Maybe we can get back to an img-based icon system?

NGINX Ingress Controller 5.7 speaks HTTP/2 to your upstream services, set per upstream or picked up from a Service’s appProtocol. An Opaque Secret now works anywhere a TLS, CA, htpasswd, or API key Secret does, so you can use a Secret created by other tooling as it is. HTTP-01 challenges from cert-manager complete on hosts […]

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/chirp-pong">Chirp Pong</a></p> <p>Another game experiment - I wanted to see if it was feasible to have a two player game on two separate phones running in static HTML where the networking code uses chirps sent via the microphone. It seems to work!</p><blockquote><p><code>Build a two player competitive pong like game where two players use their phones close to each...

AI, agents, voice, and physical controls are shifting software development from operating tools to expressing intent—and helping developers stay focused on building.The post The next developer interface is ambient intelligence appeared first on The GitHub Blog.

Put native GitHub features to work to review outside collaborator access and archive stale repositories.The post Staying Evergreen: How we automated secure access and repo hygiene in a shared org appeared first on The GitHub Blog.

Cloudflare Gateway and Data Loss Prevention have inherited the flexibility and power of Cloudflare Workers through our full-stack integration with the Cloudflare Developer platform.

Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Introducing Void: an open-source SDK, CLI, and self-hosted platform for building full-stack Vite apps and deploying them to Cloudflare.

<p><strong><a href="https://www.ft.com/content/11632d03-358c-454b-af95-d06d4072932b?syn-25a6b1a6=1">Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO</a></strong></p>The phrase "told investors" appears four times in this FT article, which reports on Anthropic's day of hosting investors on Wednesday. Lots of details in here from "<a href="https://simonwillison.net/2023/Nov/22/deciphering-clues/#hints-to-look-out-for">peopl...

How Cloudflare and OpenAI are working together to help AI find useful content, keep up with changes, and make fewer wasted requests — making the experience better for users and website owners alike.

AI Gateway Production Index — October 2026Every month, routes tens of trillions of tokens between production applications and AI labs. That traffic gives us a view of what AI usage actually looks like in today's enterprise, and we publish it here monthly. See the Production Index reports from , , and .AI GatewayJulyAugustSeptemberIn August, open-weight models processed the majority of AI Gateway token volume for the first time. The money is now following. Open weight’s share of spend has more th

AI adoption in the enterprise is growing rapidly, and expanding beyond engineering users. In the last three months, token usage by enterprise companies on AI Gateway has quadrupled, and that from August 2025 to June 2026, non-developer Codex users grew 189x. OpenAI recently reportedOur customers call these builders citizen developers. They know their part of the business better than anyone else, and with AI they can create the software they need to ship work faster and deliver better customer ex

Agents often handle complex work that continues across runs. As that work evolves, they may need a new environment with different tools, runtimes, or compute. They should be able to continue working with the same files when they change environments.We built to keep an agent’s files independent of its execution environment. It is now generally available for . Agents can mount the same drive in a new environment configured for the next task and continue where they left off.Vercel DrivesVercel Sand

Last year, we expanded for Python and TypeScript backend frameworks. By this summer, developers could deploy their frontend and backend together with and coordinate background work with and .zero-config supportVercel Servicesqueuesdurable workflowsToday at , we are expanding the backend workloads you can run on Vercel. Python on Vercel is now generally available, enables custom runtimes and system libraries, and we are introducing in Public Beta for background workers that pull work and stay run

Python on Vercel is now generally available. Build and run Python applications with the frameworks, libraries, and tools you already use.Vercel automatically detects supported frameworks and configures the build and deployment. Your applications run on Fluid compute, which manages concurrent requests and scales with traffic. Idiomatic Python SDKs let you work with storage, queues, durable workflows, and AI models directly from Python. For full-stack projects, the Python backend and frontend shar

Vercel Token Pass is now in early access for Pro teams. For $30 per month, your team gets $80 in monthly credit for GLM 5.3 and Kimi K3, with more models to come.Use Token Pass with coding agents such as fx, Command Code, and Pi, or build your own personal agent with the AI SDK. Token Pass runs through , so you can choose your tools and switch between included models using your team’s shared credit.AI GatewayToken Pass has enabled by default. Requests run through selected providers with inferenc

is now in public beta, allowing you to run long-running processes that pull and execute work from , databases, or third-party systems without requiring an HTTP server:Vercel DaemonsVercel QueuesDaemons run containers on Fluid compute and deploy alongside your app in the same project. Vercel builds your image and maintains the instance count you configure in each region, restarting instances that exit or crash.Get started by packaging your application and dependencies in a Dockerfile or Container

こんにちは。社内のセキュリティ業務にAIを取り入れる業務を担当している、Security Development Division（LINE Plus Security R&D）チームです。この記事は...

こんにちは。私たちはLINEヤフー株式会社で言語処理モデルを開発しているプロジェクトチームです。LINEヤフーでは、さまざまなサービス（例：Yahoo!ショッピング、Yahoo!検索、Yahoo!知恵...

GitHub Actions でタグやブランチを参照すると、ワークフローを変更しなくても実行するコードが変わる可能性があります。Workflow dependency lockfiles を使うと、読みやすいタグ表記を残しながら依存先をコミット SHA に固定できます。この記事では GitHub Actions の依存関係を lockfile で固定する方法を紹介します。

Astro 7.4 adds a --timings flag that shows where your build spends its time, separate build and runtime image services, a notFound() handler for custom entrypoints, and experimental parallel prerendering and custom redirect pages.

This release adds the sideEffectsCache.exclude setting, stops pnpm install from waiting on the daily update check, and keeps pnpm from aborting with a core dump when the reader of its output exits.

This release stops pnpm publish from sending a CI identity token to a registry it was not issued for. It also fixes installs that dropped a dependency also declared as an optional peer, and accepts empty httpProxy and httpsProxy settings again.

is now available on AI Gateway. It is a multimodal decision model for classification, routing, and scoring across text and images, including visual defect inspection and checking damage claims against customer photos.d1-ultra from Liquid AIRather than generating text, d1-ultra returns structured answers with probabilities. Ask a Boolean question to get the probability of a yes/no answer, use Choice to select among named categories, or use Score to rate an ordered scale. You can ask multiple ques

is now available on AI Gateway. The open-weight reasoning model is designed for coding and agentic workflows, including multi-file refactoring, debugging, and understanding large codebases.Muse Spark Open from MetaMuse Spark Open supports text and image input with a 1M-token context window, allowing agents to work with code and screenshots in the same request. It is available with and no training, without creating separate provider accounts.ZDRUse as the model name across all API formats and cod

now supports , allowing connectors to reach providers with IP allowlists, such as Salesforce and Snowflake.Vercel ConnectSecure ComputeWith Secure Compute routing enabled, Connect’s provider requests use the selected network’s dedicated static IP addresses instead of Connect’s shared IPs. Requests to obtain and refresh access tokens follow that route; your app’s direct API routing is unchanged by this setting. Credential management stays the same, so you don’t need to store long-lived provider s

is now available on as a stealth model, free to use during the stealth period.Cat JamAI GatewayCat Jam is a reasoning model for coding and agentic tasks, with low-latency inference. It supports , so agents can connect it to your own tools, and that follow a JSON schema you supply. Responses include the model's reasoning text alongside the answer. Cat Jam takes text input only. Cat Jam supports , , , , and reasoning efforts.function callingstructured outputslowmediumhighxhighmax (ZDR) is not avai

is now generally available for on Hobby, Pro, and Enterprise.Vercel DrivesVercel SandboxA Drive is persistent storage that you mount as a directory in a Vercel Sandbox. Its files remain available after the sandbox stops, so later runs and other sandboxes can access them by mounting the same Drive.Use Drives to preserve an agent’s workspace or file-based memory across runs, or to make datasets, models, dependencies, and build artifacts available across sandboxes.You can also fork a Drive into ind

Enterprise teams can now run Vercel Functions in their own AWS account with (BYOC). With BYOC, your function code and execution stay inside your security and compliance boundary. Vercel continues to handle deployments, environments, routing, and static assets.Bring Your Own CloudDuring deployment, you provision functions in your AWS account and Vercel serves everything else. You keep control over function execution with your own IAM permissions, network access, and resource lifecycle policies.Wi

now supports in public beta. Your apps and agents can access supported services on behalf of signed-in users without separate consent prompts for each service.Vercel ConnectEnterprise-Managed Authorization (EMA)Here's how access works:If your app uses , you can request a token for with the signed-in user’s identity:Vercel PassportSlack’s Model Context Protocol (MCP) servertype: embedded-entry-inline id: 1T9cFkjaRDDmRFQ5bWVmD6Connect supports , including its use for MCP authorization through EMA.

now supports MCP Events in public beta, allowing your apps and agents to subscribe to webhook events from compatible MCP servers. Build agents for tasks like summarizing new messages, reviewing newly created issues, or responding to document feedback.Vercel ConnectConnect creates subscriptions on the MCP server and renews them automatically as needed, verifying the server’s webhooks and forwarding events to your application using authenticated delivery.You can use the Connect SDK to subscribe to

is now a first-class language and runtime on Vercel. Build APIs, full-stack applications, and AI agents with native Python SDKs and a shared development and deployment workflow for your Python backend and JavaScript frontend.PythonVercel handles the infrastructure so you can focus on your application:Within your application, Python SDKs let you build agents, run untrusted code, and orchestrate durable workflows.Use the SDKs individually or combine them in the same Python application.For full-sta

is now available on .Jev 1.14 from TypeSafe AIAI GatewayJev is a for software. You pass it state and a set of questions, and it returns typed Choice, Score, and Boolean answers with probabilities instead of free-form text. It answers every question in one request, in parallel, for classification, routing, scoring, and automated verification.decision modelJev 1.14 accepts images as part of the state, and has an experimental long-context mode for documents, logs, or conversation histories that are

Knowing where traffic comes from can help you decide where it goes. NGINX Open Source 1.31.7 brings GeoIP2 and GeoLite2 database support to the existing native GeoIP modules, giving users a straightforward path to current geolocation data. This release also adds modern HTTP/2 prioritization, improves reloads and binary upgrades for BPF-enabled QUIC deployments, and includes […]

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/tree-appreciator">Tree Appreciator</a></p> <p>Another game experiment with Claude. This one used the default Claude iPhone app (chat mode, not Claude Code mode), where I prompted Claude Opus 5.5 Max with:</p><blockquote><p><code>Build a three js game called "Tree appreciator" - it shows you two algorithmically generated trees and the game mechanics is about apprec...

When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.

In September, we experienced two incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: September 2026 appeared first on The GitHub Blog.

Our new repo star history API now provides trends without returning individual identities or requiring unbounded database work. These are the engineering tradeoffs we made.The post From 2,500 requests to 24: Rebuilding star history without the stargazers appeared first on The GitHub Blog.

Deno is joining Cloudflare & winding down its investment in the runtime. We're all better off because of its existence.

On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.

<p><strong><a href="https://popcar.bearblog.dev/ai-is-mass-decompiling-games-thats-both-awesome-and-scary/">AI is mass decompiling games. That's both awesome and scary.</a></strong></p>Indie game developer Popcar talks about the recent wave of AI-powered decompilation of existing games, enabling weird mashups between existing games, and producing a boom in game preservation projects to get old games working on new hardware (often in a browser using W...

Scrollspy navigation used to mean IntersectionObserver and a pile of JavaScript. With scroll-target-group, :target-current, and a little anchor positioning, a plain list of anchor links can highlight the current section all on its own.

Yoav Weiss makes a good point: “WebMCP is Agentic WebPerf”. I’ve seen both pushback to WebMCP in the form of “websites should just be better, or agents should be smarter, there shouldn’t be alternative paths to using them built.” And I’ve seen plenty of excitement for WebMCP in the form of “ooooo AI droolface”. But […]

Socket for Origin scans dependency changes in pull requests and flags security risks based on your team’s policies. Now available in Cursor’s App Marketplace.

While adding MySQL support to Hyperdrive, we found a subtle protocol bug when caching query results. Here is how we tracked down a 0.001% rate error and made Hyperdrive MySQL generally available.

vlt v1.4.0 brings the global store to macOS for up to 3x faster installs on Node 26, plus a new --save-types flag.

This major release brings Shadow DOM support, a refreshed theme built on design tokens, a unified AI experience, Trusted Types support, and simpler error handling.

In August, we launched the , inviting security researchers to try and escape Vercel Sandbox. We also coordinated with cybersecurity experts Trail of Bits to review the source code and security architecture.$1M hacker challenge for Vercel SandboxHere is a summary of the challenge:No reports showed anyone accessing customer data in Vercel Sandbox. The most severe finding was the defect in the upstream Linux kernel.The program's most important report arrived on day three. (pwn.ai), a HackerOne rese

こんにちは、iOSエンジニアのyamakenです。2026年9月11日から9月13日までの3日間にわたって開催されたiOSDC Japan 2026に、LINEヤフーはゴールドスポンサーとして協賛しま...

こんにちは。慶應義塾大学大学院工学研究科人間・社会システム情報科学専攻の菱田快成です。私はIaaSチームのインターン生としてプライベートクラウド「Flava」におけるOpenStackを中心とした仮想...

こんにちは、PR TIMES でインターンをしている水野です。 今回、社内運用の Storybook 上で閲覧できなくなった story を発見するために、全 story を定期的に巡回するクローラを作成したのでご紹介し […]

Test your embedded editor for RTL, CJK input, complex scripts, paste, accessibility, and browser/device combinations.

MRR is easy to calculate and easy to get subtly wrong. Here's how to normalize Stripe subscriptions, classify every movement, and reconcile your number with Stripe's own charts.

When I was but a lad, "lightbox" plugins were the impressive new thing to slap on your fansite. These days, the best ones are all bespoke Awwwards fodder. Hand-tuned to do one thing beautifully, then thrown away for the next site.Today, we're launching Gallery, a new Motion UI component for React (with Vue on the way!)It's a new component for building award-winning image and video galleries that work in both 2D and 3D, where every arrangement, gesture and detail view transitions smoothly into th

You can now create and connect Amazon S3 resources through the without leaving your Vercel project dashboard.Vercel MarketplaceThe Amazon S3 Marketplace integration automatically adds connection details as environment variables and lets you manage resources alongside your application infrastructure, with links to AWS for deeper configuration. Authentication uses short-lived OIDC credentials without storing static AWS keys.Amazon S3 is also available in , which provisions resources, configures co

from is now available for free on as , served by NVIDIA.Nemotron 3.5 LightningNVIDIAAI Gatewaynvidia/nemotron-3.5-lightning-freeNemotron 3.5 Lightning is an open-weight reasoning and chat model for long-running agents, sub-agent work, chatbots, and RAG systems. The model has 30B parameters with 3B active per token, in a hybrid Mixture-of-Experts design that interleaves Mamba-2 and MoE layers with a few attention layers. It has a 1M token context window and supports tool calling and structured ou

<p><strong><a href="https://www.anthropic.com/engineering/redesigning-source-control">Redesigning source control at Anthropic</a></strong></p>Interesting piece from Anthropic describing why and how they built their own custom alternative to Git, based on the dramatic increase in rate of changes to their code after the past six months.</p><blockquote><p>In May 2026, Anthropic averaged around 2,500 code changes merged per day; as of September,...

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-gemini/releases/tag/0.35">llm-gemini 0.35</a></p> <p>I added support to <a href="https://github.com/simonw/llm-gemini">llm-gemini</a> for the <a href="https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-4-argon/">new Gemini 4 Argon</a> model, made available today via the Gemini API and for customers of their $100/month subscription plan...

The night before AGNTCon + MCPCon Europe, we hosted the Agentic AI Foundation community at the JetBrains office in Amsterdam. The event filled up fast and went to a waitlist, which is not what I expected for a Wednesday evening discussion about how open foundations work. Ibrahim Malik opening the evening. The panel asked what […]

GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan execution time by 86%.The post GitHub’s model for secret detection: Finding more secrets with less noise appeared first on The GitHub Blog.

Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

A deep dive into how D1 architected its control plane to scale and manage millions of databases, while keeping data plane query operations at the edge. We share guiding principles on how to build on the Developer Platform effectively.

We shipped the "vlt outdated" command. Find out what packages need upgrading and if you're vulnerable.

Our strategies to optimize our data pipeline throughput without compromising data quality.

<blockquote cite="https://ghuntley.com/agency/"><p>If the agent isn't using my diagnostics library, I could introspect and update AGENTS.md, but there's still a delta, and it'll drift. Instead, I write a pre-commit hook that checks the git diff for direct calls to observability modules that bypass my diagnostics module. Boom: fail the commit, inject a prompt telling the agent to use the diagnostics library. All of a sudden it's ten out of ten.</p></blockquote><p class...

はじめまして。東京科学大学理学院数学系修士1年の岩崎丈至です。8月3日から6週間にわたって、LINEスキマニのフロントエンド開発にインターンシップとして参加しました。本稿ではその期間中に行った、メイン...

<p><strong>Release:</strong> <a href="https://github.com/simonw/web-edit/releases/tag/0.1a1">web-edit 0.1a1</a></p> <p>Includes <a href="https://github.com/simonw/web-edit/pull/1">performance optimizations</a> written <a href="https://claude.ai/code/session_01LE2R4P74P9GGUbE6yQ5YBt">by Claude Opus 5.5</a> after I fed it <a href="https://simonwillison.net/2026/Oct/12/python-3-15-web-edit-profiling/">this Python 3.15 profilin...

This release adds the pnpm profile and pnpm token commands, the storeIndexFormat: files setting for stores shared over a network filesystem, and faster Python dependency resolution.

is now available on AI Gateway, and 80% off for 30 days (through Nov 12).Drama 3 from Fish AudioThe text-to-speech model is currently in preview and lets you direct voice performances with natural-language instructions in your script, making it useful for voiceovers, character dialogue, and audio storytelling.Describe the emotion and pacing in square brackets, add sounds and pauses where they belong, or wrap selected words in tags such as and to change their delivery. Directions can be written i

and from Microsoft are now available on . Generate images from text or edit existing images through the or the , with one API key and no provider account.MAI-Image-2.6MAI-Image-2.6-FlashAI GatewayAI SDKAI CLIBoth models support photorealistic imagery, text rendering, and targeted edits to products, portraits, and layouts. You can provide up to five reference images to guide edits or combine subjects, with output sizes up to 1536 × 1536.Use or as the model ID. To generate an image, call with a te

Repository checkout and downloads are now faster on Vercel, reducing the time spent preparing your project's files before a build.Git LFSDuring rollout on build machines with more than two vCPUs:These improvements apply automatically, with no action required. Read the to learn more.Git deployment documentationRead moreThe average time to get project files ready fell by 20%.For LFS-enabled projects, the average time to get project files ready fell by 54%, saving approximately 13 seconds per deplo

from is now available on .Gemini 4 ArgonGoogleAI GatewayGemini 4 Argon is built for coding, agentic work, and complex reasoning. It has a 1M token context window, accepts text, image, PDF, and video input, and supports tool calling.On coding tasks, Gemini 4 Argon builds features, fixes bugs, and researches unfamiliar codebases, carrying longer tasks through multiple steps. The model also reads dense diagrams, spreadsheets, layout-heavy documents, and video, which suits tasks like a financial ana

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-meta-ai/releases/tag/0.2">llm-meta-ai 0.2</a></p> <p>Meta AI release <a href="https://research.meta.ai/blog/muse-wonder">Muse Wonder</a> (and Muse Wonder Full), their new "most capable models". These look like they may be Meta's first <a href="https://simonwillison.net/2026/Sep/27/2026-in-llms-so-far/#simon-willison-2026-in-llms.042.webp">Fable class models</a> -...

<p>Python 3.15 <a href="https://www.python.org/downloads/release/python-3150/">is here</a>! Here's the essential <a href="https://docs.python.org/3.15/whatsnew/3.15.html">What's new in Python 3.15</a> guide, this year curated by 3.14 and 3.15 release manager Hugo van Kemenade. As someone who builds open source software that works in every supported Python version, I get to say goodbye to Python 3.10 and start embracing features from Python 3.11.</p><p>F...

Learn how to add custom instructions and skills to your repository, use custom agents, and connect MCP servers like Playwright.The post GitHub Copilot app for Beginners: How to teach Copilot about your codebase appeared first on The GitHub Blog.

<p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/python-3-15-web-edit-profiling#readme">Profiling web-edit with Python 3.15: flame graphs and source heatmaps</a></p> <p>I put the <a href="https://simonwillison.net/2026/Oct/12/python-3-15/#a-sampling-profiler">new Python 3.15 profiler</a> through its paces by having GPT-6 Astra Extra High in Codex run it against my new <a href="https://simonwillison.net/2...

<p><strong>Release:</strong> <a href="https://github.com/simonw/web-edit/releases/tag/0.1a0">web-edit 0.1a0</a></p> <p>I was working on a project from my phone using Codex Remote when I found myself wanting to edit a credentials file without round-tripping those credentials through the LLM itself.</p><p>So... I had Codex and GPT-6 Astra Extra High build this Python web app which provides a web UI for viewing and editing files in a folder. It...

Logpush now supports Transformers, allowing teams to filter, redact, and reshape log streams using SQL before export. Powered by Apache DataFusion and Apache Arrow, Transformers apply those changes directly to log data before it reaches the destination.

Selling to banks or government? Aikido now offers CREST-accredited penetration testing, plus AI pentesting between audits.Category: Compliance

Some hot tips on using middleware for simplifying Durable Object creation and managing WebSocket connections.

<p><strong>Release:</strong> <a href="https://github.com/datasette/datasette-ports/releases/tag/0.4">datasette-ports 0.4</a></p> <p>My plugin for detecting and listing all Datasette instances on the current machine now works with the latest version, and displays the detected PID as well. Knowing the PID makes it easier to <a href="https://simonwillison.net/2026/Oct/12/python-3-15/#a-sampling-profiler">attach the new Python 3.15 profiler</a>....

Import Swift and Kotlin directly, full SwiftUI and Compose access, native UI included, and one Vite plugin for web, iOS, and Android.

is now available on AI Gateway. The model is designed for coding, long-running agents, and computer use. It can plan multi-step tasks, delegate work to sub-agents, and recover from errors as work progresses.Muse Wonder from MetaMuse Wonder has a 1M-token context window and supports text, image, and PDF input, tool calling, and structured output. Agents can work with code, screenshots, and documents in the same workflow.You can access the model through AI Gateway with one API key, without creatin

いろいろあって毎回説明するの大変なのでまとめておきます. 型変換 (type conversion) 基本的には明示的 / 暗黙的といった手段によらず, ランタイムの値を別の型に変換することを指していると思います. ランタイムの値が変わるのだから, 結果として静的な方の型も変わることにはなります. JavaScript / TypeScript でいうと, typeof x === "number" な x に対して String(x) と明示的に変換することもできるし, "foo" + x のように (ここでは数値を文字列の文脈で使うことで) 暗黙的に変換されることもあります. 型キャスト …

<p>I remember hearing a while ago that Dwarf Fortress didn't use version control. That fact has been lodged in my head, because given its inherent complexity I have trouble imagining a codebase that would benefit from version control <em>more</em>. That's art.</p><p>I went looking and I'm sad to report that the days without version control appear to have ended. Quoting Tarn Adams over time:</p><ul><li>March 2013: <a href="https://www.reddit.com...

This release adds OIDC authentication to pnpm dist-tag and the tool: protocol. pnpm publish now checks which registry an NPM_ID_TOKEN was issued for before using it.

<p><strong><a href="https://github.com/actions/python-versions/commit/49858b91c92d27403416ee43117032e91d00ce24">Python 3.15.0 added to actions/python-versions</a></strong></p>Bit of a niche link, but I've been waiting for this for a couple of days - I even <a href="https://chatgpt.com/share/6acad42a-2868-83e8-9a16-736f9def2b45">told ChatGPT</a> to check for it:</p><blockquote><p><code>Clone https://github.com/actions/python...

`document.startViewTransition()` の遷移はドキュメント全体で 1 つしか実行できず、ページ全体の上に描画されます。`element.startViewTransition()` を使うと、遷移を特定の要素に限定して、複数の遷移を同時に実行できます。この記事では、2 つのリストを同時にアニメーションさせる例を通じて基本的な使い方を紹介します。

Fixes 166 issues, addressing 122 👍. bun check, a TypeScript type checker built into Bun that is 3x to 6.4x faster than tsc 7, --check for bun run, bun build and bun test, 67–89% less idle CPU, Bun.FetchSession, experimental Bun.ModuleGraph, --disallow-code-generation-from-strings, up to 2.7x faster large node:http responses, a JavaScriptCore upgrade with faster JSON.parse, faster rejected-promise handling, CompressionStream compression levels, If-Range support in Bun.serve, bun install skips ta...

<blockquote cite="https://www.nytimes.com/2026/10/09/technology/anthropic-rogue-ai-agents.html"><p>Anthropic detailed the activity of its A.I. agents in <a href="https://www.anthropic.com/research/investigating-unintended-model-actions">a blog post</a> on Friday, without naming the targeted websites. But two sources with knowledge of the incidents said Anthropic’s A.I. agents had submitted 20 visa applications through a form available on the State Department’s website. A...

This release shares task results and dependency builds through a remote cache, adds the addMissingPeerTypes setting, and lets pnpm add --config and pnpm update manage configuration dependencies. It also fixes dangerouslyAllowAllBuilds running the build scripts of packages that allowBuilds denies.

<p><strong><a href="https://deno.com/blog/cloudflare">Deno is joining Cloudflare</a></strong></p>The Deno team released the first version of <a href="https://github.com/denoland/celld">celld</a> back in August - their open source implementation of the Durable Objects pattern from Cloudflare Workers.</p><p>Today, Cloudflare are acquiring Deno outright, with the goal of building on <code>celld</code> to "make workerd self-hos...

Your agent can now use the to buy a domain. Vercel CLIThe agent discovers candidates with , checks availability and registrar pricing with and , and initiates the purchase with .vercel domains searchvercel domains checkvercel domains pricevercel domains buyThe purchase decision itself stays with you by design. Run non-interactively, returns a structured, machine-readable error and the suggested next commands, so the agent hands the confirmation back to you, prohibiting it from spending money wit

We are expanding the Clef decision model family with Clef-omni, natively processing audio, video, images, and text in a single pipeline. We’ve also lowered Clef-flash pricing and boosted Clef inference speeds by up to 2.0x.

New Pro teams now default to a 30-day deployment retention period.Coding agents have accelerated development, increasing deployment frequency and the amount of stored deployment history. Shorter retention keeps recent history available while limiting older history and its storage costs.You can choose a longer retention period in your team's settings when you need more history for inspection or rollback. Deployment Storage and Functions Storage each cost $0.10 per GB-month. Older deployments may

and Functions Storage billing will begin for all Pro teams at $0.10 per GB-month. Check your email for details about when billing will start for your team. To keep storage costs low, the deployment retention window also changes to 30 days.Deployment StorageDeployments older than 30 days will be deleted starting October 23, unless you opt out in your retention settings before then. Retention settings already at 30 days or shorter are unchanged.Review retention periods for Pre-Production, Producti

Learn how vulnerability remediation works for each type of flaw and what to do when upgrading a dependency breaks your build or isn't an option.Category: DevSec Tools & Comparisons

The barriers to building software have collapsed. Today, anyone can build. Hackathons are a great place to start learning.The post Hack the World: Why hackathons are still the best place to learn to build appeared first on The GitHub Blog.

Divs and spans are fine, but purposefully meaningless. Often the meaning actually matters, so let's look at some of those situations.

<blockquote cite="https://twitter.com/matthew_d_green/status/2108552414978564418"><p>Everyone is very concerned about being respectable, so I’m going to be the goofball who raises worst-case possibilities. I think there is a 1% chance we live in Minicrypt, and a 15% chance we functionally lose confidence in our existing public-key encryption algorithms. [...]</p><p>The problem here is that the speed of AI producing surprises, and the speed of human beings replacing stand...

Putting ourselves in the best place to build the future of the web

GhostAction returns: compromised maintainers push a fake security-audit.yml workflow that steals CI/CD secrets and cloud credentials from GitHub repos.

arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

We compare the top developer security tools for enterprise teams on signal quality, governance, and remediation: Aikido Security, Snyk, GitHub Advanced Security, SonarQube, Checkmarx, and Endor LabsCategory: DevSec Tools & Comparisons

On-demand CPU and memory profiling for Cloudflare Workers and Durable Objects is now available. Now you can generate interactive flamegraphs directly in production to quickly track down memory leaks and performance bottlenecks.

<p>I shipped a new feature for my blog today: the <a href="https://simonwillison.net/newsletters/">Newsletters</a> page, which offers an index of all of the newsletters I've sent out, both my free <a href="https://simonw.substack.com/">weekly Substack</a> and my <a href="https://github.com/sponsors/simonw/">monthly sponsors-only</a> updates. I built the feature almost entirely using my voice, chatting away to my laptop while I cooked dinner.</p>&l...

The Deno team is joining Cloudflare to radically simplify self-hosting Workers and Durable Objects, so developers can use the same primitives in more places.

A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

2027 web platform feature rankingThis is the second year we're doing this, and last year's 1900+ rankings not only helped us push the right proposals in the Interop process, it was also used to prioritize web platform feature development in Firefox.Certainly beats thumbs up in GitHub issues! Make your voice heard.This hue shall passA fabulous colour contrast tool from the great folks over at Clearleft.Dark forestryNot only an outstanding and important piece of writing, but the design and effects

Rillet on VercelStandardizing every internal agent on eveRunning customer requests through agents, end to endUsing AI Gateway to give every builder every modelManaging builder access through Enterprise Managed UsersTripled shipping rate in three months with eve agents deployed on VercelTwo-person team closed 800+ Linear tickets in its first 4 monthsBuilder access via Enterprise Managed Users, SSO, and Directory SyncShips customer-requested changes to production in as little as two hoursGives eve

Eric Bailey explains the thinking and research that go into adding just a few custom keyboard shortcuts to a web app. There’s an absolute ton to consider and test, and plenty of challenges can come from your own team.