Listen

Listened to Open Source Security: Open source is critical infrastructure with Kat Cosgrove
Post details
Josh talks to Kat Cosgrove about a how companies should be treating open source more like their critical infrastructure than free stuff. Kat has a ton of knowledge about how the interactions between companies and open source communities can work well, or not work at all. Kat's time on the Kubernetes Release Team. We touch on how a project like Kubernetes is super successful, while another, Ingress NGINX, was not. It's a super insightful discussion with a ton of lessons and advice for everyone. The show notes and blog post for this episode can be found at

 Like

Liked kat cosgrove (@kat.lol)
Post details
Owning physical media does make me cool as fuck, actually. "Hey babe, I got that new album you like on Spotify. Come over and listen?" Rizzless. She has internet. No bitches "Hey babe, I got that new album you like on vinyl. Come over and listen?" Novelty. This hooks em. Drowning in pussy [contains quote post or other embedded content]

 Reply

I've been enjoying hledger for this sort of thing - and it's something a lot of LLMs understand so should give you some opportunities to build on top of

 Repost

Reposted Mike McQuaid @MikeMcQuaid by Mike McQuaid 
Post details
Your regular reminder that shitting on OSS on social media is a selfish thing to do. Good job sapping volunteer maintainers’ motivation in exchange for your “internet points”. Next time: try rolling up your sleeves and contribute a fix to the problem you’ve identified.

 Like

Liked Hugo van Kemenade (@hugovk@mastodon.social)
Post details
Starting with v8.0.0, Astral switched setup-uv to immutable releases with no floating v8 tags. This is good for security. But unfortunately #Dependabot and #Renovate couldn't upgrade from v7 to v8.0.0, and need a manual bump to get back on track. This is not so good for security. I posted about this on the three social networks, someone tagged @www.jvt.me@www.jvt.me and soon after Renovate now supports this! 🎉 Here's his writeup into the world of #GitHubActions tags: https://www.jvt.me/posts/2026/04/24/github-actions-tagging/

 Repost

Reposted Hugo van Kemenade (@hugovk@mastodon.social)
Post details
Starting with v8.0.0, Astral switched setup-uv to immutable releases with no floating v8 tags. This is good for security. But unfortunately #Dependabot and #Renovate couldn't upgrade from v7 to v8.0.0, and need a manual bump to get back on track. This is not so good for security. I posted about this on the three social networks, someone tagged @www.jvt.me@www.jvt.me and soon after Renovate now supports this! 🎉 Here's his writeup into the world of #GitHubActions tags: https://www.jvt.me/posts/2026/04/24/github-actions-tagging/

 Listen

Listened to Brittany Ellich by Coffee and Open Source
Post details
Brittany is a Staff Software Engineer at GitHub, helping build the platform millions of developers rely on every day. She hosts the Overcommitted podcast, writes The Balanced Engineer newsletter, and speaks at conferences about AI, accessibility, developer productivity, and building a software engineering career.You can find Brittany on the following sites:BlueskyBlogLinkedInGitHubYouTubeHere are some links provided by Brittany:Overcommitted Podcast PLEASE SUBSCRIBE TO THE PODCASTSpotifyApple PodcastsYouTube MusicAmazon MusicRSS FeedYou can check out more episodes of Coffee and Open Source on https://www.coffeeandopensource.comCoffee and Open Source is hosted by Isaac Levin

 Like

Liked Justin Garrison (@justingarrison.com)
Post details
We recorded a fun episode of @fafo.fm with @crawshaw.io today and after the recording he asked a great question How do you measure success of the podcast? I don't think I've ever said this out loud so I wanted to put it here 1. Do I look forward to recording episodes? 2. Does it give back?

 Listen

Listened to "Adam Scott" on Where Everybody Knows Your Name
Post details
<p>Adam Scott joins Ted Danson to talk about getting lost on the office set of Severance, learning from directors like Ben Stiller and Adam McKay, stealing Sam Malone’s moves for his character on Party Down, the alternate timeline in which he’s a political journalist, and more.  </p><p>  </p><p>Like watching your podcasts? Visit <a href="http://youtube.com/teamcoco">http://youtube.com/teamcoco</a> to see full episodes. </p> <p>Hosted by Simplecast, an AdsWizz company. See <a href="http://pcm.adswizz.com">pcm.adswizz.com</a> for information about our collection and use of personal data for advertising.</p>

 Like

Liked Nikita Gill (@nikitagill.bsky.social)
Post details
A reminder that this is why we make fun of The Odyssey. The book would not exist if Odysseus was not such a complete chaos goblin who was busy causing problems for himself by arguing with Gods and being a shit navigator. There is no way to make an extremely serious movie out of this material.

 Listen

Listened to Jordan Harband - Npm Ecosystem, HeroDevs by devtools.fm: Developer Tools, Open Source, Software Development
Post details
This week we're joined by Jordan Harband, a pillar of the npm ecosystem. Jordan maintains a staggering amount of open source projects that are used by millions of developers. Jordan has some opinions that go against the mainstream when it comes to legacy support. Join us as we try to understand his perspective. https://www.linkedin.com/in/ljharb/ https://github.com/ljharb https://x.com/ljharb Episode sponsored By MUX (https://mux.com) Become a paid subscriber our patreon, spotify, or apple podcasts for the full episode. https://www.patreon.com/devtoolsfm https://podcasters.spotify.com/pod/show/devtoolsfm/subscribe https://podcasts.apple.com/us/podcast/devtools-fm/id1566647758 https://www.youtube.com/@devtoolsfm/membership