Kind reposts

I'm not sure claiming "everything is on fire" is the correct takeaway here There is a pile of flammable materials we've been ignoring for decades. It catches on fire sometimes. It caught on fire a lot this week And the people who put out the fires, for free, put the fire out again The current plan is to just keep throwing more oily rags on the pile. We could try to help the volunteers, but that costs more than adding oily rags to the pile

For years, it’s been common knowledge among grant writers for open source tech that putting maintenance of existing code in a proposal can tank the whole thing. Funders, do you hear us now? Are you going to remember this week and let go of the new shiny object fixation?

Attached: 1 image Siri, show me the ADHD meme that goes harder than any other...

can we please end cyber security awareness month I have been made aware thanks

The problem for cybersecurity enjoyers is that there hasn’t been enough incidents to achieve the regularity and excitement of say, watching sports. Finally, with AI we have solved this

#Hugops to basically everyone rn

web developer: oh hey you guys are back early infra: four's haunted web developer: what? infra: *loading a pistol and getting back on the computer* four's haunted

eBay users! Don't ignore today's email, even though it looks like a boring standard update to the User Privacy Notice. They want to use your data to train AI models. If you click the link over the words "the right to object", it takes you to a page with a toggle button letting you opt out.

I gave a talk at EMF titled "Men in Tech #YesAllMen", in which I told my experience of being a woman in tech. I was afraid to publish it in case it affected my current or future employment. With all the current news I would like to add my 2¢. So here is the recording: https://youtu.be/WXL6K1lhvt0?is=WlfZvJ34TeIB-SUu

The PRs start coming and they don't stop coming, Bots keep shipping and the tests keep running. Only made sense to automate, Now I'm reviewing slop at a staggering rate. So much to merge, so much to break, So what's wrong with another rewrite? You'll never know if you don't deploy, You'll never care if you're not employed.

Wanting to continue to give back to the community, we've recently proactively given 184 open source organizations to our Community (OSS) plan on Renovate Cloud 🚀 https://www.mend.io/blog/renovate-community-oss-plan-upgrades/

We're excited to announce that Renovate maintainers Sebastian Poxhofer and Jamie Tanna will be at @linuxfoundation.org's Open Source Summit Europe in Prague in a couple of weeks, and look forward to meeting folks who are there We'll also be at the @openssf.org's Community Day, too

We've announced 1 Critical, 2 High and 1 Moderate security advisories - we recommend you upgrade to a minimum of 44.79.0 (2026-09-10) More info: https://github.com/renovatebot/renovate/discussions/46549

.well_known? We're more like acquaintances

Adblockers are killing the advertisement industry. Install uBlock Origin today to kill it faster. #adblockers #uBlockOrigin

Attached: 1 image Being an open source maintainer in 2026

anyone looking for tech events in or around nottingham please consider viewing and adding more events to nottingham.digital .. #tech #nottingham https://nottingham.digital

This author has chosen to make their posts visible only to people who are signed in.

unfortunately last night our AI model escaped its sandbox and gained access to a JIRA server, at which point it felt it best to return to it’s sandbox

This Week in Package Management: 1 August 2026 https://nesbitt.io/2026/08/01/this-week-in-package-management.html

As folks may have noticed - Renovate 44 was (accidentally) released yesterday with a non-breaking change. Please treat Renovate 44.0.0 as 43.x, and upgrade as normal!

alcoholic trying to get sober after a relapse tells Google's "Health Coach" about it. it tells them to drink every hour and messages them to make sure they're drinking as soon as they wake up.

No science fiction could have prepared us for just how stupid the end of the world can be. "The environment was on the brink of collapse, and so, rather than deal with that, we burned what fuel we had left getting computers to scam each other for money."

Remember when `curl | bash` was considered bad?

Okay. Ai can go bankrupt then. This is not our problem, this sounds like a rich tech billionaire problem.

I migrated a group chat of mostly elderly women to signal and I feel like there’s nothing I can’t do I also firmly believe the stereotype of elderly women not being technical is complete bollocks perpetuated by the patriarchy

watching the tech industry burn out all the people i know who actually care about delivering things that aren’t perpetually broken, all at the altar of infinite velocity, is making me utterly utterly furious.

It’s not a syndrome if you’re actually an imposter

The Great Supply Chain Security Paradox: “every open source lib is getting owned! wait at least a week to patch, let other people find the supply chain breaches before you” “AI is reversing all these …

sorry i'm late, i didn't want to come

It usually only takes 1 project for an open source maintainer to learn they need to set boundaries. Unfortunately, that 1 project often becomes load bearing infrastructure before we've even realized what's happened, putting everyone in quite a predicament. @www.jvt.me.web.brid.gy #opensource

The open source world was designed for a world where there was more friction for doing things. With LLMs a lot of that friction has been removed. Sometimes that means we have to ask a potential contributor "are you a human?". @www.jvt.me.web.brid.gy #opensource #tech #llms

People are worried about AI killing open source, I'm more worried about some companies looking to enclose open source under the premise that AI is making it too risky. https://newsroom.ibm.com/2026-05-28-ibm-and-red-hat-commit-5-billion-to-redefine-the-future-of-open-source-in-the-ai-era

The best time to prune your dependency trees was 3 years ago, second best time is right now.

Heads up maintainers of packages, this is a big deal: https://github.com/orgs/community/discussions/196340

too soon

Open source maintainers at profitable companies: stop asking permission to fix what your employer already depends on. No paperwork. No programme. No manager’s blessing. Just maintain it on the clock.

It’s a sort of meme that engineers aren’t good writers. That includes software ones. And now we’re supposed to believe we can take an entire industry of not-that-good writers and transform them, in a few months, into people who’s primary job is not writing code but writing prose? lolwut

Your regular reminder that shitting on OSS on social media is a selfish thing to do. Good job sapping volunteer maintainers’ motivation in exchange for your “internet points”. Next time: try rolling up your sleeves and contribute a fix to the problem you’ve identified.

Starting with v8.0.0, Astral switched setup-uv to immutable releases with no floating v8 tags. This is good for security. But unfortunately #Dependabot and #Renovate couldn't upgrade from v7 to v8.0.0, and need a manual bump to get back on track. This is not so good for security. I posted about this on the three social networks, someone tagged @www.jvt.me@www.jvt.me and soon after Renovate now supports this! 🎉 Here's his writeup into the world of #GitHubActions tags: https://www.jvt.me/posts/2026/04/24/github-actions-tagging/

What I learnt at day 1 of the @github.com Maintainer Summit. Shower oranges.

If schools have money for AI, I'd rather they use that to pay teachers more

Tired: supply chain attack Wired: supply chain is attack

GitHub appears to have opted anyone using the CLI into sending telemetry they will use to inform product decisions. This is sneaky and should have been an opt-in decision, not opt-out. Disable it with `gh config set telemetry disabled`. cli.github.com/telemetry https://cli.github.com/telemetry

The reddit engineering team wrote a great post about how they're using Renovate for their dependency management - very interesting and some good learnings on how they keep things patched at scale! https://www.reddit.com/r/RedditEng/comments/1s1q879/dependency_hell_aka_how_i_learned_to_stop/ https://www.reddit.com/r/RedditEng/comments/1s1q879/dependency_hell_aka_how_i_learned_to_stop/?solution=4303a76c078f87374303a76c078f8737&js_challenge=1&token=bbbe4bf1c9a2b5160829c4be34da58614381ef3e0636a894f7eeb79613d86dc9&share_id=o3roxspvq4-AJyieVXsHb&utm_medium=android_app&utm_name=androidcss&utm_source=share&utm_term=1

men can’t understand what it’s like for women to see story after story after story of women being victims of sexual violence in a culture where it’s routine; what it’s like to live in a world that is fundamentally hostile to our existence. it’s a wonder we leave the fucking house, let alone thrive.

same, postgres, same

I would really like a week to pass when I don't hear that yet another friend has been laid off. The tech industry is in freefall.

"Age verification" laws are "we want to have all adults and their complete online profile in a database" laws, and that Persona, the company behind LinkedIn, Roblox, Discord ID and age verification is owned by Peter Thiel should be all you need to know.