Jamie Tanna's profile image

Hi, I'm Jamie Tanna 👋🏼

If you're referring to me, I'm happy being called Jamie, Jamie Tanna, jamietanna, and that you respect my pronouns: he/him/his.

I'm currently a Senior Developer and Open Source project maintainer (of Renovate) at Mend.

I currently live in Nottingham with my partner Anna Dodson and our cat Morph and our dog Cookie.

I use my site as a method of blogging about my learnings, as well as sharing information about projects I have previously, or am currently, working on in my spare time.

I'm an maintainer for a number of Open Source projects, including oapi-codegen, and Renovate, as part of my job at Mend.

I'm a GNU/Linux user, a big advocate for the Free Software Movement, and the IndieWeb movement and I try to self host my own services where possible, instead of relying on other providers.

I have ADHD (Inattentive Type) and am learning how to make my life work better around it.

Due to the many social media platforms and different ways to connect, I've captured all my contact information on my /elsewhere page. Alternatively, you can drop me an email at hi@jamietanna.co.uk.

I also have a /now page which aims to cover some more up-to-date "what I'm up to" information.

My birthday is on the .

 Listen

Listened to 2025 founders year in review: insights, highlights, and future plans by The Debrief by incident.io
Post details
Three founders, one kitchen table, and a very honest end of year conversation. In this episode we look back on 2025, from moving continents and growing the company at pace, to ski trips that probably should not have happened, live demos that absolutely could have gone wrong, and the small moments that made the year memorable. We talk about how our billboard ideas came to life, what it is really like spending a huge chunk of time hiring, why Pete injured his back standing up, and why Chris’s idea of a death row meal is genuinely upsetting. It is unscripted, a bit chaotic, and a proper look behind the scenes at what the year actually felt like.

 Repost

Reposted Renovate (@renovatebot.com)
Post details
FYI: We've changed the `GOSUMDB` environment variable on the Mend-hosted Renovate Cloud infrastructure, which may lead to impact to users with private Go modules. As we've noted in https://github.com/renovatebot/renovate/discussions/40041, this is due to previously used settings leaving users open to supply chain attacks

 Listen

Listened to Ep. 38 | Writing for Developers with Piotr Sarna by Overcommitted
Post details
SummaryIn this episode of the Overcommitted Podcast, hosts Brittany, Bethany, and Erika engage in a deep conversation with Piotr Sarna, co-author of 'Writing for Developers.' They explore the journey of co-authoring a book, the importance of writing in engineering, and the challenges and joys of technical writing. The discussion also touches on the significance of blogging as a continuation of learning and sharing knowledge, as well as the role of writing culture in engineering teams. The crew kicks off the next book club, where the Overcommitted engineers will be reading Writing for Developers together over the next 2 months!TakeawaysWriting a book can be seen as a series of extended blog posts.There is a gap in resources for writing engaging blog posts for developers.Good writing in tech should have an educational aspect.Writing culture in engineering teams enhances clarity and collaboration.The book 'Writing for Developers' fills a niche in technical writing resources.Embracing cringe-worthy writing experiences is part of the learning process.LinksPiotr Sarna on LinkedIn: https://www.linkedin.com/in/sarna-dev/Cynthia Dunlop on LinkedIn: https://www.linkedin.com/in/cynthiadunlop/Piotr and Cynthia's first book: Database performance at scale: https://bookshop.org/p/books/database-performance-at-scale-a-practical-guide-cynthia-dunlop/f384c1f0d973803c?ean=9781484297100&next=t Writing for Developers book: https://bookshop.org/p/books/writing-for-developers-blogs-that-get-read-cynthia-dunlop/af343340c60cd806?ean=9781633436282&next=tWrite that blog!: https://writethat.blog/Writing for Developers GitHub Repo: https://github.com/scynthiadunlop/WritingForDevelopersBookDiscord community for Overcommitted: https://discord.gg/fxvEjs7fHostsOvercommitted: https://overcommitted.devBethany Janos: https://github.com/bethanyj28Brittany Ellich: https://brittanyellich.comEggyhead: https://github.com/eggyhead

 Repost

Reposted Brittany Ellich (@brittanyellich.com)
Post details
Do you write blog posts, documentation, or anything for software engineers? Do you want to? Join us for the Writing for Developers book club with @overcommitted.dev, officially kicking off now! 🚀 Chapters 1+2 now, first discussion Friday. Join us in Discord to chat about it: discord.gg/d9gZyYuqKd https://discord.gg/d9gZyYuqKd

 Listen

Listened to Ep. 37 | Being Unreasonable with Jason Lengstorf by Overcommitted
Post details
SummaryIn this episode of the Overcommitted Podcast, hosts Bethany, Brittany, and Erika engage in a deep conversation with Jason Lengstorf about the concept of being unreasonable in the tech industry. Jason shares his journey of embracing unreasonableness to pursue big ideas, the importance of community and networking, and how to navigate risks in career decisions. They discuss the value of non-traditional backgrounds in tech, the process of learning and consolidating information, and the creative approaches that can lead to innovative projects. The conversation wraps up with Jason sharing his future projects and reflections on the tech landscape.TakeawaysBeing unreasonable and having big audacious goals can lead to unexpected opportunities.Surround yourself with ambitious people that can inspire growth.Recognize when to pivot in your career.Networking is often more valuable than formal education.Learning is an active process, not just passive consumption.Creative coding can lead to innovative solutions.Take (calculated) risks. It can help you achieve your goals.Community support is crucial in navigating career changes.Being slow to adopt new technologies might not be a bad thing.LinksJason Lengstorf: https://jason.energyCodeTV: https://codetv.devAll things open talk: https://www.youtube.com/watch?v=goVNPN6fVwQBytes.dev: https://bytes.devChar Stiles: https://www.instagram.com/charstilesBuiltin: https://builtin.comHostsOvercommitted: https://overcommitted.devBethany Janos: https://github.com/bethanyj28Brittany Ellich: https://brittanyellich.comEggyhead: https://github.com/eggyhead

 Listen

Listened to Ep. 36 | Navigating the future of AI agent security with Dan Moore by Overcommitted
Post details
SummaryIn this episode of the Overcommitted Podcast, Erika and Brittany discuss the evolving landscape of AI agents and their implications for security and identity management. Joined by expert Dan Moore, they explore the challenges posed by non-deterministic agents, the importance of granular permissions, and the need for developers to be aware of security practices as AI technology advances. The conversation also touches on industry standards, the role of developers in navigating these changes, and personal reflections on the future of AI.TakeawaysAI agents are changing the landscape of software development.Non-deterministic agents present new security challenges.Granular permissions are essential for securing AI agents.Developers must be aware of security practices in AI.Industry standards for AI security are still evolving.Separation of concerns can enhance security for agents.The role of identity and authorization is critical in AI.Business implications of AI agents are significant.Developers should stay close to business needs and problem-solving.The future of AI will require new skills and awareness. LinksDan Moore on LinkedIn: www.linkedin.com/in/mooreds/ Dan Moore on Bluesky: https://bsky.app/profile/mooreds.comSimon Willison - The Lethal Trifecta: https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/ FusionAuth: https://fusionauth.io/ AGNTCY: https://agntcy.org/Amazon Bedrock AgentCore: https://aws.amazon.com/bedrock/agentcore/ FusionAuth Guide to OAuth: https://fusionauth.io/articles/oauth/modern-guide-to-oauth MCP and OAuth: https://aaronparecki.com/2025/04/03/15/oauth-for-model-context-protocol MCP Specification: https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization HostsOvercommitted: https://overcommitted.devBrittany Ellich: https://brittanyellich.com Eggyhead: https://github.com/eggyhead

 Listen

Listened to Break | Nearly A Year
Post details
Welcome back to Break, a Fallthrough aftershow! In this episode, the panel continues their conversation from Fallthrough #49.Enjoying the aftershow? Let us know on social media! If you prefer to watch instead of just listen, head over to YouTube where you watch this episode of Break!Thanks for...

 Listen

Listened to Fallthrough | Project Management 2 Shell
Post details
Another Cloudflare outage. A CVSS 10.0 React RCE vulnerability. We've been dealing with quite a lot these last few weeks. In this week's episode, Kris and Matt discuss the outage and vulnerability and have a deeper discussion about project management and how all of these things relate to each...

 Listen

Listened to Blocking Software Supply Chain Attacks with Feross Aboukhadijeh - Software Engineering Daily by SEDaily 
Post details
Modern software relies heavily on open source dependencies, often pulling in thousands of packages maintained by developers all over the world. This accelerates innovation but also creates serious supply chain risks as attackers increasingly compromise popular libraries to spread malware at scale. Feross Aboukhadijeh is the founder and CEO of Socket which is a security

 Listen

Listened to Open Source Security: Updating open source dependencies with Jamie Tanna
Post details
Josh discusses updating open source dependencies with Jamie Tanna. Jamie works on Renovate which gives them a lot of insight into the challenges of keeping your open source updated. We discuss the challenges of semantic versioning, supply chain security, and AI-generated code. If you're new or old to the world of open source dependencies, there's something to learn from this chat. The show notes and blog post for this episode can be found at

 Note

Does anyone know if there's a Charm BubbleTea UI prototyper? I'm trying to find something to have a play with some of the components to test out a UI I'm building, and ideally something drag-and-drop to play around with it would be convenient

 Listen

Listened to Break | We're All Just Writers Now
Post details
Welcome back to Break, a Fallthrough aftershow! In this episode, the panel continues their conversation from Fallthrough #48.Enjoying the aftershow? Let us know on social media! If you prefer to watch instead of just listen, head over to YouTube where you watch this episode of Break!Thanks for...

 Listen

Listened to Break | Humans Are Fallible
Post details
Welcome back to Break, a Fallthrough aftershow! In this episode, the panel continues their conversation from Fallthrough #47.Enjoying the aftershow? Let us know on social media! If you prefer to watch instead of just listen, head over to YouTube where you watch this episode of Break!Thanks for...

 Listen

Listened to Open Source Security: Python Security with Seth Larson
Post details
In this episode Seth Larson gives us a cornucopia of topics relating to Python security. Seth discusses the Python Software Foundation's decision to reject a significant grant NSF. Diversity is a big deal to python, so this was a no brainier. We discuss the upcoming PyCon US conference, featuring a new security track that fosters collaboration between developers and security experts. Josh is a huge fan of having a security track at developer conferences. And we close on a paper about zip and tar archives Seth wrote. It seems like we should have zip and tar security figured out by now, but we don't. Thankfully Seth is working on it. The show notes and blog post for this episode can be found at