We're excited to announce that Renovate maintainers Sebastian Poxhofer and Jamie Tanna will be at @linuxfoundation.org's Open Source Summit Europe in Prague in a couple of weeks, and look forward to meeting folks who are there
We'll also be at the @openssf.org's Community Day, too
We've announced 1 Critical, 2 High and 1 Moderate security advisories - we recommend you upgrade to a minimum of 44.79.0 (2026-09-10)
More info: https://github.com/renovatebot/renovate/discussions/46549
anyone looking for tech events in or around nottingham please consider viewing and adding more events to nottingham.digital .. #tech #nottingham
https://nottingham.digital
As folks may have noticed - Renovate 44 was (accidentally) released yesterday with a non-breaking change. Please treat Renovate 44.0.0 as 43.x, and upgrade as normal!
alcoholic trying to get sober after a relapse tells Google's "Health Coach" about it.
it tells them to drink every hour and messages them to make sure they're drinking as soon as they wake up.
No science fiction could have prepared us for just how stupid the end of the world can be.
"The environment was on the brink of collapse, and so, rather than deal with that, we burned what fuel we had left getting computers to scam each other for money."
I migrated a group chat of mostly elderly women to signal and I feel like there’s nothing I can’t do
I also firmly believe the stereotype of elderly women not being technical is complete bollocks perpetuated by the patriarchy
watching the tech industry burn out all the people i know who actually care about delivering things that aren’t perpetually broken, all at the altar of infinite velocity, is making me utterly utterly furious.
The Great Supply Chain Security Paradox:
“every open source lib is getting owned! wait at least a week to patch, let other people find the supply chain breaches before you”
“AI is reversing all these …
It usually only takes 1 project for an open source maintainer to learn they need to set boundaries. Unfortunately, that 1 project often becomes load bearing infrastructure before we've even realized what's happened, putting everyone in quite a predicament.
@www.jvt.me.web.brid.gy #opensource
The open source world was designed for a world where there was more friction for doing things. With LLMs a lot of that friction has been removed. Sometimes that means we have to ask a potential contributor "are you a human?". @www.jvt.me.web.brid.gy #opensource #tech #llms
People are worried about AI killing open source, I'm more worried about some companies looking to enclose open source under the premise that AI is making it too risky.
https://newsroom.ibm.com/2026-05-28-ibm-and-red-hat-commit-5-billion-to-redefine-the-future-of-open-source-in-the-ai-era
Open source maintainers at profitable companies: stop asking permission to fix what your employer already depends on. No paperwork. No programme. No manager’s blessing. Just maintain it on the clock.
It’s a sort of meme that engineers aren’t good writers. That includes software ones.
And now we’re supposed to believe we can take an entire industry of not-that-good writers and transform them, in a few months, into people who’s primary job is not writing code but writing prose?
lolwut
Your regular reminder that shitting on OSS on social media is a selfish thing to do. Good job sapping volunteer maintainers’ motivation in exchange for your “internet points”. Next time: try rolling up your sleeves and contribute a fix to the problem you’ve identified.
Starting with v8.0.0, Astral switched setup-uv to immutable releases with no floating v8 tags. This is good for security.
But unfortunately #Dependabot and #Renovate couldn't upgrade from v7 to v8.0.0, and need a manual bump to get back on track. This is not so good for security.
I posted about this on the three social networks, someone tagged @www.jvt.me@www.jvt.me and soon after Renovate now supports this! 🎉
Here's his writeup into the world of #GitHubActions tags:
https://www.jvt.me/posts/2026/04/24/github-actions-tagging/
GitHub appears to have opted anyone using the CLI into sending telemetry they will use to inform product decisions. This is sneaky and should have been an opt-in decision, not opt-out.
Disable it with `gh config set telemetry disabled`.
cli.github.com/telemetry
https://cli.github.com/telemetry
The reddit engineering team wrote a great post about how they're using Renovate for their dependency management - very interesting and some good learnings on how they keep things patched at scale!
https://www.reddit.com/r/RedditEng/comments/1s1q879/dependency_hell_aka_how_i_learned_to_stop/
https://www.reddit.com/r/RedditEng/comments/1s1q879/dependency_hell_aka_how_i_learned_to_stop/?solution=4303a76c078f87374303a76c078f8737&js_challenge=1&token=bbbe4bf1c9a2b5160829c4be34da58614381ef3e0636a894f7eeb79613d86dc9&share_id=o3roxspvq4-AJyieVXsHb&utm_medium=android_app&utm_name=androidcss&utm_source=share&utm_term=1
men can’t understand what it’s like for women to see story after story after story of women being victims of sexual violence in a culture where it’s routine; what it’s like to live in a world that is fundamentally hostile to our existence. it’s a wonder we leave the fucking house, let alone thrive.
"Age verification" laws are "we want to have all adults and their complete online profile in a database" laws, and that Persona, the company behind LinkedIn, Roblox, Discord ID and age verification is owned by Peter Thiel should be all you need to know.
The #Renovate maintainers would like to get some speciifc feedback on a few areas - we'd love to hear from you: https://github.com/renovatebot/renovate/discussions/41414
me at 17: a secret conspiracy of billionaires shapes global events
me at 35: class interest creates emergent outcomes and aligned behavior, but there’s no smoky room where plutocrats plot to shape global events
me at 41: a secret conspiracy of billionaire perverts shapes global events
[contains quote post or other embedded content]
Reminder that #Renovate 43 came out yesterday! We landed a few breaking changes, so check out the release notes: https://github.com/renovatebot/renovate/releases/tag/43.0.0
I'm legit unfollowing people who never use alt text.
You're literally typing on a text based app. So why are you making Canva images with little pithy quips and no alt text. I honestly don't understand it.
Did someone post something? It's on mastodon.social. It's literally on booping.synth.download. It's maybe in wetdry.world. It's literally on gts.apicrim.es. You can probably find it on app.wafrn.net. Dude it's on shrimp.starlightnet.work. It's a infosec.exchange original. Check out mas.to for it. You'll find it on hachyderm.io. It's definitely on oomfie.city. Look for it on tech.lgbt. It's over on yeen.town. You can see it on waf.moe. It's been shared on akko.wtf. Go peek at fuzzies.wtf. It's trending on transfem.social. You can catch it on eepy.moe. Browse over to lethallava.land. It's on $INSTANCE$host$. You can read it on $INSTANCE$host$. You can go to $INSTANCE$host$ and like it. Log onto $INSTANCE$host$ right now. Go to $INSTANCE$host$. Dive into $INSTANCE$host$. You can $INSTANCE$host$ it. It's on $INSTANCE$host$. $INSTANCE$host$ has it for you. $INSTANCE$host$ has it for you.
Jamie Tanna
.
#renovate
#conference.
