こんにちは。自然言語処理エンジニアの石原です。Yahoo!ショッピングでは、ユーザーが目的の商品にたどり着きやすくなるよう、検索機能の改善を継続的に進めています。本記事では、その中から、直前の検索クエ...

<p><strong><a href="https://artificialanalysis.ai/models/qwen3-8-27b">Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index</a></strong></p>That's the same score as GPT-5.6 Luna (max), and just one point behind GLM-5.2 (max) and DeepSeek V4 Pro 0813 (max) - that GLM is <a href="https://huggingface.co/zai-org/GLM-5.2">753B</a> and that DeepSeek is <a href="https://huggingface.co/deepseek-ai/DeepSeek-V4-Pro-0813">1.7T parameters...

The React team made a big splash recently when it announced the release of the Rust rewrite of React Compiler and said that it would be the new canonical version of the compiler going forward. I’ve been on the React Compiler train to enable reliable performance on my AI website builder Outlyne for almost a […]

Safari Technology Preview 250 fixed a subtle Web Inspector bug that overwrote page-authored Cache-Control request headers when the resource cache was disabled.

Chat is great for intent, but agent work gets lost in the scroll. Here is how I use canvases with my agentic workflows—and why your workflow also deserves a canvas.The post How canvases make agentic workflows visible, steerable, and cost-efficient appeared first on The GitHub Blog.

<p><strong><a href="https://www.404media.co/we-tracked-a-shipment-of-rare-books-it-ended-at-an-amazon-ai-training-facility/">We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility</a></strong></p>Excellent piece of reporting from 404 Media. For a while now there have been stories of book dealers receiving orders for large volumes of books from apparently price-insensitive anonymous customers, widely suspected to be companies looking t...

Lea's pushing back on light/dark mode implementations that display three state options for visitors: light, dark, and system.Dark mode toggles: two states are enough originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.

NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

株式会社タップルで内定者アルバイトをしている及川寛太 (@kanta_cky) です。 本記事では、 ...

A major OAuth and OpenID Connect expansion, updated MCP authorization, SCIM Groups and role projections, unified identity, device authorization, and more.

Pro customers can now connect repositories to Vercel. OriginOnce connected, pull requests on Origin will automatically generate Preview deployments on Vercel, and merging will trigger a Production deployment.You can connect Origin through , , or by clicking "Continue with Origin" when . Team settingsProject settingscreating a new projectYou can also connect Vercel to a repository from within Origin by adding Vercel in the repo's Apps tab. Vercel's integration is in public beta and Origin is in e

, the flagship of OpenAI's GPT-5.6 series, is 50% off on AI Gateway through September 18. The discount applies on the OpenAI provider to all token types, tiers, regions, and modes, and it is available only on requests running directly through AI Gateway (not BYOK).GPT-5.6 SolThe discount applies on the same terms everywhere else the model is priced: across every service tier, including fast mode, and to cached tokens, cache writes, long-context requests, and different regions.It covers requests

<p>I started building my <a href="https://tools.simonwillison.net/markdown-svg-renderer">markdown-svg-renderer</a> tool <a href="https://tools.simonwillison.net/colophon#markdown-svg-renderer.html">in May</a>, but I've since added enough features to it that it's worth talking about here again.</p><p>It's evolved into my ideal tool for sharing Markdown transcripts that include SVG documents. Given my <a href="https://simonwillison.net/tags/pelican-rid...

<p>Friday's big release was <a href="https://huggingface.co/Qwen/Qwen3.8-27B">Qwen 3.8 27B</a>, an Apache 2 licensed 27B parameter vision-capable LLM from Alibaba's Qwen research lab. I've been looking forward to this one: 27B is an excellent size for running a model on a reasonably specced laptop, and its predecessor <a href="https://simonwillison.net/2026/Apr/22/qwen36-27b/">Qwen 3.6 27B</a> was impressive.</p><p>Qwen's <a href="https://huggingface...

In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.

<blockquote cite="https://twitter.com/darioamodei/status/2088758819304443967"><p>I do agree that the public has a negative view of AI (and that this is a big problem), but I don’t think it is primarily caused by me or any other AI leader warning about AI’s risks. I think it is fundamentally a crisis of trust. I think that ordinary people don’t trust companies, governments, or the tech industry and always suspect that we are cooking up some new way to screw them over. The causes of t...

Chrome 151 で `` 要素が使えるようになりました。従来の `getUserMedia()` の問題を解決するために提案された新しい HTML 要素です。この記事では、仕様の概要と、実際に動かしてみた様子を紹介します。

ChainDrop npm worm: 444 packages and 2,212 versions poisoned, starting with [email protected]. Payload analysis, affected package list, IOCs, and remediation steps.

!主に Oracle がターゲットの記事ですが，「なぜ PostgreSQL や MySQL では問題にならないのか」を実測付きで掘り下げています。 Oracle ユーザ以外の方も是非ご一読ください。 はじめにある案件で，静的 SQL ジェネレータ（SQL ファイルを書くと型付きのアクセサコードを生成してくれるタイプのツール）を採用していたバックエンドを，SQL テンプレート方式に載せ替えました。きっかけは「条件分岐の多い検索クエリが，どう頑張っても Oracle でまともな実行計画にならない」という， EXPLAIN を適用して初めて顕在化した性能問題です。 調べていくう...

How to deny Google Antigravity's agent access to your .env in the IDE and the CLI, how to verify it worked, and the settings around it that matter.

Team PCP exfiltrated 78,330 secrets from 2,186 organizations via CI/CD pipelines. Analysis of the CloudSEK disclosure, why attackers target CI/CD, and how to defend.

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/cors-chat">CORS Chat</a></p> <p>I built this today (<a href="https://gist.github.com/simonw/92a1d97773744b45bf259e003013cf36">with GPT-5.6-Sol xhigh</a>) to help test Qwen 3.8 27B running in LM Studio on both my M5 MacBook Pro and an NVIDIA DGX Spark.</p><p>It provides a web UI for exercising an OpenAI-Responses-compatible chat endpoint. I've tried it against LM S...

Web Components を利用してアプリケーションを構築する際に、異なるコンポーネントライブラリが同じ名前のカスタム要素を定義していると、名前の衝突が発生します。Scoped Custom Element Registries を使用すると、同じページの異なるスコープで同名のカスタム要素に別々の実装を登録できます。この記事では Scoped Custom Element Registries について紹介します

<p><img src="https://static.inaturalist.org/photos/716984157/large.jpg" alt="Northern Gannet"></p><p>Northern Gannet, in Pillar Point Harbor, CA, US</p><p>This is Morris.</p><p>Morris is a local celebrity: the only known Northern Gannet (<em>Morus bassanus</em>) in the entire Pacific Ocean.</p><p>They showed up in the Farallon Islands off the coast of San Francisco <a href="https://baynature.org/magazine/spring2017/atlan...

<p><strong><a href="https://softwaredoug.com/blog/2026/08/10/hypothetical-classifications">Don't classify. Hallucinate!</a></strong></p>I still have quite a bit of older content on my blog that I never got round to tagging. My blog has <a href="https://simonwillison.net/">1,856 tags</a> - likely too many to feed to an LLM in one go and say "which of these tags match the following content".</p><p>Doug Turnbull has a neat soluti...

Compare enterprise SCA tools for 2026: Aikido, Sonatype, Snyk, Endor Labs, Checkmarx, Black Duck, and Veracode on intelligence, remediation, and compliance.Category: DevSec Tools & Comparisons

Compare the top enterprise DAST tools of 2026 on authenticated coverage, API discovery, exploit validation, governance, compliance, and AI pentestingCategory: DevSec Tools & Comparisons

See how four GitHub agent apps can help you scope, secure, roll out, and ship a feature across the SDLC–all without leaving GitHub. The post How to bring your software delivery workflow into GitHub with agent apps appeared first on The GitHub Blog.

Vercel CDN now supports Encrypted Client Hello (ECH) for domains managed by Vercel DNS. ECH encrypts the Server Name Indication (SNI) in the TLS handshake, the last part of an HTTPS connection that revealed which hostname a client was connecting to. With ECH, network observers see a connection to Vercel's shared ECH hostname, .vercel-ech.comECH is managed at the platform level and enables automatically where supported. Recent versions of Chrome, Edge, and Firefox .support Encrypted Client HelloL

Compare the top unified security tools of 2026: Aikido, Cortex Cloud, Wiz, Checkmarx, Snyk, and Orca, across coverage, correlation, governance, and cost.Category: DevSec Tools & Comparisons

Plus, how to style skeleton UIs, how to enable diagonal scrolling, how images can overflow themselves, and yet, still more. Basically, how to do a lot of really cool (CSS) stuff.What’s !important #17: Custom Highlight API, CSS Navigation Matching, Fixing text-stroke, and More originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.

Cloudflare Gateway identifies MCP requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic, enforce Portal-only access for approved servers, and block direct connections on managed network paths.

Introducing Cloudflare Access for Workers. Attach an Access policy directly to a Worker and it applies everywhere that Worker runs — routes, custom domains, workers.dev, and previews — automatically.

Cooking NotebookJosh Nesbitt is an immense cook, trust us, and they've compiled some great recipes for this very nice website. They're using tabular recipe layouts, which is also a nice touch.Keeping type consistent in changing conditionsYet another article packed with sage advice from Elliot Jay Stocks here.Doodle ScanThis is cool! The method for removing the background from scanned images is really smart too.I recently sat down for coffee with one of my oldest friends in the industryBoth a hum

少し前の出来事になるのですが、2026/07/24 に TSKaigi Mashup Kansai #2 というイベントに参加してきました。アウトプットの仕方や姿勢の話、Effect の話、TSKaigi のイベント運営の裏話といった発表がありました。どれも興味深い話で面白かったです。 かくいう僕も「Flow は今どうなっているか」というタイトルで発表しました。 speakerdeck.com Flow はもはや新規開発で避けられる技術となっていますが、今も開発が続き、進化しています。その進化は実は TypeScript にも影響を与えているのです。Flow で今どういった変化が起きているのか…

This release is about speed you can feel and visibility you can graph. The async engine we've been

<p><strong>Release:</strong> <a href="https://github.com/simonw/sqlite-utils/releases/tag/4.2.1">sqlite-utils 4.2.1</a></p> <p>Fixes a crashing bug in <a href="https://simonwillison.net/2026/Aug/13/sqlite-utils/">sqlite-utils 4.2</a>. I'd introduced code that looks like this:</p><pre><code>from typing_extensions import Self</code></pre><p>It turned out the <a href="https://pypi.org/project/typing-extens...

We don't NEED JavaScript to adjust tooltip timing displays. Super modern CSS and HTML has this covered simply, and we can do fully successful fallbacks.

Safari Technology Preview Release 250 is now available for download for macOS Golden Gate and macOS Tahoe.

Thinking about UX, a slight delay on a simple tooltip can be nice so that mousing over something quickly doesn't trigger it, but if there are related tooltips nearby, maybe we don't need to wait.

<p><strong>Release:</strong> <a href="https://github.com/simonw/sqlite-utils/releases/tag/4.2">sqlite-utils 4.2</a></p> <p>Lots of improvements in this one relating to the <a href="https://sqlite-utils.datasette.io/en/stable/python-api.html#transforming-a-table">table.transform() feature</a>, which adds support for complex alter table operations by creating a fresh table, copying across the data and then dropping and replacing the old one.&l...

Cloudflare's data shows a clear impact on Internet traffic from Iceland to Spain and Portugal, following the path of totality of the total solar eclipse that occurred on August 12, 2026.

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm-gemini/releases/tag/0.33">llm-gemini 0.33</a></p> <p>It's been a while since the last <code>llm-gemini</code> release. This version of the plugin adds support for today's <a href="https://blog.google/innovation-and-ai/models-and-research/gemini-models/introducing-gemini-3-7-flash/">Gemini 3.7 Flash</a> release, plus <code>gemini-3.6-flash</code>, <...

The GitHub Universe session catalog is live. Explore interactive workshops, community talks, demos, and panels. Plus, register before August 19 to save $300.The post Your guide to GitHub Universe 2026 is here: The schedule just launched! appeared first on The GitHub Blog.

A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

See how the open source projects in Session 4 of the GitHub Secure Open Source Fund combined AI-assisted workflows, maintainer expertise, GitHub security tools, expert guidance, and funding to improve project security. The post What 50 open source projects taught us about security in the AI era appeared first on The GitHub Blog.

An autonomous AI breach at Hugging Face and Anthropic's Fable suspension show the same thing: trusting a vendor isn't the same as being in controlCategory: News

Cloudflare's Certificate Transparency Monitoring is now generally available. The biggest change: we no longer email you about certificates Cloudflare issued for your domain, so when an alert lands in your inbox, it's worth a look.

For a long time, I've included last.fm and Open Scrobbler links on each music collection item's detail page in some shape or form because those are pretty straightforward to render, but something I really wanted on this new website was provide more links for different platforms.The more my music collection helps people discover music away from algorithmic recommendations, the better. A good way to do that is to provide as many links as possible to services that people use. I already covered this

New EU guidelines, why AI sparkles aren’t enough, when AI labels are required, and what the rules mean for AI-powered features and products.

こんにちは。LINEヤフー株式会社の佐野です。2026年7月6日〜9日にポーランド・ワルシャワで開催された useR! 2026 に参加してきました。私自身は初めての参加です。弊社は過去にも参加してお...

The best way to learn is by shipping product to users in production, and that's why we don’t treat our interns as temporary guests. Every intern at Vercel is expected to operate like a core part of our engineering team from day one.This past winter, we welcomed a small cohort of those interns to our headquarters in San Francisco. Over an intense four months, they contributed to some of our most important products: the CDN, v0, financial infrastructure, AI Gateway, and more. They shipped features

<p><strong>Release:</strong> <a href="https://github.com/simonw/alchemy-utils/releases/tag/0.1a1">alchemy-utils 0.1a1</a></p> <p>Performance boost for DuckDB exports and CSV imports, <a href="https://simonwillison.net/2026/Aug/12/alchemy-utils/">see here</a>.</p>

こんにちは、フロントエンドエンジニアのやなぎ（@apple_yagi）です。 PR TIMESでは、2023年からPlaywrightを用いたVisual Regression Test（VRT）を運用しています。VRT […]

SvelteKit 3 is now in the Release Candidate phase. If all goes well — meaning that people like you try it out and find that it works as expected — we will follow it up with a stable release in the near future, with no further breaking changes.But there are some breaking changes since SvelteKit 2. We’re taking advantage of this release to prune some of the weeds in the codebase and lay the groundwork for SvelteKit’s continued evolution, more on which below.To migrate an existing app, you can use

, the open-weights coding model from Z.ai with a 1M-token context window, is free for agents through August 27, served by on .GLM 5.2eveBlackbox AIAI GatewayNew eve agents come with GLM 5.2 as their default model. Use to get started.npx eve@latest init my-agentExisting agents can benefit from this as well with a one-line change in :agent/agent.tsOr run from the CLI:eve setAfter August 27, GLM 5.2 stays available on AI Gateway at standard provider rates.Try GLM 5.2 in the .model playgroundRead mo

from Google is now available on for 50% off till December 31st, 2026.Gemini 3.7 FlashAI GatewayGemini 3.7 Flash improves on prior Flash models at software engineering and agentic work. It resolves issues more reliably and spends less time stuck in failed agent loops, which matters on long tool-calling sequences where one derailment costs the rest of the run. It also generates desktop and web application code directly from design mocks, with closer adherence to the source design.To use Gemini 3.7

Team owners and members can now upgrade all projects using Node.js 20 or earlier to Node.js 24 with one click from the Vercel Dashboard.This updates the . If your project also defines a version in , you'll need to update it manually. Existing deployments are not affected.Node.js version in project settingspackage.jsonView and upgrade deprecated Node.js projects now.Read more

The lets you run established coding-agent runtimes through one unified interface, so you can switch runtimes without changing your application code. Today we are adding Grok Build, which runs through the same interface as every other supported harness.AI SDK harness layerHarnessAgent is the official harness adapter for Grok Build, built on top of ().@ai-sdk/harness-grok-build@ai-sdk/harness-acpthe ACP harness adapterRead the to get started.Grok Build harness documentationThe full supported list

The now supports any Agent Client Protocol (ACP)-compatible harness with through the new package.AI SDK harness layerHarnessAgent@ai-sdk/harness-acpPreviously, every harness adapter wrapped one specific runtime (Claude Code, Codex, Pi, Deep Agents, OpenCode). wraps the protocol instead. It is a meta adapter: rather than adapting a single harness, it lets you build an adapter for any harness that ships an ACP-compatible package.@ai-sdk/harness-acpImplement a harness by passing that package to and

is now available on the as a native integration. ExaVercel Agent MarketplaceExa's neural search engine delivers high-quality, relevant results to ground AI in fresh, current information. Add Exa to your Vercel app in seconds to power search, research agents, and context-aware features. The Vercel integration provides a single API key that works across all Exa products, with billing handled directly through your Vercel account.Install Exa from the or deploy the to see Exa's instant search, deep a

<p><strong><a href="https://openrouter.ai/deepseek/deepseek-v4-pro-0813">DeepSeek V4 Pro 0813 (on OpenRouter)</a></strong></p>The latest DeepSeek Pro model is now available, via API only. I had to link to OpenRouter because DeepSeek don't have any obvious announcement page for their new model.</p><p>I haven't been able to confirm if they plan to release the open weights, but given the weights are available for both April's <a href="https://hugg...

In July, we experienced eight incidents that resulted in degraded performance across GitHub services.The post GitHub availability report: July 2026 appeared first on The GitHub Blog.

<p><strong>Release:</strong> <a href="https://github.com/simonw/alchemy-utils/releases/tag/0.1a0">alchemy-utils 0.1a0</a></p> <p>I've long pondered what a database agnostic version of my <a href="https://sqlite-utils.datasette.io/">sqlite-utils</a> Python library and CLI utility might look like. This morning (literally a shower project) I tasked Codex and GPT-5.6 Sol Ultra with building a prototype:</p><blockquote><p><co...

Learn how to write your first prompt in the GitHub Copilot app, choose the right context and model, and start your first task with confidence.The post GitHub Copilot app for Beginners: Write your first prompt appeared first on The GitHub Blog.

AI contributors are already in your queue. AutoGPT maintainer Nicholas Tindle shares the repo instructions, gates, and boundaries that keep maintainers in control.The post Your contributors are AI-first now. Is your project? appeared first on The GitHub Blog.

Nice bookmarkable page with classy examples of two-state transitions from Jakub Antalik.

Two StepSecurity controls show every CI job and developer machine that still installs from public registries. Once you can see them, you can block public registries in CI and centrally set the registry configuration on every developer machine.

<blockquote cite="https://blog.florianherrengt.com/ai-removing-middle-class-software-engineering.html"><p>But then users start to report a weird bug. It's the 4th time your team has been trying to fix it. I mean... asking AI to fix it. Unfortunately, it seems like not even Fable can figure it out.</p><p>You go talk to the person who worked on this feature.</p><p>"So where does the data come from?"</p><p>"Hmm... actually I don't know. Let me ask Cl...

The warning is correct. And the recommended fixes you've probably seen are wrong. Here's what you can do instead to properly fix the issue.Blocked aria-hidden: The Warning is Right, and Every Fix You’ve Found is Wrong originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.

SAST, Deep PR Review, AI Code Analysis, and AI Pentest each catch different vulnerabilities at different stages. Here's when to use each, and why.Category: Product & Company Updates

A quiet week in web performance is a useful chance to investigate the evidence and problems teams already have.

DeepSeek V4 Pro now runs on updated weights on AI Gateway. They are used by default when you call , so existing requests pick them up with no change to the model ID or your code.deepseek/deepseek-v4-proTo use the updated DeepSeek V4 Pro, set model to in the . AI Gateway will route to providers with the new weights:deepseek/deepseek-v4-pro-0813AI SDKTo run V4 Pro in a coding agent, use to connect your agents to AI Gateway, then select in the agent's model configuration. See the .vercel ai-gateway

MinMax H3を使って動画を作成したい！！でも、手元のPCが貧弱・・・と、言う方でも簡単にかつ格安で動画を作れる方法の紹介です。※15秒で40〜80円くらいらしいです。 Google Colabの課金Pay As You GoのプランでGoogle Colabに課金します。月額プランでも特に問題ないはずです。 Google Drive(Google One)に課金100GBのプランで問題ないので契約します。僕が課金したタイミングでは3ヶ月間は70円/月と言う狂った安さでした。 動画の準備 素材作成https://github.com/sobaya-01...

はじめに はじめまして。東京海洋大学 海洋工学部2年の恩田梨那(@cs_riri)と申します。 今回 ...

web search is now free on through August 31, and it's now the default web search for agents.ExaAI GatewayeveThe tool works with any AI Gateway model, with no separate Exa API key. When the model calls it, AI Gateway routes the request to Exa's Search API, returning web results and extracted page content with support for domain filters, date filters, and token-efficient excerpts.The built-in tool in eve now uses Exa by default when the model is served through AI Gateway. See other supported searc

How to publish agent skills so any AI coding agent can find and install them: the .well-known/agent-skills/index.json discovery index, SHA-256 integrity digests, single-file vs multi-file vs bundle packaging, and every install command. Worked from the catalog we just open-sourced.

Traditional code review cannot keep up with AI-generated code. An interactive, agentic review workflow increases throughput while preserving human judgment.

The is one of the most popular open-source AI projects in the world. It serves over 20 million npm downloads a week and the repo has over 26,000 stars. Maintaining the codebase means tracking four moving targets at once:AI SDKAfter multiple years of growth, the repo was getting 100+ new issues every month, and when Anthropic's Opus 4.6 model was released, PRs hit an inflection point. By late June, that compounding had accumulated over 1,000 open issues and almost 800 pull requests.That backlog i

Using coding agents means setting up multiple accounts, provisioning API keys, and scattering observability and billing. Now, you can route them through to centralize all of this and add controls, with set up in one command:AI GatewayTo start: connects Claude Code, Codex, OpenCode, and more in one command. It finds the agents on your machine, creates the API key, and writes the gateway URL and your credentials into each agent's own config format.vercel ai-gateway coding-agents setupFiles are edi

We recently announced that new Pro teams are eligible to claim . We are now extending this offer to all teams.a free domain for their first yearProExisting Pro teams can now also claim a free domain for one year. The offer covers one eligible domain per team across six TLDs: , , , , , and . After the first year, your domain will at the regular price shown at checkout when you claim it..online.site.space.store.tech.websiterenew automaticallyClaim yours at , and see the for full terms.vercel.com/d

from SpaceXAI is now available on .Grok 4.6AI GatewayThe model has a 500K token context window and accepts text and image inputs. Grok 4.6 supports low, medium, high, and xhigh reasoning levels and defaults to high.To use Grok 4.6, set to in the :modelxai/grok-4.6AI SDKTo use it in a , run to connect Claude Code, Codex, OpenCode, or Pi, then select inside the agent.coding agentvercel ai-gateway coding-agents setupxai/grok-4.6To try Grok 4.5 with no code, try the model in the .model playgroundAI

<p><strong><a href="https://sophiebits.com/2026/06/25/there-are-no-lossless-transformations-of-natural-language-text">There are no lossless transformations of natural-language text</a></strong></p>Sophie Alpert shares her "internal policy on acceptable use of AI writing by engineers". It's a short read (supporting its own recommendations) and really good.</p><p>If you chose to have LLMs help massage your writing the following rule seems crucial to...

The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

You can get pretty darn flexible with it.

<p><strong><a href="https://stolen-thoughts.com/">Stealing Reasoning Traces from Proprietary LLM APIs</a></strong></p>A vanity domain name (<code>stolen-thoughts.com</code>) for <a href="https://www.alphaxiv.org/abs/2608.09867">a neat paper</a>:</p><blockquote><p>Anthropic, OpenAI, and Google return encrypted chain-of-thought blocks to clients that can be replayed across sessions, users, and models. We take a trace pr...

Every build on Vercel starts in the build warm pool, which is a set of standby containers that let builds begin without waiting for new compute. The pool runs on state that tracks which containers are ready, the tokens each one uses to authenticate, and the mapping that ties every running build back to the deployment that gets billed for it. When we built the pool, we put all of that in Redis, which was fast and made sense at the time.Over the years, though, that state turned into a liability. T

Vercel Connect now gives teams line-level visibility into the token lifecycle. See who created a token, what app or project used it, when, and whether it is still active.Every connector's detail page includes a new tab:ObservabilityConnect observability is available on all plans. Events are retained for 12 hours on Hobby, 3 days on Pro, and 30 days on Enterprise. To retain events longer, forward them to a custom webhook endpoint by adding a Drain on Pro and Enterprise plans. Enterprise teams als

Enterprise Managed Users (EMU) gives organizations full control over the Vercel accounts tied to their verified domains. It makes the organization's identity provider the single source of truth for authentication and account lifecycle, so accounts on company domains are governed centrally rather than owned by individuals.Now generally availableRequires an Enterprise plan, enforced SAML SSO, active Directory Sync, and at least one verified domain.In Beta, available on requestTo request access, co

<p><strong>Release:</strong> <a href="https://github.com/simonw/datasette-upload-dbs/releases/tag/0.5a0">datasette-upload-dbs 0.5a0</a></p> <p>This plugin has been around for a while - it lets users upload a brand new SQLite database to a hosted Datasette instance, at which point that database will start being served by that instance.</p><p>It can also be used to atomically swap a database with a more recent version. The uploaded database is...

You can now integrate 100+ services through Vercel Connect from the CLI. Previously, completed setup in the terminal for some services, and opened the dashboard for everything else.vercel connect createPass the service name to create a connector, then attach it to your project:The CLI pre-populates the brand name, icon, auth type, and MCP or discovery URL, then prompts for any credentials the service requires and creates the connector.After attaching the connector, call with its UID () to reques

Developers are owning more of the delivery system around code, not just code itself. Join us during GitHub Universe to meet other devs, learn something new, and explore what's next.The post From coder to orchestrator: How agents shift the role of a developer appeared first on The GitHub Blog.

In the first half of 2026, Cloudflare detected a 519% surge in hyper-volumetric DDos attacks across its network. These attacks were driven heavily by DNS and CLDAP reflection vectors. This report breaks down how major geopolitical conflicts reshaped the global cyber threat landscape.