Kind reposts

The PRs start coming and they don't stop coming, Bots keep shipping and the tests keep running. Only made sense to automate, Now I'm reviewing slop at a staggering rate. So much to merge, so much to break, So what's wrong with another rewrite? You'll never know if you don't deploy, You'll never care if you're not employed.

Wanting to continue to give back to the community, we've recently proactively given 184 open source organizations to our Community (OSS) plan on Renovate Cloud 🚀 https://www.mend.io/blog/renovate-community-oss-plan-upgrades/

We're excited to announce that Renovate maintainers Sebastian Poxhofer and Jamie Tanna will be at @linuxfoundation.org's Open Source Summit Europe in Prague in a couple of weeks, and look forward to meeting folks who are there We'll also be at the @openssf.org's Community Day, too

We've announced 1 Critical, 2 High and 1 Moderate security advisories - we recommend you upgrade to a minimum of 44.79.0 (2026-09-10) More info: https://github.com/renovatebot/renovate/discussions/46549

.well_known? We're more like acquaintances

Adblockers are killing the advertisement industry. Install uBlock Origin today to kill it faster. #adblockers #uBlockOrigin

Attached: 1 image Being an open source maintainer in 2026

anyone looking for tech events in or around nottingham please consider viewing and adding more events to nottingham.digital .. #tech #nottingham https://nottingham.digital

This author has chosen to make their posts visible only to people who are signed in.

unfortunately last night our AI model escaped its sandbox and gained access to a JIRA server, at which point it felt it best to return to it’s sandbox

This Week in Package Management: 1 August 2026 https://nesbitt.io/2026/08/01/this-week-in-package-management.html

As folks may have noticed - Renovate 44 was (accidentally) released yesterday with a non-breaking change. Please treat Renovate 44.0.0 as 43.x, and upgrade as normal!

alcoholic trying to get sober after a relapse tells Google's "Health Coach" about it. it tells them to drink every hour and messages them to make sure they're drinking as soon as they wake up.

No science fiction could have prepared us for just how stupid the end of the world can be. "The environment was on the brink of collapse, and so, rather than deal with that, we burned what fuel we had left getting computers to scam each other for money."

Remember when `curl | bash` was considered bad?

Okay. Ai can go bankrupt then. This is not our problem, this sounds like a rich tech billionaire problem.

I migrated a group chat of mostly elderly women to signal and I feel like there’s nothing I can’t do I also firmly believe the stereotype of elderly women not being technical is complete bollocks perpetuated by the patriarchy

It’s not a syndrome if you’re actually an imposter

watching the tech industry burn out all the people i know who actually care about delivering things that aren’t perpetually broken, all at the altar of infinite velocity, is making me utterly utterly furious.

The Great Supply Chain Security Paradox: “every open source lib is getting owned! wait at least a week to patch, let other people find the supply chain breaches before you” “AI is reversing all these …

sorry i'm late, i didn't want to come

It usually only takes 1 project for an open source maintainer to learn they need to set boundaries. Unfortunately, that 1 project often becomes load bearing infrastructure before we've even realized what's happened, putting everyone in quite a predicament. @www.jvt.me.web.brid.gy #opensource

The open source world was designed for a world where there was more friction for doing things. With LLMs a lot of that friction has been removed. Sometimes that means we have to ask a potential contributor "are you a human?". @www.jvt.me.web.brid.gy #opensource #tech #llms

People are worried about AI killing open source, I'm more worried about some companies looking to enclose open source under the premise that AI is making it too risky. https://newsroom.ibm.com/2026-05-28-ibm-and-red-hat-commit-5-billion-to-redefine-the-future-of-open-source-in-the-ai-era

The best time to prune your dependency trees was 3 years ago, second best time is right now.

Heads up maintainers of packages, this is a big deal: https://github.com/orgs/community/discussions/196340

too soon

Open source maintainers at profitable companies: stop asking permission to fix what your employer already depends on. No paperwork. No programme. No manager’s blessing. Just maintain it on the clock.

It’s a sort of meme that engineers aren’t good writers. That includes software ones. And now we’re supposed to believe we can take an entire industry of not-that-good writers and transform them, in a few months, into people who’s primary job is not writing code but writing prose? lolwut

Your regular reminder that shitting on OSS on social media is a selfish thing to do. Good job sapping volunteer maintainers’ motivation in exchange for your “internet points”. Next time: try rolling up your sleeves and contribute a fix to the problem you’ve identified.

Starting with v8.0.0, Astral switched setup-uv to immutable releases with no floating v8 tags. This is good for security. But unfortunately #Dependabot and #Renovate couldn't upgrade from v7 to v8.0.0, and need a manual bump to get back on track. This is not so good for security. I posted about this on the three social networks, someone tagged @www.jvt.me@www.jvt.me and soon after Renovate now supports this! 🎉 Here's his writeup into the world of #GitHubActions tags: https://www.jvt.me/posts/2026/04/24/github-actions-tagging/

What I learnt at day 1 of the @github.com Maintainer Summit. Shower oranges.

If schools have money for AI, I'd rather they use that to pay teachers more

Tired: supply chain attack Wired: supply chain is attack

GitHub appears to have opted anyone using the CLI into sending telemetry they will use to inform product decisions. This is sneaky and should have been an opt-in decision, not opt-out. Disable it with `gh config set telemetry disabled`. cli.github.com/telemetry https://cli.github.com/telemetry

The reddit engineering team wrote a great post about how they're using Renovate for their dependency management - very interesting and some good learnings on how they keep things patched at scale! https://www.reddit.com/r/RedditEng/comments/1s1q879/dependency_hell_aka_how_i_learned_to_stop/ https://www.reddit.com/r/RedditEng/comments/1s1q879/dependency_hell_aka_how_i_learned_to_stop/?solution=4303a76c078f87374303a76c078f8737&js_challenge=1&token=bbbe4bf1c9a2b5160829c4be34da58614381ef3e0636a894f7eeb79613d86dc9&share_id=o3roxspvq4-AJyieVXsHb&utm_medium=android_app&utm_name=androidcss&utm_source=share&utm_term=1

men can’t understand what it’s like for women to see story after story after story of women being victims of sexual violence in a culture where it’s routine; what it’s like to live in a world that is fundamentally hostile to our existence. it’s a wonder we leave the fucking house, let alone thrive.

same, postgres, same

I would really like a week to pass when I don't hear that yet another friend has been laid off. The tech industry is in freefall.

"Age verification" laws are "we want to have all adults and their complete online profile in a database" laws, and that Persona, the company behind LinkedIn, Roblox, Discord ID and age verification is owned by Peter Thiel should be all you need to know.

Requested post by @sethmlarson: Package Managers Need to Cool Down https://nesbitt.io/2026/03/04/package-managers-need-to-cool-down.html

The #Renovate maintainers would like to get some speciifc feedback on a few areas - we'd love to hear from you: https://github.com/renovatebot/renovate/discussions/41414

Instead of an AI-generated hit piece, try sending your fave OSS maintainer a fun little card 💕 oss.cards https://oss.cards

me at 17: a secret conspiracy of billionaires shapes global events me at 35: class interest creates emergent outcomes and aligned behavior, but there’s no smoky room where plutocrats plot to shape global events me at 41: a secret conspiracy of billionaire perverts shapes global events [contains quote post or other embedded content]

something you learn about open source when you work on a sufficiently large project is that you *shouldn't* welcome all PRs

https://en.wikipedia.org/wiki/Prominent_individuals_mentioned_in_the_Epstein_files [contains quote post or other embedded content]

If these CAPTCHAs get any harder I'm not sure I'm going to be able to pass them 😅

Reminder that #Renovate 43 came out yesterday! We landed a few breaking changes, so check out the release notes: https://github.com/renovatebot/renovate/releases/tag/43.0.0

I'm legit unfollowing people who never use alt text. You're literally typing on a text based app. So why are you making Canva images with little pithy quips and no alt text. I honestly don't understand it.

The two hardest problems in Computer Science are 1. Human communication 2. Getting people in tech to believe that human communication is important