Release Radar · November 2022 Edition
We promised we’d be back soon and here we are! There has been an incredible amount of open source projects shipping major version releases before the year wraps up. I can’t believe we are all saying that now. “When the year wraps up!” or “See you next year!” What happened to 2022? Well, we know […] ⌘ Read more

Configure, Manage, and Simplify Your Observability Data Pipelines with the Calyptia Core Docker Extension
Find out how to use the Calyptia Core Docker Extension to build and manage observability pipelines in Docker Desktop. ⌘ Read more

On my blog: Real Life in Star Trek, The Outrageous Okona https://john.colagioia.net/blog/2022/12/15/outrageous-okona.html #scifi #startrek #closereading

Leaked a secret? Check your GitHub alerts…for free
GitHub now allows you to track any leaked secrets in your public repository, for free. With secret scanning alerts, you can track and action on leaked secrets directly within GitHub. ⌘ Read more

GitHub Advanced Security customers can now push protect their custom patterns
With just one click, admins in GitHub Advanced Security organizations can protect their custom patterns on push. ⌘ Read more

Raising the bar for software security: next steps for GitHub.com 2FA
GitHub will require all users who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Learn more about our approach, when we’ll begin our rollout, and what you can expect as we begin requiring 2FA. ⌘ Read more

Creating an accessible search experience with the QueryBuilder component
GitHub’s search inputs have several complex accessibility considerations. Let’s dive into what those are, how we addressed them, and talk about the standalone, reusable component that was ultimately built. ⌘ Read more

Highlights from Git 2.39
Another new release of Git is here to end the year! Take a look at some of our highlights on what’s new in Git 2.39. ⌘ Read more

On my blog: Developer Journal, Kanji Day https://john.colagioia.net/blog/2022/12/12/kanji.html #programming #project #devjournal

On my blog: Free Culture Book Club — Colossal Cave Adventure https://john.colagioia.net/blog/2022/12/10/colossal-cave.html #freeculture #bookclub

On my blog: Tweets from 12/05 to 12/09 https://john.colagioia.net/blog/2022/12/09/week.html #twitter #week #socialmedia #linkdump

Release Radar · October 2022 Edition
Before you say it, yes, the October Release Radar was supposed to be shared in November. But with Hackatoberfest, GitHub Universe, Turkey Day, and in real life (IRL) conferences returning to their pre-COVID frequency, we’ve all been so busy. And our community has been hustling to ship all kinds of open source projects. We wanted […] ⌘ Read more

On my blog: Real Life in Star Trek, Elementary, Dear Data https://john.colagioia.net/blog/2022/12/08/dear-data.html #scifi #startrek #closereading

Experiment: The hidden costs of waiting on slow build times
How much does it really cost to buy more powerful cloud compute resources for development work? A lot less than you think. ⌘ Read more

Git Commit Uruguay: Lowering barriers to make software development more inclusive and diverse
We delivered two different courses specifically designed to help students in the lowest-income neighborhood of Montevideo, Uruguay learn how to use GitHub and understand the value of open source. ⌘ Read more

Hello from GitHub’s new Chief Product Officer
GitHub is in an exciting phase of our journey as the developer community grows significantly every day, and the needs of the community grow and change with it. Today we’re introducing our new Chief Product officer. ⌘ Read more

Implement User Authentication Into Your Web Application Using SuperTokens
Find out how to set up SuperTokens, an open source authentication solution, using its Docker Extension. ⌘ Read more

GitHub Copilot is generally available for businesses
GitHub Copilot for Business is officially here with simple license management, organization-wide policy controls, and industry-leading privacy—all for $19 USD per user per month. ⌘ Read more

GitHub Availability Report: November 2022
In November, we experienced two incidents that resulted in degraded performance across GitHub services. This report also sheds light into an incident that impacted Codespaces in October. ⌘ Read more

New npm features for secure publishing and safe consumption
Now you can create tokens with fine-grained permissions for automating your publishing and organization management workflows. And a new code explorer allows you to view content of a package directly in the npm portal. ⌘ Read more

ICYMI: A look back at GitHub Universe 2022
Catch up on everything we announced and see what else happened during this year’s GitHub Universe conference that took place November 9-10. ⌘ Read more

On my blog: Developer Journal, Repeal Day https://john.colagioia.net/blog/2022/12/05/repeal.html #programming #project #devjournal

On my blog: Pejoratives and Specificity https://john.colagioia.net/blog/2022/12/04/specificity.html #blog #harm #rant #terminology

On my blog: Free Culture Book Club — Superflu https://john.colagioia.net/blog/2022/12/03/superflu.html #freeculture #bookclub

On my blog: Tweets from 11/28 to 12/02 https://john.colagioia.net/blog/2022/12/02/week.html #twitter #week #socialmedia #linkdump

GitHub, accessibility, and the disability divide
We just published our vision for GitHub accessibility at accessibility.github.com. Here’s the TL;DR: the prime directive of the GitHub accessibility program is to empower people with disabilities to build cool technology. ⌘ Read more

Introducing Mona Sans and Hubot Sans
Learn how to use and express yourself with GitHub’s open source variable fonts, Mona Sans and Hubot Sans. ⌘ Read more

How to Monitor Container Memory and CPU Usage in Docker Desktop
Find out how to track the CPU, memory, network, and disk usage of docker containers and docker compose projects using the Resource Usage Docker Extension. ⌘ Read more

On my blog: Real Life in Star Trek, Where Silence Has Lease https://john.colagioia.net/blog/2022/12/01/silence-lease.html #scifi #startrek #closereading

How empowering developers helps teams ship secure software faster
AppSec expert Niroshan Rajadurai says putting developers at the center of everything will enable you to meet your security goals. ⌘ Read more

An enterprise account is coming to all Enterprise customers
Administrators, or enterprise owners, have the increased responsibility of managing their account and keeping it secure. We are excited to introduce what is new with enterprise accounts and what is coming soon. ⌘ Read more

New in Docker Desktop 4.15: Improving Usability and Performance for Easier Builds
Docker Desktop 4.15 is here, packed with usability upgrades to help you find the images you want, manage your containers, discover vulnerabilities, and more. ⌘ Read more

Find and Fix Vulnerabilities Faster Now that Docker’s a CNA
Docker is now officially a CNA under MITRE, which means you should get better notifications and documentation when we publish a vulnerability. ⌘ Read more

November 2022 Newsletter ⌘ Read more

November Extensions Roundup: Kubernetes Observability, API Testing, and More
Find out what’s new this month in the Docker Extension Marketplace! ⌘ Read more

To infinity and beyond: enabling the future of GitHub’s REST API with API versioning
We’re introducing calendar-based versioning for our REST API, so we can keep evolving our API, whilst still giving integrators a smooth migration path and plenty of time to update their integrations. ⌘ Read more

On my blog: Developer Journal, Lā Kūʻokoʻa https://john.colagioia.net/blog/2022/11/28/kalahui.html #programming #project #devjournal

On my blog: Things That Worked (and Didn’t Work) in 2022 https://john.colagioia.net/blog/2022/11/27/worked.html #advice #rant

On my blog: Free Culture Book Club — Redmine, part 2 https://john.colagioia.net/blog/2022/11/26/redmine-2.html #freeculture #bookclub

On my blog: Tweets from 11/21 to 11/25 https://john.colagioia.net/blog/2022/11/25/week.html #twitter #week #socialmedia #linkdump

On my blog: Real Life in Star Trek, The Child https://john.colagioia.net/blog/2022/11/24/child.html #scifi #startrek #closereading

Exciting New GitHub Features Powering Machine Learning
Discover the exciting enhancements in GitHub that empower Machine Learning practitioners to do more. ⌘ Read more

Enable Cloud-Native Log Observability With Parseable
Traditionally, logs are text heavy and relatively difficult to visualize or observe. Learn how Parseable displays rich, clear log data within Docker Desktop — helping you manage data more easily. ⌘ Read more

In reply to: chreke’s blog - Little Languages Are The Future Of Programming

The idea is that as you start to find patterns in your application, you can encode them in a little language—this language would then allow you to express these patterns in a more compact manner than would be possible by other means of abstraction. Not only could this buck the trend of ever-growing applications, it would … ⌘ Read more

On my blog: Developer Journal, Mayflower Compact https://john.colagioia.net/blog/2022/11/21/mayflower.html #programming #project #devjournal

How Rapid7 Reduced Setup Time From Days to Minutes With Docker
Learn how Rapid7 — a security analytics and automations provider — used Docker to streamline developer onboarding through containerization. ⌘ Read more

Octoverse 2022: 10 years of tracking open source
How is open source changing the world and impacting businesses? In this year’s Octoverse report, we identified three big trends to watch. ⌘ Read more

Automate API Tests and Debug in Docker With Postman’s Newman Extension
Postman’s Newman Docker Extension helps you run, test, debug, and visualize Postman API calls. Learn how to use this powerful new extension and run collections in Docker Desktop. ⌘ Read more

The power of GitHub in the palm of your hand
GitHub Mobile helps keep work going while you’re going. Untether yourself from your office. ⌘ Read more

A better way to search, navigate, and understand code on GitHub
Reading code is a hugely important task for developers. That’s why we built GitHub’s new code search—to help developers search, navigate, and understand code written by them, their team, and the world. ⌘ Read more

The journey of your work has never been clearer
In July, we launched the general availability of GitHub Projects, and now we are excited to bring you even more features designed to make it easier to plan and track in the same place you build! ⌘ Read more

The AT Protocol ?~L~X https://notiz.blog/b/6AM

Introducing GitHub Actions Importer
GitHub Actions Importer helps you forecast, plan, and facilitate migrations from your current CI/CD tool to GitHub Actions. ⌘ Read more

New in Docker Desktop 4.14: Greater Visibility Into Your Containers
Docker Desktop 4.14 brings new functionality directly into your workstations, specifically focused on providing better visibility into your container’s productivity and security. ⌘ Read more

What’s new with Codespaces from GitHub Universe 2022
We’re giving GitHub users 60 free hours each month on Codespaces. Learn what else we shipped for Codespaces at Universe this year. ⌘ Read more

Atom vs. RSS: https://mckinley.cc/blog/20221109.html

cc @movq@www.uninformativ.de @lyse@lyse.isobeef.org @nmke-de@yarn.zn80.net

It only took me 5 days :)

Todas as novidades do GitHub Universe 2022
Veja o que estamos construindo para aprimorar a plataforma de desenvolvimento mais integrada e que permite que pessoas desenvolvedoras e empresas impulsionem a inovação com mais facilidade. Quinze anos atrás, estava sendo escrita a primeira linha de código para a construção do GitHub. Desde então, o objetivo tem sido equipar as pessoas desenvolvedoras com tudo […] ⌘ Read more

An open source economy–built by developers, for developers
Investing in our open source future by supporting the maintainers of today. ⌘ Read more

Everything new from GitHub Universe 2022
See what we’re building to enhance the most integrated developer platform that allows developers and enterprises to drive innovation with ease. ⌘ Read more

Understanding the social impact of open source technologies
Here’s how nonprofits and the social sector are using open source to drive social good. ⌘ Read more

The changing nature of governmental policies around open source
In 2022, governments and the policy community spent a lot of time thinking about open source. Here’s what that means and why it matters. ⌘ Read more

Why more companies are investing in open source program offices
By our estimation at GitHub, over 30% of Fortune 100 companies have now implemented OSPOs. Here’s what that means for open source. ⌘ Read more

The importance of improving supply chain security in open source
We think a lot about a high-profile supply chain attack that might cause developers, teams, and organizations to lose trust in open source. That’s why we’re investing in new ways to protect the open source ecosystem. ⌘ Read more

Bringing greater financial sustainability to open source communities
We know that companies benefit from open source. That’s why we’re making it easier for companies to financially support projects. ⌘ Read more

GitHub Enterprise Server 3.7 is now generally available
GitHub Enterprise Server 3.7 is available now, including a single view of code risk, new forking and repository policies, and security enhancements to the management console. ⌘ Read more

How to mitigate OWASP vulnerabilities while staying in the flow
Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities ⌘ Read more

Advocating for developers to the US Copyright Office
How GitHub advocated for developer interests at the US Copyright Office technical measures consultations ⌘ Read more

Build, Share, and Run WebAssembly Apps Using Docker
Did you know Wasm and Docker can work together? Learn more about creating WebAssembly apps with Docker in this exciting demo breakdown. ⌘ Read more

How GitHub converts previously encrypted and unencrypted columns to ActiveRecord encrypted columns
This post is the second part in a series about ActiveRecord::Encryption that shows how GitHub upgrades previously encrypted and unencrypted columns to ActiveRecord::Encryption. ⌘ Read more

GitHub partners with Arm to revolutionize Internet of Things software development with GitHub Actions
Developers creating Internet of Things software use a complex stack of software that needs to be custom built into their CI/CD platform. Arm is leveraging the simplicity and scalability of GitHub Actions with a native integration that will revolutionize IoT software development. ⌘ Read more

GitHub Availability Report: October 2022
In October, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into an incident that impacted Codespaces in September. ⌘ Read more

Developing Go Apps With Docker
Develop Go applications with Docker using these containerization steps, best practices, optimization tips, and more. ⌘ Read more

Game Off 2022 theme announcement
It’s the moment you’ve all been waiting for. Are you ready? ⌘ Read more

Preview: referencing public code in GitHub Copilot
We will begin to introduce several new capabilities to GitHub Copilot in 2023 to continue delivering responsible innovation and true happiness at the keyboard. ⌘ Read more

All In for Students: expanding the next generation of open source leaders
We are pleased to announce the expansion of All In for Students! All In for Students introduces college students to open source and provides them with the education, technical training and career development to prepare them for a summer internship in tech. ⌘ Read more

blog: built a little podcast feed reader; also eureka is v1.0.0 finally!

Creating a more inclusive security research field
A glimpse into the backgrounds and day-to-day work of several GitHub employees in cybersecurity roles. ⌘ Read more

Announcing Docker Hub OCI Artifacts Support
We’re excited to announce that Docker Hub can now help you distribute any type of application artifact! You can now keep everything in one place without having to leverage multiple registries. Before today, you could only use Docker Hub to store and distribute container images — or artifacts usable by container runtimes. This became a […] ⌘ Read more

13 tiny, terrific, and terrifying games to hack, slay, and play this Halloween 🧛🏻‍♀️
Some seriously spooktacular open source games for the web, Windows, macOS, and Linux with all sorts of fun hacks for infinite lives, invulnerability, and playing with time. ⌘ Read more

Cybersecurity spotlight on bug bounty researcher @ahacker1
As we wrap up Cybersecurity Awareness Month, the GitHub bug bounty team is excited to spotlight one of the security researchers who participates in the GitHub Security Bug Bounty Program. ⌘ Read more

Release Radar · September 2022 Edition
Hackatoberfest, hackathons, and open source contributions. It’s been a hectic month with so many community pull requests to all kinds of projects. So many in fact that we had to spend hours going through all the submissions for this blog post. We almost didn’t get it out before the end of October. Nevertheless, we are […] ⌘ Read more

Docker Captain Take 5 — Nelson
Nelson is the founder of Amigoscode and has used Docker since 2015. Learn about how this Captain discovered Docker, his favorite command, and more. ⌘ Read more

Security Advisory: Critical OpenSSL Vulnerability
The OpenSSL Project will imminently release a security fix (OpenSSL version 3.0.7) for a new-and-disclosed CVE. In the meantime, learn how Docker tooling helps you uncover and remediate image vulnerabilities. ⌘ Read more

Choose your own GitHub Universe 2022 adventure
You can now build your agenda on GitHubUniverse.com! Whether you’re just getting started or you’re a seasoned industry professional, there’s a session for you. ⌘ Read more

What we learned from the Security Lab’s Community Office Hours
TheGitHub Security Lab provided office hours for open source projects looking to improve their security posture and reduce the risk of breach. Here’s what we learned and how you can also participate. ⌘ Read more

How to Implement Decentralized Storage Using Docker Extensions
In part one of this two-part series, we discussed the intersection of Web3 and Docker at a conceptual level. Now, it’s time to get our hands dirty and review practical examples involving decentralized storage. ⌘ Read more

Diversity, inclusion, and belonging at GitHub in 2022
As GitHub continues to grow, our vision of being the home for all developers continues to materialize, expanding our progress, perspectives, and responsibility to the world. ⌘ Read more

3 strategies for consolidating your toolkit and boosting productivity
Explore how GitHub Enterprise can help you transform your software engineering organization and practices. ⌘ Read more

October 2022 Newsletter ⌘ Read more

How to Use the Node Docker Official Image
Topping Stack Overflow’s 2022 list of most popular web frameworks and technologies, Node.js continues to grow as a critical MERN stack component. And since Node applications are written in JavaScript — the world’s leading programming language — many developers will feel right at home using it. We introduced the Node Docker Official Image (DOI) due […] ⌘ Read more

Why and how GitHub encrypts sensitive database columns using ActiveRecord::Encryption
You may know that GitHub encrypts your source code at rest, but you may not have known that we encrypt sensitive database columns as well. Read about our column encryption strategy and our decision to adopt the Rails column encryption standard. ⌘ Read more

blog: digital minimalism again; garden: everyday equipment and more photos

Resolve Vulnerabilities Sooner With Contextual Data
OpenSSL 3.0.7 and “Text4Shell” might be the most recent critical vulnerabilities to plague your development team, but they won’t be the last. In 2021, critical vulnerabilities reached a record high. Attackers are even reusing their work, with over 50% of zero-day attacks this year being variants of previously-patched vulnerabilities.  With each new security vulnerability, we’re […] ⌘ Read more

October Extensions Roundup: CI on Your Laptop and Hacktoberfest!
Find out what’s new this month in the Docker Extension Marketplace! CI on your laptop, new tools from the open source community and categories to find the perfect extension. ⌘ Read more

Why we’re excited about the Sigstore general availability
The Sigstore GA means you can protect your software supply chain today with GitHub Actions, and will power new npm security capabilities in the near future. ⌘ Read more

Introducing the Docker+Wasm Technical Preview
Learn more about the Docker+Wasm Technical Preview that enables all developers to quickly & easily build applications that target Wasm runtimes. ⌘ Read more

Security Advisory: CVE-2022-42889 “Text4Shell”
Learn more about the CVE-2022-42889, aka “Text4Shell” vulnerability in the “Apache Commons Text” Java library — and how Docker Security Scans identify it. ⌘ Read more

Build a game this November with Game Off 2022
Save the date! Game Off returns on November 1 for it’s 10th year! 🎉 ⌘ Read more

Git Merge 2022 – that’s a wrap! 🎬
Git Merge 2022 just wrapped up bringing the community together for 16 talks, three workshops, one Git Contributor Summit, and lots of great conversations over two days. Read on for more info, photos from the event, and all of the session recordings. ⌘ Read more

Developer Engagement in the Remote Work Era with RedMonk and Miva
We met with Redmonk and Miva to talk about navigating developer engagement in the remote work era. Watch the full, on-demand video for details! ⌘ Read more