Kind reposts

Ugh! Racists need to just fuck off!

I made something new: an eslint plugin to validate your npm ecosystem lockfiles! It supports npm, pnpm, yarn, bun, and vlt, and it's already helped find a supply chain security attack vector inside a fortune 500 tech company. https://www.npmjs.com/package/eslint-plugin-lockfile

FYI: We've changed the `GOSUMDB` environment variable on the Mend-hosted Renovate Cloud infrastructure, which may lead to impact to users with private Go modules. As we've noted in https://github.com/renovatebot/renovate/discussions/40041, this is due to previously used settings leaving users open to supply chain attacks

Do you write blog posts, documentation, or anything for software engineers? Do you want to? Join us for the Writing for Developers book club with @overcommitted.dev, officially kicking off now! 🚀 Chapters 1+2 now, first discussion Friday. Join us in Discord to chat about it: discord.gg/d9gZyYuqKd https://discord.gg/d9gZyYuqKd

Strengths: works well under pressure Weaknesses: doesn’t work otherwise

You maniacs! Every CI pipeline on Earth runs arbitrary code from strangers! Damn you all to hell! https://mastodon.me.uk/@pikesley/115627046892936202

Attached: 1 image Sometimes I just get an idea and it won't go away

We should all be using dependency cooldowns https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns #security #oss

Like it or not this technology is here to stay and if you don’t use it you’ll fall behind in your industry

My first advice to junior contributors is to STOP using vibe coding for PRs. OSS is always about people more than about code. We don't need more code generated by LLM, we need more people who care.

When you become disabled there’s a few things you notice right away: Ableism is everywhere. People will abandon you. Even those you were certain would stick by you. Just because something is illegal or against human rights code doesn’t mean it’s not happening ALL the time Accessibility is not what it should be. People will blame you for your disabilities. It won’t matter what you do or how hard you try, you won’t be “good enough” All the misconceptions you had about disabled people were wrong. That’s really the crux of it. Disability is a minority group you can join anytime. Most people will experience disability in their lifetime Yet discriminating against us is not only common it’s socially acceptable. Most people don’t realize how misguided they are until it happens to them Many of us living with chronic illness had the same preconceived notions about disabled people until we became disabled ourselves We thought it wasn’t “that bad”. We believed we would be the exception Many of us became advocates because the realization that we were so horribly wrong shook us to our core. If we had that much ableism to work through, then so does everyone else. That’s why we need strong allies. We need people who will say disabled lives matter. We need to shift the public perception away from the idea that disability is a moral failing. We need to be visible, take up space and help people realize that all health is temporary and disability happens to almost everyone. Inclusion and accessibility matter! #disability #ableism #eugenics #chronicillness

We are excited to announce the Call for Participation for the Package Managers devroom at @fosdem@fosstodon.org 2026, taking place on Saturday, 31st January 2026 at the Université libre de Bruxelles, Belgium. Submission deadline: 1st December 2025 https://blog.ecosyste.ms/2025/11/06/fosdem-2026-package-managers-devroom-cfp.html

We were very excited to see last week we hit 20,000(!) GitHub Stars on the #Renovate project 🚀 Thanks to our amazing community + users 🤗

Pretty sure I have the scariest engineering costume of the day.

This is why I have a website. It’s also why everything I’ve ever written has appeared on my website with *very* few exceptions Having a single domain name that’s YOU is invaluable. My website gets lots of compliments on its branding and appearance. My slides borrow that appearance, too It matters! [contains quote post or other embedded content]

Honestly, if you value content you've created always make sure it has a home outside of a single company. Always. [contains quote post or other embedded content]

The best software engineers are fantastic written communicators. Here's why: - breaks information out of silos (DMs, emails) so others can reference, build upon, and expand your work - supports remote teams, different timezones, and helps colleagues catch up after time off - unblocks teammates by reducing repetitive conversations - prepares you for the lest of your career. Senior+ roles ARE writing roles: architecture docs, code reviews, technical specs, etc. 1/

"Entitled white billionaire wants to decide laws" I don't give a fuck if Harry Potter was your whole childhood. It's not more important than the lives of trans people.

😅👀💦

it's kinda weird that all the software i am expected to use for work are all written by distributed teams, go, python, postgres, linux, chrome, k8s etc and despite being told "the best teams work in an office together" i don't know of any software i use that's actually written that way

Announcing improvements on communicating large changes to Mend #Renovate (CLI/Cloud): https://github.com/renovatebot/renovate/discussions/38462

Now you know why snowflakes are white.

The tragedy of the UK is that we grew up believing that our government would dispatch James Bond with his “license to kill” to dispatch megalomaniac media tycoons, water barons and mad billionaire rocket builders. The reality is Bond would probably turn up to award them their MBE.

Attached: 1 image

We built a calculator that doesn't work, but don't worry, it's also a plagiarism machine that will tell you to kill yourself. It runs on the world's oceans and costs 10 trillion dollars.

Folks someone appears to be having a pizza party at the Pentagon www.pizzint.watch https://www.pizzint.watch/

Starting a personal blog on a domain you control is a power move in 2025 [contains quote post or other embedded content]

Calling Britain “Pound Town”

Millennial retirement planning

Big thanks to @www.jvt.me for running the "What story does your dependency tree tell you about your org?" Great tooling on how to manage dependencies and surface up actionable data using dmd! You can catch this workshop at GopherconUK if you are attending!

The purpose of stickers is to Never Use Them so that when you die your friends can put them on your coffin

It’s weird seeing so many people scrambling to build oss documentation and tools for LLMs to work with software… where’s that same energy making documentation for the humans?

Attached: 1 image

I made this in 2021

TIL Slack stood for Searchable Log of All Communication and Knowledge. Now it stands for Salesforce Leaders Acquired Company Knowledge.

The next Manchester Go meetup is on the 30th of July at Fatsoma! This one though is a workshop so bring your laptop and follow along with @www.jvt.me on "What story does your dependency tree tell you about your org?". See you there and patch your vulnerabilities 👀 https://www.meetup.com/go-mcr/events/309017083

We finally did it! After recording an episode of @fallthrough.fm, @matthewsanabria.dev and I recorded our post show discussion (featuring @www.jvt.me!). That’ll be shipping alongside next week’s episode, which includes the wonderful @steveklabnik.com as well!

//event happening in 3h 58m// BATCH BUNCH #0006 (cupcake version) is today. Yes, we're superrrrrr excited for this one! 🧁😌 lu.ma/t3rviwh4

Home of RSS Parrot, a free Fediverse service that lets you turn Mastodon into an RSS or Atom feed reader.

github actions have github consequences

Pedro Pascal proves that sometimes the most masculine thing to do is to be vocally and unflinchingly supportive of vulnerable people.

i had some really stressful interactions on github yesterday and today. lets just remember many of us are doing this OSS work for free and to do good, kindness is appreciated

😮‍💨

dipshits in 2019: you people are NPCs, you don't even think for yourselves dipshits in 2025: I have outsourced my thinking to Clippy

It’s about to be MAINTAINER MONTH aka May If you have anything maintainer-centric going on in May, get it added to the website! maintainermonth.github.com http://maintainermonth.github.com

Lots of websites and apps now provide fee-free booking for UK train tickets to any destination, featuring split-ticketing and better options for identifying the best value fares. Yet, many people I …