IndieWeb post types

How did only learn about #Renovate last week?! I’m blown away. It’s so much better than dependabot in every way. Not to mention it’s super simple to set up on my self-hosted #Forgejo instance too! Amazing tool! https://docs.renovatebot.com/

I do have to say that the combination of #Renovate, #Docker, a good test suite, and some AI is amazing for a sole maintainer of a minor project: I get automated PRs for all dependencies, and if tests fail I can ask Claude to help me figure out the cause and suggest solutions. This means that firstly security updates are installed promptly, and if I need to revisit something in 6 months time to add a feature or fix a bug I don’t have to spend 2 days fighting dependency hell first, because it all lives in a #Docker container that ‘just works’.

A year and a half ago I wrote that MCP wasn't ready for the enterprise. I also said we could fix it! A year and a half later, we did! The fix is Cross-App Access. Instead of every employee clicking …

This is the story of how our Developer Productivity team extended and rolled out rubyfmt, our Rust-based zero-config, ultra-fast autoformatter across the world's largest Ruby codebase.

Growing as a programmer is making an escalating series of increasingly sophisticated mistakes until it's called a distributed system.

'learning' is making an escalating series of increasingly sophisticated mistakes [contains quote post or other embedded content]

me on the @fallthrough.fm podcast: this is a golden opportunity for github to fix its code review UI (monkey's paw curls) [contains quote post or other embedded content]

Attached: 1 image My discord has an emoji named "tech debt" - which is just the angzarr, ⍼, the symbol famous for having no known use or agreed-upon meaning but somehow appearing in unicode and now it's just a part of unicode forever. With so many enormous tech debt bills coming due recently, perhaps you, too, would like to take a moment to appreciate the tasteful angles of the angzarr.

In a Web where content is poisoned, return to the source of it all. The blog still welcomes you. The water is sweet.

CEOs are having affairs? I'm too burnt out to have an affair. You know what would be really hawt right now? If someone would come read a book next to me while I nap on the couch. Fantasies, man. Fantasies.

oh great another one of my domains is now being used for spoofed phishing mails at least I found https://dmarc.postmarkapp.com/ which is a nice free service to handle my DMARC report collation. I've been using it for the past week or so and it's made my life a little easier.

a friend booked a catch-up call via my open diary 😭 chat, do I have a problem?

At least it's not your partner.

AWS Emulator is a local emulator of the AWS APIs. Contribute to aws/aws-emulator development by creating an account on GitHub.

It seems to me that companies measuring people on token usage are no better than when companies measured developers on lines of code.

“Given our mankind-transforming technology, we are targeting an IPO valuation of $2 trillion … err … $1.5 trillion … err … $1.3 trillion … anyway …now you can brainstorm on whiteboards! 🎉” 🧐

Seven months into Project Glasswing, VulnCheck has tracked 442 CVEs attributable to Anthropic, roughly 0.5% of all CVEs published this year, with only two identified as exploited in the wild. Of Anthropic’s 37,966 reported findings, only 7,349 (19.4%) have been made public and just 217 have been marked fixed.

one of the saddest parts about trying to build fast and efficient software for developers is that the median developer only experiences your software after it gets extruded through 7 corporate proxies, two firewalls, and an artifactory instance that speaks HTTP/0.9 and that hasn’t been updated in 13 years

Somehow doubly disappointing as a swashbuckling leather-jacketed middle aged billionaire to discover she’s not even with you for the money

Just deployed https://proxy.ecosyste.ms/ A free, open-source package registry proxy supporting 25 package managers and distributions. No accounts or API keys required. Built on https://github.com/git-pkgs/proxy Still early days, with more features on the way including cooldowns. Feedback welcome!

You can now choose a 1, 3 or 7 day release cooldown at https://proxy.ecosyste.ms. Example: https://proxy.ecosyste.ms/cooldown/3d/npm/ Proxy currently supports cooldowns for npm, PyPI (pip/uv), RubyGems (Bundler), Go modules, Cargo, Composer, Hex, pub.dev, Maven, NuGet, Conda and Helm.

Proud maintainer moment! @openssf.org Scorecard gets a highlight in this @forbes.com Technology Council post about #openSource trust signals worth checking!! https://www.forbes.com/councils/forbestechcouncil/2026/11/05/open-source-dependencies-19-trust-signals-worth-checking/

Blep 👅

pro tip: anytime someone messages you on work chat with "hi", just respond with "hi, how's your day going?", intentionally delaying the point of the conversation and forcing them into pointless small talk

Attached: 1 image Oh! This is new and cool. #Firefox for Android now automatically offers to search the Wayback Machine if it can't find the original page. Easily the best browser on Android.

trans men are men (yes, this is a subtoot)

Just deployed https://proxy.ecosyste.ms/ A free, open-source package registry proxy supporting 25 package managers and distributions. No accounts or API keys required. Built on https://github.com/git-pkgs/proxy Still early days, with more features on the way including cooldowns. Feedback welcome!

I thought to myself woah, that sounds more than @ecosystems, double checked, nope, ecosyste.ms serves 2TB every day 😬 [contains quote post or other embedded content]

This is fucking ridiculous. My https://openbenches.org/ website is serving over two TERABYTES of bandwidth per month! That's up from 1.5TB the previous month. While I'd love to believe that's all people fascinated by benches, I think it's more likely to be […] [Original post on mastodon.social]

Existential hope