直近1週間の更新
9/1 (火)

Let’s Use the Emergent CSS random() Function in all the Browsers
CSS-Tricks
The journey to create a polyfill for the upcoming CSS random() function that works in all browsers.Let’s Use the Emergent CSS random() Function in all the Browsers originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
3時間前
8/31 (月)

13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds
Socket
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.
4時間前

What’s !important #18: <geolocation>, Syntax ::highlight()ing, named-feature(), and More
CSS-Tricks
Well, that’s a wrap. No, not a flex-wrap, but rather today marks a new day, week, month, season, aaaand new edition of What’s important (#18), bringing you the best content that developers have produced over the last couple of weeks or so.What’s !important #18: <geolocation>, Syntax ::highlight()ing, named-feature(), and More originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
4時間前

Having Fun with Vercel’s AI SDK and AI Gateway Master.dev Blog RSS Feed
The why and how to get it installed and use it with different models, then actually build something. Plus a little Zod type safety for good measure.
4時間前

Introducing Adaptive Intelligence: Undermining the economics of every bot attack
Cloudflare Blog
Bot operators have historically had the economic advantage, bypassing static, deterministic detection rules with cheap proxies and retooling. Cloudflare's new Adaptive Intelligence engine flips this dynamic by autonomously learning from the meta-signals of live traffic and deploying disposable rules, making automated attacks too expensive to sustain.
5時間前

The Many Faces Of September (2026 Wallpapers Edition)
Articles on Smashing Magazine — For Web Designers And Developers
Could there be a better way to welcome the new month than with a new collection of desktop wallpapers? Whether you’re holding tightly onto summer or eagerly awaiting autumn, we’ve got some eye-catching designs to make your September just a bit more colorful. Enjoy!
7時間前

What's new in Astro - August 2026
The Astro Blog
August 2026 - Project Steward announcement, new Astro Playground, Astro Germany, and more!
18時間前

I wanted the browser to just ship jQuery. Cross-Origin Storage came for rescue Ahmad Alfy
Two sites, the same 8GB model, two downloads. A look at Cross-Origin Storage, the WICG proposal for sharing big files across origins without leaking history.
18時間前

July in Servo: more platforms, faster canvas, web fonts in SVG, and more!
Servo Blog
Servo 0.5.0 contains all of the changes we landed in July, which came out to 488 commits, and we now publish binaries for Linux aarch64 (@mukilan, #46760)!DOM text selections are now visible (@mrobinson, @SimonSapin, #46698, #46864, #46742, #46889, #46126).Interactive selection is coming soon!For security fixes, see § Security.`, and DOM selection rendering" />We’ve shipped several new web platform features:‘Cache-Control: stale-while-revalidate’ (@arayaryoma, #46060)‘text-decoration-thicknes...
18時間前

Understanding ChatGPT Work Simon Willison's Weblog
<p>OpenAI <a href="https://openai.com/index/chatgpt-for-your-most-ambitious-work/">announced ChatGPT Work</a> on July 9th, and have been furiously iterating on it ever since. It is an extraordinarily confusing and very powerful product. Here's what I've figured out about it so far.</p><h4 id="two-products">ChatGPT Work is actually two products</h4><p>The more interesting version of ChatGPT Work is the one that runs in the cloud. This can be accessed via...
18時間前
8/30 (日)

flex-wrap: balance で Flexbox の折り返しを均等にする
azukiazusa のテックブログ2
flex-wrap: wrap では、最後の行に少数のアイテムだけが残り、行ごとのアイテムの量が大きく偏ることがあります。flex-wrap: balance は、通常の折り返しで決まる行数を維持しながら、各行の長さが近くなるように Flex アイテムを振り分けます。この記事では balance 使い方について紹介します。
1日前

Zod の z.compile() でバリデーションを高速化する
42
azukiazusa のテックブログ2
Zod 4.5 で、スキーマを実行時に最適化された JavaScript へ変換する z.compile() が追加されました。コンパイル済みスキーマは通常のスキーマと同じ API を保ちながら、複雑なデータの検証を高速化します。この記事では基本的な使い方と仕組みを紹介します。
2日前

MiniMax H3 and H3 Max are 50% off on AI Gateway
Vercel News
and are 50% off on AI Gateway from August 30 through September 13, in partnership with MiniMax.MiniMax H3H3 MaxThe discount covers requests billed through AI Gateway, at every duration and in every aspect ratio the model supports.The model IDs ( and ) are unchanged, so requests you already send pick up the discounted rate with no code change:minimax/minimax-h3minimax/minimax-h3-maxRenders take minutes, so runs the generation as a background job and makes short status requests until it lands, rat
2日前

Introducing Hy4 Preview Simon Willison's Weblog
<p><strong><a href="https://hy.tencent.ai/research/hy4-preview">Introducing Hy4 Preview</a></strong></p>New open weight text input (no vision) LLM from Chinese company Tencent today: 770B total parameters, 49B active parameters, 1M token context window, <a href="https://huggingface.co/tencent/Hy4-preview">1.56TB on Hugging Face</a>.</p><p>This is a big size increase from their previous <a href="https://huggingface.co/tencent/Hy3">...
2日前
8/29 (土)

AI ポン出しスライド品評会
68
Object.create(null)
最近[いつ?]は AI に登壇用のスライドをポン出しさせたという話や, それに対する賛否両論を各所で聞くようになってきました. そこで私も試しに AI にスライドをポン出しさせてみて, 実際に登壇に耐える品質なのかレビューしてみました. 条件設定は以下の通りです: Claude Code を使用 題材は tsc.rip の実装リポジトリ 詳しくは前回の記事 tsc.rip を支える技術 または 型レベル Web アプリケーション - Object.create(null) を参照 リポジトリにはソースコード一式と, 構成などを書いた CLAUDE.md が含まれています 指示は tsc.rip…
2日前

CSS の shape() 関数でレスポンシブな図形を作る
azukiazusa のテックブログ2
clip-path の path() 関数で複雑な図形を作ると、固定座標のため要素のサイズへ追従させにくいという問題があります。shape() 関数ではパーセントや CSS の単位、カスタムプロパティを使って曲線を含む図形を定義できます。この記事では幅を変更できる吹き出しを作り、path() との違いや offset-path への応用を紹介します。
2日前

tsc.rip を支える技術 または 型レベル Web アプリケーション
7
Object.create(null)
先週 8/22 に Kyoto.なんか #8 を開催しました. 名前の通り何でもありのイベントですが, 今年も多彩な登壇・参加者が集まって面白い会になったと思います. いつもありがとうございます. 私は「tsc.rip を支える技術」というタイトルで登壇しました. 以下は発表の記事版です. 当日のスライドは末尾にあります. TypeScript 7.0 先月 7/8 に TypeScript 7.0 がリリースされました. コンパイラ (tsc) の実装言語が TypeScript 自体から Go になり, パフォーマンスが向上しています. めでたいですね. devblogs.microsof…
3日前

ローカル開発中に現れる GET /.well-known/appspecific/com.chrome.devtools.json とは何か
1
azukiazusa のテックブログ2
Chrome でローカル開発をしていると、開発サーバーへ GET /.well-known/appspecific/com.chrome.devtools.json という見慣れないリクエストが送られることがあります。これは Chrome DevTools がローカルプロジェクトを Workspace として自動検出するためのリクエストです。この記事では、実際にどのように動作するの確認します
3日前

@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow
Step Security Blog
Ten malicious versions of @7nohe/openapi-react-query-codegen were published through an exposed npm publishing workflow. IOCs and recovery steps inside.
3日前

Just a rumour of a bug is enough to find a security exploit these days Simon Willison's Weblog
<p><strong><a href="https://anil.recoil.org/notes/rumour-is-the-exploit">Just a rumour of a bug is enough to find a security exploit these days</a></strong></p>Anil Madhavapeddy is a professor of computer science at Cambridge and a core maintainer of the OCaml compiler. In this somewhat alarming post he reports that security issues in OCaml projects are seeing evidence of attempted exploits within minutes of patches being shared for discussion:</p><b...
3日前

Popular code generator for TanStack Query hit by supply chain worm
Aikido Security's Blog
A supply chain worm was found hiding in @7nohe/openapi-react-query-codegen, a popular code generator for TanStack Query, stealing credentials and spreading itself to every package the victim maintains.Category: Vulnerabilities & Threats
3日前

OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Socket
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
3日前

Securing Docker images
Aikido Security's Blog
Most of a container's vulnerabilities come from the base image. How to harden Docker images, why hardening is ongoing, and how to patch the base you already run.Category: Guides & Best Practices
3日前

When Autonomous Agents Escape: Why Socket Signed the Cyber Defense Open Letter
Socket
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.
3日前
8/28 (金)

Socket Now Protects the Microsoft Edge Extension Ecosystem
Socket
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.
3日前

Background Image Refraction in CSS
1Master.dev Blog RSS Feed
"Liquid glass" design is helped along by offsetting/scaling the background as if you're looking through real glass. But that gets tricky with arbitrary CSS background positioning.
3日前

BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents
Cloudflare Blog
Bot operators now have a home in the Cloudflare dashboard to manage submissions. This update adds submission status tracking, submission editing, and a behavior model so operators can accurately declare how their bots use content.
3日前

The Index: Issue #196
Piccalilli - Everything
Before we get into this week's links, I just thought I'd let you know we're having a summer break next week, so the next issue won't be with you until September 11!Midnight Vinyl ClubA handy service that helps you explore music and find the best prices for vinyl.The search for a Spotify alternativeThere are so many better options than Spotify for music and Elliot helpfully breaks plenty of options for you.Little websites everywhereThis is a great piece. As we see it, the web — at large — always
3日前

Hy4 Preview now available on AI Gateway
Vercel News
is now available on AI Gateway.Hy4 Preview from TencentHy4 Preview is an open-source Mixture-of-Experts model with 770B total parameters and 49B active per token, aimed at long-horizon coding, document analysis, game development, and scientific reasoning. It serves a context window of 1M tokens.To use Hy4 Preview, set to in the :modeltencent/hy4-previewAI SDKTo use it in a coding agent, see the , then run to connect agents like Claude Code, Codex, OpenCode, Cursor, Pi, and more and select inside
4日前

Build and deploy eve agents from the Vercel dashboard
Vercel News
You can now create agents directly from the Vercel dashboard, giving you a deployed agent that you can chat with right away. The builder scaffolds the agent, creates a private Git repository with its files, and deploys it as a new Vercel project on your team. In a few clicks, you get a working agent, backed by a repo with code you can use to customize it. eveFrom the builder you can:Select in your dashboard to .Add New → Agentcreate your first agentRead moreWrite the instructions that define the
4日前

Vercel CLI expands commands for DNS, domains, and projects
Vercel News
The Vercel CLI now provides dedicated commands for managing DNS records, domains, and projects. This brings more of the functionality available through the Vercel dashboard and API to the terminal, where it can be used interactively, in scripts, or by agents.Retrieve the complete configuration for a DNS record or update it in place using its record ID. supports changes to the record name, type, value, TTL, MX priority, and comment. SRV records can also be updated using their priority, weight, po
4日前

Run Claude Managed Agents with Chat SDK
Vercel News
You can now run with .Claude Managed AgentsChat SDKClaude Managed Agents handles the agent loop server-side, including the model, tools, session state, and sandboxed web research. That means you can ship a Slack research bot built on Claude Managed Agents and Chat SDK, with one persistent session per thread and streamed briefs with sources.To try Claude Managed Agents with Chat SDK: Read moreWhat you getGet started: Replies render as the model writes them, over a single streamed response.Token-b
4日前

Polypane 30.1: Selector specificity insights, server HTML validation, and more
Polypane Blog
Polypane 30.1 adds selector specificity highlighting to the elements panel, a new server-sent HTML view in the sources panel, passkey…
4日前

Breaking Claude Code Opus 5 Auto Mode
1Simon Willison's Weblog
<p><strong><a href="https://embracethered.com/blog/posts/2026/breaking-claude-code-opus-5-and-automode/">Breaking Claude Code Opus 5 Auto Mode</a></strong></p>Anthropic are putting a great deal of faith in Claude Code's auto mode for protecting their coding agent users against prompt injection attacks. They recently <a href="https://simonwillison.net/2026/Aug/8/auto-mode/">made that the default</a> and have made bold claims about its effectiveness...
4日前

How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
11
Cloudflare Blog
Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
4日前

19 Chrome and Edge Extensions Deliver a Wallet Drainer and Credential-Stealing Payloads
Socket
Socket researchers found 18 Chrome extensions and one Edge extension delivering a wallet drainer, credential theft, and other malicious payloads.
4日前

OpenClaw went viral. Meet the maintainers building and securing it.
The GitHub Blog
OpenClaw is the fastest-growing project in GitHub history. Peter Steinberger and several maintainers share what they learned in the project's first six months.The post OpenClaw went viral. Meet the maintainers building and securing it. appeared first on The GitHub Blog.
4日前
8/27 (木)

Cursor is now available in the AI SDK harness layer
Vercel News
The now supports Cursor through the official adapter. The harness layer lets your application run different coding agents through the same interface, so you can switch agents without changing your application code. AI SDK harness layer@ai-sdk/harness-cursorHarnessAgentPass to :cursorHarnessAgentUnder the hood, the adapter uses to connect Cursor to through the Agent Client Protocol (ACP). @ai-sdk/harness-acpHarnessAgentSupported harnesses now include, in addition to Cursor, Claude Code, Cline, Co
4日前

Creating Web Widgets Using the Document Picture-in-Picture API
1
CSS-Tricks
The general idea is that we create a Document Picture-in-Picture window (DPIP window), and then we put HTML, CSS, and JavaScript into it.Creating Web Widgets Using the Document Picture-in-Picture API originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
4日前

Find deployments faster with redesigned filters
Vercel News
The Deployments page now has redesigned filters that make it faster to find a specific deployment. You can: Open any project's to try the new filters.Deployments pageRead moreApply suggested filters for common searches. Type to find an option instead of scrolling through the list.Describe what you’re looking for in natural language, and Vercel automatically applies the matching filters.
4日前

Personal website redesign project post: A CLI for adding new music to the collection
Piccalilli - Everything
Right, we are at the end of iteration one.The last thing to do is to make my life a little easier. Markdown files work perfectly fine for the music collection, but they're a bit of a faff. Mostly because I always forget the front matter structure, so to fix that, I created myself a Command Line Interface (CLI) which is a series of questions, resulting in a new item being added to the collection.I add a lot of music to my collection because I'm truly trying to get away from streaming platforms co
4日前

Good riddance, TeamPCP. Now for the hard part.
Aikido Security's Blog
The AFP, FBI, and WA Police charged two men allegedly behind TeamPCP. Charlie Eriksen on why the arrest doesn't close the gap TeamPCP exposed.Category: News
4日前

ChatGPT デスクトップの Codex から WebMCP 対応 TODO アプリを操作する
azukiazusa のテックブログ2
ChatGPT デスクトップの内蔵ブラウザが、Web サイトの機能を AI エージェント向けのツールとして公開する WebMCP に対応しました。この記事では WebMCP に対応した TODO アプリを実装し、Codex が呼び出した Site tools の引数や結果を実行履歴から確認します。
4日前

How to customize the CKEditor UI: custom dialogs and forms
CKEditor Ecosystem Blog
Build custom dialogs in CKEditor 5 using HTML injection or the built-in Dialog plugin. Compare both approaches with a document management form example.
4日前

The best workflow engine is a programming language
Vercel News
The idea of orchestrating long-running, stateful logic on top of unreliable, stateless infrastructure isn't new. We've had message queues, job runners, microservice choreographies, and full-blown workflow engines for a long time. What we never had was a version of it that felt good to write.I'd spent about six months working on a fork of Temporal, mostly on weekends, trying to turn it into a serverless answer with DX that felt more Vercel-native. Eventually it dawned on me that to ship that expe
4日前

Dev Machine Guard Now Inventories Where Developer Credentials Live
Step Security Blog
Dev Machine Guard now inventories where developer tools keep credentials. See which credential sources are in use across your fleet, how many devices each one affects, and how much of that material is sitting in plaintext. Credential values, fragments, hashes, and fingerprints are never stored, displayed, or sent off the device.
5日前

Dev Machine Guard Now Inventories Browser Extensions on Developer Machines
Step Security Blog
Dev Machine Guard now inventories browser extensions across your developer fleet. See every extension installed in Chrome, Edge, and Firefox, what each one is currently permitted to do, whether it came from a marketplace or was installed some other way, and which devices are running it.
5日前

Exploring Polyglot Monorepos with Nx, TanStack and Rust
Nx Blog
How to add Rust and the Topcoat web framework to an existing pnpm and Nx monorepo: one task graph, shared caching, and distributed CI across both stacks.
5日前

Ling 3.0 Flash Fin now available on AI Gateway for free
Vercel News
is now available on AI Gateway and free to use through September 25. Ling 3.0 Flash Fin from Inclusion AILing 3.0 Flash Fin is a finance-focused version of . It has a 256K-token context window, produces up to 32K output tokens, and supports reasoning and function calling.Ling 3.0 FlashThe model is designed for financial research and analysis, including multi-step workflows that user multiple tool calls before producing an answer. Choose a model ID based on what should happen after the free perio
5日前

Qwen3.8-Flash-Next Simon Willison's Weblog
<p><strong><a href="https://qwen.ai/blog?id=qwen3.8-flash-next">Qwen3.8-Flash-Next</a></strong></p>Another open weights model from Qwen. This one is "a multimodal MoE model that also serves as an early preview of the architecture used in Qwen4".</p><p>It's pretty big: 125B tokens, but only 6B active which means it gets a significant performance boost.</p><p>I've been trying it out on a DGX Spark using <a href="https://huggingface.co...
5日前

Release Notes for Safari Technology Preview 251
WebKit
Safari Technology Preview Release 251 is now available for download for macOS Golden Gate and macOS Tahoe.
5日前

GitHub Copilot app for Beginners: Automate Dependabot pull request triage
The GitHub Blog
Managing library updates can be tedious at times. Learn how the GitHub Copilot app can handle this type of repetitive task.The post GitHub Copilot app for Beginners: Automate Dependabot pull request triage appeared first on The GitHub Blog.
5日前

Socket for ClickUp Is Now Available
Socket
Create ClickUp tasks from Socket alerts, automate ticketing with custom rules, and keep alert and task status synchronized.
5日前

Top Minimus alternatives in 2026
Aikido Security's Blog
Minimus is shutting down. Compare Aikido, Chainguard, Docker Hardened Images, RapidFort, and Echo, and pick a hardened-image replacement that won't lock you in again.Category: DevSec Tools & Comparisons
5日前

animation-trigger
CSS-Tricks
The CSS animation-trigger property allows you to delay the start of a CSS animation until a specific trigger occurs.animation-trigger originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
5日前
8/26 (水)

Announcing Rspack 2.2
Rspack Blog
Rspack 2.2 is now available, featuring performance and HMR improvements, shorter module IDs, import.meta enhancements, and support for more platforms.
5日前

Rethinking Data Visualisation: A UX Approach To Dashboards That Actually Drives Decisions
Articles on Smashing Magazine — For Web Designers And Developers
Data visualisation sits at the intersection of two disciplines that rarely talk to each other: data and design. Meriem Benhabiles explores what changes when you bring structured UX thinking to dashboards and data presentations, from the questions you ask before opening any tool to the decisions that determine whether an insight actually lands.
5日前

Hover Proximity Using Modern CSS
2Master.dev Blog RSS Feed
You can always easily style :hover, but what if you want the NEXT item to have styling too? Or, just a smidge harder, the PREVIOUS item. How about multiple in any direction?
5日前

Software supply chain security requires decisions rather than defaults
Aikido Security's Blog
Most software runs on decisions nobody made. We talk about why gating, pinning, backporting, and SBOM upkeep only work if someone actually owns them.Category: News
5日前

Aikido Security achieves ISO 42001:2023 certification for AI governance
Aikido Security's Blog
Aikido Security has achieved ISO 42001 certification, the global standard for AI governance, covering AI pentesting, Code Security Audit, and Deep PR Review.Category: Compliance
5日前

Aikido launches agentic pentesting for Android apps
Aikido Security's Blog
Aikido's agents pentest your Android app and its backend in a single whitebox assessment. You get reproducible findings, AutoFix, and retests for every issue.Category: Product & Company Updates
5日前

Quoting Paul Dix Simon Willison's Weblog
<blockquote cite="https://pauldix.com/the-end-of-programming"><p>The fact that AI wrote 1M LOC and then refined it over the course of the next couple of months to produce a reliable piece of software that is currently running on millions of developer machines is absolutely mind blowing. And you can say, “well it’s not that impressive because they had an oracle to compare against, so it was simple to go from one language to another”, but I think that’s selling this entire thing short...
5日前

AI活用率100%のQA組織をつくるまで
2LINEヤフー Tech Blog (LY Corporation Tech Blog
本記事は、LINEヤフーの技術カンファレンス「Tech-Verse 2026」のセッション「10x Speed With QA Agent Platform — How we scaled adopt...
6日前

LINEヤフーのAgent iを支えるAIエージェント基盤:「誰でも作れる」と「安全に動かせる」をどう両立したか
11LINEヤフー Tech Blog (LY Corporation Tech Blog
LINEヤフーでは、ユーザーの目的に応じてさまざまなサービスや機能をつなぐAIエージェントサービス「Agent i」の開発を進めています。Agent iで多様なニーズに応えるには、現場のアイデアを素早...
6日前

DASH by Datadog 2026に登壇してきた
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
こんにちは。株式会社タップルでエンジニアリングマネージャーをしている山岸です。 この度、2026年6 ...
6日前

Why engineers should come to the SF Ruby Startup Conference in 2026
Evil Martians
The SF Ruby Startup Conference is an engineers' conference: meet the people building Ruby open source, scaling Rails in production, and shaping what agentic Rails looks like next.
6日前

Muse Image now available on AI Gateway
Vercel News
from Meta Superintelligence Labs is now available on AI Gateway. It is their first image model and a separate family from Muse Spark, returning images rather than text. Send a prompt and get an image back, or send an image with an instruction and get it changed. One model does both, so you don't switch models to move from generating to editing.Muse ImageTo use Muse Image, set to and call from the :modelmeta/muse-image-1.0generateImageAI SDKTo steer the result toward art you already have, pass re
6日前

Gemini 3.5 Transcribe now available on AI Gateway
Vercel News
from Google is now available on AI Gateway for recorded and live audio:Gemini 3.5 TranscribeBoth models automatically detect more than 85 languages, including when a speaker switches languages. You can also provide custom vocabulary to improve the transcription of names, technical terms, and uncommon spellings. The model for complete recordings can also identify speakers and return word-level timestamps.Streaming transcription is available in . Install the latest AI SDK and AI Gateway provider:
6日前

Qwen 3.8 Flash now available on AI Gateway
Vercel News
from Alibaba is now available on AI Gateway. It takes text and images as input, serves a context window of 1 million tokens, and can return up to 65k tokens in a response. Alibaba recommends it for coding, tool use, and multi-step agent workflows.Qwen 3.8 FlashTo use Qwen3.8-Flash, set to in the :modelalibaba/qwen3.8-flashAI SDKTo use it in a coding agent, see the , then run to connect agents like Claude Code, Codex, OpenCode, Cursor, Pi, and more and select inside the agent.coding agents guidev
6日前

GLM 5.3 Flash now available on AI Gateway
Vercel News
is now available on AI Gateway as .GLM 5.3 Flash from Z.aizai/glm-5.3-flashGLM 5.3 Flash is a multimodal coding model with a 1M-token context window. It accepts both text and image inputs and supports function calling, structured output, and streaming.To include images, pass them with text in a message. A request can include multiple images using URLs, Base64 data URLs, or binary data: To use GLM 5.3 Flash with a coding agent, run , then select as your agent's model.vercel ai-gateway coding-agen
6日前

Vercel Security Dashboard is now generally available
Vercel News
The Vercel Security Dashboard is now generally available on all plans, giving you one place to see your security posture across every account and project.You can access the Security Dashboard in or run in the Vercel CLI. the UIvercel security checkAs teams grow and coding agents make it faster to spin up projects, small misconfigurations add up quietly. The Security Dashboard automatically flags issues like:Misconfigurations are ordered by risk with the most severe first, and each finding links
6日前

Python projects now support routing rules
Vercel News
Python projects can now use to set response headers or rewrite requests to internal paths, including apps built with FastAPI, Django, and Flask.routing rulesThe evaluates rules before requests reach your application, so changes apply without a new deployment.Vercel CDNFor example, this FastAPI app serves a route:/newTo send requests for to that route, create a rewrite from the CDN tab in your project dashboard or with the :/oldVercel CLIPublished rules take effect immediately across all regions,
6日前

EVE Online: The Move to Python 3 Begins! Simon Willison's Weblog
<p><strong><a href="https://www.eveonline.com/news/view/the-move-to-python-3-begins">EVE Online: The Move to Python 3 Begins!</a></strong></p>EVE Online has been one of the most interesting case studies in Python at scale for over twenty years now.</p><p>They've been running on <a href="https://github.com/stackless-dev/stackless/wiki/">Stackless Python</a> since their launch in 2003, and their last major upgrade was 16 years ago, to St...
6日前

How to evaluate LLMs before production
The GitHub Blog
These are the lessons we learned evaluating LLMs for real-world secret scanning.The post How to evaluate LLMs before production appeared first on The GitHub Blog.
6日前

Socket for Asana Is Now Available
Socket
Create and manage Asana tasks directly from Socket alerts, with manual task creation, automated ticketing rules, and two-way sync.
6日前

Vercel applications are protected from Next.js August 2026 security vulnerabilities
Vercel News
SummaryImpact on Vercel deploymentsResolution for self-hosted applicationsCreditReferencesTwo vulnerabilities affecting Next.js were disclosed in the August 2026 Security Release. Next.js applications hosted on Vercel are protected and require no customer action. Next.js disclosed the following critical vulnerabilities: After the AVIF vulnerability was identified, Vercel applied protections to its managed Image Optimization service.Applications hosted on Vercel are protected. No upgrades, config
6日前

Speed Insights now has a free tier
Vercel News
now has a free tier that gives you a high-level performance overview from your real users. The new free tier: Speed InsightsInstall Speed Insights: Previously, free Speed Insights was limited to a single project on Hobby, and upgrading to Pro meant losing access unless you paid for the add-on. Now your free tier carries over, and you only pay if you upgrade.The paid product, now called Speed Insights Plus, includes deeper diagnostics and historical data. If you were already paying for Speed Insi
6日前
8/25 (火)

MicroLighter Master.dev Blog RSS Feed
A brand new 2 KB client-side syntax highlighter from Dave. Includes a web component for very easy usage. Maybe these web components have legs, eh? The most interesting part about it is that it doesn’t touch the DOM. It uses the Highlight API to colorize text and TextMate grammars (the same as in VS Code) […]
6日前

MicroLighter: Syntax Highlighter
CSS-Tricks
Syntax highlighting for code blocks without the complicated markup, spans, classes, and bloated JavaScript, courtesy of Uncle Dave.MicroLighter: Syntax Highlighter originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
6日前

Could OpenClaw have actually hacked that Australian gym? We decided to test it.
Aikido Security's Blog
We recreated the viral AI gym hack in a controlled environment. Running Opus 4.6 on OpenClaw, the model exploited the booking flaw in nine of ten runs.Category: Research
6日前

Why Your Website Should Never Stop Changing
Articles on Smashing Magazine — For Web Designers And Developers
Every website peaks on launch day and slowly drifts from there, not because it breaks, but because nobody has time to keep it current. Autonomous websites, continuously optimized by agents after launch, aim to change that. Pierre Burgy shares what they learned building for full website autonomy and the deeper design problem they uncovered along the way.
6日前

IndexedDB と React・Dexie.js でタスク管理アプリを作ってみる
azukiazusa のテックブログ2
IndexedDB は、構造化されたデータをブラウザへ保存できる非同期・トランザクション型のデータベースです。この記事では素の IndexedDB API で基本的な仕組みを確認した後、React と Dexie.js でタスク管理アプリを実装します。
7日前

Introducing Run SDK: secure eval for your agents
Vercel News
Agents increasingly write TypeScript programs to coordinate tools and process their results. Once those programs touch real applications, some steps require authentication, while others need human approval.Executing that code with gives it the same access as the application around it, including its secrets and internal services, and leaves no durable way to pause at those boundaries.evalToday, we're releasing the , a package for executing untrusted JavaScript and TypeScript without giving it dir
7日前

The end of credential sprawl for agents
1
Vercel News
Every useful agent reaches beyond your codebase. It posts to Slack, opens pull requests, queries Snowflake, or calls an internal API. That reach is what makes it valuable, and it's also where the risk lives, because for years, granting it meant provisioning a long-lived token and hoping it never leaked. replaces long-lived tokens with ones your code requests at runtime, scoped to the task and expiring on their own.Vercel ConnectDuring the , we've grown the ecosystem past 100 connectors, unified
7日前

Access control for AI agents on Rails: gating SQL with Action Policy
Evil Martians
Our Rails AI assistant had read-only SQL access and could still return peer review scores. Learn how we kept open-ended analytics in an in-app AI assistant while making database access honor application permissions.
7日前

Electron 44
Electron Blog
Electron 44 has been released! It includes upgrades to Chromium 152.0.7977.54, V8 15.2, and Node v24.18.1.
7日前

MiniMax M3 and M2.7 are free on AI Gateway
Vercel News
and are free on AI Gateway via GMI Cloud through Sunday, September 6.MiniMax M3M2.7Use or to route requests to GMI Cloud. These model IDs will return an error after the free period ends.minimax/minimax-m3-freeminimax/minimax-m2.7-freeTo keep requests working after the free period, use the standard model ID without the suffix and place GMI Cloud first in the provider order:-freeAI Gateway tries GMI Cloud first and can fall back to another provider if GMI Cloud can't serve the request. This lets t
7日前

Wan 3.0 now available on AI Gateway
Vercel News
is now available on AI Gateway as .Wan 3.0 from Alibabaalibaba/wan-v3.0-videoWan 3.0 combines text-to-video, image-to-video, first- and last-frame conditioning, and reference-based generation in one model. References can include images, video, and audio. It generates clips up to 30 seconds at 30 fps in 480p, 720p, or 1080p, with synchronized audio. Previously, Wan 2.7 required separate and model IDs and was limited to 15-second clips at 24 fps.-t2v-r2vWan 3.0 supports , so no HTTP request needs
7日前

AI Gateway now supports asynchronous video generation
Vercel News
on AI Gateway can now run asynchronously. Video generationBy default, keeps one HTTP request to AI Gateway open until the result is ready. Because video generation can take seconds or minutes, that request can exceed request timeouts.generateVideoWith asynchronous generation, your application can receive a webhook, poll for completion, or start a generation and retrieve the result in a later request.Choose an option based on whether your process can keep running and whether your application can
7日前

Vercel Connect is now generally available
Vercel News
is now generally available on all plans and in . Instead of storing long-lived provider secrets, your code requests short-lived, scoped tokens at runtime. Deployments authenticate with their existing Vercel OIDC identity. Each token is scoped to the task, refreshed automatically, and expires on its own.Vercel Connectv0Register a connector . Pass the service name and the CLI pre-populates the brand name, icon, auth type, and MCP or discovery URL, then prompts for any credentials the service requi
7日前

Chat SDK now supports Slack Enterprise Grid
Vercel News
Chat SDK's Slack adapter now supports .Slack Enterprise GridBots installed org-wide work across every workspace, with correct token resolution, tenant-scoped caches, and event retry deduplication.The adapter now stores org-wide installations by enterprise ID. This matches how tokens are resolved for incoming events, slash commands, and interactive payloads. records the new identity fields:SlackInstallationToken resolution behaves the same over HTTP webhooks and Socket Mode. Events route by the i
7日前

Vercel Connect now supports Linq
Vercel News
now includes a managed connector for , so your apps and agents can send and receive messages over iMessage, RCS, and SMS.Vercel ConnectLinqAs a , Vercel can create a Linq account and phone number for you, or link an existing account. You never manage credentials yourself.Vercel Managed ConnectorCreate a connector from the or :dashboardVercel CLIThe connector powers the new in .Linq channeleveRun , choose Vercel Connect, and eve wires up the connector, phone numbers, and webhook for you:eve add c
7日前

Bring your agent to Notion with Chat SDK
Vercel News
Your team already works in Notion. Now your agent can too.With the new for Chat SDK, the same agent you run on Slack, Discord, GitHub, Teams, or WhatsApp can join comment discussions on your Notion pages, no separate codebase required.Notion adapterEach Notion page maps to a channel and each comment thread to a thread, so replies stay threaded automatically.The adapter supports mentions, message editing, conversation history, and up to three file attachments. By default, your bot replies when @-
7日前

Chat SDK now supports XChat
Vercel News
You can now build bots that hold end-to-end encrypted 1:1 and group conversations on XChat with the new for Chat SDK.XChat adapterThe adapter handles all encryption, key management, and signature verification automatically. Bots can also message users first, as long as the user has encrypted chat set up and follows the bot.XChat has no markdown rendering, so the adapter falls back automatically: URLs and @mentions render as tappable links, tables as ASCII code blocks, and cards as text with a li
7日前

How Bucketeer A/B Test Choose Which Version of Your Feature to Ship
CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
Hi, I’m a backend engineer working on Bucket ...
7日前

SaaSの技術的難しさはホリゾンタルとバーティカルで異なる
61
カミナシ エンジニアブログ
はじめに カミナシでSWEをしている osuzu です。 筆者はSaaSと呼ばれる業務ソフトウェア開発を前職含め6年ちょっと経験し、最近ようやく言語化できたことがあります。 それは「SaaSの技術的な難しさは、ホリゾンタルかバーティカルかで種類が異なる」ということ。そしてより重要なのは、この2つの戦いを混ぜてしまうと、どちらの戦い方も難しくなるということです。 前提: ホリゾンタルSaaSとバーティカルSaaS 念のため用語を揃えておきます。 ホリゾンタルSaaS: 業界を問わず横断的に使われるSaaS。チャット、タスク管理、通知、ドキュメントなど。SlackやNotion、Google Do…
7日前

Your alt text passes automated checks. That doesn’t mean it’s any good.
1
The GitHub Blog
We built a plugin for the GitHub Accessibility Scanner to make sure your alt text is actually accessible. Here's how it works.The post Your alt text passes automated checks. That doesn’t mean it’s any good. appeared first on The GitHub Blog.
7日前
The Cloudflare Blog – Brought to you by EmDash
3
Cloudflare Blog
We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and redesigned the frontend experience.
7日前










