Getting started with GitHub Actions just got easier!
When you want to create a workflow in the Actions tab of your repository, the recommendations are now based on an analysis of repo content. ⌘ Read more

GoCN 每日新闻（2021-12-17）

1. Golang 与散列算法https://www.ssgeek.com/post/golang-yu-san-lie-suan-fa
   
2. Golang 跟 Python3 的区别对比有哪些？https://juejin.cn/post/7042211939795075103
   
3. Golang、Gin 和 React、esbuild 开发的 Bloghttps://zhuanlan.zhihu.com/p/445749990
   
4. 如何使用 Go 从 HTML 生成 PDF 报告[https:// … ⌘ Read more

Instead of banging my head on Advent of Code, I coded something useful today: Text-to-Speech for GoBlog using the official Google Text-to-Speech API. When posting, an audio file is generated automatically from the post content. And, I have to praise myself for this, I documented the feature as well! 😄 ⌘ Read more

Technical interviews via Codespaces
Codespaces is a great tool for technical hiring exercises and helps level the playing field for candidates. ⌘ Read more

Ignite Realtime Blog: Openfire 4.6.6 and 4.5.5 releases (Log4j-only changes)
As we’re monitoring developments around the recent Log4j vulnerabilities, we’ve decided to provide another update for Openfire to pull in the latests available updates from Log4j.

Since the previous release, the Log4j team released a new version (2.16.0) of their library, that provides better protection against the original vulnera … ⌘ Read more

5 automations every developer should be running
Looking to avoid security vulnerabilities, buttons that don’t work, slow site speeds, or manually writing release notes? This one’s for you. ⌘ Read more

Docker Community All Hands: Event Recap, December 2021
One year ago, we kicked off the Community All Hands (CAH) event. The goal was to bring together Docker staff and community members for the latest product updates. This time, we’ve evolved the CAH to include multiple community tracks that give our amazing community members the opportunity to share their knowledge and expertise.   The event […]

The post [Docker Community All Hands: Event Recap, December 2021](https://www. … ⌘ Read more

Day 16 of Advent of Code is so confusing that I will not finish today’s puzzle. I wonder if yesterday was my last day with Advent of Code, or will the puzzles become more understandable and easier again in the next few days? Maybe I’m just more the practical type. I like programming, but such complex algorithms are not really my thing. And in the end, Advent of Code is supposed to be fun… ⌘ Read more

A brief history of code search at GitHub
This blog post tells the story of why we built a new search engine optimized for code. ⌘ Read more

WSL 2 GPU Support for Docker Desktop on NVIDIA GPUs
It’s been a year since Ben wrote about Nvidia support on Docker Desktop. At that time, it was necessary to take part in the Windows Insider program, use Beta CUDA drivers, and use a Docker Desktop tech preview build. Today, everything has  changed: On the OS side, Windows 11 users can now enable their GPU […]

The post [WSL 2 GPU Support for Docker Desktop on NVIDIA GPUs](https://www.docker.com/blog/wsl-2-gpu-support-for-dock … ⌘ Read more

GoCN 每日新闻（2021-12-15）
GoCN 每日新闻（2021-12-15）

1. Go 1.18beta1https://go.dev/blog/go1.18beta1
   
2. Go 中易于使用的 Raft 库，使您的应用程序具有分布式、高可用性和容错性https://github.com/ksrichard/easyraft
   
3. Go 实现的开源的、不可变的数据库 immudbhttps://github.com/codenotary/immudb/tree/v1.2.1
   
4. Rust vs Go：你应该知道的 8 大核心 … ⌘ Read more

Using GitHub’s security features to help identify Log4j exposure in your codebase
Use GitHub’s security features to assess Apache Log4j exposure and, where possible, mitigate this vulnerability within your GitHub repositories. ⌘ Read more

The Grace Period for the Docker Subscription Service Agreement Ends Soon – Here’s What You Need to Know
Remember the updates to our product subscription tiers we announced on August 31? You may recall we also announced a grace period for those that need to transition from a free to a paid subscription to use Docker Desktop. This is a friendly reminder that that grace period is ending on January 31, 2022. Docker […]

The post [T … ⌘ Read more

“The Web Is Fucked”
Kev Quirk has written a manifesto showing what bothers him about today’s web: ⌘ Read more

How to define security requirements for your OSS project
Defining your security requirements is the most important proactive control you can implement for your project. Here’s how. ⌘ Read more

GitHub’s response to Log4j vulnerability CVE-2021-44228
On Thursday, December 9, 2021, GitHub was made aware of a vulnerability in the Log4j logging framework, CVE-2021-44228. ⌘ Read more

What’s new from GitHub Changelog? November 2021 recap
We shipped a ton of updates in November, from the push notification for PR review activities on the go, to an easy way to create Markdown links. ⌘ Read more

GitHub at the UN Internet Governance Forum
Last week, GitHub joined the Internet Governance Forum to spread awareness of developers’ initiatives and public policy interests. ⌘ Read more

Erlang Solutions: Aleksander Lisiecki’s prize-winning eArangoDB at SpawnFest 2021

Image

It’s tempting to say that SpawnFest is an event that doesn’t need an introduction, but we’ll give it one anyway. SpawnFest is an annual remote hackathon, where teams have exactly one weekend (48 hours to be exact) to create the best BEAM-related application … ⌘ Read more

GoCN 每日新闻（2021-12-13）
GoCN 每日新闻（2021-12-13）

1. 尝鲜 Go 1.18 范型版本的 map 和 slice！https://juejin.cn/post/7040800455349239822
   
2. Go 实现可序列化的 Roaring Bitmapshttps://dgraph.io/blog/post/serialized-roaring-bitmaps-golang/
   
3. Go 使用 Github Actions 做 CI[https://www.alexedwards.net/blog/ci-with-go-and-github-actions](https://www.alexedwards.net/blog/ci-with-go-and-github … ⌘ Read more

How I checked the battery health of my Android phone 🔋
My smartphone, a Samsung Galaxy S10 Lite, which has been my daily driver for a year and a few months, has a 4500mAh Li-Po battery (“lithium-ion polymer” – like lithium-ion, but with solid or gel-like electrolytes that allow a thinner design). My smartphone can be charged with a maximum of 45 watts. The included charger, which I always use for charging, delivers a maximum of 25 watts. ⌘ Read more

a close look at a spinlock [[https://blog.regehr.org/archives/2173]] #links

breakdown of a synthwave track [[https://synthctrl.com/blogs/blog/gunship-tech-noir-breakdown]] #links

DX7 Technical Analysis [[https://ajxs.me/blog/Yamaha_DX7_Technical_Analysis.html]] #links

GoCN 每日新闻 (2021-12-12)

1. GopherCon 2021 视频https://space.bilibili.com/756684/channel/seriesdetail?sid=586416
   
2. 告别 Sidecar-使用 eBPF 解锁内核级服务网格https://mp.weixin.qq.com/s/W9NySdKnxuQ6S917QQn3PA
   
3. 我为 ent gRPC 插件贡献功能学到的[https://entgo.io/blog/2021/12/09/contributing-my-first-feature-to-ent-grpc-plugin/](https://entgo.io/blog/2021/12/09/contributing-my-first-f … ⌘ Read more

Apache Log4j 2 CVE-2021-44228
We know that many of you are working hard on fixing the new and serious Log4j 2 vulnerability CVE-2021-44228, which has a 10.0 CVSS score. We send our #hugops and best wishes to all of you working on this vulnerability, now going by the name Log4Shell. This vulnerability in Log4j 2, a very common Java […]

The post Apache Log4j 2 CVE-2021-44228 appeared first on Docker Blog. ⌘ Read more

Every good blogging system should have an option to schedule posts for later! GoBlog now has such a feature as well. And this is the first scheduled post. 😀 ⌘ Read more

Ignite Realtime Blog: Openfire 4.6.5 released
Although we’re preparing for the Openfire 4.7.0 release, the recently discovered vulnerability in the Apache Log4j utility prompted us to push an immediate release of Openfire to address that issue. This release, Openfire 4.6.5, is available now.

We urge you to update as soon as possible. If that’s not feasible, then we advise you to apply the documented workaround (in the form o … ⌘ Read more

ProcessOne: ejabberd 21.12
This new ejabberd 21.12 release comes after five months of work, contains more than one hundred changes, many of them are major improvements or features, and several bug fixes.

Image

When upgrading from previous versions, please notice: there’s a change in mod_register_web behaviour, and PosgreSQL database, please take a look if they affect your installation.

A more detailed expla … ⌘ Read more

ProcessOne: ejabberd 21.12
This new ejabberd 21.12 release comes after five months of work, contains more than one hundred changes, many of them are major improvements or features, and several bug fixes.

Image

When upgrading from previous versions, please notice: there’s a change in mod_register_web behaviour, and PosgreSQL database, please take a look if they affect your installation.

A more detailed expla … ⌘ Read more

Introducing stack graphs
Precise code navigation is powered by stack graphs, a new open source framework that lets you define the name binding rules for a programming language. ⌘ Read more

Precise code navigation for Python, and code navigation in pull requests
Code navigation is now available in PRs, and code navigation results for Python are now more precise. ⌘ Read more

ProcessOne: ejabberd 21.12
This new ejabberd 21.12 release comes after five months of work, contains more than one hundred changes, many of them are major improvements or features, and several bug fixes.

Image

When upgrading from previous versions, please notice: there’s a change in mod_register_web behaviour, and PosgreSQL database, please take a look if they affect your installation.

A more detailed expla … ⌘ Read more

Docker Secure Images: What Are They and How Do I Use Them?
One of the major challenges in today’s development environments is balancing innovation with security. Focusing on both is never a small effort and might seem tedious or constraining at times, but when security is implemented from the start, it can shorten development time and prevent exposure to vulnerabilities. This is why Docker rolled out Docker […]

The post [Docker Secure Images: What Are They and How Do I Us … ⌘ Read more

“What would a real Web3 look like?”
Matt Baer, found of write.as, compares the web3 with his vision of how a real Web 3.0 could look like. ⌘ Read more

Do the New Terms of Docker Desktop Apply If You Don’t Use the Docker Desktop UI?
Even if you’re not taking advantage of the user interface that Docker provides with Docker Desktop and are simply using the CLI, you may still need a paid subscription to use Docker Desktop. Much of the value of Docker Desktop comes from making it easy to develop with containers locally on Windows and Mac. We […]

The post [Do the New Terms of Docker Desktop Apply If Yo … ⌘ Read more

Improving GitHub code search
Today, we are rolling out a technology preview for GitHub code search, the next iteration for search, discovery, and navigation on GitHub. ⌘ Read more

Thank you for featuring my blog in your latest “Advent of Bloggers” post and your kind words, James! 🤓 ⌘ Read more

Erlang Solutions: Blockchain Tech Deep Dive 2/4 | Myths vs Realities
This is the second part of our ‘Making Sense of Blockchain’ blog post series – you can read part 1 on ‘6 Blockchain Principles’ here.

Join our FinTech mailing list for more great content and industry and events news, sign up here >> … ⌘ Read more

Defeat Street
Some of the sincerity slimed up on me

Cards wrote themselves and rifled me

Rigging the blast door to explore didn’t pan out this time

Rushed in, gobbled up and left me bottled up, that monstrous cub

To tell you the truth, I snort mousse

Rust seeps into cereals I produce

Rum may run rampantly down the drain, so let me think

I’ll leave a limb in the pipes to entice a drink ⌘ Read more

GitHub Enterprise Server 3.3 is generally available
GitHub Enterprise Server is now generally available for all customers. This release improves performance for CI/CD and for customers with large repositories. ⌘ Read more

Docker Verified Publisher: Trusted Sources, Trusted Content
Six months since its launch at DockerCon, the Docker Verified Publisher program delivers on its promise to developers and partners alike The Docker Verified Publisher program means trusted content and trusted sources for the millions of Docker users. At the May 2021 DockerCon, Docker announced its Secure Software Supply Chain initiative, highlighting Docker Verified Publisher […]

The post [Docker Verified Publishe … ⌘ Read more

notiz.b16g ?~L~X https://notiz.blog/b/61p

Today I learned that there is a new version 2 of Docker Compose. Docker Compose is now no longer a Python app, but a CLI plugin for Docker written in Go. And there is a Compose specification. ⌘ Read more

Enrolling all npm publishers in enhanced login verification and next steps for two-factor authentication enforcement
Today we’re introducing enhanced login verification to the npm registry, and we will begin a staged rollout to maintainers beginning Dec 7. ⌘ Read more

An imaginary conversation with Peter Schiff
Before I get to the conversation I find it necessary to note that I have been listening to Peter Schiff’s podcast on and off, and find his inside to be agreeable most of the time. He knows his stuff, and is explaining it very well. Me Why invest in Gold rather then diamonds? What makes […] ⌘ Read more

Write more secure code with the OWASP Top 10 Proactive Controls
This lesser-known OWASP project aims to help developers prevent vulnerabilities from being introduced in the first place. ⌘ Read more

Micro.blog’s new newsletter feature
I think the new micro.blog feature for newsletters is the right approach. Blog first, newsletter second. But newsletters are not difficult to set up, they only need to be activated by a checkbox. ⌘ Read more

Building Docker images in Drone CI using Docker-in-Docker
This evening I tried to improve the build process of GoBlog. GoBlog gets built using Drone CI and Docker. The problem was that two image variants are to be built, one based on the other, and the whole thing always took quite a long time. ⌘ Read more

Ignite Realtime Blog: Openfire 4.7.0 beta & Hazelcast plugin 2.6.0 releases!
After a long few months full of hard work, we are happy to tell you that we are close to a 4.7.0 release for Openfire!

This next version of our real time communications server has received a lot of improvements and bug fixes.

A key area of the code that has received updates is the Multi-User Chat (MUC) impl … ⌘ Read more

Safeguard your containers with new container signing capability in GitHub Actions
GitHub has partnered with the OpenSSF and Project Sigstore to add container image signing to our default “Publish Docker Container” workflow. ⌘ Read more

Walking and listening to an audiobook 😌🚶‍♂️🎙️📚 ⌘ Read more

On the blog: Short Fiction — All Quiet on the Vernal Front https://john.colagioia.net/blog/2021/12/05/war.html #fiction #christmas #holiday

I’ve never really done test-driven development (TDD). But Advent of Code offers the perfect opportunity for that, because there is already an example input and an example result. So it is possible to create a test first and program until the test passes. ⌘ Read more

On the blog: Free Culture Book Club — if then else, part 4 https://john.colagioia.net/blog/2021/12/04/else4.html #freeculture #bookclub

Powering Starlink on the go with Tesla Model 3
I’ve had my Tesla Model 3 for more than a year now. It has been an
absolute pleasure so far and I would not trade it for anything else at
any price including Tesla’s other offerings (yes, talking about S
Plaid). Model 3 just has the most beautiful exterior of any other car.
OK, let’s stop here because I can go on forever. But not without a photo
of Tin Can:

Image

“Tin Can” is a r … ⌘ Read more

Release Radar · November 2021 Edition
The end of the year is getting closer, and our communities are busy working away on their projects. While you’ve all been busy maintaining open source projects and shipping releases, we’ve created a new open ⌘ Read more

On the blog: Tweets from 11/08 to 11/12 https://john.colagioia.net/blog/media/2021/12/03/week.html #twitter #week #socialmedia #linkdump

It’s time again to ask my followers: I have my homepage jlelse.dev, but I’m thinking about using jlelse.com for a more professional and appealing website about me. I can program, but my design skills are somewhat limited. What should I use to design and create the site? I used Carrd a couple of years ago. But are there any other recommendations? ⌘ Read more

On the blog: Real Life in Star Trek, The Slaver Weapon, part 3 https://john.colagioia.net/blog/2021/12/02/slaver-3.html #scifi #startrek #closereading

Advent of Bloggers – What a cool idea, James! 👍 If you still need some inspiration, I have a blogroll with many blogs worth reading as well. ⌘ Read more

“100 years of whatever this will be”
Avery Pennarun (apenwarr) on decentralization: ⌘ Read more

blog post re: digital minimalism and living without a smartphone; Artisans page absorbed into Bookmarks

Ignite Realtime Blog: inVerse plugin for Openfire version 9.0.0.1 released!
The Ignite Realtime community is happy to announce the immediate availability of a an update to the inVerse plugin for Openfire, which makes the Converse.js web client available to your users.

This release updates Converse to version 9.0.0.

Your Openfire instance should automatically display the … ⌘ Read more

Faster Multi-Platform Builds: Dockerfile Cross-Compilation Guide
There are some important changes happening in the software industry. With Apple moving all of their machines to their custom ARM-based silicon and AWS offering the best performance-per-cost ratio with their Graviton2 instances, one can no longer expect that all software only needs to run on x86 processors. If you work with containers there is some […]

The post [Faster Multi-Platform Builds: Dockerfile … ⌘ Read more

Christmas is near and now my watch shows that! 🎄 ⌘ Read more

Advent of Code ‘21
New year, new code advent calendar. This year I’m trying my hand at Advent of Code once again in Go. This time with a little help from the copilot. Let’s see if I make it to the end, or have to give up early again… ⌘ Read more

GitHub Availability Report: November 2021
In November, we experienced one incident resulting in significant impact and degraded state of availability for multiple services. ⌘ Read more

Using ChatOps to help Actions on-call engineers
You can multiply the impact of your domain experts by building their common workflows into ChatOps. ⌘ Read more

Docker SSO is Coming
The impending winter and holiday season hasn’t slowed us down here at Docker HQ. In fact, our engineers have been hard at work to put the finishing touches on one of our most requested features by our enterprise customers: Docker Single Sign-On (SSO). 🎄🎁 With Docker SSO enabled, users can authenticate using their organization’s standard […]

The post Docker SSO is Coming appeared first on [Docker Blog](https://www.docker.com/bl … ⌘ Read more

Open Web? ?~L~X https://notiz.blog/b/61G

GitHub Externships: enabling India’s next generation of developers
Are you a student in India? Applications are open for the GitHub Externships Winter Cohort! ⌘ Read more

Maybe I should write down my political views and thoughts in extra posts on my German blog in the future, instead of putting them in the monthly review and then translating them as well. English readers probably won’t get much out of it… Sorry! ✌️ ⌘ Read more

My November ‘21 in Review
Welcome to my monthly review for November 2021. What was going on this month? ⌘ Read more

NixOS 21.11 released

Image

Hey everyone, we’re Timothy DeHerrera and Tom Bereknyei,
the release managers for 21.11. As promised, the latest stable
release is here: NixOS 21.11 “Porcupine”.

• Release manual - [Highlights](/manual/nixos/stabl … ⌘ Read more

5 DevOps tips to speed up your developer workflow
From learning YAML to scripting with Bash, here are a few simple tips for developers who want to speed up their workflows. ⌘ Read more

News from AWS re:Invent – Docker Official Images on Amazon ECR Public
We are happy to announce today that, in partnership with Amazon, Docker Official Images are now available on AWS ECR Public. This is especially exciting because Docker Official Images are some of the most popularly used images on Docker Hub, acting as a key and trusted starting point for base images for the entire container […]

The post [News from AWS re:Invent – Docker Official Images on Am … ⌘ Read more

GitHub Actions: reusable workflows is generally available
DRY your Actions configuration with reusable workflows (and more!) ⌘ Read more

On the blog: Developer Journal, Byrd Antarctic Expedition https://john.colagioia.net/blog/2021/11/29/south-pole.html #programming #project #devjournal

On the blog: Amateur Stenography https://john.colagioia.net/blog/2021/11/28/steno.html #education #technology #opensource #typing

On the blog: Free Culture Book Club — if then else, part 3 https://john.colagioia.net/blog/2021/11/27/else3.html #freeculture #bookclub

On the blog: Tweets from 11/22 to 11/26 https://john.colagioia.net/blog/media/2021/11/26/week.html #twitter #week #socialmedia #linkdump

First experience with my new unlimited mobile phone contract while traveling: The phone hotspot works much better than the ICE (German high speed train) WiFi usually does. At most, there are small interruptions in tunnels, but otherwise surfing, writing e-mails, and listening to music work perfectly. Even remote programming works. It was worth it… ⌘ Read more

On the blog: Real Life in Star Trek, The Slaver Weapon, part 2 https://john.colagioia.net/blog/2021/11/25/slaver-2.html #scifi #startrek #closereading

Docker Captain Take 5 – Nicolas De Loof
Docker Captains are select members of the community that are both experts in their field and are passionate about sharing their Docker knowledge with others. “Docker Captains Take 5” is a regular blog series where we get a closer look at our Captains and ask them the same broad set of questions ranging from what […]

The post Docker Captain Take 5 – Nicolas De Loof appeared fir … ⌘ Read more

Bidens Democracy Summit
There is an interesting article about The Summit for Democracy titled Biden Invites Taiwan to Democracy Summit Alongside 110 Countries.I want to add a short but important observation.As mentioned in the article Hungary and Turkey have not been invited to the Summit. But contrary to the article, I believe that the reason has nothing to […] ⌘ Read more

Secure deployments with OpenID Connect & GitHub Actions now generally available
GitHub Actions now supports OpenID Connect for secure deployment to different cloud providers via short-lived, auto-rotated tokens. ⌘ Read more

How to squash bugs by enrolling in OSS-Fuzz
OSS-Fuzz is Google’s awesome fuzzing service for open source projects. GitHub Security Lab’s @kevinbackhouse describes enrolling a project. ⌘ Read more

The Copyright Office expands your security research rights
Recently, the Copyright Office responded to the calls to clarify the scope of protected security research. ⌘ Read more

Your Docker Business Questions Answered
In our recent live webinar, Management & Security at Scale with Docker Business (check out the webinar recording here) Docker Senior Product Marketing Manager Cat Siemer and Head of Dev Rel and Community Peter McKee discussed our new product subscription tier, Docker Business and how it addresses the challenges faced by large organizations that require enhanced […]

The post [Your Docker Business Questions Answered](https://www.docker.com/blog/your-do … ⌘ Read more

Today GoBlog got the option to configure your own map tile server. So not only standard OpenStreetMap is possible, but also Stamen Toner for example. Fits much better to my blog aesthetics, right? (See the map page.) ⌘ Read more

Accelerate security adoption in your organization
The GitHub Services Engineers have released the Advanced Security Enforcer GitHub Action to enable organizations to utilize code scanning in a consistent and automated way. ⌘ Read more

Erlang Solutions: Blockchain Tech Deep Dive ¼

Blockchain technology is transforming nearly every industry, whether it be banking,  government, fashion or logistics. The benefits of using blockchain are substantial – businesses can lower transaction costs, free up capital, speed up processes, and enhance security and trust. So it’s no surprise that more and more companies and developers are interested in working with the technology and leveraging its potential than ev … ⌘ Read more

On the blog: Developer Journal, Albanian Alphabet Anniversary https://john.colagioia.net/blog/2021/11/22/manastir.html #programming #project #devjournal

On the blog: Superheroes Behaving Badly https://john.colagioia.net/blog/2021/11/21/super.html #rant #superhero #ethics

Bahn2GPX
For me, the best option to travel long distances within Germany is to take the train. I don’t have a car since July, but I have a BahnCard 50 for years, with which I get up to 50% discount on (unfortunately very expensive!) train tickets. ⌘ Read more

On the blog: Free Culture Book Club — if then else, part 2 https://john.colagioia.net/blog/2021/11/20/else2.html #freeculture #bookclub

Mark emails me all the time with bugs he found in GoBlog (some that I would never have found myself) and features he would like to see (e.g. better display of Brid.gy webmentions). I take it as motivation and try to improve GoBlog in a way that it is useful for others as well. And I think there is a good progress. ⌘ Read more

In case you missed it, GitHub Education at Universe 2021!
A recap of all the GitHub Education news from Universe 2021, including the new Intro to Web Dev Experience. ⌘ Read more

On the blog: Tweets from 11/15 to 11/19 https://john.colagioia.net/blog/media/2021/11/19/week.html #twitter #week #socialmedia #linkdump