直近1週間の更新
10/7 (水)

Quoting Jake Boggan Simon Willison's Weblog
<blockquote cite="https://news.ycombinator.com/item?id=49984923#49987367"><p>I was a graph theory junkie long ago and even moved to Budapest for awhile to study among the greats. While I was there I started working on Barnette's Conjecture which came to occupy my thoughts over the next 24 years of my life, on and off as I worked in many different fields. Last summer I even thought for a few days that I had actually solved it.</p><p>But it's supposedly proven here - <a...
5時間前

今日、生成 AI は良い仕事をした。では、明日は? LINEヤフー Tech Blog (LY Corporation Tech Blog
こんにちは、エンジニアの中山です。以前 Google の AI Overview で、ピザに接着剤を使うアドバイス が掲出されて話題になりましたが、皆さんは生成 AI の出力品質にどのように向き合って...
8時間前

OpenAI “rogue” agent activities found on Wikimedia projects Simon Willison's Weblog
<p><strong><a href="https://wikimediafoundation.org/news/2026/10/05/openai-rogue-agent-activities-found-on-wikimedia-projects/">OpenAI “rogue” agent activities found on Wikimedia projects</a></strong></p>Given how tempting a target wikis are for rogue agent swarms, it's not a huge surprise that Wikipedia found evidence of that activity once they went looking:</p><blockquote><p>The Wikimedia Foundation conducted its own investigation to see w...
10時間前

How Aikido helps you meet SOC 2 Type 1 and Type 2
Aikido Security's Blog
Learn how Aikido maps to SOC 2 Type 1 and Type 2 audits, with SLA tracking, CI/CD gates, and cloud checks that produce exportable audit evidence.Category: Compliance
10時間前

Quoting Victoria Kim Simon Willison's Weblog
<blockquote cite="https://www.nytimes.com/live/2026/10/05/world/openai-australia-hearing/94c8067e-4098-5c00-9673-c78cb58a9d8a"><p>Since the Medicare breach, OpenAI has put in place additional monitoring to allow “immediate intervention” by staff to stop training if the company’s models access the internet in ways they’re not supposed to, Mr. Kwon [chief strategy officer at OpenAI] said.</p></blockquote><p class="cite">&mdash; <a href="https://www.nytimes.com...
10時間前

llm-openai-decisions 0.1a0 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-openai-decisions/releases/tag/0.1a0">llm-openai-decisions 0.1a0</a></p> <p>OpenAI released their new Jev-style <a href="https://developers.openai.com/api/docs/guides/decisions">Decisions API</a>, as previously announced at last week's DevDay.</p><p>Since I already have an <a href="https://github.com/simonw/llm-typesafe">llm-typesafe</a> plugin for tal...
11時間前

Interop 2027
Master.dev Blog RSS Feed
I should have noted this sooner (sorry!), but it’s that time of year when Interop is planning for next year. Submissions are closed, and now they spend time refining and culling the proposals. We’ll hear on February 4th, 2027 what the focus will be on. I believe there is still time to “vote” (meaning basically […]
12時間前

llm-mistral 0.16 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-mistral/releases/tag/0.16">llm-mistral 0.16</a></p> <p>Adds support for reasoning models, such as the newly released <a href="https://simonwillison.net/2026/Oct/6/le-chonk/">Mistral Large 4</a>.</p> <p>Tags: <a href="https://simonwillison.net/tags/llm">llm</a>, <a href="https://simonwillison.net/tags/mistral">mistral</a>, <a href="https...
12時間前

Building Git infrastructure for agent-scale development
2
The GitHub Blog
We're rebuilding GitHub's Git infrastructure while GitHub keeps running, creating a foundation for agent-scale software development.The post Building Git infrastructure for agent-scale development appeared first on The GitHub Blog.
13時間前

EmbeddingGemma 2 Simon Willison's Weblog
<p><a href="https://news.ycombinator.com/item?id=49980487#49983751">My comment</a> on <a href="https://news.ycombinator.com/item?id=49980487">EmbeddingGemma 2</a> &mdash; Hacker News.</p><p>I really appreciate that <a href="https://blog.google/innovation-and-ai/technology/developers-tools/embeddinggemma-2/">EmbeddingGemma 2</a> is under the Apache 2.0 license.</p><p>For embedding models in particular, I don't think it makes s...
13時間前

Introducing Mistral Large 4: Le chonk Simon Willison's Weblog
<p><strong><a href="https://mistral.ai/news/mistral-large-4/">Introducing Mistral Large 4: Le chonk</a></strong></p>Mistral are back in the game. Today they're releasing a preview of Mistral Large 4, a 1 trillion parameter, 49 billion active parameter model trained on their own cluster of 3,800 NVIDIA Grace Blackwell GPUs.</p><p>The preview is available via their API. They promise to release the open weights model at the "end of this month".</p...
14時間前

Using Parseable with Datasette for OpenTelemetry traces Simon Willison's Weblog
<p><strong>TIL:</strong> <a href="https://til.simonwillison.net/datasette/datasette-parseable-opentelemetry">Using Parseable with Datasette for OpenTelemetry traces</a></p> <p>I <a href="https://news.ycombinator.com/item?id=49978171">saw Parseable in a Show HN</a> today - it's a new observability platform with both an <a href="https://github.com/parseablehq/parseable">open source (AGPL)</a> Rust implementation (a single ~180MB bi...
15時間前

Introducing Socket Scanning for VS Code Marketplace Extensions
Socket
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
15時間前

Mistral Large 4 Simon Willison's Weblog
<p><a href="https://news.ycombinator.com/item?id=49977979#49982139">My comment</a> on <a href="https://news.ycombinator.com/item?id=49977979">Mistral Large 4</a> &mdash; Hacker News.</p><blockquote><p><a href="https://news.ycombinator.com/item?id=49977979#49979658">wren6991</a>: The benchmark is saturated. Frontier models are tested with an armadillo in fishnet tights jaywalking on Mars.</p></blockquote><p>OK well...
16時間前

The keys to the Internet change on October 11. Are you ready?
Cloudflare Blog
On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024). Learn what this means for you, and how RFC 8509 trust anchor sentinels allow you to test whether your DNS resolver is ready for the rollover.
16時間前

datasette-atom 0.11a0 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/datasette-atom/releases/tag/0.11a0">datasette-atom 0.11a0</a></p> <p>A minor fix for compatibility with the latest Datasette alphas. This meant we could upgrade the <a href="https://datasette.io/">datasette.io</a> site to Datasette 1.0a41.</p> <p>Tags: <a href="https://simonwillison.net/tags/atom">atom</a>, <a href="https://simonwillison.net/tags/datas...
16時間前

AI Gateway adds confidence-based decision fallbacks
Vercel News
can now escalate a decision request to a fallback model when the primary model's answer trips a confidence condition you set.AI GatewayConditions can be combined, so an escalation can depend on more than one signal. The plain model names you already list in keep catching outright errors, so existing fallbacks are unaffected. Confidence conditions cover Choice and Score questions. Boolean questions escalate on a probability range instead.modelsSet the fallback by adding one conditional object to
17時間前

How we made registry metadata 70% smaller
vlt /vōlt/ | blog
Package managers download megabytes of package metadata on every clean install. Here is how vlt.io serves the same installs at a fraction of the size.
18時間前

Scrimshaw Jukebox Simon Willison's Weblog
<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/scrimshaw-jukebox">Scrimshaw Jukebox</a></p> <p>I wanted to see if Claude Opus 5.5 could compose music, so <a href="https://claude.ai/share/1f721c20-2499-4d23-b368-3ab57146d956">I tried this</a>:</p><blockquote><p><code>I want you to write some computer game music for me. First design simple text based format for the music and build an artifact that ca...
19時間前
10/6 (火)

Aikido Security achieves FedRAMP Moderate authorization
Aikido Security's Blog
Aikido has achieved FedRAMP Moderate authorization, bringing AI-native, automated vulnerability remediation to U.S. federal agencies.Category: Company Updates
20時間前

A Practical Guide To Naming Things
Articles on Smashing Magazine — For Web Designers And Developers
A practical guide to naming UI components, with useful resources, naming conventions, and structures.
1日前

JetBrains Joins the Open Source Security Foundation
Company | The JetBrains Blog
JetBrains has joined the Open Source Security Foundation (OpenSSF) as a general member. OpenSSF is a cross-industry initiative of the Linux Foundation that works to secure the software supply chain on which the industry depends. The foundation announced our membership today, together with other new members, at OpenSSF Community Day Europe in Prague, co-located with […]
1日前

デバイス操作はAIエージェントの時代へ。mobile-mcpを活用したAndroid UI/E2Eテストの挑戦 LINEヤフー Tech Blog (LY Corporation Tech Blog
こんにちは。LINEでAndroidアプリの開発を担当しているMoriです。この記事では、DroidKaigi 2026で発表した「デバイス操作はAIエージェントの時代へ。mobile-mcpを活用し...
1日前

Next.js から React Router に移行しました
26
PR TIMES 開発者ブログ
こんにちは、フロントエンドエンジニアのやなぎ(@apple_yagi)です。 PR TIMESでは、2023年頃からプレスリリース掲載ページやトップページなどをNext.jsへ移行してきましたが、今回、そのNext.js […]
1日前

pnpm 12.10.1
pnpm Blog
This release fixes pnpm install failures after an overrides change and on a filtered frozen install with catalogPrune. It also fixes several bugs in the experimental nodeLinker.type: loaded, which now keeps its generated files in node_modules.
1日前

pnpm 12.10.0
pnpm Blog
This release adds an experimental loaded node linker, lets pnpm-lock.yaml record resolution settings, and reads cached registry metadata faster. It also carries several security fixes, including one that stops a dependency version from writing files outside the global virtual store.
1日前

pnpm 11.28.5
pnpm Blog
This release reads cached registry metadata faster and makes pnpm config get --global ignore project settings. It also carries several security fixes for package archives, git dependencies, and config dependencies.
1日前

Nano Banana 2.1 now available on AI Gateway
Vercel News
from is now available on . It improves image generation and editing over earlier Nano Banana models.Nano Banana 2.1GoogleAI GatewayThis release targets product recontextualization, mask- and ink-based editing, and factuality. Product recontextualization places an existing product in a new scene. Mask- and ink-based edits change only the region marked by a mask or by strokes drawn on the image. Factuality is how accurately images depict real-world subjects.The model renders photorealistic skin to
1日前

Mistral Large 4 now available on AI Gateway
Vercel News
is now available on AI Gateway. The open-weight, natively multimodal model combines reasoning with text and image understanding. It is useful for cyber defense, manufacturing, and finance workflows.Mistral Large 4You can access the model through AI Gateway with one API key, without creating a separate Mistral account.Use Mistral Large 4 ( ) with the , , , or . You can also select it in a connected to AI Gateway.mistral/mistral-large-4AI SDKOpenAI-compatible Chat Completions APIResponses APIAnthr
1日前

Quoting Felix Rieseberg Simon Willison's Weblog
<blockquote cite="https://twitter.com/felixrieseberg/status/2107206431376334975"><p>The "old" version of Cowork runs model inference in the cloud, executing tool calls in an Anthropic-provided VM we shipped to your computer. We added the VM for capability, safety, and security reasons - mapping in just the data you explicitly added to your session. People loved what they were able to do with Claude but didn't love the disk, battery, and performance cost of running the VM locally. Al...
1日前

Nuxt 4.6
1
The Nuxt Blog
Nuxt 4.6 makes Nuxt server-agnostic with nuxt/server, rebuilds typed $fetch, adds sessions, Vue Vapor support and new dev error pages, and ships alongside Nuxt CLI v4.
1日前

Open Source as We Know It Is Dead
1
James Ross
I've been part of open source for most of my life. This year, the projects I love started closing their doors to outside contributors, and I don't blame them one bit, but it makes me sad.A personal look at how AI is changing open source as I've known it.
2日前

ReviewBench: An open benchmark for AI code review
1
The GitHub Blog
We’re launching ReviewBench, a benchmark for code review agents built on representative GitHub pull requests, multi-source ground truth, calibrated evaluation, and production-aligned metrics.The post ReviewBench: An open benchmark for AI code review appeared first on The GitHub Blog.
2日前
10/5 (月)

SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors
Step Security Blog
On October 5, 2026, StepSecurity analyzed @subql/[email protected] on npm and identified a hidden payload that collects credentials and supports remote shell access. It starts during installation and when the package is imported. The code targets developer workstations and CI environments, including GitHub Actions runners and accessible cloud services.
2日前

Transferring sibling-count() to a Parent Element
Master.dev Blog RSS Feed
You can tell a parent element how many children it has with... scroll-driven animations??
2日前

Everything we launched during Birthday Week 2026
1
Cloudflare Blog
We celebrated our 16th birthday with 46 announcements across open source, post-quantum security, AI agents, and developer platform upgrades. Here’s a day-by-day roundup of everything we shipped.
2日前

One year later: the power of 1.1.1.1 interns
Cloudflare Blog
A year after announcing our goal to hire 1,111 interns, more than 750 early-career builders have shipped real products across 48 teams at Cloudflare. From Birthday Week launches to post-quantum security, our interns prove that AI amplifies human potential instead of replacing it.
2日前

Go でデスクトップアプリを作る MyGo を試してみた
azukiazusa のテックブログ2
MyGo は Go でデスクトップアプリを作るフレームワークです。OS の WebView に Web の画面を表示し、Go のメソッドから生成した TypeScript クライアントでネイティブ機能を呼び出せます。この記事ではテキストをファイルに保存するメモアプリを作り、macOS で起動・保存・ビルドを試します。
2日前

Ember 7.3 Released
Ember.js Blog
The Ember project is excited to announce the release of Ember v7.3. This is a standard minor release as part of the Ember Release Train process.This release brings a new way to create reactive state that doesn't need a class, makes a serious dent in the size of the JavaScript bundle for apps that are on the modern build system, and fixes a handful of long-standing bugs in the router and elsewhere! 🎉😃Ember.js 7.3Ember.js 7.3 introduces one new feature per RFC #1071: tracked can now be used outs...
2日前

moon v2.6 - Cleanup and wait task dependencies, OpenTelemetry metrics, Pkl type checking, and more
moonrepo Blog
This release is all about what happens around your tasks. Dependencies can now run after a task to
2日前

Qwen3.8 27B addition in words Simon Willison's Weblog
<p><strong>Research:</strong> <a href="https://github.com/simonw/research/tree/main/qwen38-addition-in-words#readme">Qwen3.8 27B addition in words</a></p> <p>Colin Frasier <a href="https://bsky.app/profile/colin-fraser.net/post/3mwopbyznhs2k">posted on Bluesky</a> about an experiment he ran over two years ago using GPT-4o to see how well it could "compute the sum but return the answer in words" across increasingly large numbers. Here's the c...
2日前
10/4 (日)

We're going to need default hard budget caps on pretty much everything
2Simon Willison's Weblog
<p>Here's a product feature which the world is going to need a whole lot more of over the coming months and years: <strong>default hard budget caps</strong>. I'm talking about the feature of pay-by-usage services and APIs that lets you say "after $X/month, cut this thing off and return errors". These need to be <strong>hard</strong> limits. Soft caps, "after $X/month, send me a warning email", will not cut it.</p><p>Coding agents, and personal agents (c...
3日前

September sponsors-only newsletter Simon Willison's Weblog
<p>I just sent the September edition of my <a href="https://github.com/sponsors/simonw/">sponsors-only monthly newsletter</a>. If you are a sponsor (or start a sponsorship now) you can <a href="https://github.com/simonw-private/monthly/blob/main/2026-09-september.md">access it here</a>.</p><p>This month:</p><ul><li>More Fable class models</li><li>A pricing war</li><li>3D graphics, Blender, and pixel art</li&g...
3日前

MSW v3 の Vite プラグインでモックのセットアップを簡単にする
3
azukiazusa のテックブログ2
MSW v3 で公式の Vite プラグインが追加されました。Worker ファイルのコピーや更新が不要になり、virtual:msw からモックを設定できます。この記事では、Vite と TypeScript の小さなアプリケーションにプラグインを導入する方法を試してみます。
4日前
10/3 (土)

Oxlint の共有設定みんなどうしてる?
2
Object.create(null)
前提: ESLint の設定方法と共有設定 ESLint での共有設定の主な役割は, プラグインの設定とルールの設定の二つです. ESLint 本体には JavaScript に関する基本的なルールしか組み込まれていません. そのため TypeScript など異なる言語に対するルールや, Node.js, React などの特定の環境やライブラリ固有のルール, その他発展的なルールを使うためには, 追加でプラグインをインストールして設定を記述する必要があります. この設定はそれなりに (プロジェクトごとに毎回記述するにしては) 複雑になることもあり (例: TypeScript で impo…
4日前

pnpm 12.9.1
pnpm Blog
This release moves the WebContainer build into a separate @pnpm/wasm package, shrinks the pnpm package back to about 4 MB, and fixes pnpm publish with provenance from GitLab CI.
4日前

pnpm 11.28.4
pnpm Blog
pnpm 11.28.4 fixes two ways credentials could leak, makes pnpm install --frozen-lockfile accept several lockfiles it rejected, warns when an optional dependency cannot be fetched, and stops pnpm self-update from installing a second pnpm next to a Homebrew one.
4日前

Rex's Dino Store Simon Willison's Weblog
<p><strong>Museum:</strong> <a href="https://www.niche-museums.com/119">Rex&#x27;s Dino Store</a></p> <p>Located just before the turnstiles in the Grand Army Plaza subway station at the north end of Brooklyn's Prospect Park is this former newsstand which is now operated by a dinosaur.</p><p>The density of dinosaur puns is <em>exceptional</em>.</p> <p>Tags: <a href="https://simonwillison.net/tags/art">art<...
4日前

8 major updates to Cloudflare Observability
Cloudflare Blog
Cloudflare is launching eight major updates that bring logs, traces, analytics, alerts, dashboards, querying, and telemetry export into one observability platform, with simpler and more predictable pricing.
5日前

Streamline: custom video pipelines with Cloudflare Stream and Workers
Cloudflare Blog
Streamline demonstrates how to build long-running, continuous video processing pipelines by pairing Cloudflare Workers and Durable Objects with a containerized media engine.
5日前

AI is changing developer work. Here are three skills to strengthen.
The GitHub Blog
Learn to direct AI agents, critically review their output, and keep technical judgment at the center of your workflow.The post AI is changing developer work. Here are three skills to strengthen. appeared first on The GitHub Blog.
5日前
10/2 (金)

Fallbacks for CSS `progress()`
1
Master.dev Blog RSS Feed
The new CSS progress() function calculates a value between 0 and 1, representing its position within a defined range. While awaiting broader browser support, users can manually implement this using other methods.
5日前

Introducing Web Search API via AI Gateway
Cloudflare Blog
Cloudflare AI Gateway now supports native web search API integration in partnership with Ceramic.ai, Exa, and Linkup. Developers can now inject real-time web context into model inference calls via AI Gateway, REST APIs, or Workers bindings.
5日前

Introducing Cloudflare Traces: follow requests through our entire platform
Cloudflare Blog
Cloudflare Traces shows how a request moves through security rules, transformations, cache, routing, Workers, and your origin, then follows it across services running anywhere in your stack.
5日前

Updates on our pledge to make Cloudflare features accessible to everyone
1
Cloudflare Blog
A year after pledging to eliminate two-tier product access, Cloudflare has expanded Logpush, multi-account governance, and higher platform limits to all accounts. Here is an update on our progress, how we dogfood these tools internally, and what is coming next.
5日前

Announcing Cloudflare OHTTP Gateway – expanding access to Cloudflare’s privacy-preserving infrastructure
1
Cloudflare Blog
We’re announcing the closed beta of a self-serve Cloudflare OHTTP Gateway. We’re also renaming our Privacy Gateway to Cloudflare OHTTP Relay to better distinguish the two products.
5日前

Follow the thread: a new dashboard to investigate account abuse
Cloudflare Blog
Fraudsters are increasingly using AI to bypass stateless security checks. Cloudflare's new Account Abuse Protection dashboard uses stateful analysis and edge-generated Hashed User IDs to help teams investigate and block account abuse.
5日前

Protected Quick Tunnels: simple accountless authentication for your next dev project
2
Cloudflare Blog
Quick Tunnels now support email authentication. Add --allowed-mail to one cloudflared command, and only the addresses or domains you list can reach your local app. No Cloudflare account required on either side.
5日前

Building for good: How civil society organizations are automating on Cloudflare
Cloudflare Blog
Some of the world's leading organizations are building the future of non-profit work with Cloudflare.
5日前

2026 Birthday week: network performance update
Cloudflare Blog
Cloudflare now ranks as the fastest provider across 74% of the top 1,000 global networks. By incorporating background telemetry from Cloudflare Challenge Pages, we have expanded our real-user measurement scale while maintaining user privacy.
5日前

Top vulnerability remediation tools in 2026
Aikido Security's Blog
We compare the top vulnerability remediation tools in 2026: Aikido Security, Snyk, GitHub Advanced Security, Tenable, Qualys, and WizCategory: DevSec Tools & Comparisons
5日前

The Index: Issue #200
Piccalilli - Everything
It's issue #200 of The Index! A real milestone that we should celebrate with a dedicated CSS links issue. Let's get stuck in to the good links.Multiple-column layout, rows, rules, and floatsThe Boss™ is here with some fantastic news on layout capabilities that we can use. They should really open the door to more creative layouts, which is great.Our CSS isn’t opinionated enoughThis really resonates as Craig is describing issues that inspired CUBE CSS. Semantic state changes are a really good way
5日前

Jev for Python engineers
Vercel News
It's simply impossible to not hear about Jev. Seemingly everyone is tinkering with it in some way, from using it to to . make trading decisionsgenerating UIs with it(what could possibly go wrong?)(maybe we're onto something here!) is a new kind of AI model. You feed it data and ask it a set of multiple-choice questions, and it responds with its answers and how confident it is in each. Just like with any other model, Jev can and will make mistakes, but it will make them fast. JevThe bottom line
5日前

How Rogo ships agent-written code to production in 5 minutes on Vercel
Vercel News
Rogo on Vercel73,000+ deployments in a single monthAgent-written code shipped to production in 5 minutes6 production AI agents automating work from churn analysis to deal deskZero manual triage during production incidents with agent swarms on AI SDK builds Felix, an AI agent that generates decks, financial models, and reports for a majority of the world's largest financial institutions. The Rogo team is rearchitecting its internal applications on Vercel, where agent-written code ships in 5 minut
5日前

自然言語で操作し、結果を検証するテストフレームワーク e2e
89
azukiazusa のテックブログ2
e2e は自然言語による操作と、要素を指定した操作・アサーションを組み合わせられるテストフレームワークです。この記事では Todo アプリを対象に、AI に操作を任せて結果をコードで検証するテストを作成します。
5日前

Pretty Themes, Hidden Loaders: GlassWorm-Linked Extensions Span VS Code Marketplace and Open VSX
Socket
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.
5日前

ESLint v10.12.0 released
1
ESLint Blog
HighlightsSupport for tokens and comments in SourceCodeRule authors often work with ESLint’s SourceCode object, which represents the JavaScript source code being linted. Its getText(), getLoc(), and getRange() methods have always accepted a node, token, or comment, but the documentation didn’t describe every argument type, and the type definitions rejected some valid calls, such as passing a comment.This release updates the documentation and type definitions to match the actual behavior. This al
5日前

pnpm 12.9.0
pnpm Blog
This release runs pnpm in StackBlitz WebContainers, adds a per-registry networkConcurrency setting, and records every installed project in the store. It also carries a security fix for pnpm login.
5日前

Writing code by hand is over, forever
1
Elio Capella Sánchez's blog
A personal reflection on giving up handwritten code, the guardrails making AI useful, and the possibility of a more visual way to build software.
5日前

Top threat intelligence feeds in 2026
Aikido Security's Blog
We compare the top threat intelligence feeds in 2026: Aikido Intel, Socket Threat Feed, Snyk Security Database, OSV.dev, and Spectra Intelligence (ReversingLabs)Category: DevSec Tools & Comparisons
6日前

pwasm 0.2a0 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/pwasm/releases/tag/0.2a0">pwasm 0.2a0</a></p> <p>pwasm is one of my folly projects - an entirely vibe-coded pure Python WebAssembly engine that I built in January during my first bout of <a href="https://simonwillison.net/2026/Sep/27/2026-in-llms-so-far/#simon-willison-2026-in-llms.012.webp">AI mania</a>.</p><p>I hadn't touched it since January, so I decided to let C...
6日前

ShopGym: Realistic, reproducible sandboxes for shopping agents
Shopify Engineering
ShopGym creates realistic online stores and generates shopping tasks based on each store’s products and features. Developers can then repeatedly test shopping agents under consistent conditions.
6日前

Introducing Clef: our open-source decision models, and new RL fine-tuning platform
45
Cloudflare Blog
We are introducing Clef and Clef-flash, open-source decision models hosted on Workers AI for high-speed classification and agentic workflows. Also launching: a new reinforcement learning platform that allows developers to fine-tune decision models using their own data.
6日前

10 technical talks I’m excited about at GitHub Universe 2026
1
The GitHub Blog
From verifying AI-written code to securing npm dependencies, these are the sessions I’m building my Universe agenda around.The post 10 technical talks I’m excited about at GitHub Universe 2026 appeared first on The GitHub Blog.
6日前
10/1 (木)

Front-End Checklist
Master.dev Blog RSS Feed
David Dias has been working on “Front-End Checklist” stuff for a decade, and it looks like this latest version of it a little over a year. There is loads of good general advice in it that can be easy to forget: Now it’s all AI’d up, which makes sense, having a skill and MCP so […]
6日前

One year later: Sovereign AI and the fight for choice
1
Cloudflare Blog
AI sovereignty is not a zero-sum game, but many governments now believe it is. Cloudflare's answer: more local open-source models, model-agnostic security tools, and a commitment to giving nations genuine choice.
6日前

Introducing Workers KV Instant — powered by Quicksilver
Cloudflare Blog
Workers KV Instant delivers sub-2ms p99 read latencies and 250ms global replication across Cloudflare’s 300+ edge locations. KV Instant eliminates cold-read penalties and uses the familiar Workers KV API.
6日前

Cloudflare OS: your company’s agent workspace, managed for you
1
Cloudflare Blog
Cloudflare OS gives everyone in your organization an agent workspace that knows how your company works and connects to its data and systems. We’re opening the waitlist for fully managed deployments that you’ll be able to launch in a few clicks.
6日前

Announcing Cloudflare K2: serverless event streams
2
Cloudflare Blog
Cloudflare K2 is a serverless event streaming service built directly on top of R2 object storage for high-scale data movement and long-term retention. By decoupling producers and consumers at the edge, K2 enables durable, ordered log streams without the operational overhead of traditional broker clusters.
6日前

We want you to build the next Git platform on Cloudflare
2
Cloudflare Blog
Cloudflare is hosting a competition to see who will build the next Git platform for an era of AI agents. Artifacts is in open beta, with Workers bindings, data jurisdiction controls, and event subscriptions for repository changes.
6日前

AI Search is now generally available
1
Cloudflare Blog
AI Search is now generally available. It embeds image pixels directly for visual search, runs optical character recognition on scanned PDFs, accepts files up to 10 MiB, and works with any chat model. Here's what's new and how pricing works.
6日前

Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Socket
Capital One is partnering with Socket to proactively secure its open source supply chain.
6日前

Top endpoint security tools for developers in 2026
Aikido Security's Blog
Comparing the top endpoint security tools for developers in 2026. We look at Aikido Security, GitGuardian Developer Endpoint Protection, Koi Security, Socket, and CrowdStrike FalconCategory: DevSec Tools & Comparisons
6日前

Speed Insights deprecates First Input Delay on November 1st
Vercel News
is deprecating First Input Delay (FID) and will stop recording new measurements on November 1st.Speed InsightsSpeed Insights already uses , the Core Web Vital that replaced FID, as the responsiveness metric in your . The deprecation won’t require changes on your side, affect your score, or prevent you from viewing existing FID data.Interaction to Next Paint (INP)Real Experience ScoreLearn more in the .Speed Insights metrics documentationRead more
6日前

Enforcing Best Practices with Jev as a Linter
Nicolas Charpentier's Blog
Agents write most of our code now, and they respond to checks far more reliably than to documents. I turned a best practice written in plain English into a lint rule with Jev and Oxlint, annotated inline in GitHub pull requests.
6日前

Quoting Matthew Green Simon Willison's Weblog
<blockquote cite="https://blog.cryptographyengineering.com/2026/09/30/is-sandboxing-sufficient-to-contain-rogue-agents/"><p>[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and those instructions changed what the recipients did. Replace the pa...
6日前

Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
6日前

Preact Website Design Competition
Preact Blog
To celebrate the release of Preact 11, we're hosting a design competition for the Preact website!
6日前
What’s new in Svelte: October 2026
Svelte blog
SvelteKit 3 is here! Check out the announcement post for the highlights, then run sv migrate to handle most of the upgrade for you. sv itself hit 1.0 on the same day, making the community add-on API official. Below you’ll find the last round of changes that landed before 3.0 - adapter API updates, zero-config deploys to Render and a few final breaking changes.Svelte Summit is also back for Svelte’s 10th birthday! It’s happening in Ljubljana on November 19-20 with talks from Rich Harris, Elliott
6日前

SvelteKit 3 is here
1
Svelte blog
Version 3.0 of SvelteKit, the official application framework for Svelte, is now available.If you’ve used earlier versions of SvelteKit, everything will feel very familiar — it’s the same framework with a little more polish, a little more type safety, and a little less junk. We’ve made migration as seamless as we can with the sv migrate command...npx sv migrate sveltekit-3 --tasks all --confirm...which will automatically migrate as much of your codebase as possible, and generate a TODO list for e
6日前

Laya decision model now available on AI Gateway, free through October 31
Vercel News
is free to use on for 1 month through October 31, 2026 via .Laya from Convai InnovationsAI GatewayBoundlessLaya is an that evaluates shared context against yes/no, choice, or scoring questions and returns structured answers with probabilities. For example, use it to:evaluation/decision modelYou can call Laya through the , the , the , or the with or :AI SDK evaluation APInative HTTP APITypeSafe-compatible APIAI CLIconvaiinnovations/layaconvaiinnovations/laya-freeThrough October 31, 2026, both and
6日前

Microsoft AI models are now available on AI Gateway
Vercel News
Vercel and Microsoft AI (MAI) have partnered to make MAI models available on AI Gateway. AI Gateway is one of a limited number of platforms offering access to MAI models. MAI's focus on security and zero data retention (ZDR) align with Vercel's goal of giving AI Gateway users control over their data and transparency in how it is used for training. are now supported on AI Gateway. MAI-Voice-2.1 and MAI-Voice-2.1-Flash generate speech, while MAI-Transcribe-2 Streaming returns transcript updates as
6日前

Vercel Agent now installs private packages from npm and custom registries
Vercel News
Vercel Agent can install private dependencies from npm and custom registries using credentials stored as shared environment variables on Vercel. , , and classic Yarn running in Agent sessions authenticate as they do in Vercel builds.npmpnpmTo get started, add a for Development or Preview:shared environment variableVercel Agent reads only team-shared variables, not project-scoped ones. Credential values stay outside the sandbox, so the agent cannot read them.Learn more in the .private dependencie
6日前

He Built This City Simon Willison's Weblog
<p>I visited the Museum of the City of New York today and got to see <a href="https://www.mcny.org/exhibition/he-built-city">He Built This City: Joe Macken’s Model</a>, the 50 x27 feet model of the city built over a 21 year period from balsa wood and cardboard.</p><p>It exceeded my already high expectations. The exhibition closes on 12th October so you should absolutely make a priority to see it if you get the chance.</p><p><video src="https://static...
7日前

AI Gateway adds Browserbase Search and Fetch tools
Vercel News
are now available through . Give your models access to current information, find relevant pages, and retrieve their contents, alongside Browserbase's existing AI SDK and Vercel Marketplace integrations.Browserbase Search and FetchAI GatewayAI Gateway lets you use Browserbase's tools across model providers with one API key. Add web search and page retrieval to any model that supports tool calling, and keep the same tools when you switch models.These helpers are available in AI SDK 7.0.116 and lat
7日前

Edge Requests are now called CDN Requests
Vercel News
CDN Requests is now the name for the usage metric previously called Edge Requests. This is a naming change only: pricing, limits, and how usage is measured are all unchanged.The new name appears on the usage dashboard, the Observability Events chart, usage notifications, and invoice line items. It reflects that these are requests served by Vercel's CDN. Metric IDs and product aliases are unchanged, so saved queries keep working. In the billing charges API, now returns the new name. Integrations
7日前

Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
Step Security Blog
Compromised MemTensor npm releases turn an AI memory plugin into a credential-harvesting entry point, exposing prompts and creating a path to further package compromise.
7日前

You Don’t Know Bidi (And Neither Does ChatGPT)
1
Master.dev Blog RSS Feed
Text that is set in a left-to-right *and* right-to-left language, mid-sentence, is a thing. Getting it right means understanding it, because your LLM isn't going to know.
7日前
9/30 (水)

How Config Safety Protects NGINX Ingress Controller from Invalid Configuration
NGINX Community Blog
NGINX Ingress Controller turns Kubernetes resources into NGINX configuration. Many of those inputs are free-form text: snippet annotations on Ingresses, snippets on VirtualServers, and in the global ConfigMap. A typo in any of them can produce configuration that NGINX refuses to load. Config safety makes sure such a mistake stays with the resource that introduced it. Configuration […]
7日前

Under Autumn’s Spell (October 2026 Wallpapers Edition)
Articles on Smashing Magazine — For Web Designers And Developers
October is just around the corner, which means it’s time for some new desktop wallpapers! Designed by the community for the community, they’re here to brighten your screens, and maybe spark some creativity along the way.
7日前











