フロントエンドの状態管理のパターンとしてクエリパラメータを信頼できる唯一の情報源(single source of truth)として扱うことがあります。ですが、クエリパラメーターの型が文字列であるため、型安全性が保証されないという課題があります。この記事では `nuqs` というライブラリを使用してクエリパラメーターを型安全に扱う方法について解説します。

Some plain-language baby-bear porridge writing from Laurie Voss: Is what you’re doing taking a large amount of text and asking the LLM to convert it into a smaller amount of text? Then it’s probably going to be great at it. If you’re asking it to convert into a roughly equal amount of text it will […]

TypeScript 5.8's new erasableSyntaxOnly flag enforces pure type annotations by disabling enums, namespaces, and parameter properties.

Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.

There’s a classic old time tune “How Many Biscuits Can You Eat?”. I know it from The Freight Hoppers but it’s certainly much older than that. The answer? How many biscuits can you eat? 49 and a ham of meat. Obviously. Wait, did they say “a ham of meat”? Some renditions of the song just […]

Explore our simple guide to finding projects, understanding guidelines, and making an impact.The post New to open source? Here’s everything you need to get started appeared first on The GitHub Blog.

When it comes to positioning elements on a page, including text, there are many ways to go about it in CSS — the literal position property with corresponding inset-* properties, translate, margin, anchor() (limited browser support at the moment), and so forth. The offset property is another one that belongs in that list.Positioning Text Around Elements With CSS Offset originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.

Semaphore is Now SOC 2 Type 2 Compliant.The post Semaphore is Now SOC 2 Type 2 Compliant! appeared first on Semaphore.

Unlike traditional cyberattacks that target code or infrastructure vulnerabilities, Denial of Wallet (DoW) attacks focus on draining a service's operational budget.At Vercel, we're building controls and anomaly detection to help you defend against these threats and protect your applications.Read more

The now shows a preview of your production traffic and firewall status. project overview pageThe Vercel Firewall automatically mitigates DDoS attacks for all Vercel deployments. You can further secure your site with , and by turning on when under high-volume attacks. On the project overview page you'll see the status of the firewall, requests blocked and challenged in the past 24 hours, and a warning if a is inhibiting Vercel's ability to protect your site.custom rules and IP blockingAttack Chal

The Vercel Toolbar extension is now available for , in addition to . FirefoxChromeWith this extension you can use the Vercel Toolbar on your production deployments, set preferences for when the toolbar appears and activates, and drag and release to add a screenshot of a selected area to a comment. Install the Firefox extension from the to get started or visit our documentation to learn more about the and . Firefox Browser Add Ons pageVercel Toolbar browser extensionsRead more

OpenAI, leading development platform for building generative AI products and experiences, now has a JavaScript and TypeScript SDK on JSR.

Many applications require a user interface to manage and edit content. This post demonstrates how to create a basic headless CMS using PostgreSQL, React-Admin, and Supabase.

CTO 藤村がホストするPodcast、論より動くもの.fmの第33回を公開しました。今回はykpythemind（以下、ykpy）とyubrotと、技術的負債ではなく庭なのではないかという話をしました。 creators.spotify.com 論より動くもの.fmはSpotifyとApple Podcastで配信しています。フォローしていただくと、新エピソード公開時には自動で配信されますので、ぜひフォローしてください。 コードベースを自分の庭にする 藤村：こんにちは、論より動くもの.fmです。 論より動くもの.fmは STORES のCTO 藤村が技術や技術じゃないことについてざっくばらん…

cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.

Safari Technology Preview Release 212 is now available for download for macOS Sequoia and macOS Sonoma.

Safari Technology Preview Release 212 is now available for download for macOS Sequoia and macOS Sonoma.

無垢な仔猫の写真を集めたウェブサイトを訪問したと想像してみてください。かわいい仔猫達の写真の背後には、このウェブサイトの強大な力が隠れています。誰かがウェブサイトにアクセスすると、サイトのオーナーは…

<p>In this blog post, we take a closer look at template literal types in TypeScript: While their syntax is similar to JavaScript’s template literals, they operate at the type level. Their use cases include:</p><ul><li>Static syntax checking for string literals</li><li>Transforming the casing of property names (e.g. from hyphen case to camel case)</li><li>Concisely specifying large string literal union types</li></ul>

Logging and Debugging in Java: Why Does it Matter? During the development of your program, you might rely on simple println() statements to trace program execut...

A new way to handle dates and times is being added to JavaScript. Let's take a look at Temporal, what problems it solves, the current state, and what you'll find in the new documentation about it on MDN.

HighlightsReporting unused /* eslint */ config commentsThis release introduces a new config option linterOptions.reportUnusedInlineConfigs and corresponding CLI option --report-unused-inline-configs.When this option is set to "warn" or "error", ESLint will report inline rule configuration comments whose severity and options match what’s already been configured for the same rule.// eslint.config.jsexport default [ { linterOptions: { reportUnusedInlineConfigs: "error" }, rules: { "no-unused-vars":

Need to deliver a Core Web Vitals audit for a website? Learn how to approach the audit process, identify optimizations, and deliver a high-impact audit full of actionable advice.

Learn how to simplify form validation in Vue.js with this powerful library, featuring seamless integration and customizable rules.

Logging is a valuable tool for performance, monitoring, and debugging. Jump into this article to learn best practices for practical Python logging.

Create overlays and dropdowns easily with the native HTML popover API

こんにちは、株式会社AJA の SSP Division でバックエンドエンジニアをしている、サイバ ...

Posted by Jianing Sandra Guo, Product Manager, Android, Nataliya Stanetsky, Staff Program Manager, AndroidToday, people around the world rely on their mobile devices to help them stay connected with friends and family, manage finances, keep track of healthcare information and more – all from their fingertips. But a stolen device in the wrong hands can expose sensitive data, leaving you vulnerable to identity theft, financial fraud and privacy breaches.This is why we recently launched Android the

I was reading through Juan’s recent Almanac entry for the @counter-style at-rule and I’ll be darned if he didn’t uncover and unpack some extremely interesting things that we can do to style lists, notably the list marker. You’re probably already …Some Things You Might Not Know About Custom Counter Styles originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.

Discover the latest trends and insights on public software development activity on GitHub with the release of Q2 & Q3 2024 data for the Innovation Graph.The post That’s a wrap: GitHub Innovation Graph in 2024 appeared first on The GitHub Blog.

I was just working on a POST API at work. You POST some data to a URL endpoint, you expect a response. Buckle up, that’s the job sometimes. Happy path responses, error responses, handling incomplete or bad data, etc. You can just rawdog a web browser for this kind of work, building some kind of […]

The new SonarQube Server LTA release is as value-packed as ever. Look forward to high-impact AI capabilities, more secure code at every angle, supercharged developer productivity, and even better enterprise and operational capabilities. As always, there's something for everyone with the LTA!

What is the real, long-term cost of adopting a JavaScript framework?

MassDriver co-founder Cory O’Daniel’s explains cloud management through infrastructure as code.The post Cory O’Daniel on Infrastructure as Code appeared first on Semaphore.

Ente Auth is a modern, secure, and user-friendly two-factor authentication (2FA) solution designed to safeguard online accounts with minimal hassle.

shadcn-ui is a set of reusable React components focused on accessibility, customization, and developer control. It stands out from typical UI libraries by allowing you to own the code directly, thereby reducing external dependencies and version lock-ins.

Announced just this week, DeepSeek-R1 is positioned as a direct competitor to incumbent LLM creators’ flagship models, promising robust reasoning, mathematics, and coding capabilities.

Want to fix CLS issues on your website? Here's a step by step guide of how to debug three common causes of large layout shifts on your website.

Learn about the npm `ignore-scripts` flag and how to use it to prevent the execution of arbitrary commands from malicious npm packages.

We just released Tailwind CSS v4.0 — an all-new version of the framework optimized for performance and flexibility, with a reimagined configuration and customization experience, and taking full advantage of the latest advancements the web platform has to offer.

Learn how specially crafted artifacts can be used to attack Maven repository managers. This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory.The post Attacks on Maven proxy repositories appeared first on The GitHub Blog.

Learn how to modernize legacy code with GitHub Copilot with real-world examples.The post Modernizing legacy code with GitHub Copilot: Tips and examples appeared first on The GitHub Blog.

Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.

We'll get into layered content, clip-path, and the :has() selector to build a responsive slider with live videos. We can do it by hand, but a few SCSS loops will help make it more manageable.

Built-in Postgres client with Bun.sql, built-in S3 object support with Bun.s3, a new text-based lockfile: bun.lock, Express is 3x faster, and a major update on Node.js compatibility.

is an open source library built on top of React, Tailwind CSS, and Radix. It consists of 35 unique components and 300 blocks that can be copy-pasted to build visually rich and interactive dashboards. The Tremor community has seen impressive growth with over 16,000 stars, 300,000 monthly downloads, and 5,500,000 installs to date.TremorToday, Tremor and its cofounders and are joining Vercel’s Design Engineering team where they'll be working on UI components for the Vercel Dashboard, v0, and more.

Last week the UK government launched their 50-point AI Opportunities Action Plan. The plan is ambitious, but it is something of a mixed bag. Some sizeable and worthwhile investments, alongside others which are quite questionable. But what I am more concerned with is what is missing. The plan has optimistic, upbeat and pro-innovation, but is rather silent on the risks.

Turn Figma designs into working apps with Lovable and Builder.io. See how this combo speeds up the process from design to functional application.

こんにちは！ サイボウズ株式会社 フロントエンドエンジニア（内定者バイト）の mehm8128 (@mehm8128) です。 はじめにサイボウズ社内では毎週火曜日に Frontend Weekly と題し「一週間の間にあったフロントエンドニュースを共有する会」を開催しています。今回は、2025/01/21 の Frontend Weekly で取り上げた記事や話題を紹介します。 取り上げた記事・話題 Oracle has informed us they won’t voluntarily withdraw their trademark on "JavaScript"...

Starting now, you can find every supported integration in the 1Password Marketplace, including those for 1Password Extended Access Management, Passage by 1Password, 1Password Developer, and (of course) the world’s most trusted password manager.1Password secures many types of credentials, applications, devices, and developer workflows through a vibrant ecosystem of integrations. 1Password Business admins can connect identity providers like Okta or Microsoft Entra ID to simplify sign-ins, or link

2024 年の Web 技術を振り返る試験として、「Web 技術年末試験 2024」を実施した。その問題と想定解答、平均点などを公開する。

Projects beta, Deno 2, Use cases, and more

Let's use fuzz testing to challenge our REST API with a broad range of inputs, thoroughly testing and efficiently exercising our code.

The plan for 2024 was to release the final version of ESLint v9.0.0 and then start working on language plugins that allow ESLint to officially lint non-JavaScript languages. We spent the year working on these and delivered them all, along with some helpful tools, by the end of 2024.Release of ESLint v9.0.0 and the new configuration systemESLint v9.0.0 was released in April with the new configuration system enabled by default. This being our first major release since 2021, we experienced a diffic

In this release, we're very excited to introduce building tools from source, a feature that's been

Read about how failed startups that used Google SSO might be susceptible to leaking sensitive information of employees.

Discover how unused CSS can impact your page speed and explore tools to identify and optimize CSS files effectively

Learn how to streamline form handling in React with this popular library, featuring easy validation, state management, and submission handling.

Consuming a High Performance Wasm Library in MoonBit from JavaScript

Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.

Explore insights into open source community growth, innovation, and inclusivity with an updated survey dataset.The post Seven years of open source: A more secure and diverse ecosystem appeared first on The GitHub Blog.

Just in case you didn’t know, you don’t need a page to have ID’s on elements anymore in order to jump down to a particular place. We’ve reached support across all major browsers to link to Text Fragments, like: https://frontendmasters.com/courses/#:~:text=Web%20Performance%20Fundamentals%2C%20v2 The #:~: syntax is kinda funky, but here we are, and it’s not too hard […]

The kid and I randomly started watching World’s Toughest Race: Eco-Challenge Fiji on Amazon Prime from 2020. 66 teams descend upon Fiji to compete in the most epic global adventure race ever attempted. Bear Grylls hosts this 11-day expedition that pushes competitors to their physical and emotional limits. We were both like whaaaaat when “Team […]

Spin has been accepted in the CNCF Sandbox. This milestone brings many benefits to the Spin ecosystem.

Chris wrote about “Likes” pages a long while back. The idea is rather simple: “Like” an item in your RSS reader and display it in a feed of other liked items. The little example Chris made is still really good.…Creating a “Starred” Feed originally published on CSS-Tricks, which is part of the DigitalOcean family. You should get the newsletter.

2024 ended with a bang. Cloudflare mitigated another record-breaking DDoS attack peaking at 5.6 Tbps.

We had a busy 2024 with the launch of Deno 2 and JSR, and dozens of features to simplify programming. Here are the biggest updates in 2024 and what's on the horizon.

On January 19, 2025, ByteDance suspended TikTok and related apps for US users. We examine the 14-hour traffic plunge, recovery near Donald Trump’s inauguration.

Self-serve domain renewals and redemptions are now available in the Vercel dashboard.Previously limited to automatic renewals to ensure uninterrupted service, domains can now be manually renewed at your convenience with just a few clicks, directly from the dashboard.To renew your domains directly:Additionally, you may click the button on any domain detail page.Renew DomainFor expired domains with a redemption period (typically 30 days), you can now recover them directly in the dashboard:Read our

This is really cool. It’s also a really important demonstration of your website is your home so you can do whatever the heck you want with it, and you should. Dave has opted to roll out a subtle daily colour change based on a hue rotation and what day of the year we’re on. Sure, it’s not perfect, as Dave rightly mentions, but it’s theirs. With all of the changes to Big Social™ recently, your content is even less safe in these walled-gardens than it already was. One thing Big Social™ can’t touch

JetBrains has partnered with Mend.io, a trusted name in application security. This collaboration will help us continue providing the tools you need to develop secure applications with ease and confidence in our IDEs and Qodana. For the best user experience, make sure to use the latest stable version 2024.3.2. Why Mend? Trusted by industry giants […]

`` 属性はダイアログの外側をクリックした際にダイアログを閉じる Light dismiss 機能を実現するための属性です。closeby 属性は `any`, `closerequest`, `none` の 3 つの値を受け付けます。

When debugging issues in production, context is everything. While Sentry already provides rich error data like stack traces, breadcrumbs, and user information, ...

Alvaro Saburido delves into the current state and challenges of Open-Source authoring, sharing lessons learned from both community- and company-driven initiatives.

How to: Streaming in JavaScript with LangChain. A step by step example on how to stream data in JavaScript with LangChain ...

詳細はウェブサイトにアクセスしてご確認ください。

バナータイトルの先頭に「【緊急】」の文字列を追加。クリッカブルエリアをバナー全体ではなくアクションボタンのみに変更。アクションボタンの最小幅を利用可能な表示幅の50%に変更

<p>The ECMAScript proposal <a href="https://github.com/tc39/proposal-regex-escaping">“RegExp escaping”</a> (by Jordan Harband and Kevin Gibbons) specifies a function <code>RegExp.escape()</code> that, given a string <code>text</code>, creates an escaped version that matches <code>text</code> – if interpreted as a regular expression.</p><p>This proposal is currently at stage 3.</p>

Let's track and handle Tesla errors in your Elixir app using AppSignal.

Today we are excited to release React Native 0.77!

How typescript-eslint expands on TypeScript's type safety to catch explicit and implicit `any`s.

Step-by-step tutorial that walks you through the necessary steps to add SSO to your app using SAML, JumpCloud, Node, and WorkOS.

What is latency and how does it impact website performance? Learn how latency impacts page speed and how Content Delivery Networks can speed up your website.

Collaboration Tools Accessibility User Requirements is a completed W3C Group Note. The document covers accessibility user needs, requirements, and scenarios for collaborative content creation and development tools. The solutions identified in this document are intended to influence the evolution of future accessibility guidelines, technical specifications, or features of collaboration tools and assistive technologies. They are also relevant to software developers who contribute to developing the

Learn the basics of Angular Forms! Explore different approaches to build dynamic, user-friendly forms with ease.

You can now use `attr()` with any CSS property — not just content – and it can parse values into data types other than <string>.

This helps load in data just *before* a user gets to it, and it works with non-root containers and horizontal scrolling.

HonoとZodとOpenAPIまわりが気になって、Zod OpenAPIのコードをWebStormで読んでたら、WebStormとNode.jsのプロセスがCPUをたくさん消費して、動きが遅くなって困った。メモリもWebStormに割り当てたぶんを使い切っちゃうよーって警告が出てきてた。 なんの気なしにそんなことをつぶやいてたらJetBrainsの@niklas_wortmannがコメントをくれた。 Did you happen to create a YouTrack ticket with some CPU or Memory snapshots? Would love to furth…

The is an open-source toolkit for building AI applications with JavaScript and TypeScript. Its unified provider API allows you to use any language model and enables powerful UI integrations into leading web frameworks such as and .AI SDKNext.jsSvelteRead more

, like AI agents and visual building apps, can now easily transfer deployment ownership directly to users or teams.Multi-tenant platformsHow it works: to learn more.Check out our documentationRead moreAny third-party can create a new deployment or using the Vercel API: and Deployment creation: using the Vercel CLIPOST /filesPOST /deploymentsThe Vercel API endpoint is then used to generate a URL for that deployment.Initiate transfer: claim-deploymentThe user selects their Vercel team and complete

はじめに 基盤システムへのデータ送信 コールバックを利用したデータ送信 課題 データ作成のバッチと送信処理を分ける 実装の概要 バッチ処理で作成された事実を記録するテーブルを用意 バッチ処理でのログ記録 コールバック処理 送信バッチ処理 まとめ はじめに こんにちは、mochizukiです。 STORES には、ネットショップ、予約システム、POSレジなど、複数のプロダクトがあります。これらは元々独立して開発されてきたものですが、現在ではサービス間の連携を進め、新たな価値を提供する取り組みを行っています。 詳しくはこちら product.st.inc その中で私が所属するチームでは、各プロダク…

In this post we explore the power of Algebraic Data Types(ADT) with Pattern Matching in Java. We look at how they help us model complex business domains and how using them together gives improvements on the traditional Visitor Pattern.

Learn what Zero Trust security is and how it came to be (spoiler alert: Chinese state-sponsored hackers are involved).

How fast is a typical website on desktop versus mobile, and what does this look like across the world? We take a look based on Google's Chrome User Experience Report (CrUX).

On January 19, 2025, ByteDance shut down access to TikTok and other owned/operated apps for US users, causing an 85% traffic plunge and a rapid shift to alternatives like RedNote.