Unlocking security updates for transitive dependencies with npm
How Dependabot integrated with npm to address security vulnerabilities on transitive dependencies and increase the likelihood of success for JavaScript security updates by 40%. ⌘ Read more
How GitHub coordinates product releases with GitHub Projects and GitHub Actions
When teams work cross-functionally, good things happen. See how our teams use GitHub Projects to coordinate and ship new products and features. ⌘ Read more
logs: new blog post on visual design in software and first photojournal entries of 2023
Remediation made simple: Introducing new validity checks for GitHub tokens
GitHub now tells you whether GitHub tokens found by secret scanning are active so you can prioritize and escalate remediation efforts. ⌘ Read more
Highlights from the BuildKit v0.11 Release
Docker BuildKit v0.11 is now available with new features, bug fixes, performance improvements, and more! ⌘ Read more
I posted about GoToSocial, but another Mastodon-alternative and Fediverse software, Takahē, seems to make fast progress and has some unique features like support for multiple domains or multiple identities per user. I haven’t tried running it yet, but it looks promising! ⌘ Read more
Dependabot alerts are now visible to more developers
Default settings will allow developers with write and maintain access to see and resolve Dependabot alerts. ⌘ Read more
Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git archive`, work in untrusted repositories, or use Git GUI on Windows. ⌘ Read more
ProcessOne: ejabberd 23.01
Almost three months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.
A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.
A more detailed explanation of those topics and other features:
Erlang/OTP 19.3 discouragedRemember that support for Erlang/OTP 19.3 is discouraged, and will b … ⌘ Read more
3 common DevOps antipatterns and cloud native strategies that can help
Explore how GitHub and cloud native strategies can help you address common DevOps pipeline and team antipatterns. ⌘ Read more
ProcessOne: ejabberd 23.01
Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.
A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.
A more detailed explanation of those topics and other features:
Erlang/OTP 19.3 discouragedRemember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more
ProcessOne: ejabberd 23.01
Two months after the previous release, ejabberd 23.01 includes many bug fixes, several improvements and some new features.
A new module, mod_mqtt_bridge, can be used to replicate changes to MQTT topics between local and remote servers.
A more detailed explanation of those topics and other features:
Erlang/OTP 19.3 discouragedRemember that support for Erlang/OTP 19.3 is discouraged, and will be removed … ⌘ Read more
On my blog: Developer Diary, Martin Luther King Jr. Day https://john.colagioia.net/blog/2023/01/16/mlk.html #programming #project #devjournal
On my blog: Free Culture Book Club — Life Blood, chapters 6 – 9 https://john.colagioia.net/blog/2023/01/14/life-blood-3.html #freeculture #bookclub
Game Off 2022 winners 🏆
All of the winners and some of the best games from Game Off 2022. ⌘ Read more
On my blog: Toots 🐘 from 01/09 to 01/13 https://john.colagioia.net/blog/2023/01/13/week.html #linkdump #mastodon #socialmedia #week
Paul Schaub: Use Any SOP Binary With SOP-Java and External-SOP
The Stateless OpenPGP Protocol specification describes a shared, standardized command line interface for OpenPGP applications. There is a bunch of such binaries available already, among them PGPainless’ pgpainless-cli, Sequoia-PGP’s sqop, as well as ProtonMails [gosop](https://github.com/ProtonMa … ⌘ Read more
Majestetic 🏰 ⌘ Read more
New GitHub CLI extension tools
Support for GitHub CLI extensions has been expanded with new authorship tools and more ways to discover and install custom commands. Learn how to write powerful extensions in Go and find new commands to install. ⌘ Read more
Develop Your Cloud App Locally with the LocalStack Extension
Learn how to use the LocalStack Docker Extension to emulate a cloud service locally with Docker Desktop. ⌘ Read more
On my blog: Real Life in Star Trek, A Matter of Honor https://john.colagioia.net/blog/2023/01/12/matter-honor.html #scifi #startrek #closereading
A smarter, quieter Dependabot
Dependabot is getting a little smarter—and, a little quieter—by reducing bot-based noise from repositories based on your interaction with Dependabot. ⌘ Read more
Docker Desktop 4.16: Better Performance and Docker Extensions GA
We’re kicking off the new year with exciting Docker Extensions news and improved performance in Docker Desktop 4.16. ⌘ Read more
Erlang Solutions: Building a Remote Control Car from Scratch Using Elixir
IntroductionElixir is undoubtedly one of the most comprehensive full stack languages available, offering battle-tested reliability and fault-tolerance on the backend. This is thanks to its origins in Erlang, the BEAM VM and OTP, powerful and agile frontend development thanks to LiveView and the ability to write to hardware with Nerves (not to mention the exciting developments happening in the mac … ⌘ Read more
Probably preaching to the choir… ⌘ Read more
I had an AWS training in November and have the opportunity to get the “Certified Developer Associate” certificate. Even though I have two attempts, I want to do well on the first shot. Since the trainer didn’t show us everything that is required for the exam, I’m kind of re-doing the training with this Udemy course (luckily I have access to Udemy Business and don’t have to pay for it). It’s really helpful because it helps me demystify the AWS cloud and reduce the 🤯 whenever I do something in the AWS console. ⌘ Read more
Passwordless deployments to the cloud
Discovering passwords in our codebase is probably one of our worst fears. But what if you didn’t need passwords at all, and could deploy to your cloud provider another way? In this post, we explore how you can use OpenID Connect to trust your cloud provider, enabling you to deploy easily, securely and safely, while minimizing the operational overhead associated with secrets (for example, key rotations). ⌘ Read more
Introducing required workflows and configuration variables to GitHub Actions
Now, you can standardize and enforce CI/CD best practices across all repositories in your organization to reduce duplication and secure your DevOps processes. ⌘ Read more
お知らせ：JPCERT/CC Eyes「Malware Analysis Operations（MAOps）の自動化」 ⌘ Read more
GitHub Discussions just got better with Category Forms!
Category Forms allow maintainers to create templates for their GitHub Discussions, which means that users can start new discussions with all the necessary information already included. ⌘ Read more
Default setup: A new way to enable GitHub code scanning
Default setup is a new way to automatically set up code scanning on your repository, without the use of a .yaml file. ⌘ Read more
On my blog: Developer Diary, Hōonkō https://john.colagioia.net/blog/2023/01/09/hoonko.html #programming #project #devjournal
Nice to see that there is such a variety of MicroPub clients, next to Quill, Micropublish and the mobile app Indigenous, there’s also sparkles. But on the desktop, I mostly just use GoBlog’s editor nowadays. It has live sync and and a live preview, which is sometimes very helpful. But flexibility is the key, use what fits you and the situation the best. ⌘ Read more
My first Freeletics week
My first Freeletics week is complete. And I got a badge for the first “perfect week”. I hope this gamification (levels and badges for perfect weeks, perfect week streaks, training session milestones etc.) will make me pull through. My girl friend also joined me and started using Freeletics. 🤓 ⌘ Read more
On my blog: Free Culture Book Club — Life Blood, chapters 4 – 5 https://john.colagioia.net/blog/2023/01/07/life-blood-2.html #freeculture #bookclub
On my blog: Toots 🐘 from 01/02 to 01/06 https://john.colagioia.net/blog/2023/01/06/week.html #linkdump #mastodon #socialmedia #week
On my blog: Real Life in Star Trek, Unnatural Selection https://john.colagioia.net/blog/2023/01/05/unnatural-selection.html #scifi #startrek #closereading
GitHub Availability Report: December 2022
In December, we did not experience any incidents that resulted in degraded performance across GitHub services. This report sheds light into an incident that impacted customers using GitHub Packages and GitHub Pages in November. ⌘ Read more
I bought a full year of access to the Freeletics coach, so I should actually start doing my workout, right? 🙃 I can already feel the soreness just thinking about it… ⌘ Read more
My 2022 in Review
2022 is over, welcome 2023! A year full of unexpected events, many personal changes and a lot of new experiences… But since I wrote a review every month, I just want to highlight the highlights here. ⌘ Read more
On my blog: Developer Diary, National Science Fiction Day https://john.colagioia.net/blog/2023/01/02/scifi.html #programming #project #devjournal
RT by @mind_booster: Já está publicada a lista de autores portugueses que entram hoje em #DomínioPúblico. Podem consultar aqui https://blog.wikimedia.pt/2023/01/01/dia-do-dominio-publico-2022-2/
No dia 6 de janeiro, há um evento organizado pela @wikimediapt Biblioteca Nacional e @ANSOL Link no mesmo site. Se puderem, partilhem!
href=”https://we.loveprivacy.club/search?q=%23PublicDomain”>#PublicDomain**
Já está publicada a lista de autores portugueses que entram hoje em #DomínioPúblico. Podem consultar aqui [blog.wikimedi … ⌘ Read more
On my blog: 🍾 Happy Calendar-Changing Day, 2023 🎆 https://john.colagioia.net/blog/2023/01/01/hny2023.html #holiday #newyear
**RT by @mind_booster: As of today, most published works from 1927 have entered the public domain in the US! Celebrate with us on Jan 19 & 20: http://blog.archive.org/2022/11/30/the-best-things-in-life-are-free-two-ways-to-celebrate-public-domain-day-in-2023/
Welcome to the #PublicDomain:
🎞️ The Beloved Rogue, starring John Barrymore
https://archive.org/details/TheBelovedRogue**
As of today, most published works from 1927 have entered the public domain in the US! Celebrate with us on Jan 19 & 20: [blog.arc … ⌘ Read more
Happy new year! 🎆 ⌘ Read more
blog: closing out the new year with reflections and resolutions
On my blog: Free Culture Book Club — Life Blood, chapters 1 – 3 https://john.colagioia.net/blog/2022/12/31/life-blood-1.html #freeculture #bookclub
On my blog: Tweets from 12/26 to 12/30 https://john.colagioia.net/blog/2022/12/30/week.html #twitter #week #socialmedia #linkdump
My December ‘22 in Review
Now the last month of the year is coming to an end and before I put together a short review of the year soon, here’s another monthly review. ⌘ Read more
My December ‘22 in Review
Now the last month of the year is coming to an end and before I put together a short review of the year soon, here’s another monthly review. ⌘ Read more