#worktrees

[ follow ]
#github
Software development
fromInfoQ
1 day ago

GitHub Copilot CLI Reaches General Availability

GitHub's Copilot CLI is now generally available, enhancing AI-assisted development in software through natural language commands and autonomous workflows.
DevOps
fromInfoQ
5 days ago

GitHub Actions Custom Runner Images Reach General Availability

GitHub now offers custom images for hosted runners, allowing teams to create tailored virtual machine images for their workflows.
Information security
fromDevOps.com
1 week ago

GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents - DevOps.com

GitHub expanded secret scanning with 37 new detectors, enhanced push protection, and introduced scanning for AI coding agents in March.
Software development
fromTheregister
2 months ago

GitHub ponders kill switch for pull requests to stop AI slop

GitHub is confronting a surge of low-quality, often AI-generated contributions that burden open-source maintainers and is planning tools and restrictions to mitigate the problem.
Software development
fromInfoQ
1 day ago

GitHub Copilot CLI Reaches General Availability

GitHub's Copilot CLI is now generally available, enhancing AI-assisted development in software through natural language commands and autonomous workflows.
DevOps
fromInfoQ
5 days ago

GitHub Actions Custom Runner Images Reach General Availability

GitHub now offers custom images for hosted runners, allowing teams to create tailored virtual machine images for their workflows.
Information security
fromDevOps.com
1 week ago

GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents - DevOps.com

GitHub expanded secret scanning with 37 new detectors, enhanced push protection, and introduced scanning for AI coding agents in March.
#devops
DevOps
fromDevOps.com
17 hours ago

Ten Great DevOps Job Opportunities - DevOps.com

DevOps.com is launching a weekly jobs report to highlight opportunities for DevOps professionals.
DevOps
fromDevOps.com
17 hours ago

Ten Great DevOps Job Opportunities - DevOps.com

DevOps.com is launching a weekly jobs report to highlight opportunities for DevOps professionals.
EU data protection
fromInfoQ
22 hours ago

How SBOMs and Engineering Discipline Can Help You Avoid Trivy's Compromise

SBOMs are essential for developers to enhance security and comply with new legislative requirements.
Artificial intelligence
fromInfoQ
4 days ago

Choosing Your AI Copilot: Maximizing Developer Productivity

Most developers are at an intermediate level of AI-assisted coding, with around 50% generating little to no code using AI.
#ai-tools
Angular
fromMedium
1 week ago

A dev's guide to prompting Bit Cloud the right way

Bit Cloud prioritizes a component-first approach, proposing structure before implementation to facilitate better architectural decisions.
Software development
fromDevOps.com
1 week ago

AI Won't Replace Developers-But it is Changing How They Work - DevOps.com

AI-assisted tools enhance software development by improving productivity, code quality, and collaboration without replacing engineers.
Angular
fromMedium
1 week ago

A dev's guide to prompting Bit Cloud the right way

Bit Cloud prioritizes a component-first approach, proposing structure before implementation to facilitate better architectural decisions.
Software development
fromDevOps.com
1 week ago

AI Won't Replace Developers-But it is Changing How They Work - DevOps.com

AI-assisted tools enhance software development by improving productivity, code quality, and collaboration without replacing engineers.
fromTheregister
4 days ago

Microsoft locks out top open source devs, blames process

Microsoft did not send me any emails or prior warnings. I have received no explanation for the termination and their message indicates that no appeal is possible. I have tried to contact Microsoft through various channels but I have only received automated replies and bots. I was unable to reach a human.
Software development
UX design
fromAzure DevOps Blog
1 week ago

Improving the Markdown Editor for Work Items - Azure DevOps Blog

Markdown editor usability improved by distinguishing between preview and edit modes to enhance user experience.
#git
#vs-code
Vue
fromInfoWorld
2 weeks ago

VS Code now updates weekly

VS Code 1.112 enhances agent capabilities by enabling reading of image and binary files, while 1.111 improves agent troubleshooting features.
Vue
fromInfoWorld
2 weeks ago

VS Code now updates weekly

VS Code 1.112 enhances agent capabilities by enabling reading of image and binary files, while 1.111 improves agent troubleshooting features.
DevOps
fromDevOps.com
1 week ago

Survey Surfaces Increased Reliance on Open Source Software to Build Apps - DevOps.com

Open source software adoption is prevalent, with 49% of IT professionals reporting increased usage, primarily due to cost savings and avoiding vendor lock-in.
fromJames Bennett
3 weeks ago

Rewriting a 20-year-old Python library

Akismet launched in 2005 as a web service to classify user-generated content as spam or not, quickly gaining popularity among bloggers facing spam issues.
Privacy technologies
Software development
fromInfoWorld
5 days ago

GitHub Copilot CLI adds Rubber Duck review agent

Rubber Duck enhances problem-solving in coding, particularly for complex issues, achieving notable performance improvements with Claude Sonnet 4.6 and GPT-5.4.
DevOps
fromDevOps.com
1 week ago

How AI is Shaping Modern DevOps and DevSecOps - DevOps.com

AI is transforming software delivery, with significant adoption expected by 2028, enhancing efficiency across the software development lifecycle.
Node JS
fromDEV Community
3 weeks ago

I Scanned 10 Popular GitHub Actions Workflows for Undocumented Environment Variables. Here's What I Found.

Many popular JavaScript projects have undocumented environment variables in their GitHub Actions workflows, leading to potential issues for developers forking these projects.
#devsecops
DevOps
fromDevOps.com
6 days ago

Why Most DevSecOps Pipelines Fail at Runtime Security (not Build Time) - DevOps.com

Runtime risk arises from configuration and infrastructure changes post-deployment, necessitating DevSecOps to enhance security earlier in the delivery process.
DevOps
fromDevOps.com
6 days ago

Why Most DevSecOps Pipelines Fail at Runtime Security (not Build Time) - DevOps.com

Runtime risk arises from configuration and infrastructure changes post-deployment, necessitating DevSecOps to enhance security earlier in the delivery process.
#ai
Software development
fromDevOps.com
6 days ago

If it Isn't Code, it's Just Advice - DevOps.com

AI coding agents struggle with third-party systems and dashboard configurations, limiting their effectiveness in automation and verification.
fromTheregister
6 days ago
Software development

AI slop got better, so now maintainers have more work

AI-generated reports improve quality but increase workload for maintainers, necessitating more reviewers in open-source projects.
Software development
fromDevOps.com
6 days ago

If it Isn't Code, it's Just Advice - DevOps.com

AI coding agents struggle with third-party systems and dashboard configurations, limiting their effectiveness in automation and verification.
Software development
fromTheregister
6 days ago

AI slop got better, so now maintainers have more work

AI-generated reports improve quality but increase workload for maintainers, necessitating more reviewers in open-source projects.
#github-copilot
Higher education
fromTheregister
1 month ago

GitHub removes some models from free Copilot student plan

GitHub removed premium AI models from its free Copilot Student plan to reduce costs, keeping only lower-tier models while discontinuing GPT-5.4, Claude Opus, and Claude Sonnet.
Higher education
fromTheregister
1 month ago

GitHub removes some models from free Copilot student plan

GitHub removed premium AI models from its free Copilot Student plan to reduce costs, keeping only lower-tier models while discontinuing GPT-5.4, Claude Opus, and Claude Sonnet.
Node JS
fromDEV Community
3 weeks ago

Why I Stopped Maintaining .env.example by Hand

A new tool automatically discovers environment variables used in Node.js code to prevent stale .env.example files from causing deployment failures.
#ai-coding-agents
Software development
fromDevOps.com
5 days ago

Google's Next Coding Agent Could Change How Developers Think About Their Work - DevOps.com

Google's Jitro project aims to revolutionize coding agents from task execution to outcome-driven development.
fromInfoQ
2 months ago
Software development

Ramp Builds Internal Coding Agent That Powers 30% of Engineering Pull Requests

Software development
fromDevOps.com
5 days ago

Google's Next Coding Agent Could Change How Developers Think About Their Work - DevOps.com

Google's Jitro project aims to revolutionize coding agents from task execution to outcome-driven development.
fromInfoQ
2 months ago
Software development

Ramp Builds Internal Coding Agent That Powers 30% of Engineering Pull Requests

Web frameworks
fromMedium
1 month ago

My 8-Year-Old Open-Source Project was a Victim of a Major Cyber Attack

A popular open-source project fell victim to a supply-chain attack through a development workflow loophole, threatening years of work and project reputation.
DevOps
fromApp Developer Magazine
2 weeks ago

Private Repository Secures the AI-driven Development Boom

ActiveState Curated Catalog provides a secure repository of vetted open source components for organizations, reducing risks associated with public registries.
Software development
fromInfoQ
5 days ago

State of Play: AI Coding Assistants

Context engineering has evolved significantly in AI coding, focusing on curating information for better results with coding agents.
Information security
fromMedium
3 weeks ago

Your AWS Credentials Are Still on GitHub Even After You Delete Them

Prevent credential exposure through .gitignore, environment variables, git-secrets pre-commit hooks, and AWS IAM roles instead of hardcoding credentials in code.
Software development
fromDevOps.com
5 days ago

Claude Code's Ultraplan Bridges the Gap Between Planning and Execution - DevOps.com

Ultraplan enhances coding workflows by moving planning to the cloud, allowing for better collaboration and review before code execution.
Software development
fromInfoWorld
6 days ago

Enterprise developers question Claude Code's reliability for complex engineering

Developers report declining effectiveness in debugging and complex tasks with coding assistants, citing issues with reasoning and quality regression after updates.
Python
fromRealpython
1 month ago

How to Use Git: A Beginner's Guide Quiz - Real Python

A 14-question quiz tests understanding of Git fundamentals including repository initialization, staging changes, commits, and project history inspection.
DevOps
fromDevOps.com
3 weeks ago

From AI Code to Production: The Case for FeatureOps - DevOps.com

AI coding tools are widely used, but increased usage leads to decreased delivery stability and a control gap in understanding code impact.
Information security
fromDevOps.com
3 weeks ago

Harness Extends AI Security Reach Across Entire DevOps Workflow - DevOps.com

Harness launched AI security capabilities including automatic code securing during AI-assisted development and a module discovering, testing, and protecting AI components within applications.
Tech industry
fromTechzine Global
1 month ago

OpenAI builds development platform as an alternative to GitHub

OpenAI is developing its own code-hosting platform to compete with GitHub after experiencing service interruptions, with plans to potentially offer it to customers.
Software development
fromDevOps.com
1 week ago

Why Code Validation is the Next Frontier - DevOps.com

Shared staging environments are inadequate for modern development; isolated, on-demand setups are needed for effective validation.
Software development
fromDevOps.com
1 week ago

The Trust Tax Framework: Measuring Developer Confidence in CI/CD Systems - DevOps.com

Test infrastructure credibility is crucial; developers lose trust when re-run rates exceed 30% and override rates surpass 5%.
Miscellaneous
fromTheregister
1 month ago

Open source package repositories face sustainability crisis

Open source repositories face unsustainable demand from companies misusing them as CDNs, prompting consideration of tiered payment systems where heavy users pay while individual developers remain free.
Philosophy
fromMedium
1 month ago

Why code is not the source of truth

Design specifications and blueprints, not implementation code, are the authoritative source of truth; implementation is derived from and judged against originating design authority.
#agentic-workflows
Growth hacking
fromGitHub
2 months ago

GitHub - zenika-open-source/promote-open-source-project: How to promote my open source project?

Optimize README and documentation, provide demos, promote widely, and invite and reward contributors to grow and sustain an open source project.
Software development
fromInfoQ
3 weeks ago

Stripe Engineers Deploy Minions, Autonomous Agents Producing Thousands of Pull Requests Weekly

Minions are autonomous coding agents at Stripe that generate production-ready pull requests with minimal human intervention.
Python
fromInfoWorld
2 months ago

Visual Studio Code previews incoming/outgoing changes graph

Visual Studio Code 1.91 adds an experimental incoming/outgoing changes graph and a Rust-based python-environment-tools for faster Python environment discovery.
#visual-studio-code
Software development
fromInfoWorld
1 month ago

Microsoft accelerates pace of VS Code development

Microsoft is accelerating Visual Studio Code updates from monthly to weekly releases starting March 9, introducing more frequent changes and new functionality.
Software development
fromInfoWorld
1 month ago

Microsoft accelerates pace of VS Code development

Microsoft is accelerating Visual Studio Code updates from monthly to weekly releases starting March 9, introducing more frequent changes and new functionality.
fromTechzine Global
1 month ago

Go developer questions effectiveness of Dependabot

Dependabot sounded the alarm on a large scale. Thousands of repositories automatically received pull requests and warnings, including a high vulnerability score and signals about possible compatibility issues. According to Valsorda, this shows that the tool mainly checks whether a dependency is present, without analyzing whether the vulnerable code is actually accessible within a project.
Information security
fromTheregister
1 month ago

VS Code goes weekly, gets AI autopilot - what could go wrong

After streamlining our development and delivery process, we'll ship a new Stable release every week. Endgame will now be folded into our weekly activities. This acceleration is enabled by AI automation, including a one-click experience for creating test plans from feature request issues, reducing manual steps previously required.
Software development
fromSecurityWeek
2 months ago

VS Code Configs Expose GitHub Codespaces to Attacks

It allows developers to test code, review pull requests, and more, but also exposes them to attacks via repository-defined configuration files, Orca says. "Codespaces is essentially VS Code running in the cloud, backed by Ubuntu containers, with built-in GitHub authentication and repository integration. This means any VS Code feature that touches execution, secrets, or extensions can potentially be abused when attackers control the repository content," the cybersecurity firm notes.
Information security
Software development
fromTechRepublic
1 month ago

OpenAI Reportedly Eyes a GitHub Alternative - TechRepublic

OpenAI is building an internal GitHub alternative to optimize for AI-driven development, reduce vendor dependency, and offer customers a specialized repository platform.
DevOps
fromZDNET
2 months ago

7 open-source apps I'd happily pay for - because they're that good

Many high-quality open-source applications exist across Linux, MacOS, and Windows; some are indispensable enough that users would willingly pay for them.
Software development
fromInfoQ
1 month ago

GitHub's Points to a More Global, AI-Challenged Open Source Ecosystem in 2026

Open source faces unprecedented scale with 36 million new developers joining GitHub in 2025, requiring formal governance structures and strategies to manage AI-generated low-quality contributions.
Software development
fromAzure DevOps Blog
2 months ago

What's new with Azure Repos? - Azure DevOps Blog

Azure Repos disables obsolete TFVC check-in policies requiring migration, improves pull request comment deep-linking focus, and reduces noisy pull request email notifications.
Software development
fromgithub.com
1 month ago

gitton-dev/gitton: Git Client for Vibe Coding

Gitton is a terminal-first Git client with deep GitHub integration, AI-powered commit messages, code review and PR generation, and JavaScript-extensible plugins.
Software development
fromGitHub
2 months ago

GitHub - antonreshetov/bumpy: Zero-config, Git-powered versioning for monorepos

Bumpy provides zero-config, Git-driven versioning and changelog generation for monorepos, using workspace detection, Conventional Commits, tag-based boundaries, and dry-run support.
Software development
fromInfoWorld
2 months ago

GitHub previews support for Claude and Codex coding agents

GitHub agents run inside repositories and tools to surface trade-offs, keep context, and create draft pull requests for standard code review.
Software development
fromMedium
1 year ago

How Bit Reduces Development Costs

A composable, well-documented codebase increases reuse, reduces bugs, and enables AI and non-technical stakeholders to contribute effectively.
fromTechzine Global
2 months ago

GitLab brings agentic AI to the heart of DevOps

Central to the GA release is Agentic Chat. This functionality builds on the previously introduced Duo Chat but goes a step further by leveraging context from virtually every part of GitLab. Think of issues, merge requests, CI/CD pipelines, and security findings. Agentic Chat can not only advise, but also actually perform actions on behalf of developers, depending on the rights and approvals that have been set.
Software development
fromInfoWorld
2 months ago

What is GitOps? Extending devops to Kubernetes and beyond

Over the past decade, software development has been shaped by two closely related transformations. One is the rise of devops and continuous integration and continuous delivery (CI/CD), which brought development and operations teams together around automated, incremental software delivery. The other is the shift from monolithic applications to distributed, cloud-native systems built from microservices and containers, typically managed by orchestration platforms such as Kubernetes.
Software development
Software development
fromDbmaestro
1 year ago

Why Do You Need Database Version Control?

Database version control tracks schema and code changes, enabling CI/CD integration, collaboration, rollback, and faster, more reliable deployments across multiple databases.
#ai-agents
fromInfoQ
2 months ago
Software development

GitLab 18.8 Marks General Availability of the Duo Agent Platform

fromInfoQ
2 months ago
Software development

GitLab 18.8 Marks General Availability of the Duo Agent Platform

fromInfoWorld
2 months ago

For agentic AI, other disciplines need their own Git

Software engineering didn't adopt AI agents faster because engineers are more adventurous, or the use case was better. They adopted them more quickly because they already had Git. Long before AI arrived, software development had normalized version control, branching, structured approvals, reproducibility, and diff-based accountability. These weren't conveniences. They were the infrastructure that made collaboration possible. When AI agents appeared, they fit naturally into a discipline that already knew how to absorb change without losing control.
Software development
fromDevOps.com
2 months ago

Bot-Driven Development: Redefining DevOps Workflow - DevOps.com

Industry professionals are realizing what's coming next, and it's well captured in a recent LinkedIn thread that says AI is moving on from being just a helper to a full-fledged co-developer - generating code, automating testing, managing whole workflows and even taking charge of every part of the CI/CD pipeline. Put simply, AI is transforming DevOps into a living ecosystem, one driven by close collaboration between human judgment and machine intelligence.
Software development
#database-devops
Software development
fromInfoWorld
2 months ago

Visual Studio Code update shines on coding agents

Agent Skills are generally available, enabling reusable domain-specific workflows while VS Code 1.109 adds Copilot Memory preview, Claude Agent support, MCP apps, sandboxing, and auto-approval rules.
Software development
fromInfoWorld
2 months ago

Visual Studio Code adds agent development extension

A Visual Studio Code extension enables building and managing Microsoft Copilot Studio agents with AI assistance, Git integration, and standard development workflows.
fromTheregister
2 months ago

VS Code for Linux may be secretly hoarding trashed files

The reason for this is Snap - a Linux application packaging format - creates a local Trash folder for each VS Code version, one that's separate from the system-managed Trash, according to a VS Code bug report dating back to November 11, 2024. Not only that, but Snap keeps older versions of VS Code after updates, potentially multiplying the number of local Trash folders and the trashed-but-not-deleted files therein. Emptying the system Trash folder doesn't affect the local instances.
Software development
Software development
fromAzure DevOps Blog
2 months ago

February Patches for Azure DevOps Server - Azure DevOps Blog

Apply the latest Azure DevOps Server patches and verify installation using the patch installer and the '<patch-installer>.exe CheckInstall' command.
[ Load more ]