<p><strong><a href="https://datasette.io/blog/2026/september-security-releases/">Datasette 1.0a39 and 0.65.4 security releases</a></strong></p>Today we're releasing two new security patch versions of Datasette: <a href="https://docs.datasette.io/en/latest/changelog.html#v1-0-a39">1.0a39</a> and <a href="https://docs.datasette.io/en/stable/changelog.html#v0-65-4">0.65.4</a> - one for the current alpha series and one for the stable 0.65....

<p><strong><a href="https://fzakaria.com/2026/09/04/any-nix-package-live-in-your-browser">Any Nix package, live in your browser</a></strong></p>Farid Zakaria calls this his "<em>magnum opus</em> of Nix work", and I can see why.</p><p><a href="https://trynix.dev">trynix.dev</a> provides a <a href="https://github.com/ktock/qemu-wasm">qemu-wasm</a> powered x86_64 Linux virtual machine running entirely in your brows...

Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Checking agent-generated code usually means hopping between tabs. Learn how to view diffs, run terminal commands, and preview web apps side by side in the GitHub Copilot app.The post GitHub Copilot app for Beginners: Using the diff, terminal, and browser appeared first on The GitHub Blog.

<p><strong><a href="https://shopify.engineering/back-to-native">Native is now the future of mobile at Shopify</a></strong></p>Shopify are moving from React Native back to separate Swift and Kotlin codebases for their native apps, for the exact reason you would expect:</p><blockquote><p>We decided to switch from native to React Native in 2020 for three reasons:</p><ul><li>Stop building the same features twice</li><l...

I haven't automated myself out of the loop. I've automated myself out of the experience of making.

StyleX has been around for a while, but it’s seeing a resurgence in popularity lately for whatever reason. Seems pretty good to me. You don’t have to write atomic CSS, but you get atomic CSS output that loads like any other CSS. Kinda like you don’t have to write like Tailwind to get Tailwind-like efficient […]

The now supports GitHub Copilot through the official adapter. The harness layer lets your application run different coding agents through the same interface, so you can switch agents without changing your application code.AI SDK harness layer@ai-sdk/harness-github-copilotHarnessAgentPass to :githubCopilotHarnessAgentUnder the hood, the adapter uses to connect GitHub Copilot to through the Agent Client Protocol (ACP).@ai-sdk/harness-acpHarnessAgentSupported harnesses now include, in addition to G

FastAPI frontends and static files, served with or , are now promoted to the at build time. Requests for those paths are served directly from the CDN, without invoking your Vercel Function.app.frontend()StaticFilesVercel CDNFastAPI evaluates routes in declaration order. A route declared before a mount takes priority over any CDN file at that path. This precedence is preserved.StaticFilesPromoted source directories remain in the function bundle so the app can read from them at runtime. To exclude

NGINX Ingress Controller 5.6.0 introduces HSTS as a Policy type for the VirtualServer CRD. This blog gives a quick overview of the feature with some deployment examples and tips on how to correctly configure this policy. Across this blog, we’re focused on: What is HSTS? HTTP Strict Transport Security (HSTS) is a security feature that […]

1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.

We migrated the Shop app from React Native to Swift and Kotlin. Assisted by AI, the team was able to go from a proof of concept to a fully rebuilt native app published in the app stores in just 12 weeks.

Coding agents changed what it costs to build mobile apps twice. Here’s why Shopify is moving from React Native back to Swift and Kotlin.

A viral chart this month showed CVEs climbing sharply across 21 major software companies, and the industry split into two camps arguing about what it means. Both are missing the number that actually determines risk: how fast the vulnerabilities that matter get fixed.Category: News

In August, we experienced five incidents that resulted in degraded performance across GitHub services.The post GitHub availability report: August 2026 appeared first on The GitHub Blog.

こんにちは。LINEヤフーのディスプレイ広告（以下、ディスプレイ広告）の開発と兼務で、全社横断のWebパフォーマンス改善に取り組んでいるエンジニアの今宮です。一般にWebページの表示速度はユーザー体験...

<blockquote cite="https://calif.io/research/weworm"><p>Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. [...]</p><p>The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds. [...]</p><p>Working with AI, our team found the bug and wrote the first remote code execution (RCE) exploit in about ...

How the AWS PACE team built the Nx Plugin for AWS on the Nx Devkit, and why coding agents make building your own Nx plugin cheaper than ever.

pnpm 12.4 installs crates and Python packages next to npm packages in the same

Valibot v1.5 makes schema construction significantly faster, adds four actions for counting Unicode code points, a KSUID validator, and it tightens validation for email addresses, ULIDs, and object schemas.

Every request to Vercel , which executes on average over 80 million routing instructions per second. Part of that work is looking up metadata to determine which paths exist and how to serve them. When that metadata isn’t cached, the CDN has to fetch it before it can serve the response.passes through our CDNWe used to fetch and cache metadata one path at a time, retrieving only what each lookup needed. That seemed efficient at the time, but large deployments can contain hundreds of thousands of p

You can now build and deploy long-running, tool-using agents with the on Vercel. OpenAI manages the agent loop and session state, while Vercel hosts the application and connects each session to for code execution and file access.OpenAI Agents APIVercel SandboxWith this integration, you get:Follow the to build and deploy an agent, or explore the .step-by-step guidesample applicationRead moreAn OpenAI-managed agent loop and session stateReliable Sandbox creation and reconnection through signed Ope

is free exclusively on AI Gateway through September 30. Tako SearchIt lets AI models search Tako's curated data and the live web, filter web results by domain or publication date, and use the results to answer questions with current information, citations, and visualizations. After September 30, searches are billed at standard rates.The same integration works with on AI Gateway, so you can switch models without changing your search setup. You also don't need a separate Tako account or API key.an

can now run in all 20 , up from four. Vercel SandboxVercel compute regionsRunning sandboxes closer to the databases, storage, and other services they access reduces latency. Teams can also keep sandbox workloads in approved regions to support data residency and regional processing requirements. remains the default region. Region selection is available on every plan. iad1Pro and Enterprise teams can also configure failover regions. If Vercel can't create a sandbox in the primary region, it tries

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/blender-viewer">.blend URL Viewer</a></p> <p>I'm continuing to have a lot of fun with GPT-6 Astra and Blender (see <a href="https://til.simonwillison.net/llms/blender-coding-agents-macos">my TIL</a>).</p><p>As a big fan of the <a href="https://en.wikipedia.org/wiki/Faberg%C3%A9_egg">Imperial Fabergé Easter eggs</a>, I've always thought it would be fun ...

Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

We get into building a background task processor using PostgreSQL. It seems easy at first, but there are lots of pitfalls as a system like this scales.

We're joining Shopify to give Tailwind a stable long-term home where it will be actively maintained for the millions of people who depend on it.

Workers now enables Node.js compatibility by default, supports applications up to 64 mebibytes, and adds a URL-based module registry with import.meta, lazy compilation, shared code caches, and clearer errors.

TThe web is evolving beyond menus, forms, and endless clicks toward experiences shaped around human intent. For UX designers, understanding this shift means re-evaluating their role, moving from designing visible interfaces to guiding transparent, intent-driven AI experiences.

The summer is over and the autumn (or fall, for our American friends) is here, so we're offering a huge 35% discount on all courses if you use the coupon code PRICEFALL at checkout.This is the time of year where people, fresh off a summer break, like to skill up, so we're making that easier with this large discount.We're running the discount for only two weeks — ending September 23 — so make sure you don't miss out.Purchasing Power Parity (PPP)Our PPP discounts are always based on the full price

Pro teams can now enable for individual projects at $20 per project per month. When enabled, Password Protection requires visitors to enter a password you set before they can view the project’s deployments.Password ProtectionOpen in the sidebar, select , and turn it on. Disable it to stop future charges for that project.SecurityDeployment ProtectionPreviously, Password Protection was available only through a $150-per-month team-level add-on that covered every project. Learn more about in the doc

can now protect all deployments in a project, including production, at no additional cost on every plan. Previously, protecting production domains required the $150-per-month Advanced Deployment Protection add-on.Vercel AuthenticationWhen enabled, visitors must sign in with a Vercel account that has access to the project. This makes it useful for internal tools, private dashboards, and sites that aren’t yet ready to launch. From your project, open in the sidebar, select , then choose from the dr

こんにちは、PR TIMESでインターンをしている河野拓真です。 今回は、PR TIMESのサービスで一部使用しているAmazon ECS on Fargateに、CloudWatch Alarmと連携した自動ロールバッ […]

<blockquote cite="https://mathstodon.xyz/@tao/117237320796901560"><p>I wrote recently about how the collection of good, fruitful open problems is now being mined in a non-renewable fashion, leading to the potential scenario of these problems becoming scarce. [...]</p><p>We have now seen that even the rumor of someone working on a problem can trigger a massive amount of AI-powered effort to flatten it before the original research project has time to reach its full potenti...

Agentic speed turned all of us into super-ICs and broke our ability to collaborate. Two types of work that both produce code, and three recipes for working together again: a safe perimeter for experiments, shared rules everybody pays for, and an intent log your agents write themselves.

React 19.3 adds new features like View Transitions, Fragment Refs, browser(), Trusted Types, and more.

is now available on AI Gateway with native image understanding.DeepSeek V4.1 FlashV4.1 Flash has vision support and accepts text and images in the same request, so you can ask questions about screenshots, read charts, and extract information from visual content.The model has a 1 million token context window and supports responses up to 384,000 tokens, along with reasoning, tool use, and prompt caching. Its new architecture processes input and generates output with separate components, reducing t

You and your agents can now read and search the Vercel changelog feed from your terminal using .vercel changelogCoding agents can use this command to discover new Vercel products and features, find updates relevant to your project, and read full announcements to inform their recommendations. returns the latest five changelogs with full Markdown content. You can also set the number of results, search all changelogs using a keyword, and access JSON output for scripts and agents. vercel changelogUp

agents can now retain context across sessions and use it in future conversations.evePersistent is organized into slots. You can define named slots in files under . Each slot specifies a provider, which stores and retrieves the memory, and a scope, which determines who or what shares it. For example, you can keep separate memory for each authenticated user.memoryagent/memory/Before each turn, eve retrieves relevant memory and adds it to the model's context. Depending on the provider, memory can b

We're working toward bringing parity across and , starting with , , , and . Prompt v0 with what you want to build, and when your prompt requires a provider, v0 renders a connect card in the chat.Vercel integrationv0ResendAmazon OpenSearchMongoDB AtlasAlgoliaClerkWith Marketplace integrations in v0, you get:To get started, open a chat and prompt what you want to add to your stack.v0Read morePrompt v0 with what you want to create, and connect the required provider inline.Connect as you build: Once

Zod 4.6 is now available, with .validate() for boolean validation, z.properties() as a real schema, and six more JSON Schema keywords.

<p><a href="https://openai.com/index/navier-stokes-solution/">On the Navier–Stokes Millennium Prize Problem</a> introduces an impressive result from OpenAI, who used an unreleased model to produce a resolution to <a href="https://en.wikipedia.org/wiki/Navier–Stokes_existence_and_smoothness">the Navier–Stokes existence and smoothness problem</a>, one of the seven <a href="https://en.wikipedia.org/wiki/Millennium_Prize_Problems">Millennium Prize Problems</a&...

<p><strong><a href="https://openai.com/index/introducing-chatgpt-images-2-5/">Introducing ChatGPT Images 2.5</a></strong></p>OpenAI's image generation models are apparently used "more than 3 billion images across ChatGPT Images and the GPT‑Image models in the API". This latest release improves their instruction-following ability across multiple turns, responds faster, and "is better at preserving the subjects in your reference photos".</p><p>There...

The deployment step is now about 10% faster, saving one second on average. Large applications can save up to 12 seconds.Previously, Vercel uploaded a separate routing metadata file for each function path. That metadata is now combined into a single manifest and uploaded once.This improvement applies automatically to all builds. No changes are required. Learn more about in the documentation.buildsRead more

Requests to public domains are now routed 18x faster.Vercel SandboxDomains created with the SDK call are now resolved from the nearest regional replica, instead of a single centralized store. Incoming requests reach the process running in the sandbox with less latency.sandbox.domain()Median domain lookup latency dropped from 62ms to 3.4ms (18x faster). The improvement is largest in regions farthest from the previous store: lookups are now up to 112x faster in Sydney (syd1) and up to 146x faster

Jason Haddix on why manual pentesting can't keep up, what disappears first, and why human methodology is what makes AI pentesting workCategory: Guides & Best Practices

Note: No AI was hurt while writing this blog post. Human tears only. In September 2026 we introduced NGINX 1.31.5 with several core features for one same goal. We expanded the core routing methods and the most critical nginx directives to enable native, non-scripted routing of any API traffic. In this blog post we will […]

We detected XCSSET malware inside a compromised Flutter package on pub.dev. Here is a full breakdown of the infection chain, propagation modules, and stealer logic we found inside.Category: Vulnerabilities & Threats

Automatic Key Exchange probes TLS 1.3-capable customer origins to learn which key agreement algorithms they support. We then lead with the most secure algorithm when connecting to the origin, preferring post-quantum connections wherever the origin supports it.

SSR を使う React アプリで localStorage を読む場合、従来は useEffect と state を使って初回表示を管理していました。browser() API では、ブラウザでのみ描画する意図を use(browser()) で表現し、待機中の表示を Suspense に任せられます。この記事では `browser()` API の使い方と、従来の `useEffect` と state を使った方法との違いを解説します。

Over the past year, we have improved Vercel’s Pro pricing to better reflect how teams build, with , , access to , and more. But one area our customers continued to give us feedback on was CDN pricing.expanded user rolesflexible creditsenterprise featuresCDN costs should be predictable, but viral launches, traffic bursts, or misconfigured routes sometimes turned an otherwise normal month into an unexpected bill. For teams building on Vercel, that uncertainty made growth feel like a problem at exa

こんにちは。フロントエンドエンジニアの白濱（@shiraha_maru）です。 PR TIMESは、2026年9月12日（土）に開催される「フロントエンドカンファレンス福岡2026」にGold Sponsorとして協賛い […]

How Evil Martians moved from Gatsby to Astro in nine days without rewriting a single React component

The Ember project is excited to announce the release of Ember v7.2. This is a standard minor release as part of the Ember Release Train process.This release takes two important steps towards making Ember apps look and feel like plain JavaScript: a new built-in Strict Resolver that does away with modulePrefix, and ember-source finally being published as a fully ESM package. It also fixes a couple of bugs in the rendering engine and continues the work of untangling the blueprint system from ember-

367 posts, four years on Gatsby, and no dedicated team: here's how we moved evilmartians.com to Astro in two weeks with an LLM.

and from OpenAI are now available on AI Gateway.GPT Image 2.5 FlareGPT Image 2.5 SunburstBoth models accept text prompts and reference images for generation and editing. They produce natural lighting and textures, follow detailed visual instructions, handle complex layouts and transparent backgrounds, and make targeted edits while preserving the rest of an image.Choose Flare for faster generation and Sunburst when editing precision matters most. For Flare, use the model ID : openai/gpt-image-2.5

is now generally available for Pro teams. Flat Rate CDN is an alternative to usage-based CDN billing that provides you with a fixed monthly bill.Flat Rate CDNMonthly Flat Rate CDN capacity includes: Capacity is set at the team level, not the project level, so a spike on a single project draws on the team-level allowance.Spike protection is on by default. With spike protection, traffic above your tier's capacity is served normally, without degraded performance, and isn't billed (subject to the ).

<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.35">llm 0.35</a></p> <blockquote><ul><li>New OpenAI model: <code>gpt-6-astra</code> for <a href="https://openai.com/index/gpt-6-astra/">GPT-6 Astra</a>.</li></ul></blockquote> <p>Tags: <a href="https://simonwillison.net/tags/openai">openai</a>, <a href="https://simonwillison.net/tags/llm">llm&lt...

<p><strong><a href="https://people.kernel.org/monsieuricon/creepy-crawlies">Creepy crawlies</a></strong></p>Konstantin Ryabitsev discusses how bad the "background radiation" of abusive crawlers has become from the perspective of <a href="https://git.kernel.org/">git.kernel.org</a>, the official Git repository for the Linux kernel:</p><blockquote><p>TL;DR: we spend more CPU cycles rendering commits for scrapers than we spend on al...

<blockquote cite="https://openai.com/index/an-alien-mind/#scalable-defense"><p>The strongest argument I see for continuing to train much smarter models quickly is the need to build defensive systems against the dangers posed by other AI. [...]</p><p>We will need powerful, aligned AI for defense; to secure infrastructure, to protect against rogue agents in real time, and to invent entirely new protective measures. This will be a primary focus of OpenAI’s deployment effort...

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/video-compressor">Video compressor</a></p> <p>I recorded a short demo video of <a href="https://simonwillison.net/2026/Sep/7/equal-earth/">my Equal Earth</a> animation on my phone and wanted to publish an optimized version of that video (using FFMPEG) on my blog, so I had Claude Fable 5.1 in Claude Code for web <a href="https://claude.ai/code/session_01QHTdJZ4xg6TZfDXCmuvA...

<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/equal-earth">Mercator ↔ Equal Earth</a></p> <p>I got curious about the Equal Earth map projection that was recently <a href="https://www.theguardian.com/world/2026/sep/04/un-vote-world-map-mercator-equal-earth-africa">voted on at the UN</a> so I had GPT-6 Astra (medium) in ChatGPT Work <a href="https://chatgpt.com/share/6a9ee520-c82c-83ea-8111-2f7050c08638">build me<...

Thanks to some very modern CSS, we can visually replicate the logic of scrollbars. Then make them actually functional.

A known Shai-Hulud worm payload sat dormant for 111 days, then republished to npm, right past the malware scanning meant to catch it.Category: Vulnerabilities & Threats

StyleSmuggler is an unauthenticated RCE hitting Magento and Adobe Commerce, with no CVE and no Adobe patch yet. Aikido already has the fix.Category: Vulnerabilities & Threats

Why a database change broke upgrades, what changes in 1.7.3, and what to do if you already migrated.

pnpm 11.26 brings the JavaScript CLI level with what pnpm 12 gained over the

<p><strong><a href="https://openai.com/index/research-acceleration-view-inside-openai/">Research acceleration: The view inside OpenAI</a></strong></p>Apparently today is RSI day at OpenAI, for Recursive Self-Improvement - I think it's their new AGI. Both this piece and the new essay <a href="https://openai.com/index/an-alien-mind/">An Alien Mind</a> (by Chief Scientist Jakub Pachocki) talk about it, and this one doesn't even bother to expand the a...

カミナシで、ソフトウェアエンジニアをしている osuzu です。 面接官として中途採用の選考にも関わっていますが、ここ1年くらいでエンジニア選考の設計を見直す必要が強まってきたと感じています。 私のチーム採用では、これまでオンラインコーディングテストや持ち帰り課題を選考に利用してきましたが、AIの登場によって、候補者さまはAIを使って課題を作成するようになり、Opus 4.5 がリリースされたあたりから成果物の精度がぐんと上がりました。 その結果、提出された課題から期待する経験値と、面接でお会いした本人から見える経験値が、うまく重ならないケースが出はじめたのです。提出物の設計や実装は的確なのに…

<p><strong><a href="https://shkspr.mobi/blog/2026/09/the-purpose-of-dns-is-to-spread-scams/">The purpose of DNS is to spread scams</a></strong></p>Terence Eden shares some daunting statistics in support of his take that "the Domain Name System's purpose seems to be a vector for criminals to run scams on people at a terrifyingly high rate".</p><p>On <a href="https://interisle.net/insights/cybercriminaldomaindemand">this Interisle report</a...

<p><a href="https://lobste.rs/s/rfn2mn/there_s_no_limit_how_bad_code_can_get#c_8kdtaw">My comment</a> on <a href="https://lobste.rs/s/rfn2mn/there_s_no_limit_how_bad_code_can_get">There's No Limit to How Bad Code Can Get</a> — Lobste.rs.</p><p><em>[In reply to a comment about burning it down to start from scratch when technical debt becomes overwhelming]</em></p><p>In my experience it's <em>so rare</em...

<blockquote cite="https://zachkehs.com/blog/theres_no_limit_to_how_bad_code_can_get/#9-ref"><p>If you continue to add floors and rooms to a building forever, it will collapse. Software faces no such constraint. The code can <em>always</em> get worse. There can <em>always</em> be a new layer of indirection or a reduction in performance.</p></blockquote><p class="cite">— <a href="https://zachkehs.com/blog/theres_no_limit_to_how_ba...

IME の変換確定に使う Enter キーで、書きかけのメッセージが送信されることがあります。isComposing と非推奨の keyCode === 229 を併用して、変換中の Enter を送信処理から除外する理由を解説します。

<p><strong><a href="https://www.youtube.com/watch?v=bOC3DisEOfg">Introducing GPT-6 Astra for developers</a></strong></p>Blink and you'll miss it, but there's a familiar creature at <a href="https://www.youtube.com/watch?v=bOC3DisEOfg&t=119">1m59s</a>:</p><blockquote><p>Across the board, Astra has more attention to detail, better understanding of the user's prompt, and can build more sophisticated outputs. In particular, i...

<p><strong>TIL:</strong> <a href="https://til.simonwillison.net/llms/blender-coding-agents-macos">Using Blender with coding agents on macOS</a></p> <p>I've been having fun with Blender in ChatGPT Codex on my Mac recently. Getting it to work with coding agents is really easy: install the full Mac application from <a href="https://www.blender.org">blender.org</a> and run a prompt like this:</p><blockquote><p><code>Use t...

This release fixes two regressions impacting Elysia and AsyncLocalStorage, a hang in @discordjs/ws, CMYK JPEG decoding in Bun.Image, a rare JIT crash, and a GC crash on musl.

多くのグラフライブラリがある中、TanStack Charts はなぜ作られたのでしょうか。この記事では、TanStack Charts の設計思想を整理し、React で売上の折れ線にキャンペーンの注釈を重ねるサンプルを紹介します。

<p>I got access to GPT-6 Astra this afternoon, so naturally I used it to generate <a href="https://simonwillison.net/tags/pelican-riding-a-bicycle/">SVGs of pelicans riding bicycles</a> - at low, medium, high, xhigh and max reasoning levels (Astra doesn't support reasoning=none). Then I rendered those pelicans in <a href="https://static.simonwillison.net/static/2026/gpt-6-and-5.6-pelicans.html">a comparison grid</a> with GPT-5.6 Sol, Terra, and Luna, and beyond bei...

<p>Here we go again... <a href="https://collusion.wiki">Discovery of a new OpenAI agent message board</a> by Sydney Von Arx, Cormac Slade Byrd, Spencer Kitts, and Thomas Larsen describes the <em>latest</em> <a href="https://simonwillison.net/tags/accidental-cyberattacks/">accidental cyberattack</a> by models being trained by OpenAI. This time it was agents engaged in some sort of web research benchmark, so they had (supposedly) controlled access to the ...

GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

In controlled offline evaluations, HydraFusion’s selective coding workflows matched or exceeded the evaluated Opus 5 baseline while reducing estimated workflow cost. Now available as a research preview in GitHub Copilot.The post Project HydraFusion: Frontier quality via multi-model orchestration appeared first on The GitHub Blog.

The transition to the Rust version of the React Compiler for the 1,036-file React Router codebase resulted in a significant speed increase, improving build times from 14.3 seconds to 0.81 seconds. The new compiler addresses previous limitations and ensures consistency across the toolchain, making it easier to manage builds with enhanced performance and capabilities.

How to use Aikido Libraries to patch vulnerable dependencies and meet security SLAs. Category: Aikido

Six Trivy alternatives compared for 2026 on container scanning, IaC, SAST, prioritization, and fixes, with where each one actually fits.Category: DevSec Tools & Comparisons

GitHub Actions で使用する Action をコミット SHA に固定すると安全性が高まる一方、更新作業が煩雑になります。pnpm 11.16.0 で追加された `pnpm update --include-github-actions` を使うと、パッケージと Action の更新を同じコマンドで管理できます。この記事では基本的な使い方を確認します。

Fixes 202 issues, addressing 236 👍. HTTP/2 in Bun.serve, Bun.write() streams Response bodies to disk, self-contained workspace node_modules, bun install --offline and --prefer-offline, WebSocket pause() and resume(), crypto.argon2, tree-shaking through dynamic import(), smarter CommonJS to ESM conversion for default imports, --compile --bytecode when cross-compiling, smaller and faster-starting compiled executables, up to 9x faster Buffer reads and writes, 2x faster AsyncLocalStorage, faster st...

<p>The August edition of my <a href="https://github.com/sponsors/simonw/">sponsors-only monthly newsletter</a> is out. If you are a sponsor (or if you start a sponsorship now) you can <a href="https://github.com/simonw-private/monthly/blob/main/2026-08-august.md">access it here</a>.</p><p>This month:</p><ul><li>We got more details on OpenAl's accidental cyberattacks</li><li>One-shotting Raccoon Heist games with Fable 5 and ...