A developer outlines a four-pillar Application Security program that uses AI to filter false positives from SAST findings, auto-generate STRIDE threat models, and enforce tiered guardrails rather than…
A developer built Release Radar, an AI agent that detects deprecated dependencies by reading repository descriptions and release notes, after discovering that tutorials for Amazon Bedrock AgentCore's …
A developer shares a zsh script that uses jq to parse GitHub's gh-stack metadata file and display a branch's position in a stacked PR (e.g., 🥞 1/3), noting that the data can become stale until `gh sta…
Developer Jamie Tanna adopted tuicr, a terminal user interface for code review, to streamline reviewing local and remote changes, including AI-generated code, and to submit comments back to GitHub and…
Git 2.38, released 2022-10-03, added `git rebase --update-refs`, which automatically updates dependent branches during a rebase, eliminating manual work. The feature was highlighted by Jamie Tanna, a …
Renovate maintainers can now identify pull requests removed from GitHub's Merge Queue due to failed status checks using a GraphQL query, as demonstrated in a blog post. The query, run via `gh api grap…
Repairo, a new CLI tool for TypeScript and OpenAPI, detects breaking API changes and automatically opens a pull request with fixes, claiming zero AI hallucinations and zero data retention. The tool, b…
Jamie Tanna, project lead for Renovate and oapi-codegen, reports that open Pull Requests on Renovate have surged to approximately 340, up from around 100 when he joined in September, driven largely by…
Sentinel, a new open-source tool, detects breaking changes in vendor API changelogs before they affect customer codebases, scans repositories for affected usages, and opens a pull request with fix dif…
A developer details building a monorepository of Terraform modules on GitLab to consolidate best practices like testing, versioning, and self-service infrastructure while eliminating friction from man…
GitHub made a three-day cooldown the default for Dependabot version updates on July 14, and PyPI began rejecting new files uploaded to releases older than 14 days on July 22, betting that patience bea…
An engineer running multi-slice agent plans in the Codenames AI repo discovered that agent workflows lack explicit stop lines, leading to an agent merging a pull request that was expected to be review…