直近1週間の更新
9/15 (月)

Rethinking MVPs: Learning Tool or Delivery Strategy?
Scott Logic

A look at MVPs, when they are a good fit and alternative tools that may suit your use case better.
2時間前

npm/GitHubパッケージのセキュリティ設定のリスクアセスメント
1
Recent Gists from azu


README.md npm/GitHubパッケージのセキュリティパッケージを公開するリポジトリにセキュリティ管理について扱うnpm Trusted PublishingでOIDCを使ってトークンレスでCIからnpmパッケージを公開する | Web ScratchnpmOIDCTrusted PublisherEnviroment: npm を指定するRequire two-factor authentication and disallow tokensで、2FA or OIDCのどちらかでのみpublish可能にできる。GitHubのアカウントが乗っ取られた場合、npmにpublishされてしまう。GitHubWorkflow ファイルの方針できるだけ外部依存を減らすactions/* と ビルトインコマンドのみにする依存は必ずSHA PINする Require actions to be pinned to a full-length commit SHAを有効化CODEOWNERでworkflowの変更にオーナーをつけるRulesetでRequire review from Co
6時間前

Nuxt Scripts: Load And Optimize Third Party Code
DebugBear Blog

Learn how to optimize third-party scripts in Nuxt using the Nuxt Scripts module and @nuxtjs/partytown. This guide goes beyond the basics, showing you how to declaratively manage scripts, conditionally load them (e.g., with consent), run heavy scripts in web workers, and combine both tools for real-world performance setups.
11時間前

Bun v1.2.22
bun.com

Fixes 144 issues (addressing 257 👍). Async stack traces for better debugging, RFC 6455 compliant WebSocket client subprotocol negotiation, MySQL adapter improvements including affectedRows and lastInsertRowid support, JSX side effects preservation during bundling, event loop delay monitoring with perf_hooks, HTTP server idle connection management, --workspaces in bun run, function name removal during minification, and numerous Node.js compatibility fixes including child_process.spawnSync, socke...
12時間前
9/14 (日)

pnpm の minimumReleaseAge オプションでサプライチェーン攻撃を防ぐ
azukiazusa のテックブログ2

最近は npm パッケージのサプライチェーン攻撃が増えています。幸いほとんどの場合悪意のあるパッケージは公開から 1 週間以内に削除されるため、公開から一定期間が経過したパッケージのみをインストールすることでリスクを軽減できます。
2日前
9/13 (土)

A deep dive into Cloudflare’s September 12, 2025 dashboard and API outage
The Cloudflare Blog

Cloudflare’s Dashboard and a set of related APIs were unavailable or partially available for an hour starting on Sep 12, 17:57 UTC. The outage did not affect the serving of cached files via the
2日前

自然言語で CI/CD パイプラインを定義する Agentic Workflows
33
azukiazusa のテックブログ2


Agentic Workflows は自然言語で CI/CD パイプラインを定義できるツールとして GitHub Next が開発しています。自然言語で定義されたワークフローは GitHub CLI の拡張機能として提供される gh aw コマンドでコンパイルして実行できます。これは継続体なAI(Continuous AI)を実現するためのツールです。
2日前

Subgrid: how to line up elements to your heart’s content
2
WebKit


When Grid became widely available across browsers in 2017, it was an absolute game changer.
3日前

Breakpoint Columns, Five Ways. Which Do You Like?
Frontend Masters Boost RSS Feed

There are usually multiple ways to do the same thing on the web. Sometimes... a lot of ways. Which is "better" can be a matter of taste or which abstraction buys the most value. Check out this CSS example and see which you prefer.
3日前

Building personal apps with open source and AI
The GitHub Blog

Hear about the personal tools we use to improve our workflows (and how to get started building your own) on this episode of the GitHub Podcast.The post Building personal apps with open source and AI appeared first on The GitHub Blog.
3日前

From Data To Decisions: UX Strategies For Real-Time Dashboards
Articles on Smashing Magazine — For Web Designers And Developers

Real-time dashboards are decision assistants, not passive displays. In environments like fleet management, healthcare, and operations, the cost of a delay or misstep is high. Karan Rawal explores strategic UX patterns that shorten time-to-decision, reduce cognitive overload, and make live systems trustworthy.
3日前
9/12 (金)

Crates.io Users Targeted by Phishing Emails
Socket

The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.
3日前

What Can We Actually Do With corner-shape?
3
CSS-Tricks


When I first started messing around with code, rounded corners required five background images or an image sprite likely created in Photoshop, so when border-radius came onto the scene, I remember everybody thinking that it was the best thing ever. …What Can We Actually Do With corner-shape? originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
3日前

Introducing Custom Pull Request Alert Comment Headers
Socket

Socket now lets you customize pull request alert headers, helping security teams share clear guidance right in PRs to speed reviews and reduce back-and-forth.
3日前

Introducing x402-mcp: Open protocol payments for MCP tools
1
Vercel News


AI agents are improving at handling complex tasks, but a recurring limitation emerges when they need to access paid external services. The current model requires pre-registering with every API, managing keys, and maintaining separate billing relationships. This workflow breaks down if an agent needs to autonomously discover and interact with new services. is an open protocol that addresses this by adding payment directly into HTTP requests. It uses the to let any API endpoint request payment wit
3日前

402-mcp enables x402 payments in MCP
Vercel News

Introducing , a library that integrates with the AI SDK to bring paywalls to Model Context Protocol (MCP) servers to let agents discover and call pay for MCP tools easily and securely.x402-mcpx402With x402-mcp, you can define MCP servers with that require payment to run, enabling account-less, low-latency, anonymous payments directly in AI workflows. Payments confirm in ~100–200ms, with fees under $0.01 and support for minimums under $0.001.paidToolsGetting started is easy, here's how you can de
3日前

Qwen3-Next models are now supported in Vercel AI Gateway
Vercel News

You can now access , two ultra-efficient models from , designed to activate only 3B parameters, using Vercel's with no other provider accounts required.Qwen3 NextQwenLMAI GatewayAI Gateway lets you call the model with a consistent unified API and just a single string update, track usage and cost, and configure performance optimizations, retries, and failover for higher than provider-average uptime.To use it with the , start by installing the package:AI SDK v5Then set the model to :alibaba/qwen3-
3日前

New Vercel CLI login flow
Vercel News

The command now uses the industry-standard , making authentication more secure and intuitive. You can sign in from any browser-capable device.vercel loginOAuth 2.0 Device FlowWhen approving a login, be sure to verify the location, IP, and request time before granting access to your Vercel account.Email-based login () and flags such as , , , , and are deprecated. Beginning , these methods will no longer be supported.vercel login [email protected] 1, 2026Up
3日前

新機能開発の突破口:この機能の顧客は誰?
1
エムスリーテックブログ


こんにちは! エンジニアリングG プロダクトマネージャーの杉本です。 私はインターン・業務委託を経て、今年(2025年)4月にエムスリーに入社しました。現在はデジスマチームに所属し、経験豊富なチームメンバーと共に医療業界のDXに真正面から取り組んでいます。 入社してからの半年間、人生で経験したことがないような濃密な学びを重ねながら、楽しく働くことができています。このブログでは、そんな学びの1つをシェアできればと思います。 Imagenで今までの半年間を表現してみました はじめに:急成長プロダクトゆえの難しさ 顧客の声はいつも正しい、しかし… 灯台下暗し! 突破口はすぐ近くにあった この経験から…
3日前

Learning web development: Implementing web servers
2ality – JavaScript and more

<p>In this chapter, we’ll write our own web server: It will serve files and manage the data for a browser app.</p>
3日前

Rails Decouples Trix From Action Text Into action_text-trix gem
Saeloun Blog

Action Text is a power-packed tool designed to build WYSIWYG editors for our Rails applications easily.Action Text brings rich text content and editing to Rails.TrixTrix is developed by Basecamp.According to its official website:Trix is an editor for writing messages,comments,articles,andlists—the simple documents most web apps are made of.It features a sophisticated document model,support for embedded attachments,andoutputs terseand consistent HTML.We can read more about Trix,all the features i
3日前

How to add SSO, MFA, and Passwordless authentication to your .NET app
WorkOS Blog

Step-by-step tutorial on integrating Single Sign-On, Multi-Factor Authentication, and Passwordless login into your .NET app with WorkOS.
3日前

第7回「LegalOn」誕生の裏側:バックエンド編
LegalOn Technologies Engineering Blog

はじめに LegalOn Technologiesが提供する「LegalOn: World Leading Legal AI」は、契約書ドラフト・レビューや案件の管理、法務相談まで、法務業務をワンストップで支援する革新的なサービスです。リリースから1年半、企画開始から約2年半が経った今、プロジェクト立ち上げの背景、開発の進め方、これまでの振り返りや今後の展望、さらには技術面での学びまでを、全9回にわたるブログシリーズとしてお届けしていきます。 第7回となる本記事では、「LegalOn」のバックエンドアーキテクチャと技術選定に焦点を当て、当時の意思決定の背景や、これまでの成果・課題について、CT…
4日前

GitHub Availability Report: August 2025
1
The GitHub Blog


In August, we experienced three incidents that resulted in degraded performance across GitHub services.The post GitHub Availability Report: August 2025 appeared first on The GitHub Blog.
4日前

Rust Support Now in Beta
Socket

Socket's Rust support is moving to Beta: all users can scan Cargo projects and generate SBOMs, including Cargo.toml-only crates, with Rust-aware supply chain checks.
4日前

GitHub Copilot coding agent 101: Getting started with agentic workflows on GitHub
The GitHub Blog

Delegate it a task, and coding agent can independently write, run, and test code. Here’s how you can make the most of it.The post GitHub Copilot coding agent 101: Getting started with agentic workflows on GitHub appeared first on The GitHub Blog.
4日前

The Joy of Mixing Custom Elements, Web Components, and Markdown
Frontend Masters Boost RSS Feed

One of the nice things about Markdown is that you can just… put HTML in there too. There is no Markdown shortcut for a <div>, but you can just use a <div>. That means you can use use <my-custom-element> as well, bringing the world of Web Components into your writing and creating of content. Deane […]
4日前

Compiling Multiple CSS Files into One
CSS-Tricks

Stu Robson outlines two ways to compile multiple CSS files when you aren't relying on Sass for it.Compiling Multiple CSS Files into One originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
4日前
9/11 (木)

Un-Sass’ing my CSS: compiling multiple CSS files into one
Piccalilli - Everything

I spend an unhealthy amount of time thinking about this stuff. It's something I can't shake off because from days in CSS consultation where I saw more CSS compiling/concatenation methods than should be legal, frankly.Here at Piccalilli we are using PostCSS, as Stuart describes in this article. It's pretty low tech (as a baseline anyway) and does a good, predictable job for us.Stuart also walks us through a custom script method which I've got to say is rather appealing.Simple is always better in
4日前

JetBrains at the ICPC World Finals 2025 Baku
Company | The JetBrains Blog

The ICPC World Finals 2025 in Baku was an unforgettable event, and we were honored to be part of it once again. It’s always a joy to see the brightest students from across the globe. The Finals reminds us why supporting the ICPC is such a vital mission – it’s about community, talent, and the […]
4日前

Migrating from F5 NGINX Ingress Controller to the F5 NGINX Gateway Fabric
NGINX Community Blog

The Kubernetes ecosystem is undergoing a significant transformation in how it handles networking, shifting from traditional Ingress API and annotations to the more advanced Gateway API. This change is driven by the growing complexity of modern applications and the need for more sophisticated traffic management. NGINX, a leader in application delivery, is at the forefront […]
4日前

LongCat-Flash Chat model is now supported in Vercel AI Gateway
Vercel News

You can now access LongCat Flash Chat, a new model from Meituan focused on agentic tool use, using Vercel with no other provider accounts required. The model dynamically activates parameters, based on contextual demands.AI GatewayAI Gateway lets you call the model with a consistent unified API and just a single string update, track usage and cost, and configure performance optimizations, retries, and failover for higher than provider-average uptime.To use it with the , start by installing the pa
4日前

アンケートの分岐構造を自動解析してQAを楽にする試み
2
エムスリーテックブログ


【Unit7 ブログリレー7日目】こんにちは、エンジニアリンググループGMの木田です。 前日の記事は海野尾による プロダクトマネジメント1年目の学び 〜プロダクトを成功に導く「一次情報」の力〜 でした。 さて、今日はアンケートシステムの複雑な分岐制御に潜む構造的な問題を検知するための取り組みを試行錯誤した結果、一定の成果が得られたのでご紹介します。
4日前

Quality assurance in the AI era: a leadership imperative, according to S&P Global Market Intelligence
Blog RSS feed

In the rapidly evolving AI era, technology leaders are facing a fundamental shift in how code is created, validated, and governed.
4日前

エムスリー、実はアプリの会社です
1
エムスリーテックブログ


はじめに こんにちは。エンジニアリンググループ マルチデバイスチームGMの藤原聖です。 エムスリーはiOS/Androidアプリを2025年9月時点で、13サービス開発しています。 1つの会社が作っているアプリの数としては意外に多いのではないでしょうか? 本記事ではエムスリーが実はアプリの会社であることをご紹介できればと思います。 We're App Developers
4日前

STORES Tech Conf 2025 “What Would You Do?” を2025年11月26日(水)に開催&学生向け参加支援をします
STORES Product Blog

こんにちは、技術広報のえんじぇるです。 2024年に引き続き STORES Tech Conf を今年も開催することになりました!わいわい! 開催日時:2025年11月26日(水)13:00〜19:00、懇親会19:00〜21:00 開催場所:浅草橋ヒューリックホール&カンファレンス 参加費用:無料 今年のテーマは“What Would You Do?”です。サイトもオープンしておりますので、ぜひご覧ください。 storesinc.tech 絶賛準備中ですが、STORES Tech Conf 2025について紹介します。 前回の開催について STORES Tech Conf 2024“New …
4日前

How to keep package.json under control
Val Town Blog

How I wrangle the many tools that we use to build Val Town
4日前

DartでQuineをダーッと書きました
1
エムスリーテックブログ


デジスマチームの荒谷(@_a_akira)です。 最近、社内で各言語のQuineを作成するブームが起きています。この流れに乗って、私もDartでQuineを作成してみましたので、本記事でその仕組みを解説します。 エムスリーは2025年9月10日(水)から12日(金)に開催されるDroidKaigi 2025にゴールドスポンサー、また2025年11月13日(木)に開催のFlutter Kaigi 2025にはシルバースポンサーとして協賛します。 イベントでは、今回作成したQuineをデザインしたクリアファイルをノベルティとして配布予定です。ぜひ弊社ブースにお立ち寄りいただき、お手に取ってみてくだ…
4日前

Your guide to GitHub Universe 2025: The schedule just launched!
The GitHub Blog

Create your own agenda of favorites, sign up for one-on-on mentoring sessions, and register if you haven’t already. We’ll see you there!The post Your guide to GitHub Universe 2025: The schedule just launched! appeared first on The GitHub Blog.
5日前

Announcing Socket Fix 2.0
1
Socket


Socket Fix 2.0 brings targeted CVE remediation, smarter upgrade planning, and broader ecosystem support to help developers get to zero alerts.
5日前

Feross on Risky Business Weekly Podcast: npm’s Ongoing Supply Chain Attacks
Socket

Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
5日前

Choosing the Right Model in Cursor
Frontend Masters Boost RSS Feed

Cursor has an "auto" mode, "but if you care about cost or predictability, it’s worth picking models manually." says Steve Kinney.
5日前

Behind The Scenes of Bun Install
16
bun.com


Learn how Bun is able to cut install times by up to 25×. Bun skips Node.js's overhead with direct system calls, cache-friendly data layouts, OS-level copy-on-write, and full-core parallelism.
5日前
9/10 (水)

What’re Your Top 4 CSS Properties?
CSS-Tricks

Everyone has a different opinion which is great because it demonstrates the messy, non-linear craft that is thinking like a front-end developer.What’re Your Top 4 CSS Properties? originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
5日前

MongoDB Atlas is now available on the Vercel Marketplace
Vercel News

is now available on the Vercel Marketplace. Developers can now provision a fully managed MongoDB database directly from your Vercel dashboard and connect it to your project without leaving the platform.MongoDB Atlas Adding a database to your project typically means managing another account, working through connection setup, and coordinating billing across services. The Vercel Marketplace brings these tools into your existing workflow, so you can focus on building rather than configuring.Read mor
5日前

Vercel Sandbox maximum duration extended to 5 hours
Vercel News

can now run Vercel Sandboxes for up to 5 hours (up from 45 minutes).Pro and Enterprise teamsThis new max duration unlocks workloads that require longer runtimes, such as large-scale data processing, end-to-end testing pipelines, and long-lived agentic workflows. now and learn more in the .Get started with SandboxdocsRead more
5日前

ChatGPT can now integrate with Vercel MCP
Vercel News

You can now use ChatGPT with our official Model Context Protocol (MCP) server. For security, Vercel MCP currently supports AI clients that have been reviewed and approved by Vercel.Vercel MCP,Connectors within ChatGPT are available in on the web.beta to Pro and Plus accountsFollow the steps below to set up Vercel as a connector within ChatGPT:You should now be able to select Vercel as a connector in chats.Developer ModeWith Vercel MCP you can give agents , , and more.access to protected deployme
5日前

MongoDB Atlas joins the Vercel Marketplace
Vercel News

You can now provision directly from the Vercel Marketplace.MongoDB Atlas Spin up a fully managed MongoDB Atlas database, connect it to you Vercel project, and start building without leaving the Vercel dashboard.This MongoDB Atlas native integration provides:This integration removes the friction of switching between dashboards or managing complex setup, giving developers a fast, modern data layer to power web and AI applications on Vercel. Get started with on the Vercel Marketplace, available to
5日前

Quick SEO Guidelines for Your Next.js App
Playful Programming's Atom Feed

A practical guide to optimizing SEO in your Next.js application.
5日前

Integrating CSS Cascade Layers To An Existing Project
Articles on Smashing Magazine — For Web Designers And Developers

The idea behind this is to share a full, unfiltered look at integrating CSS Cascade Layers into an existing legacy codebase. In practice, it’s about refactoring existing CSS to use cascade layers without breaking anything.
5日前

Deno 2.5: Permissions in the config file
2
Deno


Simpler permission management with permission sets, new Deno.test APIs for setting up and tearing down test cases, specifying custom headers in WebSocket connections, runtime APIs in deno bundle, and more.
5日前

プロダクトマネジメント1年目の学び 〜プロダクトを成功に導く「一次情報」の力〜
1
エムスリーテックブログ


【Unit7 ブログリレー6日目】 こんにちは。エンジニアリンググループ プロダクトマネージャーの海野尾です。 Unit7に所属し、主に医師向けのアンケート/インタビューサービスのプロダクト開発に取り組んでいます。 私は2024年10月にエムスリーに入社しました。前職はIT企業でクラウドサービスの顧客提案・導入支援に携わっており、プロダクトマネージャーは今回が初挑戦になります。 気がついたらあと少しで1年が経過しようとしており、時間の経つスピードの早さに驚いていますが、この節目にこの1年間で得られた学びを振り返りたいと思います。 夏季休暇でイギリスに行ってきました。写真は湖水地方の宿からの眺め…
5日前

Ruby言語そのものの開発に挑戦する特別なインターンシップ、「Ruby開発インターンシップ」を始めます
13
STORES Product Blog


こんにちは、STORES で VPoE をしている id:hogelog です。 本日はプログラミングそのものが好きな学生の皆さんに向けて、特別なインターンシップの募集をお知らせします。Railsプロダクトを一緒に開発するのでもなく、講義的なワークショップをやるのでもなく、Ruby言語をRubyコミッターと一緒に開発する「Ruby開発インターンシップ」です。 hrmos.co なぜ「Ruby開発インターンシップ」の開発なのか? 私たち STORES は「Just for Fun」をミッションに、まちのお店のデジタル化を支援する会社として多くのプロダクトを作ってきました。EC、POSレジ、予約シ…
5日前

Introducing vt, the Val Town CLI
Val Town Blog

Write your scripts on the internet, from your terminal, or in any editor
5日前

Leveraging Copilot to rapidly refactor test automation
Scott Logic

This blog explores how to best use GitHub Copilot to swiftly refactor existing test automation
5日前

Exploring Active Agent, or can we build AI features the Rails way?
Evil Martians

Explore how the Active Agent library brings Rails conventions to AI development, with real-world examples from Evil Martians' early adoption experience
5日前

How to use the GitHub and JFrog integration for secure, traceable builds from commit to production
The GitHub Blog

Connect commits to artifacts without switching tools.The post How to use the GitHub and JFrog integration for secure, traceable builds from commit to production appeared first on The GitHub Blog.
6日前

Introducing Tier 1 Reachability: Precision CVE Triage for Enterprise Teams
Socket

Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
6日前

Unit Formatting with Intl in JavaScript
Frontend Masters Boost RSS Feed

Raymond Camden: It’s been a little while since I last blogged about my favorite web platform feature, Intl. Favorite?! Big words. As someone who does technical writing, though, I get it. Let’s say you have a number, like 392, and you need to display that as megabytes. What is the absolutely correct way to show […]
6日前

Analysis evidence from SonarQube now available in JFrog AppTrust
Blog RSS feed

By integrating SonarQube's industry-leading automated code review with JFrog's new AppTrust governance platform, together we are providing the essential framework for software engineering teams to embrace AI-driven speed without compromising on control.
6日前
9/9 (火)

How to Run Java Swing Apps in a Browser Using CheerpJ
CheerpJ

Legacy Swing applications still power core processes in many organisations. Stand-alone Java applications are not straightforward to distribute and update, making for a clunky deployment mode. Java Applet and Java Web start deployment models are deprecated, since modern browsers do not support Java plugins, and Java Web Start was deprecated after Java 8. If you...The post How to Run Java Swing Apps in a Browser Using CheerpJ appeared first on CheerpJ.
6日前

A more flexible Pro plan for modern teams
1
Vercel News


We’re updating Vercel’s Pro plan to better align with how modern teams collaborate, how applications consume infrastructure, and how workloads are evolving with AI. Concretely, we’re making the following changes:Read more
6日前

The second wave of MCP: Building for LLMs, not developers
30
Vercel News


When the MCP standard first launched, many teams rushed to ship something. Many servers ended up as thin wrappers around existing APIs with minimal changes. A quick way to say "we support MCP".At the time, this made sense. MCP was new, teams wanted to get something out quickly, and the obvious approach was mirroring existing API structures. Why reinvent when you could repackage?But the problem with this approach is LLMs don’t work like developers. They don’t reuse past code or keep long term sta
6日前

No build queues: On-demand concurrent builds now on by default
Vercel News

Teams on the new Pro pricing model will now have on-demand concurrent builds enabled by default. This ensures builds across projects start immediately without waiting in a queue, except when multiple builds target the same Git branch.You can manage this setting at any time using the , even if your team is not yet on the new Pro pricing model.new bulk enable featureLearn more in the read more about the , and .documentationupdates to Proswitch to the new Pro pricingRead more
6日前

HIPAA BAAs are now available to Pro teams
Vercel News

Pro teams can now enter into a Business Associate Agreement (BAA) to support HIPAA-compliant workloads on Vercel. The BAA is available self-serve through the dashboard with no Enterprise contract required.Vercel supports HIPAA compliance as a business associate by implementing technical and organizational safeguards, conducting annual audits, and offering breach notification in line with HIPAA requirements. Compliance is a shared responsibility between you and Vercel. Teams are responsible for c
6日前

Free Viewer seats now available on Pro
Vercel News

Pro teams can now add unlimited Viewer seats at no additional charge so team members can collaborate more flexibly and cost-efficiently.Viewers can access project dashboards, deployments, analytics, and more, but can’t see sensitive data, deploy, or change production settings. This is ideal for any team members looking to collaborate via access to the dashboard and preview deployments.Previously, all seats on Pro were paid. Moving forward, you can add two main types of seats:Viewers can easily r
6日前

Included Pro usage is now credit-based
Vercel News

The Pro plan now includes $20 in monthly usage credit instead of fixed allocations across metrics like data transfer, compute, caching, and more. This plan update replaces static usage buckets with a more flexible system that adapts to your workload.In addition to the above, the new Pro pricing model includes:Read more about the and .updates to Proswitch to the new Pro pricingRead moreFree viewer seatsSelf-serve enterprise features like and SAML SSOHIPAA BAABetter Spend Management, enabled by de
6日前

Spend Management now enabled by default on Pro
Vercel News

Spend Management is now enabled for new Pro teams, and will be enabled by default for existing teams when they switch to the new pricing model.All Pro teams will have a budget set by default based on any previous usage, if any, and any teams with existing budgets will be unaffected. This can be changed at any time in . spend management settingsEmail alerts will be sent when nearing the spend threshold based on your on-demand spend. This can be changed at any time here. This new default ensures y
6日前

While you’re fixing the fun stuff, fix the important stuff too
Piccalilli - Everything

Let's pretend we've been assigned a ticket to fix the "janky" hover state of some product cards. The cards shift up a few pixels with a nice transition but glitch if the pointer is at the bottom of the card.Watch the video.A problem that can show up when you create a nice transform and transition is because most of that time-based effect on :hover is glitchy and jolty for users if their pointer escapes out of the bounds of your element.See it for yourself.See the Pen Card hover area - jolty hove
6日前

DuckDB npm Account Compromised in Continuing Supply Chain Attack
4
Socket


Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
6日前

Reading The Gentle Singularity Through a Sustainability Lens
Scott Logic

Sam Altman says AI will cost as little as electricity—but what’s the real environmental impact of billions of queries a day? In this post I dig into the numbers from the blog post "The Gentle Singularity" and compare them to previous studies of the power and water use of AI systems.
6日前

Deliver Fast, Responsive Images with CKEditor’s New Image Optimizer
CKEditor Ecosystem Blog

Announcing CKEditor’s Image Optimizer - a new tool to automatically compress and resize images for lightning-fast load times and flawless display.
6日前

AI時代、どう学ぶか
26
エムスリーテックブログ


【Unit7 ブログリレー5日目】 Unit7のrikutoこと佐藤(@riku929hr)です。 2025年5月に入社したばかりの新参者ですが、気がつけば4ヶ月が経過しました。 今はGo言語を利用したアンケートシステムの開発に取り組んでおり、日々キャッチアップしながら刺激的な毎日を過ごしています。 入社、そしてAIエージェント到来 AI時代の学びの難しさ 手を動かすこと、理解すること 学び方はたくさんある 手を動かすのも楽しい 楽しもう!!! We are hiring!! 入社、そしてAIエージェント到来 僕が入社すると同時期に、Claude CodeなどのAIが自律してコードを書く技術・…
6日前

MCP Steering Committee Launches Official MCP Registry in Preview
Socket

The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
6日前

エムスリーがKotlin Loverに贈るノベルティ、Kotlin Quineクリアファイルを作りました
エムスリーテックブログ

はじめに こんにちは。エンジニアリンググループ マルチデバイスチームGMの藤原聖です。 エムスリーは2025年9月10日(水)〜12日(金)に開催される『DroidKaigi 2025』のゴールドスポンサー、2025年11月1日(土)に開催される『Kotlin Fest 2025』のゴールドスポンサーをそれぞれ務めます。 そこでKotlinを愛する皆さまに楽しんでいただこうとクリアファイルを作成しました。上記のイベントの参加者向けノベルティやブース等で配布しますので、ぜひお手に取ってご覧ください。 Kotlin Quine クリアファイル 本記事はクリアファイルに記載されているコードの解説記事…
6日前

Learning web development: Frontend frameworks
2ality – JavaScript and more

<p>In this chapter, we’ll take a look at <em>frontend frameworks</em> – libraries that help with programming web user interfaces (“frontend” means “browser”, “backend” means “server”). We’ll use the frontend framework <em>Preact</em> to implement the frontend part of a todo list app – whose backend part we’ll implement in a future chapter.</p>
6日前

Mux: Our Official Video Partner
1
The Astro Blog


We are happy to announce Mux as our official video partner, donating $5,000 each month toward the ongoing open-source maintenance and development of Astro.
6日前

Unleashing creativity
The Astro Blog

How CodeTV built a video streaming platform with Astro and Mux
6日前

1Password announces new integration with Zscaler
1Password Blog

A new integration between 1Password Device Trust and Zscaler marks the first step in helping our shared customers implement Zero Trust practices.1Password is proud to announce a new integration with Zscaler, a leading cloud-based solution for Zero Trust network access (ZTNA). This marks a shared commitment to helping our customers secure access, reduce their attack surface, manage AI app sprawl, and practice the principles of Zero Trust.The 1Password® Extended Access Management platform is desig
6日前

Building a better online editor for TypeScript
1
Val Town Blog


Running the Deno LSP to make our TypeScript language tools dramatically better
6日前

Implementing a generic SCIM client: A practical guide
WorkOS Blog

If you’ve built a custom Identity Provider, you’ll need to implement SCIM client functionality yourself. This guide shows you how to build a standards-compliant SCIM 2.0 client that can provision users and groups using WorkOS as the SCIM service provider.
6日前

Why OAuth is the Right Fit for the MCP Registry
WorkOS Blog

By creating a central catalog of available servers, the MCP Registry has solved the discovery problem—but that's only half the equation. The real challenge lies in authentication.
6日前

Electron 38.0.0
Electron Blog

Electron 38.0.0 has been released! It includes upgrades to Chromium 140.0.7339.41, V8 14.0, and Node 22.16.0.
6日前

Introducing Pull Request Stories to Help Security Teams Track Supply Chain Risks
Socket

Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
7日前

npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack
2
Socket


npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
7日前

Building An AI-Agnostic Conversation Logger - Phase 4: Mini-Me
Scott Logic

This episode charts my attempt to build Mini-Me, a CLI sidekick that was supposed to learn my quirks and write like me, but instead turned into a shadowy pastiche of my style. AI tools can generate features at light speed, yet without unwavering product ownership discipline, scope creep turns your elegant vision into feature bloat. The experience crystallised into a practical checklist for AI project governance - because just as every orchestra needs a score, every cinematic universe needs a sto
7日前

Getting Started with Cursor
Frontend Masters Boost RSS Feed

Cursor is an AI-focused VS Code fork. Here's Steve Kinney with a nice overview of what it offers and how to start getting help out of it right away.
7日前
9/8 (月)

Composition in CSS
CSS-Tricks

CSS is a composable language by nature. This composition nature is already built into the cascade. We simply don't talk about composition as a Big Thing because it's the nature of the language.Composition in CSS originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.
7日前

Color Shifting in CSS
1
Josh Comeau's blog


A little while ago, I was trying to animate an element’s background color, so that it cycled through the rainbow. Seems easy, but it turns out, browsers have a surprisingly big limitation when it comes to color processing! In this tutorial, we’ll dig into the issue, and I’ll share a couple of strategies you can use to work around this limitation.
7日前

Bringing Node.js HTTP servers to Cloudflare Workers
5
The Cloudflare Blog


We've implemented the node:http client and server APIs in Cloudflare Workers, allowing developers to migrate existing Node.js applications with minimal code changes.
7日前

Critical npm supply chain attack response - September 8, 2025
Vercel News

On September 9, 2025, the campaign extended to DuckDB-related packages after the account was breached. These releases contained the same wallet-drainer malware, confirming this was part of a coordinated effort targeting prominent npm maintainers.duckdb_adminWhile Vercel customers were not impacted by the DuckDB incident, we continue to track activity across the npm ecosystem with our partners to ensure deployments on Vercel remain secure by default.Read more
7日前

Vercel Functions now support graceful shutdown
Vercel News

Vercel Functions running on Node.js and Python runtimes now support graceful shutdown, giving you up to 500 milliseconds to run cleanup tasks before termination.When a function is terminated, such as during scale-down, the runtime receives a signal. You can now use this signal to run cleanup tasks like closing database connections or flushing external logs.SIGTERMLearn more about the .SIGTERM signalRead more
7日前

Bulk enable on-demand concurrent builds across projects
Vercel News

Pro teams can now remove build queues across all projects with by bulk enabling .just one clickon-demand concurrent buildsOn-demand concurrency scales build compute capacity dynamically, so all builds for a project start as soon as they are requested, except when multiple builds target the same Git branch.To get started, to:visit your Pro team's billing settingsLearn more in the . documentationRead moreEnable or disable for all existing projectsSearch and pick specific projects where it should b
7日前

AI SDK and AI Gateway now integrated in GitHub Actions
Vercel News

You can now use the to access the and , generating text or structured JSON directly in your workflows by specifying a , , and .vercel/ai-action@v2promptmodelapi-keyGitHub ActionAI SDKAI GatewayThis integration enables new AI powered use cases for Github Actions, like summarizing what made it into a release, a light PR code review, comment moderation, or finding duplicate or relevant issues. For example, you can use it to triage issues like:Learn more and see examples in the or .Github Actions ma
7日前