JSer.infoの情報源となるサイトをまとめたサイトです。
全てのサイトを一つにまとめたRSSを配信しています

Slackに貼り付けると更新を受け取ることができます

直近1週間の更新

5/4 (月)

記事のアイキャッチ画像
Quoting Anthropic Simon Willison's Weblog
<blockquote cite="https://www.anthropic.com/research/claude-personal-guidance"><p>We used an automatic classifier which judged sycophancy by looking at whether Claude showed a willingness to push back, maintain positions when challenged, give praise proportional to the merit of ideas, and speak frankly regardless of what a person wants to hear. Most of the time in these situations, Claude expressed no sycophancy—only 9% of conversations included sycophantic behavior (Figure 2). But ...
38分前

5/3 (日)

記事のアイキャッチ画像
Playwright CLI で AI エージェントに視覚的なフィードバックを与える ブログのファビコン azukiazusa のテックブログ2
Playwright CLI v0.1.9 で追加されたアノテーション機能は AI エージェントに視覚的なフィードバックを与えるために便利な機能です。アノテーション機能を利用すると、ブラウザの要素を選択して、その要素に対するコメントを残すことができます。AI エージェントはこのアノテーションが残された要素を簡単に特定できるため、どのコードを修正すればよいのかを判断しやすくなります。
14時間前
記事のアイキャッチ画像
Sightings Simon Willison's Weblog
<p><strong><a href="https://simonwillison.net/elsewhere/sighting/">/elsewhere/sightings/</a></strong></p>I have a new camera (a Canon R6 Mark II) so I'm taking a lot more photos of birds. I share my best wildlife photos on <a href="https://www.inaturalist.org/">iNaturalist</a>, and based on yesterday's <a href="https://simonwillison.net/2026/May/1/inat-sightings/">successful prototype</a> I decided to add those to my blog.</p>&lt...
1日前

5/2 (土)

記事のアイキャッチ画像
Code Orange: Fail Small is complete. The result is a stronger Cloudflare network ブログのファビコン The Cloudflare Blog
We have completed a massive engineering effort to make our infrastructure more resilient. Through new tools like Snapstone and the Engineering Codex, we've implemented safer configuration changes and automated best practices to prevent future incidents.
2日前
記事のアイキャッチ画像
PyPI Fixes High-Severity Access Control Issues Found in Security Audit ブログのファビコン Socket
The remediated findings include organization permission bugs, stale project access after transfers, OIDC replay edge cases, audit logging gaps, and an IDOR in API token deletion.
2日前
記事のアイキャッチ画像
iNaturalist Sightings Simon Willison's Weblog
<p><strong>Tool:</strong> <a href="https://tools.simonwillison.net/inat-sightings">iNaturalist Sightings</a></p> <p>I wanted to see my <a href="https://www.inaturalist.org">iNaturalist</a> observations - across two separate accounts - grouped by when they occurred. I'm camping this weekend so I built this entirely on my phone using Claude Code for web.</p><p>I started by building an <a href="https://github.com/simonw/inaturali...
2日前
記事のアイキャッチ画像
Introducing TanStack Form ブログのファビコン Frontend Masters Boost RSS Feed
TanStack Form offers a powerful solution for handling form complexity in React. It emphasizes strong typing, performance, and detail management.
2日前

5/1 (金)

記事のアイキャッチ画像
lightning: Obfuscated JavaScript Credential Stealer Bundled in PyPI Wheel ブログのファビコン Step Security Blog
On April 30, 2026, a supply chain compromise was identified in the lightning PyPI package — versions 2.6.2 and 2.6.3. The project’s GitHub account shows signs of compromise, with issues reporting the attack closed rapidly by suspicious responses.
2日前
記事のアイキャッチ画像
Shai-Hulud Worm Pivots to Multi-Cloud: [email protected] Hijacked — 361,000 Weekly Downloads, AWS, GCP, and Azure Credentials Now in Scope ブログのファビコン Step Security Blog
Twenty-nine hours after [email protected] and @cap-js/[email protected] were compromised by the Shai-Hulud worm, a third major npm package has fallen: [email protected], the official Node.js SDK for the Intercom customer messaging platform, with 361,510 weekly downloads — more than the two yesterday’s compromised packages combined. The malicious version was published today at 14:41 UTC via a hijacked GitHub Actions OIDC publishing pipeline, confirming the worm is actively propagating through CI/CD infra
2日前
記事のアイキャッチ画像
A blog bot that pitches its own posts: building a Slack-native publishing system on Cloudflare Workers and Durable Workflows ブログのファビコン WorkOS Blog
How we built a Slack-native AI blog bot on Cloudflare Workers + Durable Workflows — proactive proposals, durable retries, and a multi-model writer pipeline.
2日前
記事のアイキャッチ画像
What’s !important #10: HTML-in-Canvas, Hex Maps, E-ink Optimization, and More ブログのファビコン CSS-Tricks
Developers have been experimenting with HTML-in-Canvas, a hexagonal world map-analytics feature, a web-based OS for e-ink devices, replacing image sources using the content property, and more. This is What’s !important #10.What’s !important #10: HTML-in-Canvas, Hex Maps, E-ink Optimization, and More originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
2日前
記事のアイキャッチ画像
Introducing Dynamic Workflows: durable execution that follows the tenant ブログのファビコン The Cloudflare Blog
Dynamic Workflows is a library that lets you route durable execution to tenant-provided code on the fly. Built on Dynamic Workers, it enables platforms to serve millions of unique workflows at near-zero idle cost.
2日前
記事のアイキャッチ画像
The Index: Issue #180 ブログのファビコン Piccalilli - Everything
Fraude DesignWhy slop it when you can Fraude it?heerich.jsA really nice tool for generating 3D voxel scenes with fantastic documentation and examples.Searching for birdsSo much good stuff in this piece. It's so refreshing to see this sort of thing without scroll-jacking too.The sites we lostA huge archive of old websites from the older days that would have otherwise vanished or been taken over by ads.Digital Independence DayWe've shared a few things to help you get away from big tech over time b
2日前
記事のアイキャッチ画像
Designing Stable Interfaces For Streaming Content ブログのファビコン Articles on Smashing Magazine — For Web Designers And Developers
Streaming UIs are an easy concept on the surface, but are quite complicated in practice. There are many considerations that need to be accounted for, from layout shifts and motion preferences to proper markup and various states, that may not be instantly obvious. What happens if the stream is interrupted? Can users tab through the UI on the keyboard as it shifts? What ARIA attributes might be needed?
2日前
記事のアイキャッチ画像
How GitBook serves 30,000 sites with sub-second content updates ブログのファビコン Vercel News
GitBook on Vercel30,000 documentation sites hosted on a single Vercel deployment120 million monthly page views served from the edge40,000 cache invalidations processed daily, each resolved in under 300ms41% of all traffic now comes from AI crawlers and automated systemsGitBook hosts 30,000 documentation sites on Vercel, serving 120 million page views every month. Companies like n8n, Nvidia, and Zoom trust the platform to keep their docs fast and current. For modern engineering teams and coding a
2日前
記事のアイキャッチ画像
JavaScript PrimerのES2026対応を手伝ってくれるContributorとSponsorを募集しています ブログのファビコン Web Scratch
JavaScript Primer (https://jsprimer.net/) では、毎年ECMAScriptの新しい仕様への追従を行っています。ES2026は2026年6月に正式リリースされる予定です。TC39ではすでにFeature Freezeが行われ、ES2026に入る予定の機能が確定しています。TC39 Process今年もES2026で追加される機能についての対応Issueを作成しました。これらのIssueを一緒に進めてくれるContributorと、JavaScript Primerの活動を支援してくれるSponsorを募集しています。次のDiscussionにコメントをください募集しているDiscussion: ES2026に対応するIssueへのContributorを募集しています · js-primer/js-primer · DiscussionsES2026対応のIssueES2026のMeta Issueとして次のIssueがあります。ES2026の対応 · Issue #1869 · js-primer/js-primer具体的に対応するものとして次の
3日前
記事のアイキャッチ画像
Postgres connections now work through Sandbox firewall ブログのファビコン Vercel News
can now connect to hosted Postgres databases, including , , , , and . To enable a connection, add the database host to your Sandbox's allowed domains.Vercel SandboxNeonSupabaseAWS RDSNilePrisma PostgresWhen is used with Vercel Sandbox, the sandbox firewall restricts outbound network access by checking the domain name during a connection's TLS handshake. This works seamlessly for HTTPS traffic, where the domain is visible at the start of the connection.SNI based filteringPostgres, however, negoti
3日前
記事のアイキャッチ画像
Malicious Ruby Gems and Go Modules Impersonate Developer Tools to Steal Secrets and Poison CI ブログのファビコン Socket
GitHub account BufferZoneCorp published sleeper packages that later added credential theft, GitHub Actions tampering, fake go wrappers, and SSH persistence.
3日前
記事のアイキャッチ画像
Offline command line translation with TranslateGemma + Ollama Evan Hahn (dot com)
I wrote a simple script that translates text at the command line, completely offline. Here’s an example of how it works on my computer:echo '¿Cómo estás?' | translate# => How are you?It combines a few tools:TranslateGemma, a special-purpose language model for translationOllama, a tool for running language models locallyEfficient Language Detector, a library that detects the language for a piece of textHere’s the pseudocode of how it works:source = read_stdin()# Uses Efficient Language Detecto...
3日前
記事のアイキャッチ画像
ESLint v10.3.0 released ブログのファビコン ESLint Blog
Highlightsno-unused-private-class-members SuggestionsThe no-unused-private-class-members rule now provides suggestions to remove reported unused private class members.For example, for the following code, in which the rule reports #doSomethingElse as unused:class C { /** * My public method. */ doSomething() { } /** * My private method. */ #doSomethingElse() { }}12345678910111213141516Copy code to clipboard It will now suggest removing #doSomethingElse. After applying the suggestion, the method an
3日前
記事のアイキャッチ画像
How to stay secure while traveling this summer ブログのファビコン Blog on 1Password Blog
Whether you’re juggling travel bookings with friends or packing the kids’ suitcases, planning a summer vacation can be far from relaxing. And once you get to your destination, the confirmation codes and passport numbers are always buried in the group chat when you need them most. But when you have all your travel essentials saved securely in one place, you can skip the scramble and put safe travels on autopilot. Before you take off this summer, check these tips to keep your information safe and
3日前
記事のアイキャッチ画像
What’s new in Svelte: May 2026 ブログのファビコン Svelte blog
This month we got a ton of improvements to SvelteKit's remote functions, TypeScript 6.0 support and the experimental release of community plugins in the Svelte CLI.Svelte was also featured in ThoughtWorks Technology Radar!Big month, bigger showcase... so let's dive in!What's new in SvelteKitSvelteKit now supports TypeScript 6.0 (2.56.0, Docs, #15595)form fields can now specify a default value using field.as(type, value), reducing boilerplate for pre-populated forms (2.56.0, Docs, #15577)Remote f
3日前
記事のアイキャッチ画像
Ember 6.12 Released ブログのファビコン Ember.js Blog
The Ember project is excited to announce the release of Ember v6.12. Following Ember's Major Version Policy, version 6.12 will be the final release of the 6.x series. This release of Ember.js is an LTS (Long Term Support) candidate. LTS candidates prioritize stability over the addition of new features, and have an extended support schedule.Ember.js 6.12Ember.js 6.12 does not introduce any new features in this release, but we have done some major improvements to the internal structure of the repo
3日前
記事のアイキャッチ画像
Codex CLI 0.128.0 adds /goal Simon Willison's Weblog
<p><strong><a href="https://github.com/openai/codex/releases/tag/rust-v0.128.0">Codex CLI 0.128.0 adds /goal</a></strong></p>The latest version of OpenAI's Codex CLI coding agent adds their own version of the <a href="https://ghuntley.com/ralph/">Ralph loop</a>: you can now set a <code>/goal</code> and Codex will keep on looping until it evaluates that the goal has been completed... or the configured token budget has been exhausted.&lt...
3日前
記事のアイキャッチ画像
Our evaluation of OpenAI's GPT-5.5 cyber capabilities Simon Willison's Weblog
<p><strong><a href="https://www.aisi.gov.uk/blog/our-evaluation-of-openais-gpt-5-5-cyber-capabilities">Our evaluation of OpenAI's GPT-5.5 cyber capabilities</a></strong></p>The UK's AI Security Institute <a href="https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities">previously evaluated Claude Mythos</a>: now they've evaluated GPT-5.5 for finding security vulnerability and found it to be comparable to M...
3日前
記事のアイキャッチ画像
Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise ブログのファビコン Socket
Socket found a malicious Intercom PHP package on Packagist using Composer plugin execution to steal credentials and spread across ecosystems.
3日前
記事のアイキャッチ画像
Quoting Andrew Kelley Simon Willison's Weblog
<blockquote cite="https://lobste.rs/s/ifcyr1/contributor_poker_zig_s_ai_ban#c_cbtxub"><p>It's a common misconception that we can't tell who is using LLM and who is not. I'm sure we didn't catch 100% of LLM-assisted PRs over the past few months, but the kind of mistakes humans make are fundamentally different than LLM hallucinations, making them easy to spot. Furthermore, people who come from the world of agentic coding have a certain <em>digital smell</em> that is not ob...
3日前
記事のアイキャッチ画像
We need RSS for sharing abundant vibe-coded apps Simon Willison's Weblog
<p><strong><a href="https://interconnected.org/home/2026/04/29/syndicating-vibes">We need RSS for sharing abundant vibe-coded apps</a></strong></p>Matt Webb:</p><blockquote><p>I would love an RSS web feed for all those various tools and apps pages, each item with an “Install” button. (But install to where?)</p><p>The lesson here is that when vibe-coding accelerates app development, apps become more personal, more situated, and mo...
3日前
記事のアイキャッチ画像
GitHub Copilot CLI for Beginners: Interactive v. non-interactive mode ブログのファビコン The GitHub Blog
Learn the difference between CLI interactive v. non-interactive modes.The post GitHub Copilot CLI for Beginners: Interactive v. non-interactive mode appeared first on The GitHub Blog.
3日前
記事のアイキャッチ画像
Intercom’s npm Package Compromised in Ongoing Mini Shai-Hulud Worm Attack ブログのファビコン Socket
Compromised [email protected] npm package is tied to the ongoing Mini Shai-Hulud worm attack targeting developer and CI/CD secrets.
3日前
記事のアイキャッチ画像
The Importance of Native Randomness in CSS ブログのファビコン CSS-Tricks
We're getting new functions for generating random numbers in CSS! But the road to get here has been a long and winding one.The Importance of Native Randomness in CSS originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
3日前

4/30 (木)

記事のアイキャッチ画像
What Is CKEditor AI? A Guide for Product Teams ブログのファビコン CKEditor Ecosystem Blog
CKEditor AI brings AI-assisted writing directly into your rich text editor. Discover how it works, what pain points it solves, and why teams are adopting it.
3日前
記事のアイキャッチ画像
Post-quantum encryption for Cloudflare IPsec is generally available ブログのファビコン The Cloudflare Blog
Cloudflare IPsec now has generally available support for post-quantum encryption via hybrid ML-KEM. We’ve confirmed interoperability with Cisco and Fortinet.
3日前
記事のアイキャッチ画像
lightning PyPI Package Compromised in Supply Chain Attack
はてなブックマークアイコン 1
ブログのファビコン Socket
Socket detected a malicious supply chain attack on PyPI package lightning versions 2.6.2 and 2.6.3, which execute credential-stealing malware on import.
3日前
記事のアイキャッチ画像
Agents can now create Cloudflare accounts, buy domains, and deploy
はてなブックマークアイコン 6
ブログのファビコン The Cloudflare Blog
Starting today, agents can now be Cloudflare customers. They can create a Cloudflare account, start a paid subscription, register a domain, and get back an API token to deploy code right away. Humans can be in the loop to grant permission, but there’s no need to go to the dashboard, copy and paste API tokens, or enter credit card details.
3日前
記事のアイキャッチ画像
Three stoic principles for better web accessibility ブログのファビコン Piccalilli - Everything
When I listened to Arthur Brooks' podcast episode Four Practical Ways to Live Like a Stoic with Ryan Holiday, I was surprised and excited to see how it applies to my work as an accessibility practitioner.Among other things, they talk about three principles, and in this article, I’m going to discuss how they can help you in your everyday life doing web accessibility work.Manage yourself, not the outside world“Having the emotion, but not being ruled by it.”You already seem to be living by this pri
3日前
記事のアイキャッチ画像
A Fresh View In May (2026 Wallpapers Edition) ブログのファビコン Articles on Smashing Magazine — For Web Designers And Developers
Let’s welcome May with a new collection of desktop wallpapers! Following our monthly tradition, the wallpapers were created by the community for the community and can be downloaded for free. Enjoy!
3日前
記事のアイキャッチ画像
A Mini Shai-Hulud Has Appeared: Obfuscated Bun Runtime Payloads Hit SAP-Related npm Packages ブログのファビコン Step Security Blog
StepSecurity has detected a new npm supply chain attack campaign using preinstall hooks to download the Bun JavaScript runtime and execute an 11 MB obfuscated payload. At least two SAP-ecosystem packages are confirmed compromised so far.
3日前
記事のアイキャッチ画像
Grok 4.3 on AI Gateway ブログのファビコン Vercel News
Grok 4.3 is now available on . The model has a 1M token context window and improvements in accuracy, tool calling, and instruction following.Vercel AI GatewayTo use Grok 4.3, set model to in the .xai/grok-4.3AI SDKAI Gateway provides a unified API for calling models, tracking usage and cost, and configuring retries, failover, and performance optimizations for higher-than-provider uptime. It includes built-in , , support, and intelligent provider routing with automatic retries.custom reportingobs
3日前
記事のアイキャッチ画像
Custom tags available in beta on Vercel Sandbox ブログのファビコン Vercel News
As teams scale isolated environments for AI agents, code generation, or dev workflows, keeping track of which sandbox belongs to whom, and why, becomes critical. Custom tags allow you to organize, filter, and manage at scale. Each sandbox supports up to five tags.Vercel SandboxesTags are flexible by design. Use them to separate staging from production, attribute usage to specific teams, or isolate sandboxes per customer in multi-tenant platforms:Promote a sandbox from staging to production, reas
3日前
記事のアイキャッチ画像
The Zig project's rationale for their firm anti-AI contribution policy Simon Willison's Weblog
<p><a href="https://ziglang.org/">Zig</a> has one of the most stringent <a href="https://ziglang.org/code-of-conduct/">anti-LLM policies</a> of any major open source project:</p><blockquote><p>No LLMs for issues.</p><p>No LLMs for pull requests.</p><p>No LLMs for comments on the bug tracker, including translation. English is encouraged, but not required. You are welcome to post in your native language and rely on others to ...
4日前
記事のアイキャッチ画像
Astro 6.2 ブログのファビコン The Astro Blog
Astro 6.2 introduces an experimental custom logger with JSON output, an SVG optimizer API, a new font file URL helper, and more.
4日前
記事のアイキャッチ画像
What's new in Astro - April 2026 ブログのファビコン The Astro Blog
April 2026 - Astro Together London, an alpha preview of Astro 7, and more!
4日前
記事のアイキャッチ画像
Notes from April 2026 Evan Hahn (dot com)
After a busy March, April was a little quieter. But don’t worry, I still have a bunch of little links for you to click on.Things I publishedGitHub’s uptime hasn’t been great recently. Even though I dislike the Microsoft subsidiary, I wrote “In defense of GitHub’s poor uptime”, which argues that it’s not as bad as folks seems to be saying. See this Lobsters thread for some discussion.Published version 0.2.0 of setbigtimeout, my JavaScript library for waiting a very long time.Like every month, I p
4日前
記事のアイキャッチ画像
Making It Easier to Import Projects Into Your Monorepo ブログのファビコン Nx Blog
AI agents make importing existing projects into an Nx monorepo easier: `nx import` does the heavy lifting while the agent handles workspace-specific gaps.
4日前
記事のアイキャッチ画像
Remix 3 Beta Preview ブログのファビコン Remix Blog
Remix 3 is ready for you to kick the tires and start prompting your next big idea into existence.
4日前
記事のアイキャッチ画像
1Password and Perplexity expand partnership to secure access for Perplexity Computer ブログのファビコン Blog on 1Password Blog
AI has gotten very good at generating answers. The bigger opportunity now is helping people take action.That shift is already underway, and AI is moving from chat into real workflows: researching, navigating applications, and completing multi-step processes across systems. But the moment AI moves from answering questions to getting things done, one problem becomes impossible to ignore: secure access.Secure access, in this context, means ensuring the right human or AI agent can reach the right ap
4日前
記事のアイキャッチ画像
Why friction is a security risk, with Dustin Heywood ブログのファビコン Blog on 1Password Blog
Listen to this episode on Apple PodcastsnullListen nowListen to this episode on SpotifynullListen nowIf cybersecurity teams were rock bands, offensive security professionals would be the cool drummers; they don’t just have a fun job, they help show the rest of the team where to go.In this episode of TheChasing Entropy Podcast by 1Password, Dave Lewis speaks with a legend of offensive security, Dustin Heywood, known to many as EvilMog. Heywood is an executive managing hacker and senior technical
4日前
記事のアイキャッチ画像
March in Servo: keyboard navigation, better debugging, FreeBSD support, and more! ブログのファビコン Servo Blog
Servo 0.1.0 represents Servo’s biggest month ever, with a record 530 commits and our first ever release on crates.io!For security fixes, see § Security.With this release Servo becomes more accessible, thanks to tab navigation (@mrobinson, @Loirooriol, #42952, #43019, #43058, #43246, #43267, #43067), keyboard navigation with Alt+Shift and the accesskey attribute (@mrobinson, #43031, #43144, #43434), and keyboard scrolling with Space and Shift+Space (@mrobinson, #43322).We’ve shipped several new w
4日前
記事のアイキャッチ画像
Designing an MCP server from a REST API ブログのファビコン WorkOS Blog
How to design an MCP server from a REST API: choosing between tools, resources, and prompts, getting the granularity right, and curating endpoints for the agents that will call them.
4日前
記事のアイキャッチ画像
Synchronous vs. asynchronous authorization updates: How to choose ブログのファビコン WorkOS Blog
Why we start synchronous, when we move to async, and why revocations are different.
4日前
記事のアイキャッチ画像
Picking a password hash: A developer's guide to argon2, bcrypt, and scrypt ブログのファビコン WorkOS Blog
Three algorithms compared, a clear default, and the tradeoffs that should make you pick something else.
4日前
記事のアイキャッチ画像
How AI Remembers and Why It Forgets: Part 2. Tools and Agents ブログのファビコン Developer Way
What are AI tools and agents really, and how do they keep Context in check? Let's poke around Claude Code, do a few experiments, and find out!
4日前
記事のアイキャッチ画像
llm 0.32a1 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.32a1">llm 0.32a1</a></p> <blockquote><ul><li>Fixed a bug in 0.32a0 where tool-calling conversations were not correctly reinflated from SQLite. <a href="https://github.com/simonw/llm/issues/1426">#1426</a></li></ul></blockquote> <p>Tags: <a href="https://simonwillison.net/tags/llm">llm</a></p>
4日前
記事のアイキャッチ画像
Malicious npm Package Brand-Squats TanStack to Exfiltrate Environment Variables ブログのファビコン Socket
A brand-squatted TanStack npm package used postinstall scripts to steal .env files and exfiltrate developer secrets to an attacker-controlled endpoint.
4日前
記事のアイキャッチ画像
LLM 0.32a0 is a major backwards-compatible refactor Simon Willison's Weblog
<p>I just released <a href="https://llm.datasette.io/en/latest/changelog.html#a0-2026-04-28">LLM 0.32a0</a>, an alpha release of my <a href="https://llm.datasette.io/">LLM</a> Python library and CLI tool for accessing LLMs, with some consequential changes that I've been working towards for quite a while.</p><p>Previous versions of LLM modeled the world in terms of prompts and responses. Send the model a text prompt, get back a text response.</p>&l...
4日前
記事のアイキャッチ画像
llm 0.32a0 Simon Willison's Weblog
<p><strong>Release:</strong> <a href="https://github.com/simonw/llm/releases/tag/0.32a0">llm 0.32a0</a></p> <p>See <a href="https://simonwillison.net/2026/Apr/29/llm/">the annotated release notes</a>.</p> <p>Tags: <a href="https://simonwillison.net/tags/llm">llm</a></p>
4日前
記事のアイキャッチ画像
WorkOS joins Stripe Projects: Auth from the CLI, no payment wall ブログのファビコン WorkOS Blog
WorkOS is now a supported provider in Stripe Projects. Add enterprise-grade auth to any project from the CLI with a single command — no signup, no payment wall.
4日前
記事のアイキャッチ画像
AI Amplifies Everything: A Team Lead’s Guide to AI-Assisted Development ブログのファビコン Frontend Masters Boost RSS Feed
While AI for codegen is manageable, integrating AI into team workflows presents more challenges, such as maintaining quality long term and managing technical debt.
4日前

4/29 (水)

記事のアイキャッチ画像
contrast() ブログのファビコン CSS-Tricks
The contrast() filter function increases or decreases the contrast of an element.contrast() originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
4日前
記事のアイキャッチ画像
contrast-color() ブログのファビコン CSS-Tricks
The contrast-color() function takes a <color> and returns either black or white, whichever is the most contrasting color for that value.contrast-color() originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
4日前
記事のアイキャッチ画像
TeamPCP-Linked Supply Chain Attack Hits SAP CAP and Cloud MTA npm Packages ブログのファビコン Socket
Compromised SAP CAP npm packages download and execute unverified binaries, creating urgent supply chain risk for affected developers and CI/CD environments.
4日前
記事のアイキャッチ画像
Protecting Against Compromised Packages with Minimum Release Age ブログのファビコン Nicolas Charpentier's Blog
Leverage your package manager's minimum release age setting to delay the installation of freshly published versions and reduce the risk of pulling in a compromised package.
4日前
記事のアイキャッチ画像
Introducing the Nuxt Agent ブログのファビコン The Nuxt Blog
Our own AI agent on nuxt.com, grounded in the official docs and the Nuxt ecosystem. We built it internally using the AI SDK, our MCP server, and Nuxt UI components.
5日前
記事のアイキャッチ画像
Custom SCIM schemas: Where identity provisioning meets authorization ブログのファビコン WorkOS Blog
What schema extensions are, how Docker and Notion use them, and how to design your own.
5日前
記事のアイキャッチ画像
AI agents vs service accounts: Key differences and what to do about them ブログのファビコン WorkOS Blog
The reasons why IAM controls built for service accounts and API clients don't transfer to AI agents.
5日前
記事のアイキャッチ画像
The 5 best Firebase Auth alternatives in 2026 ブログのファビコン WorkOS Blog
Five platforms for teams who've outgrown Firebase Auth's B2B gaps and Google Cloud lock-in.
5日前
記事のアイキャッチ画像
Declarative Shadow DOM and Native Server-Side Rendering ブログのファビコン DebugBear Blog
Declarative Shadow DOM (DSD) makes server-side rendering of Web Components possible, which can meaningfully improve page load times and Core Web Vitals.
5日前
記事のアイキャッチ画像
Two AI agents, one incident: Rocky AI comes to the terminal ブログのファビコン Checkly Blog: Monitoring Insights & Trends
Rocky AI analysis is now in your Checkly CLI and behind a public API. Pull root cause analysis straight from `checkly checks get` to get your agents context to fix failed checks faster
5日前
記事のアイキャッチ画像
Vercel now supports Pro plan in Stripe Projects ブログのファビコン Vercel News
You can now sign up for or upgrade to a Vercel Pro plan directly from Stripe Projects using (SPTs). Agents and developers can manage plan changes programmatically from the Stripe CLI, without leaving their workflow.shared payment tokens This builds on our by enabling end-to-end provisioning and billing in one place. Instead of switching between dashboards, you can now handle infrastructure setup and plan management directly from the terminal.Stripe Projects launch in developer preview If you’re
5日前
記事のアイキャッチ画像
Quoting OpenAI Codex base_instructions Simon Willison's Weblog
<blockquote cite="https://github.com/openai/codex/blob/66b0781502be5de3b1909525c987643b9e5e407d/codex-rs/models-manager/models.json#L55"><p><code>Never talk about goblins, gremlins, raccoons, trolls, ogres, pigeons, or other animals or creatures unless it is absolutely and unambiguously relevant to the user's query.</code></p></blockquote><p class="cite">— <a href="https://github.com/openai/codex/blob/66b0781502be5de3b1909525c987643b9e5e407...
5日前
記事のアイキャッチ画像
Native Deployment Checks are now available ブログのファビコン Vercel News
You can now run lint and typecheck on every Vercel deployment, in parallel with the build. Native Deployment Checks are available to every team and join your existing alongside GitHub and Marketplace integrations.Deployment ChecksOnce added from your project's , Vercel runs the matching script from your on each deployment, and skips the check if no matching script exists. You can mark a check as required to hold the deployment from production until it passes, and choose which environments each c
5日前
記事のアイキャッチ画像
GitHub for Beginners: Getting started with Markdown ブログのファビコン The GitHub Blog
Discover how to format and edit your comments and posts using Markdown.The post GitHub for Beginners: Getting started with Markdown appeared first on The GitHub Blog.
5日前
記事のアイキャッチ画像
Built for Change: How NGINX Ingress Controller and NGINX Gateway Fabric Handle Kubernetes Backend Changes Natively ブログのファビコン NGINX Community Blog
Kubernetes applications are designed to change constantly. Pods scale out, roll forward, restart, and disappear, so the traffic layer has to keep pace with a backend set that is never truly static. That is the backdrop for both NGINX Ingress Controller (NIC) and NGINX Gateway Fabric (NGF). In both cases, Kubernetes is the source of […]
5日前
記事のアイキャッチ画像
Securing the git push pipeline: Responding to a critical remote code execution vulnerability ブログのファビコン The GitHub Blog
How we validated, fixed, and investigated a critical vulnerability in under two hours, and confirmed no exploitation.The post Securing the git push pipeline: Responding to a critical remote code execution vulnerability appeared first on The GitHub Blog.
5日前

4/28 (火)

記事のアイキャッチ画像
AI-Assisted Coding: A Practical Guide for Software Engineers ブログのファビコン Frontend Masters Boost RSS Feed
Let's acknowledge that gap in AI-generated code between code that works and code that is production-ready. It's you.
5日前
記事のアイキャッチ画像
Quoting Matthew Yglesias Simon Willison's Weblog
<blockquote cite="https://twitter.com/mattyglesias/status/2049105745132585161"><p>Five months in, I think I've decided that I don't want to vibecode — I want professionally managed software companies to use AI coding assistance to make more/better/cheaper software products that they sell to me for money.</p></blockquote><p class="cite">— <a href="https://twitter.com/mattyglesias/status/2049105745132585161">Matthew Yglesias</a></p> <p&...
5日前
記事のアイキャッチ画像
Shutdowns, power outages, and conflict: a review of Q1 2026 Internet disruptions ブログのファビコン The Cloudflare Blog
The first quarter of 2026 saw a surge in Internet disruptions, from nationwide shutdowns in Uganda and Iran to unprecedented drone strikes on cloud infrastructure. We explore the data behind these events using Cloudflare Radar.
5日前
記事のアイキャッチ画像
Socket Has Acquired Secure Annex ブログのファビコン Socket
Socket has acquired Secure Annex to expand extension security across browsers, IDEs, and AI tools.
5日前
記事のアイキャッチ画像
Scroll-Driven Animations ブログのファビコン Josh Comeau's blog
The new Animation Timeline API allows us to create dynamic scroll animations without any JavaScript! It’s honestly a very lovely API, and in this blog post, we’ll explore some of the super cool things we can do with it.
5日前
記事のアイキャッチ画像
`contrast-color()` 関数を使用した自動コントラスト調整 ブログのファビコン azukiazusa のテックブログ2
`contrast-color()` 関数は、指定した色に対して `white` もしくは `black` のどちらがより高いコントラスト比を持つかを自動的に判断し、適切な色を返す関数です。動的に色が変わる場合やユーザーがカスタムテーマを使用する場合など、常にコントラスト比を確保するのが難しい状況で役立ちます。
5日前
記事のアイキャッチ画像
An update on GitHub availability ブログのファビコン The GitHub Blog
Here’s what we’ve done—and what we’re still doing—to improve our availability and reliability.The post An update on GitHub availability appeared first on The GitHub Blog.
5日前
記事のアイキャッチ画像
Empower your team with expanded roles in the Developer Dashboard ブログのファビコン developer.chrome.com: Blog
We're expanding the roles in extensions Developer Dashboard to include admin, editor, item manager, and viewer.
5日前
記事のアイキャッチ画像
Introducing the OSSCAR Index ブログのファビコン Supabase Blog
Announcing the OSSCAR Index: a quarterly ranking of the fastest-growing open source organizations. The site, the data, and the scoring code are all open source.
5日前
記事のアイキャッチ画像
What's new in pip 26.1 - lockfiles and dependency cooldowns! Simon Willison's Weblog
<p><strong><a href="https://ichard26.github.io/blog/2026/04/whats-new-in-pip-26.1/">What's new in pip 26.1 - lockfiles and dependency cooldowns!</a></strong></p>Richard Si describes an excellent set of upgrades to Python's default <code>pip</code> tool for installing dependencies.</p><p>This version drops support for Python 3.9 - fair enough, since it's been EOL <a href="https://devguide.python.org/versions/">since Octob...
5日前
記事のアイキャッチ画像
2026 Vercel AI Accelerator recap ブログのファビコン Vercel News
On April 16th, 39 teams took the stage at our San Francisco headquarters to pitch investors at Demo Day. During the prior six weeks, founders worked shoulder-to-shoulder with the Vercel team, our partners, and industry leaders to shape their ideas into the next generation of AI applications. from around the world joined the 2026 cohort, building agents, developer tools, consumer apps, and vertical AI for finance, security, healthcare, and robotics. TeamsEach week, the cohort joined two sessions:
5日前
記事のアイキャッチ画像
Introducing talkie: a 13B vintage language model from 1930 Simon Willison's Weblog
<p><strong><a href="https://talkie-lm.com/introducing-talkie">Introducing talkie: a 13B vintage language model from 1930</a></strong></p>New project from <a href="https://nlevine.org">Nick Levine</a>, <a href="http://www.cs.toronto.edu/~duvenaud/">David Duvenaud</a>, and <a href="https://en.wikipedia.org/wiki/Alec_Radford">Alec Radford</a> (of GPT, GPT-2, Whisper fame).</p><p><a href="https://huggingface.co/t...
6日前
記事のアイキャッチ画像
1ヶ月の Tapple インターンで掴んだ 4 つのこと ブログのファビコン CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
はじめに はじめまして。金沢工業大学 情報工学科 2 年の高岡己太朗です。 大学では Android ...
6日前
記事のアイキャッチ画像
Your ears are burning—listen in with Octolens and Val Town ブログのファビコン Val Town Blog
We tried hand rolling social listening before moving to Octolens
6日前
記事のアイキャッチ画像
pnpm 11.0 ブログのファビコン pnpm Blog
pnpm 11 is here! This release tightens the security defaults introduced throughout the v10 cycle, drops the npm CLI fallback for publishing in favor of a native implementation, replaces the JSON-per-package store index with a single SQLite database, and isolates global installs so they no longer interfere with each other.
6日前
記事のアイキャッチ画像
How to add auth to your Rust CLI using WorkOS ブログのファビコン WorkOS Blog
Authenticate users in your Rust command-line tool with a secure OAuth 2.0 Device Code flow using WorkOS. This tutorial shows how to implement login via the terminal, step by step.
6日前
記事のアイキャッチ画像
OAuth's On-Behalf-Of flow for AI agents ブログのファビコン WorkOS Blog
How a new IETF draft extends OAuth so AI agents can act for users with explicit consent and a clean audit trail.
6日前
記事のアイキャッチ画像
microsoft/VibeVoice Simon Willison's Weblog
<p><strong><a href="https://github.com/microsoft/VibeVoice">microsoft/VibeVoice</a></strong></p>VibeVoice is Microsoft's Whisper-style audio model for speech-to-text, MIT licensed and with speaker diarization built into the model.</p><p>Microsoft released it on January 21st, 2026 but I hadn't tried it until today. Here's a one-liner to run it on a Mac with <code>uv</code>, <a href="https://github.com/Blaizzy/mlx-audio">mlx-audio&...
6日前
記事のアイキャッチ画像
Code is Clay ブログのファビコン Frontend Masters Boost RSS Feed
A nice essay from Cam Pedersen. Clay breaks. A lot. My first few attempts collapsed on the wheel. One piece cracked in the kiln. I dropped another walking to my car. But nobody cries about it, you just start over. The clay doesn’t care. It’s just material waiting for the next idea. You’re gonna have […]
6日前
記事のアイキャッチ画像
Tracking the history of the now-deceased OpenAI Microsoft AGI clause Simon Willison's Weblog
<p>For many years, Microsoft and OpenAI's relationship has included a weird clause saying that, should AGI be achieved, Microsoft's commercial IP rights to OpenAI's technology would be null and void. That clause appeared to end today. I decided to try and track its expression over time on <a href="https://openai.com/">openai.com</a>.</p><p>OpenAI, July 22nd 2019 in <a href="https://openai.com/index/microsoft-invests-in-and-partners-with-openai/">Microsoft inv...
6日前
記事のアイキャッチ画像
Speech translation in Google Meet is now rolling out to mobile devices Simon Willison's Weblog
<p><strong><a href="https://workspaceupdates.googleblog.com/2026/04/speech-translation-in-google-meet-is-now-rolling-out-to-mobile-devices.html">Speech translation in Google Meet is now rolling out to mobile devices</a></strong></p>I just encountered this feature via a "try this out now" prompt in a Google Meet meeting. It kind-of worked!</p><p>This is Google's implementation of the ultimate sci-fi translation app, where two people can talk to eac...
6日前
記事のアイキャッチ画像
GitHub Copilot is moving to usage-based billing ブログのファビコン The GitHub Blog
Starting June 1, your Copilot usage will consume GitHub AI Credits.The post GitHub Copilot is moving to usage-based billing appeared first on The GitHub Blog.
6日前

4/27 (月)

記事のアイキャッチ画像
Let’s Use the Nonexistent ::nth-letter Selector Now ブログのファビコン CSS-Tricks
My shim might give the powers that be another reason to say native support isn't necessary, or if lots of people use my :nth-letter hack in the wild, the browser gods might recognize the need to implement it for real.Let’s Use the Nonexistent ::nth-letter Selector Now originally handwritten and published with love on CSS-Tricks. You should really get the newsletter as well.
6日前
記事のアイキャッチ画像
The “Bug-Free” Workforce: How AI Efficiency Is Subtly Disrupting The Interactions That Build Strong Teams ブログのファビコン Articles on Smashing Magazine — For Web Designers And Developers
AI tools are eliminating the need to “bug” colleagues for help, but the informal interactions they replace are the very scaffolding that builds team trust, belonging, and innovation. Casey Hudetz and Eric Olive explore the research and potential impacts behind that risk and offer practical strategies for maintaining human connection while leveraging AI’s strengths.
6日前
記事のアイキャッチ画像
Dialogue Actを骨子とした商談対話合成 ブログのファビコン CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
本記事では、その実践に向けて、まず実データを分析して見えてきた商談対話の構造的な特徴と、そこから得た ...
6日前
記事のアイキャッチ画像
Hobby projects now default to 30-day deployment retention ブログのファビコン Vercel News
Starting April 29th, the maximum retention policy for Hobby plans will be capped at 30 days. Deployments outside your retention window will be automatically removed. This excludes your 10 most recent production deployments and any aliased deployments, which continue to be preserved regardless of retention settings.Pro and Enterprise plans are not affected.Learn more about .Deployment RetentionRead more
6日前
記事のアイキャッチ画像
1ヶ月間で「わける」技術を学んだ話 ブログのファビコン CyberAgent Developers Blog | サイバーエージェント デベロッパーズブログ
はじめに はじめまして!明治大学商学部3年の伊藤汰海です。2026年3月の1ヶ月間、タップルのiOS ...
7日前
記事のアイキャッチ画像
Firestore levels up: Bringing the power of search and JOINs to NoSQL ブログのファビコン Firebase Blog
With support for full-text search, joins, and geospatial queries, Firestore is ready to meet all of your app's querying needs.
7日前
記事のアイキャッチ画像
Nx 22.7 Is Here: Task Sandboxing, 7x Less Memory, and Worktree-Aware Caching ブログのファビコン Nx Blog
Everything that landed in Nx across 22.4 through 22.7: task sandboxing, a 7x reduction in daemon memory, worktree-aware caching, agentic mode improvements, and more.
7日前
記事のアイキャッチ画像
From Legacy to Lightning: How To Modernize A Python App ブログのファビコン Marmelab Blog
How to modernize a legacy Python application without stopping the world? Here's a list of tools and practices that can help.
7日前
記事のアイキャッチ画像
How to handle JWT in Ruby ブログのファビコン WorkOS Blog
Everything you need to know to implement and validate JWTs securely in Ruby: from creating JWTs, to signing and verifying them with JWKS, handling custom claims, and best practices you should be following.
7日前
記事のアイキャッチ画像
AI agents and the multi-hop delegation problem ブログのファビコン WorkOS Blog
How OAuth breaks down when AI agents spawn other agents, and what IETF drafts are doing about it.
7日前
記事のアイキャッチ画像
AI 評価ワークショップを実施して見えてきたこと—— AI エンジニアだけに任せない、チームで育てる AI 品質改善の文化 ブログのファビコン カミナシ エンジニアブログ
2026年4月、「カミナシ 教育」開発チームのオフサイト。 エンジニア・プロダクトマネージャ(PM)・プロダクトデザイナー(PD)が3人ずつのチームに分かれ、「カミナシ 教育」のAI機能をいじりながら、ある特殊なケースを探していました。 機能のバグでしょうか?いえ、もっと厄介なものです。「出力結果はおかしいのに、評価指標は問題なしと判定してしまうケース」——AI機能を評価する仕組みそのものの盲点です。 これが私たちのチームで実施したAI評価改善ワークショップの一場面です。 AI評価改善ワークショップの様子 こんにちは、カミナシでAIエンジニアをしている井上です。カミナシではプロダクトのAI機能…
7日前