We get into building a background task processor using PostgreSQL. It seems easy at first, but there are lots of pitfalls as a system like this scales.

We're joining Shopify to give Tailwind a stable long-term home where it will be actively maintained for the millions of people who depend on it.

Workers now enables Node.js compatibility by default, supports applications up to 64 mebibytes, and adds a URL-based module registry with import.meta, lazy compilation, shared code caches, and clearer errors.

TThe web is evolving beyond menus, forms, and endless clicks toward experiences shaped around human intent. For UX designers, understanding this shift means re-evaluating their role, moving from designing visible interfaces to guiding transparent, intent-driven AI experiences.

The summer is over and the autumn (or fall, for our American friends) is here, so we're offering a huge 35% discount on all courses if you use the coupon code PRICEFALL at checkout.This is the time of year where people, fresh off a summer break, like to skill up, so we're making that easier with this large discount.We're running the discount for only two weeks — ending September 23 — so make sure you don't miss out.Purchasing Power Parity (PPP)Our PPP discounts are always based on the full price

Pro teams can now enable for $20 per project per month. It requires visitors to enter a password you set to view the project's deployments.Password ProtectionPreviously, Pro teams needed to purchase password protection for every project at the team level, but now it can be purchased individually.To enable Password Protection for a project, open in the sidebar, select , and turn it on. Disable it to stop future charges for that project.SecurityDeployment ProtectionLearn more about in the document

can now protect every deployment URL for a project, including its production domains, at no additional cost on Hobby, Pro, and Enterprise. Previously, protecting all deployments with Vercel Authentication required the $150-per-month Advanced Deployment Protection add-on.Vercel AuthenticationWhen enabled, only visitors who sign in to Vercel and have access to the project can open protected deployments. Use it for internal tools, private dashboards, and sites that aren’t yet ready to launch.From y

こんにちは、PR TIMESでインターンをしている河野拓真です。 今回は、PR TIMESのサービスで一部使用しているAmazon ECS on Fargateに、CloudWatch Alarmと連携した自動ロールバッ […]

<blockquote cite="https://mathstodon.xyz/@tao/117237320796901560"><p>I wrote recently about how the collection of good, fruitful open problems is now being mined in a non-renewable fashion, leading to the potential scenario of these problems becoming scarce. [...]</p><p>We have now seen that even the rumor of someone working on a problem can trigger a massive amount of AI-powered effort to flatten it before the original research project has time to reach its full potenti...

<p><strong><a href="https://openai.com/index/navier-stokes-solution/">On the Navier–Stokes Millennium Prize Problem</a></strong></p>Impressive result from OpenAI, who used an unreleased model to produce a resolution to <a href="https://en.wikipedia.org/wiki/Navier–Stokes_existence_and_smoothness">the Navier–Stokes existence and smoothness problem</a>, one of the seven <a href="https://en.wikipedia.org/wiki/Millennium_Prize_Problems">Millenni...

<p><strong><a href="https://openai.com/index/introducing-chatgpt-images-2-5/">Introducing ChatGPT Images 2.5</a></strong></p>OpenAI's image generation models are apparently used "more than 3 billion images across ChatGPT Images and the GPT‑Image models in the API". This latest release improves their instruction-following ability across multiple turns, responds faster, and "is better at preserving the subjects in your reference photos".</p><p>There...

Requests to public domains are now routed 18x faster.Vercel SandboxDomains created with the SDK call are now resolved from the nearest regional replica, instead of a single centralized store. Incoming requests reach the process running in the sandbox with less latency.sandbox.domain()Median domain lookup latency dropped from 62ms to 3.4ms (18x faster). The improvement is largest in regions farthest from the previous store: lookups are now up to 112x faster in Sydney (syd1) and up to 146x faster

Jason Haddix on why manual pentesting can't keep up, what disappears first, and why human methodology is what makes AI pentesting workCategory: Guides & Best Practices

Note: No AI was hurt while writing this blog post. Human tears only. In September 2026 we introduced NGINX 1.31.5 with several core features for one same goal. We expanded the core routing methods and the most critical nginx directives to enable native, non-scripted routing of any API traffic. In this blog post we will […]

We detected XCSSET malware inside a compromised Flutter package on pub.dev. Here is a full breakdown of the infection chain, propagation modules, and stealer logic we found inside.Category: Vulnerabilities & Threats

Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.

SSR を使う React アプリで localStorage を読む場合、従来は useEffect と state を使って初回表示を管理していました。browser() API では、ブラウザでのみ描画する意図を use(browser()) で表現し、待機中の表示を Suspense に任せられます。この記事では `browser()` API の使い方と、従来の `useEffect` と state を使った方法との違いを解説します。

Over the past year, we have improved Vercel’s Pro pricing to better reflect how teams build, with , , access to , and more. But one area our customers continued to give us feedback on was CDN pricing.expanded user rolesflexible creditsenterprise featuresCDN costs should be predictable, but viral launches, traffic bursts, or misconfigured routes sometimes turned an otherwise normal month into an unexpected bill. For teams building on Vercel, that uncertainty made growth feel like a problem at exa

こんにちは。フロントエンドエンジニアの白濱（@shiraha_maru）です。 PR TIMESは、2026年9月12日（土）に開催される「フロントエンドカンファレンス福岡2026」にGold Sponsorとして協賛い […]

How Evil Martians moved from Gatsby to Astro in nine days without rewriting a single React component

367 posts, four years on Gatsby, and no dedicated team: here's how we moved evilmartians.com to Astro in two weeks with an LLM.

and from OpenAI are now available on AI Gateway as and .GPT Image 2.5 FlareGPT Image 2.5 Sunburstopenai/gpt-image-2.5-flareopenai/gpt-image-2.5-sunburstBoth models generate and edit images with more natural lighting and textures, follow complex visual instructions, and handle detailed layouts and transparent backgrounds. They accept reference images for targeted edits while preserving surrounding elements. Flare is optimized for faster generation and iteration. Sunburst takes longer to generate

is now generally available for Pro teams. Flat Rate CDN is an alternative to usage-based CDN billing that provides you with a fixed monthly bill.Flat Rate CDNMonthly Flat Rate CDN capacity includes: Capacity is set at the team level, not the project level, so a spike on a single project draws on the team-level allowance.Spike protection is on by default. With spike protection, traffic above your tier's capacity is served normally, without degraded performance, and isn't billed (subject to the ).

The Ember project is excited to announce the release of Ember v7.2. This is a standard minor release as part of the Ember Release Train process.This release takes two important steps towards making Ember apps look and feel like plain JavaScript: a new built-in Strict Resolver that does away with modulePrefix, and ember-source finally being published as a fully ESM package. It also fixes a couple of bugs in the rendering engine and continues the work of untangling the blueprint system from ember-

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.35">llm 0.35</a></p> <blockquote><ul><li>New OpenAI model: <code>gpt-6-astra</code> for <a href="https://openai.com/index/gpt-6-astra/">GPT-6 Astra</a>.</li></ul></blockquote> <p>Tags: <a href="https://simonwillison.net/tags/openai">openai</a>, <a href="https://simonwillison.net/tags/llm">llm&lt...

<p><strong><a href="https://people.kernel.org/monsieuricon/creepy-crawlies">Creepy crawlies</a></strong></p>Konstantin Ryabitsev discusses how bad the "background radiation" of abusive crawlers has become from the perspective of <a href="https://git.kernel.org/">git.kernel.org</a>, the official Git repository for the Linux kernel:</p><blockquote><p>TL;DR: we spend more CPU cycles rendering commits for scrapers than we spend on al...

<blockquote cite="https://openai.com/index/an-alien-mind/#scalable-defense"><p>The strongest argument I see for continuing to train much smarter models quickly is the need to build defensive systems against the dangers posed by other AI. [...]</p><p>We will need powerful, aligned AI for defense; to secure infrastructure, to protect against rogue agents in real time, and to invent entirely new protective measures. This will be a primary focus of OpenAI’s deployment effort...

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/video-compressor">Video compressor</a></p> <p>I recorded a short demo video of <a href="https://simonwillison.net/2026/Sep/7/equal-earth/">my Equal Earth</a> animation on my phone and wanted to publish an optimized version of that video (using FFMPEG) on my blog, so I had Claude Fable 5.1 in Claude Code for web <a href="https://claude.ai/code/session_01QHTdJZ4xg6TZfDXCmuvA...

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/equal-earth">Mercator ↔ Equal Earth</a></p> <p>I got curious about the Equal Earth map projection that was recently <a href="https://www.theguardian.com/world/2026/sep/04/un-vote-world-map-mercator-equal-earth-africa">voted on at the UN</a> so I had GPT-6 Astra (medium) in ChatGPT Work <a href="https://chatgpt.com/share/6a9ee520-c82c-83ea-8111-2f7050c08638">build me<...

Thanks to some very modern CSS, we can visually replicate the logic of scrollbars. Then make them actually functional.

A known Shai-Hulud worm payload sat dormant for 111 days, then republished to npm, right past the malware scanning meant to catch it.Category: Vulnerabilities & Threats

StyleSmuggler is an unauthenticated RCE hitting Magento and Adobe Commerce, with no CVE and no Adobe patch yet. Aikido already has the fix.Category: Vulnerabilities & Threats

Why a database change broke upgrades, what changes in 1.7.3, and what to do if you already migrated.

<p><strong><a href="https://openai.com/index/research-acceleration-view-inside-openai/">Research acceleration: The view inside OpenAI</a></strong></p>Apparently today is RSI day at OpenAI, for Recursive Self-Improvement - I think it's their new AGI. Both this piece and the new essay <a href="https://openai.com/index/an-alien-mind/">An Alien Mind</a> (by Chief Scientist Jakub Pachocki) talk about it, and this one doesn't even bother to expand the a...

カミナシで、ソフトウェアエンジニアをしている osuzu です。 面接官として中途採用の選考にも関わっていますが、ここ1年くらいでエンジニア選考の設計を見直す必要が強まってきたと感じています。 私のチーム採用では、これまでオンラインコーディングテストや持ち帰り課題を選考に利用してきましたが、AIの登場によって、候補者さまはAIを使って課題を作成するようになり、Opus 4.5 がリリースされたあたりから成果物の精度がぐんと上がりました。 その結果、提出された課題から期待する経験値と、面接でお会いした本人から見える経験値が、うまく重ならないケースが出はじめたのです。提出物の設計や実装は的確なのに…

<p><strong><a href="https://shkspr.mobi/blog/2026/09/the-purpose-of-dns-is-to-spread-scams/">The purpose of DNS is to spread scams</a></strong></p>Terence Eden shares some daunting statistics in support of his take that "the Domain Name System's purpose seems to be a vector for criminals to run scams on people at a terrifyingly high rate".</p><p>On <a href="https://interisle.net/insights/cybercriminaldomaindemand">this Interisle report</a...

<p><a href="https://lobste.rs/s/rfn2mn/there_s_no_limit_how_bad_code_can_get#c_8kdtaw">My comment</a> on <a href="https://lobste.rs/s/rfn2mn/there_s_no_limit_how_bad_code_can_get">There's No Limit to How Bad Code Can Get</a> — Lobste.rs.</p><p><em>[In reply to a comment about burning it down to start from scratch when technical debt becomes overwhelming]</em></p><p>In my experience it's <em>so rare</em...

<blockquote cite="https://zachkehs.com/blog/theres_no_limit_to_how_bad_code_can_get/#9-ref"><p>If you continue to add floors and rooms to a building forever, it will collapse. Software faces no such constraint. The code can <em>always</em> get worse. There can <em>always</em> be a new layer of indirection or a reduction in performance.</p></blockquote><p class="cite">— <a href="https://zachkehs.com/blog/theres_no_limit_to_how_ba...

IME の変換確定に使う Enter キーで、書きかけのメッセージが送信されることがあります。isComposing と非推奨の keyCode === 229 を併用して、変換中の Enter を送信処理から除外する理由を解説します。

<p><strong><a href="https://www.youtube.com/watch?v=bOC3DisEOfg">Introducing GPT-6 Astra for developers</a></strong></p>Blink and you'll miss it, but there's a familiar creature at <a href="https://www.youtube.com/watch?v=bOC3DisEOfg&t=119">1m59s</a>:</p><blockquote><p>Across the board, Astra has more attention to detail, better understanding of the user's prompt, and can build more sophisticated outputs. In particular, i...

<p><strong>TIL:</strong> <a href="https://til.simonwillison.net/llms/blender-coding-agents-macos">Using Blender with coding agents on macOS</a></p> <p>I've been having fun with Blender in ChatGPT Codex on my Mac recently. Getting it to work with coding agents is really easy: install the full Mac application from <a href="https://www.blender.org">blender.org</a> and run a prompt like this:</p><blockquote><p><code>Use t...

This release fixes two regressions impacting Elysia and AsyncLocalStorage, a hang in @discordjs/ws, CMYK JPEG decoding in Bun.Image, a rare JIT crash, and a GC crash on musl.

多くのグラフライブラリがある中、TanStack Charts はなぜ作られたのでしょうか。この記事では、TanStack Charts の設計思想を整理し、React で売上の折れ線にキャンペーンの注釈を重ねるサンプルを紹介します。

<p>I got access to GPT-6 Astra this afternoon, so naturally I used it to generate <a href="https://simonwillison.net/tags/pelican-riding-a-bicycle/">SVGs of pelicans riding bicycles</a> - at low, medium, high, xhigh and max reasoning levels (Astra doesn't support reasoning=none). Then I rendered those pelicans in <a href="https://static.simonwillison.net/static/2026/gpt-6-and-5.6-pelicans.html">a comparison grid</a> with GPT-5.6 Sol, Terra, and Luna, and beyond bei...

<p>Here we go again... <a href="https://collusion.wiki">Discovery of a new OpenAI agent message board</a> by Sydney Von Arx, Cormac Slade Byrd, Spencer Kitts, and Thomas Larsen describes the <em>latest</em> <a href="https://simonwillison.net/tags/accidental-cyberattacks/">accidental cyberattack</a> by models being trained by OpenAI. This time it was agents engaged in some sort of web research benchmark, so they had (supposedly) controlled access to the ...

GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

In controlled offline evaluations, HydraFusion’s selective coding workflows matched or exceeded the evaluated Opus 5 baseline while reducing estimated workflow cost. Now available as a research preview in GitHub Copilot.The post Project HydraFusion: Frontier quality via multi-model orchestration appeared first on The GitHub Blog.

The transition to the Rust version of the React Compiler for the 1,036-file React Router codebase resulted in a significant speed increase, improving build times from 14.3 seconds to 0.81 seconds. The new compiler addresses previous limitations and ensures consistency across the toolchain, making it easier to manage builds with enhanced performance and capabilities.

How to use Aikido Libraries to patch vulnerable dependencies and meet security SLAs. Category: Aikido

Six Trivy alternatives compared for 2026 on container scanning, IaC, SAST, prioritization, and fixes, with where each one actually fits.Category: DevSec Tools & Comparisons

GitHub Actions で使用する Action をコミット SHA に固定すると安全性が高まる一方、更新作業が煩雑になります。pnpm 11.16.0 で追加された `pnpm update --include-github-actions` を使うと、パッケージと Action の更新を同じコマンドで管理できます。この記事では基本的な使い方を確認します。

Fixes 202 issues, addressing 236 👍. HTTP/2 in Bun.serve, Bun.write() streams Response bodies to disk, self-contained workspace node_modules, bun install --offline and --prefer-offline, WebSocket pause() and resume(), crypto.argon2, tree-shaking through dynamic import(), smarter CommonJS to ESM conversion for default imports, --compile --bytecode when cross-compiling, smaller and faster-starting compiled executables, up to 9x faster Buffer reads and writes, 2x faster AsyncLocalStorage, faster st...

<p>The August edition of my <a href="https://github.com/sponsors/simonw/">sponsors-only monthly newsletter</a> is out. If you are a sponsor (or if you start a sponsorship now) you can <a href="https://github.com/simonw-private/monthly/blob/main/2026-08-august.md">access it here</a>.</p><p>This month:</p><ul><li>We got more details on OpenAl's accidental cyberattacks</li><li>One-shotting Raccoon Heist games with Fable 5 and ...

HighlightsThe no-unexpected-multiline rule has been updated to check regular expression literals with d and v flags./* eslint no-unexpected-multiline: "error" */// Unexpected newline between numerator and division operatorfoo = bar/regex/v.exec(baz).forEach(qux);12345Copy code to clipboard The following rules have also been updated to avoid incorrect or unexpected behavior in some edge cases:new-capno-extra-bindno-unreachableprefer-object-has-ownFeatures264b434 feat: add d and v flags to no-unex

is now available on AI Gateway, free to use through October 4.Ling 3.0 Flash Sante from inclusionAILing 3.0 Flash Sante is a health and medicine-focused version of . It is a Mixture-of-Experts model with 124B total parameters and about 5.1B active per token, a 256K token context window, and function calling.Ling 3.0 FlashThe model is built for medical reasoning, professional healthcare tasks, deep research, evidence-based retrieval, and multi-step medical workflows. It retains the base model's g

from OpenAI is now available on AI Gateway. It is designed for long-running agentic work across software engineering, computer and browser use, scientific research, and professional workflows.GPT 6 AstraAstra can navigate software, complete forms, organize records, analyze data, run simulations, and build and test websites. It also improves instruction following during evolving tasks. It can incorporate new requirements without losing earlier constraints, continue independent work while waiting

It’s that exciting time of year again when we start considering Interop proposals for next year!

Use production traffic and security signals to prioritize findings, prepare edge mitigations when safe, and propose code patches. By combining WAF data with OpenAI Daybreak models, Vulnerability Discovery and Remediation helps teams identify and patch the most critical threats first.

<p><strong><a href="https://openai.com/index/gpt-6-astra/">GPT‑6 Astra</a></strong></p>GPT-6 Astra is "rolling out today to a limited set of organizations and over the coming days will become available to all ChatGPT Plus, Pro, Business, and Enterprise users, as well as through the OpenAI API and AWS" - I've not tried it yet myself, so I don't have a great deal to say about it yet.</p><p>It's going to be API priced at the same rate as Claude Fable...

We found a second delayed RCE in MECCHA CHAMELEON: a malicious custom map could write files anywhere on your system and run code after a restart. Now patched in 4.0.0.Category: Vulnerabilities & Threats

Learn how to run parallel agents in the GitHub Copilot app, and experience the moment it stops feeling scary and starts feeling powerful.The post GitHub Copilot app for Beginners: Run several agents at once appeared first on The GitHub Blog.

can now run in instead of Cursor's hosted machines. Cursor Cloud AgentsVercel SandboxCursor manages the agent harness and inference loop. Its APIs let you supply the execution environment where agents clone repositories, edit files, and run commands and tests. Self-Hosted Machines requires a Cursor Enterprise plan.Self-Hosted MachinesVercel Sandbox provides that execution environment as an isolated Firecracker microVM for each agent request. and form a durable control plane that claims queued ag

There was a fun and intellectual debate recently about UI controls for dark/light mode. I think the story starts with Modern Web Guidance skills from Google, which recommend using a two-state toggle, apparently written by Lea Verou, and Bramus Van Damme takes issue with it. Lea explained her thinking in detail, which is a great […]

2026年9月11日から9月13日までの3日間にわたり開催される、iOSDC Japan 2026にて、LINEヤフーはゴールドスポンサーを務めます。本ブログでは、LINEヤフーから登壇する発表者・パ...

Pro and Enterprise teams can now select Basic build machines. Basic build machines have 2 vCPUs and 8 GB of memory, offering a more cost-efficient option for smaller apps or agents that build with fewer resources. New Pro and Enterprise projects still default to , which scale automatically and are recommended for most use cases. Elastic build machinesTo use Basic build machines, update your project configuration in , , or with Vercel CLI or later:team settingsproject settings59.6.0Hobby accounts

Astro 7.3 adds an --ignore-lock flag for astro preview, passes Astro's runtime logger into custom image services and cache providers, and ships a finalize() helper for Cloudflare custom worker entrypoints.

The Oxc toolchain arrives in Nx. Plus leaner task output, Nx running inside agent sandboxes, and a cache shared across worktrees and repository clones.

Dozens of community tools now install by name alone, shell activation learned how to turn itself

From loop engineering to harnesses, squads, and open weights, the GitHub Podcast breaks down the AI terms showing up in developer conversations.The post Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my! appeared first on The GitHub Blog.

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-openrouter/releases/tag/0.7.1">llm-openrouter 0.7.1</a></p> <blockquote><ul><li>Performance fix for loading OpenRouter models. Thanks, <a href="https://github.com/waveplate">waveplate</a>. <a href="https://github.com/simonw/llm-openrouter/issues/59">#59</a></li></ul></blockquote> <p>Tags: <a href="https://simonwillison.net/t...

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.34">llm 0.34</a></p> <p>One new feature:</p><blockquote><ul><li><code>llm logs --usage</code> Markdown output now includes the response duration in milliseconds and as a human-readable duration. <code>llm logs --short</code> includes a new <code>duration_ms</code> field. <a href="https://github.com/simonw/llm/...

NGINX Gateway Fabric 2.7 is a significant release, targeting Gateway API conformance, data plane improvements, and workflow enhancements. TCPRoute and UDPRoute graduate to v1 with Gateway API 1.6, TLS listeners gain Terminate mode, and a new HTTPExternalAuthFilter calls out to an authorization proxy without an NGINX snippet. Seven more NGINX settings move out of snippets […]

Why shorter outputs can cost more, and how GitHub Copilot reduces wasted work across the complete coding task.The post How we make AI coding more cost efficient without sacrificing task quality appeared first on The GitHub Blog.

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-anthropic/releases/tag/0.28">llm-anthropic 0.28</a></p> <p><a href="https://www.anthropic.com/claude/fable">Claude Fable 5.1</a>, reasoning traces are now displayed by default for models that support them, plus a new <code>llm_anthropic.ClaudeRefusal</code> exception for when Claude throws a refusal.</p> <p>Tags: <a href="https://simonwillison.net/...

WebKit for Safari 27 adds full spec compliance for top-level `await`.