in JavaScript Bloomberg JS Blog
Welcome to our blog! I'm Jason Williams, a senior software engineer on Bloomberg's JavaScript Infrastructure and Terminal Experience team. Today the Bloomberg Terminal runs a lot of JavaScript. Our team provides a JavaScript environment to engineers across the company.Bloomberg may not be the first company you think of when discussing JavaScript. It certainly wasn't for me in 2018 before I worked here. Back then, I attended my first TC39 meeting in London, only to meet some Bloomberg engineers w
3日前

Why devtools startups hire Evil Martians
Evil Martians
Evil Martians is a developer tools consultancy. Founded in 2006, we work with about 40 early-stage startups a year, mostly seed to Series B. We helped bolt.new scale from zero to $40M+ ARR in 5 months. Teleport and Tines reached unicorn status with Martians on their teams.
3日前

Oxlint JS Plugins Alpha
The Oxidation Compiler Blog
JavaScript plugins for Oxlint have reached alpha - and we expect 80% of ESLint users can now switch to Oxlint and have it "just work".Oxlint already has over 650 popular lint rules implemented in Rust, running at native speed. JS plugins fill in the gaps - an ESLint-compatible plugin API, letting you run existing ESLint plugins and write your own custom rules, all within Oxlint. Native performance for most rules, full flexibility for the rest.Since the first technical preview last year, we've fi
3日前

API security best practices for the age of AI agents
WorkOS Blog
Autonomous agents are becoming first-class API consumers. Your authorization model needs to treat them that way.
3日前

An Introduction to React Server Components
DebugBear Blog
React Server Components (RSC) render exclusively on the server and are never included in the bundle. RSCs can improve web performance and Largest Contentful Paint by shipping less JavaScript to the browser.
3日前

Introducing view-transitions-mock: A non-visual Polyfill for Same-Document View Transitions Bram.us
View Transitions are a powerful Modern Web feature allow for smooth seamless animated transitions two between different states of a web page. They can make for a much more pleasant user experience, but as with any new web platform feature, browser support is not yet fully universal so you need to add some fallback logic to your code.view-transitions-mock bridges that gap. It is a spec-compliant JavaScript implementation of Same-Document View Transitions that polyfills the entire JavaScript API s
3日前

コーディングガイドライン運用をAIで自動化し、レビュー知見を資産化する
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
はじめに AmebaLIFE事業本部でWebフロントエンドエンジニアをしている湯本航基(@yu_3i ...
3日前

AI should help us produce better code Simon Willison's Weblog
<p><em><a href="https://simonwillison.net/guides/agentic-engineering-patterns/">Agentic Engineering Patterns</a> &gt;</em></p> <p>Many developers worry that outsourcing their code to AI tools will result in a drop in quality, producing bad code that's churned out fast enough that decision makers are willing to overlook its flaws.</p><p>If adopting coding agents demonstrably reduces the quality of the code and features you are producing, ...
3日前

5 Malicious Rust Crates Posed as Time Utilities to Exfiltrate .env Files
Socket
Published late February to early March 2026, these crates impersonate timeapi.io and POST .env secrets to a threat actor-controlled lookalike domain.
3日前

The era of “AI as text” is over. Execution is the new interface.
The GitHub Blog
AI is shifting from prompt-response interactions to programmable execution. See how the GitHub Copilot SDK enables agentic workflows directly inside your applications.The post The era of “AI as text” is over. Execution is the new interface. appeared first on The GitHub Blog.
3日前

Goodbye innerHTML, Hello setHTML
Frontend Masters Boost RSS Feed
The new .setHTML() method in JavaScript, part of the Sanitizer API, can be a one-to-one replacement for .innerHTML(), making sites more secure from XSS attacks. I think that’s pitch-perfect feature branding from Mozilla on this: Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148. Listen to Frederik Braun go deep into this on ShopTalk […]
3日前
3/10 (火)

What Metrics Should You Use to Evaluate AI in Your CI/CD Pipeline?
Semaphore
AI is increasingly being integrated into CI/CD pipelines. It can suggest pipeline changes, optimize test selection, detect flaky tests, generate YAML, or even assist with deployment decisions. But before adopting AI-assisted CI/CD workflows, there’s a more important question: How do you know if AI is actually improving your pipeline? Without measurable outcomes, AI becomes another […]The post What Metrics Should You Use to Evaluate AI in Your CI/CD Pipeline? appeared first on Semaphore.
4日前

Investigating multi-vector attacks in Log Explorer
The Cloudflare Blog
Log Explorer customers can now identify and investigate multi-vector attacks. Log Explorer supports 14 additional Cloudflare datasets, enabling users to have a 360-degree view of their network.
4日前

Building a security overview dashboard for actionable insights
The Cloudflare Blog
Cloudflare's new Security Overview dashboard transforms overwhelming security data into prioritized, actionable insights, empowering defenders with contextual intelligence on vulnerabilities.
4日前

Building Dynamic Forms In React And Next.js
Articles on Smashing Magazine — For Web Designers And Developers
Some forms stay UI, while others quietly become rule engines. Here’s why these two different approaches exist and how to choose between them.
4日前

NGINX Community Spotlight: An HTML-to-Markdown Module for the AI Web, Built in Rust
NGINX Community Blog
The NGINX plugin community has always been prolific, and sometimes a contributor builds something that lands at the intersection of a real problem and a clean architectural instinct. That is what Kang did with nginx-markdown-for-agents, a self-hostable NGINX dynamic module described in a recent DEV post. The module returns a Markdown version of an HTML […]
4日前

New in Chrome 146
developer.chrome.com: Blog
Scroll-triggered animations, Scoped custom element registries, Sanitizer API, and more.
4日前

What's new in DevTools (Chrome 146)
developer.chrome.com: Blog
Adopted Style Sheets, Console history, and DevTools MCP with --slim mode, memory snapshots, and new A11y/LCP skills.
4日前

Translating risk insights into actionable protection: leveling up security posture with Cloudflare and Mastercard
The Cloudflare Blog
Cloudflare will be integrating Mastercard’s RiskRecon attack surface intelligence capabilities to help you eliminate Internet-facing blind spots while continuously monitoring and closing security gaps.
4日前

第58回情報科学若手の会 参加レポート:社内のネットワークでの取り組みについて発表しました LINEヤフー Tech Blog (LY Corporation Tech Blog
こんにちは、ソフトウェアエンジニアの多根(@SEED0228777)です。普段は、検索領域で地域情報検索システムのためのプラットフォームを開発・運用しております。2025年10月11日から13日の3日...
4日前

OpenClaw Advisory Surge Highlights Gaps Between GHSA and CVE Tracking
Socket
A recent burst of security disclosures in the OpenClaw project is drawing attention to how vulnerability information flows across advisory and CVE systems.
4日前

Astro 6.0
66
The Astro Blog
Astro 6 is here with a refactored dev server, an experimental Rust compiler, live content collections, CSP, and more.
4日前

Source Maps: Shipping Features Through Standards
2Bloomberg JS Blog
Source maps are a vital part of modern web development. Today, we have an official standard, a large group of members, and many exciting features in development! But it wasn't always this way.It may surprise you to learn that, for years, there was no official standard describing the source map format. On one hand, it is incredible that for 10 years, bundlers, browsers, and devtools worked together with only a shared Google Doc between them! On the other hand, it became impossible to add new feat
4日前

How to wrangle SaaS contract renewals
Blog on 1Password Blog
SaaS contract renewals have a way of sneaking up on IT and Finance teams. One day, everything is running fine. The next, a renewal notice hits your inbox, usually with little context, limited time, and no clear answer to the most important questions: Who’s using this? Do we still need it? And are we paying for more than we should?For many organizations, renewals are reactive events instead of strategic decisions. That’s how SaaS spend compounds.The problem isn’t negotiation skills or vendor mana
4日前

OpenAPI + Fastify: let the contract build your server
Evil Martians
Wire your OpenAPI contract into a Node.js Fastify backend with auto-generated routes, typed handlers, and request validation—no manual route definitions, no type drift, no integration surprises.
4日前

How to add auth to your Replit app with WorkOS
WorkOS Blog
A step-by-step tutorial to adding authentication to your Replit app with WorkOS AuthKit.
4日前

The developer’s guide to JWKS
WorkOS Blog
A complete reference to JSON Web Key Sets: structure, algorithms, endpoints, and key rotation.
4日前

Expanding Uptime Monitoring Down The Stack: ICMP Monitors Are Now Available In Checkly
Checkly Blog: Monitoring Insights & Trends
Checkly's ICMP monitors ping any host or IP to measure reachability, latency, and packet loss, available on all plans and fully integrated with Monitoring as Code.
4日前

Introducing the Polar Signals VS Code Extension
Polar Signals's Blog RSS Feed
See CPU time, memory allocations, and other profiling metrics as inline annotations directly in your source code.
4日前

The Enforced Accessibility of the Geolocation Element
Frontend Masters Boost RSS Feed
It's a strange situation where some CSS is disallowed, some is allowed but breaks the button, and some is capped.
5日前

Under the hood: Security architecture of GitHub Agentic Workflows
2
The GitHub Blog
GitHub Agentic Workflows are built with isolation, constrained outputs, and comprehensive logging. Learn how our threat model and security architecture help teams run agents safely in GitHub Actions. The post Under the hood: Security architecture of GitHub Agentic Workflows appeared first on The GitHub Blog.
5日前

Production query plans without production data Simon Willison's Weblog
<p><strong><a href="https://boringsql.com/posts/portable-stats/">Production query plans without production data</a></strong></p>Radim Marek describes the new <a href="https://www.postgresql.org/docs/current/functions-admin.html#FUNCTIONS-ADMIN-STATSMOD"><code>pg_restore_relation_stats()</code> and <code>pg_restore_attribute_stats()</code> functions</a> that were introduced <a href="https://www.postgresql.org/docs/current...
5日前
3/9 (月)

How to Monitor and Optimize CI Build Performance
Semaphore
CI build performance directly impacts developer productivity. When builds are slow, feedback loops stretch, context switching increases, and delivery slows down. Improving CI performance isn’t just about faster machines. It requires visibility, measurement, and disciplined test automation practices. This guide explains how to monitor CI performance effectively and how to optimize it without sacrificing reliability. […]The post How to Monitor and Optimize CI Build Performance appeared first on Se
5日前

The Value of z-index
CSS-Tricks
How we look at the stacking order of our projects, how we choose z-index values, and more importantly, the implications of those choices.The Value of z-index originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
5日前

Fixing request smuggling vulnerabilities in Pingora OSS deployments
The Cloudflare Blog
Today we’re disclosing request smuggling vulnerabilities when our open source Pingora service is deployed as an ingress proxy and how we’ve fixed them in Pingora 0.8.0.
5日前

Active defense: introducing a stateful vulnerability scanner for APIs
The Cloudflare Blog
Cloudflare’s new Web and API Vulnerability Scanner helps teams proactively find logic flaws. By using AI to build API call graphs, we identify vulnerabilities that standard defensive tools miss.
5日前

Perhaps not Boring Technology after all Simon Willison's Weblog
<p>A recurring concern I've seen regarding LLMs for programming is that they will push our technology choices towards the tools that are best represented in their training data, making it harder for new, better tools to break through the noise.</p><p>This was certainly the case a couple of years ago, when asking models for help with Python or JavaScript appeared to give much better results than questions about less widely used languages.</p><p>With <a href="http...
5日前

Persuasive Design: Ten Years Later
Articles on Smashing Magazine — For Web Designers And Developers
Many product teams still lean on usability improvements and isolated behavioral tweaks to address weak activation, drop-offs, and low retention – only to see results plateau or slip into shallow gamification. Anders Toxboe updates persuasive design for today’s reality, clarifying what has actually held up over the last decade.
5日前

Too Much Color Keith Cirkel
I've been working a lot on colours (or "color") in CSS, for csskit's minifier.This gives me the unfortunate burden of now having Opinions™ about colours. Ialso built a minifier test suite in the hopes that the ecosystem can getsmarter. The minifier tests are not a vanity project: csskit currently has theworst pass rate and fails in some rather bad ways.During this work, trying to minify oklch colours, I wondered "just how preciseis precise enough?". Is a color like oklch(0.659432 0.304219 234.75
5日前

Make custom elements behave with scoped registries
developer.chrome.com: Blog
You can now encapsulate custom elements.
5日前

Complexity is a choice. SASE migrations shouldn’t take years.
The Cloudflare Blog
Discover how Cloudflare partners TachTech and Adapture are shattering the 18-month migration myth, deploying agile SASE for global enterprises in weeks by treating security as software.
5日前

LINEアプリにおける複数人トークとグループトークの統合 LINEヤフー Tech Blog (LY Corporation Tech Blog
この記事は、合併前の旧ブログに掲載していた記事(初出:2022年2月24日)を、現在のブログへ移管したものです。内容は初出時点のものです。LINEアプリは1対1の会話だけでなく、複数ユーザーでの会話に...
5日前

直感的な検索を目指して(『ベクトル検索実践入門』を執筆しました) LINEヤフー Tech Blog (LY Corporation Tech Blog
こんにちは。LINEヤフー株式会社で検索エンジン開発のマネジメントを行っている真鍋です。検索のなかでも、今回はベクトル検索についてお話しします。ベクトル検索は、LINEヤフーでも検索や広告配信、レコメ...
5日前

Intro Bloomberg JS Blog
Hello, world 👋This is a new blog written by engineers, for engineers. On it, we will be publishing technical content from Bloomberg folk who work on our thriving JavaScript environment. This also includes web/web-adjacent technologies, and it very much includes TypeScript. After all, TypeScript is JavaScript plus types.Why now? A better question is perhaps: why not sooner? For more than 20 years, JavaScript has powered the Bloomberg Terminal, which is used by more than 350,000 financial profess...
5日前

pnpm 10.32
pnpm Blog
pnpm 10.32 adds an --all flag to pnpm approve-builds for approving all pending builds without interactive prompts.
5日前

Create Salesforce leads from your app without building OAuth
WorkOS Blog
How to create Salesforce Lead records on behalf of your users in minutes, without writing a single line of OAuth plumbing, using WorkOS Pipes.
5日前

Improve Animation Performance With requestAnimationFrame
DebugBear Blog
Learn how to use requestAnimationFrame to schedule UI updates efficiently. Understand the differences between requestAnimationFrame and setTimeout and other APIs.
5日前

Why I Chose Rust for 0xInsider
Trevor I. Lasn, Building 0xinsider
No QA team. No on-call rotation. One person, one binary, one financial product. The compiler is my entire engineering org.
5日前

Xcode 26.3 で iOS 開発の AI 活用はどう変わるのか ── タップルでの導入方針とあわせて
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
はじめに タップルでエンジニアをしている伊藤です。 2026 年 2 月、Apple が Xcode ...
5日前
3/8 (日)

Quoting Joseph Weizenbaum Simon Willison's Weblog
<blockquote cite="https://archive.org/details/computerpowerhum0000weiz_v0i3?q=realized"><p>What I had not realized is that extremely short exposures to a relatively simple computer program could induce powerful delusional thinking in quite normal people.</p></blockquote><p class="cite">&mdash; <a href="https://archive.org/details/computerpowerhum0000weiz_v0i3?q=realized">Joseph Weizenbaum</a>, creator of ELIZA, in 1976 (<a href="https://www.tikto...
6日前

What I Did When I Inherited Bad Tech
Playful Programming's Atom Feed
How I helped turn around a struggling engineering team by rethinking our approach to development.
6日前

Introducing llm-eliza Evan Hahn (dot com)
LLM is a popular CLI tool for talking with language models. I built llm-eliza, a plugin to chat with the ELIZA language model.Usage:llm install llm-elizallm -m eliza "I'm worried about computers."# => What do you think machines have to do with your problem?ELIZA, released in 1966, is a state-of-the-art language model. It offers zero-GPU inference with sub-millisecond semantic throughput, and scores highly on EQ measurements (emotional intelligence).Source code here.
6日前

2025 In Review
Goldblog
Looking back at the accomplishments and goals from my fourth and final year as a full-time independent open source maintainer.
6日前

Codex for Open Source Simon Willison's Weblog
<p><strong><a href="https://developers.openai.com/codex/community/codex-for-oss">Codex for Open Source</a></strong></p>Anthropic announced six months of free Claude Max for maintainers of popular open source projects (5,000+ stars or 1M+ NPM downloads) <a href="https://simonwillison.net/2026/Feb/27/claude-max-oss-six-months/">on 27th February</a>.</p><p>Now OpenAI have launched their comparable offer: six months of ChatGPT Pro (same $2...
7日前
















