A Personal Software Runtime inspired by Emacs, Plan 9, Erlang, Hypermedia, and Unix
Comments ⌘ Read more
[$] Verifying the BPF verifier’s path-exploration logic
Srinivas Narayana led a remote session about extending
Agni to prove the correctness of
the BPF verifier’s handling of different execution paths as part of the Linux Storage,
Filesystem, Memory Management, and BPF Summit. The problem of ensuring the
correctness of path exploration
is much more difficult than the problem of
ensuring the co … ⌘ Read more
Inside GitHub: How we hardened our SAML implementation
Maintaining and developing complex and risky code is never easy. See how we addressed the challenges of securing our SAML implementation with this behind-the-scenes look at building trust in our systems.
The post Inside GitHub: How we hardened our SAML implementation appeared first on [The GitHu … ⌘ Read more
love-hate and otel: using it while avoiding complexity
I quite appreciated his workflow for keeping OTel’s complexity at arm’s length. Also, he’s got a generic tool that can parse logs and turn them into otel spans that combines well will canonical logs and “wide events”: https://github.com/jonjohnsonjr/logspan
gamado à @aperture@aperture porque há meses/anos que quero escrever um texto sobre esta postura, e esta imagem explica tão bem o problema
(fonte)
@prologic@twtxt.net yeah, that will work perfectly. Because you are using “please”—which we all know is a magic talisman word of obedience—all uploads of your code to Github will be automatically paused, until such magic word is removed. 😂
GitHub for Beginners: Test-driven development (TDD) with GitHub Copilot
See how to use GitHub Copilot to engage in some test-driven development.
The post GitHub for Beginners: Test-driven development (TDD) with GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
Please don’t upload my code on Github!
I’m thinking about putting this up on all my projects and even on the front page of my Gitea instance 🤔
Goreleaser: 快速創建 Golang 項目發佈頁面
原文鏈接: https://typonotes.com/posts/2025/05/19/goreleaser-release-app-in-github/項目可以通過 renovate-bot 進行以來變更管理, 當依賴內容變化後, 可以幫助我們創建 PR。https://github.com/tangxin/k8s-image-syncer/pullsgoreleaser 可以爲 go 項 ⌘ Read more
Goreleaser: 快速創建 Golang 項目發佈頁面
原文鏈接: https://typonotes.com/posts/2025/05/19/goreleaser-release-app-in-github/項目可以通過 renovate-bot 進行以來變更管理, 當依賴內容變化後, 可以幫助我們創建 PR。https://github.com/tangxin/k8s-image-syncer/pullsgoreleaser 可以爲 go 項 ⌘ Read more
在 Go 中如何使用有限狀態機優雅解決程序中狀態轉換問題
在編程中,有限狀態機(FSM)是管理複雜狀態流轉的優雅工具,其核心在於通過明確定義狀態、事件和轉換規則,將業務邏輯模塊化。本文將探討在 Go 中如何使用有限狀態機。有限狀態機在介紹有限狀態機之前,我們可以先來看一個示例程序: https://github.com/jianghushinian/blog-go-example/blob/main/fsm/main.gopackage mainimp ⌘ Read more
在 Go 中如何使用有限狀態機優雅解決程序中狀態轉換問題
在編程中,有限狀態機(FSM)是管理複雜狀態流轉的優雅工具,其核心在於通過明確定義狀態、事件和轉換規則,將業務邏輯模塊化。本文將探討在 Go 中如何使用有限狀態機。有限狀態機在介紹有限狀態機之前,我們可以先來看一個示例程序: https://github.com/jianghushinian/blog-go-example/blob/main/fsm/main.gopackage mainimp ⌘ Read more
fit 1 $ spin (saw 0.1 * sign fxy) $ rect 0 1 - rect 0 0.99 >> add;
#punctual #livecoding #creativecoding #videoart
@prologic@twtxt.net You can read more about the “cryptic” live coding language Punctual in my newsletter
Bypassing MTE with CVE-2025-0072
In this post, I’ll look at CVE-2025-0072, a vulnerability in the Arm Mali GPU, and show how it can be exploited to gain kernel code execution even when Memory Tagging Extension (MTE) is enabled.
The post Bypassing MTE with CVE-2025-0072 appeared first on The GitHub Blog. ⌘ Read more
Shine a spotlight on your open source project
Celebrate #MaintainerMonth with two big opportunities to showcase your open source project at GitHub Universe and WeAreDevelopers World Congress. Applications are open. Don’t miss out!
The post Shine a spotlight on your open source project appeared first on The GitHub Blog. ⌘ Read more
Agent mode 101: All about GitHub Copilot’s powerful mode
A full look at agent mode in GitHub Copilot, including what it can do, when to use it, and best practices.
The post Agent mode 101: All about GitHub Copilot’s powerful mode appeared first on The GitHub Blog. ⌘ Read more
How to thrive as a junior engineer: tips and insights
Plus, ways teammates and leaders can be better mentors for their new counterparts.
The post How to thrive as a junior engineer: tips and insights appeared first on The GitHub Blog. ⌘ Read more
[$] Recent disruptive changes from Setuptools
In late March, version 78.0.1 of Setuptools — an important
Python packaging tool — was released. It was scarcely half an hour before
the first bug\
report came in, and it quickly became clear that the change was far
more disruptive than anticipated. Within only about five hours [78.0.2 was\
published to roll back the change](https://setuptools.pypa.io/e … ⌘ Read more
OpenAI 公開 Codex 系統提示詞
昨天,OpenAI 發佈了一個新功能:Codex。一個在雲端運行的 Coding Agent。體驗鏈接:chatgpt.com/codex可以處理包括跑現成代碼、解答 Github 上的項目、修復 BUG 以及提 PR 等功能。目前還不能聯網,不能裝包,只能基於倉庫裏已有的代碼 + 提前配置好的環境進行工作。Codex 背後的模型來自 codex-1,基於 OpenAI o3 微調,專門針對軟件工 ⌘ Read more
GitHub Copilot: Meet the new coding agent
Implementing features has never been easier: Just assign a task or issue to Copilot. It runs in the background with GitHub Actions and submits its work as a pull request.
The post GitHub Copilot: Meet the new coding agent appeared first on The GitHub Blog. ⌘ Read more
Pallene: a statically typed ahead-of-time compiled sister language to Lua, with a focus on performance
Comments ⌘ Read more
Code. Create. Commit. Welcome to dev/core
The new GitHub Shop collection is here. We’re celebrating you.
The post Code. Create. Commit. Welcome to dev/core appeared first on The GitHub Blog. ⌘ Read more
Vibe coding: Your roadmap to becoming an AI developer
Learn how to go from curious coder to AI wizard—with a little help from GitHub.
The post Vibe coding: Your roadmap to becoming an AI developer appeared first on The GitHub Blog. ⌘ Read more
以 StreamableHTTP 爲例,對 MCP 進行總結與實踐
引言近日,MCP 迎來更新,StreamableHTTP 從 3 月 26 日協議發佈,到這禮拜進行落地,從 python 的 sdk 上來看,更新的代碼量並不大,但畢竟是一個協議,從 github 上的幾百條 discussion 中,可以看到還是有非常多褒貶不一的聲音:本篇就以更新後的 StreamableHTTP,做了一個實踐測試。從 stdio 到 StreamableHTTP最初,標準輸 ⌘ Read more
autogenlib - Python lib for “vibe importing”, generates the code based on its call site
Comments ⌘ Read more
Our pledge to help improve the accessibility of open source software at scale
GitHub takes the Global Accessibility Awareness Day (GAAD) pledge.
The post Our pledge to help improve the accessibility of open source software at scale appeared first on The GitHub Blog. ⌘ Read more
GitHub Availability Report: April 2025
In April, we experienced three incidents that resulted in degraded performance across GitHub services.
The post GitHub Availability Report: April 2025 appeared first on The GitHub Blog. ⌘ Read more
Podman 5.5.0 released
Version\
5.5.0 of the Podman container-management tool has been
released. Notable features include the addition of a podman machine cp command to copy files into a running Podman\
VM, a podman artifact extract command to copy
contents of an OCI\
artifact to disk, and a --mount=artifa ... ⌘ [Read more](https://lwn.net/Articles/1021217/)
Documentation done right: A developer’s guide
Learn why and how you should write docs for your project with the Diátaxis framework.
The post Documentation done right: A developer’s guide appeared first on The GitHub Blog. ⌘ Read more
1 RPM. This is a rather aggressive rate limit actually. This basically makes Github inaccessible and useless for basically anything unless you're logged in. You can basically kiss "pursuing" casually, anonymously goodbye.
@prologic@twtxt.net that will not be a problem; as long as it doesn’t affect authenticated users it wouldn’t make a difference. But we are comparing apples and eggs here. I don’t access GitHub while unauthenticated, but I can see how others might. It comes across as anti-web in general.
@bender@twtxt.net Basically the way I’m reading this is 1 RPM. This is a rather aggressive rate limit actually. This basically makes Github inaccessible and useless for basically anything unless you’re logged in. You can basically kiss “pursuing” casually, anonymously goodbye.
Imagine if I imposed that kind of rate limit on twtxt.net?! 🤣
@movq@www.uninformativ.de, “60 requests per hour”, eh? Was that a thing (that is, unauthenticated access to GitHub)?! I know I am on the minority, perhaps, as I rarely (or never) access GitHub unauthenticated.
RIP GitHub https://github.blog/changelog/2025-05-08-updated-rate-limits-for-unauthenticated-requests/
Good thing I left long ago.
GitHub Issues search now supports nested queries and boolean operators: Here’s how we (re)built it
Plus, considerations in updating one of GitHub’s oldest and most heavily used features.
The post [GitHub Issues search now supports nested queries and boolean operators: Here’s how we (re)built it](https://github.blog/developer-skills/application-development/github-issues-search-now-supports-nested-queries-an … ⌘ Read more
Firefox moves to GitHub
Context from reddit:
https://groups.google.com/a/mozilla.org/g/firefox-dev/c/QnfydsDj48o/m/8WadV0_dBQAJ
They made the decision to move from hg.mozilla.org to GitHub last year. They are in the final legs of that migration.
Excel MCP: 自動讀取、提煉、分析 Excel 數據並生成可視化圖表和分析報告
最近,一款 Excel MCP Server 的開源工具火了,看起來功能很強大,咱們今天來一探究竟。基礎環境—-Python 3.10 or higher Python 3.10或更高版本需要提前安裝uvpip istall uv安裝 MCP SERVER————-下載服務包git clone https://github.com/haris-musa/excel-mcp-se ⌘ Read more
Fx v36 - JSON terminal viewer
Hello Lobsters, I’m the author of a fx tool. I’ve been working hard past month to develop a new version of a fx with a lot of improvements and fixes. Please check them out.
tar and find were written by the devil to make sysadmins even more miserable
@movq@www.uninformativ.de yeahhh very true stuff. find is annoying af i just use fd when i can
tar and find were written by the devil to make sysadmins even more miserable
@movq@www.uninformativ.de Yeah I actually use sift a lot these days for most “searching” – at least code and text searching. For finding files by name I still use find | grep.
Security updates for Monday
Security updates have been issued by Debian (libbson-xs-perl, postgresql-13, redis, and simplesamlphp), Fedora (chromium, deluge, epiphany, golang-github-nats-io-nkeys, libxmp, nodejs22, perl-Compress-Raw-Lzma, php-adodb, python-h11, and xz), Gentoo (firefox, NVIDIA Drivers, Orc, PAM, and thunderbird), Mageia (libreoffice, python-django, and transfig), Red Hat (emacs, firefox, python39:3.9, and thunderbird), SUSE (bird3, freetype2, ldap-proxy, libmosquitto1, and ruby3.4-rubygem-rack … ⌘ Read more
GitHub for Beginners: Building a React App with GitHub Copilot
Follow along and build a frontend client using React and Copilot Chat.
The post GitHub for Beginners: Building a React App with GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
API Key Exposure in NASA GitHub Repository Leads to Unauthorized Access to Academic Data
🔓Free Article Link
[Continue reading on InfoSec Write-ups »](https://infosecwriteu … ⌘ Read more
Real‑world video demo: Using different AI models in GitHub Copilot
Curious about how AI models perform in real-world scenarios with GitHub Copilot? Same. We made a live video demo to find out, and wrote up our key takeaways.
The post Real‑world video demo: Using different AI models in GitHub Copilot appeared first on The GitHub Blog. ⌘ Read more
Design system annotations, part 2: Advanced methods of annotating components
How to build custom annotations for your design system components or use Figma’s Code Connect to help capture important accessibility details before development.
The post [Design system annotations, part 2: Advanced methods of annotating components](https://github.blog/engineering/user-experience/design-system-annotations-part-2-advanced-methods-of-annotating-component … ⌘ Read more
Design system annotations, part 1: How accessibility gets left out of components
The Accessibility Design team created a set of annotations to bridge the gaps that design systems alone can’t fix and proactively addresses accessibility issues within Primer components.
The post [Design system annotations, part 1: How accessibility gets left out of components](https://github.blog/engineering/user-experience/design-system-annotations-part-1-how … ⌘ Read more
$50,000 Bounty: GitHub Access Token
How a hidden token in a desktop app could have compromised one of the world’s biggest e-commerce platforms
[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/50-000-bounty-github-access-token-c29cb6f00182?source=rss—-7b722bf … ⌘ Read more