#dependencies

[ follow ]
fromInfoQ
23 hours ago

Module Federation 2.0 Reaches Stable Release with Wider Support Outside of Webpack

The dynamic type hints feature in Module Federation 2.0 dramatically streamlines the development process by automatically generating and loading types from remote modules, eliminating the need for shared type packages.
Angular
#javascript
Node JS
fromFrontendmasters
1 day ago

What To Know in JavaScript (2026 Edition)

JavaScript's ECMAScript 2025 introduces new iterator methods and improved set functionalities, enhancing performance and usability for developers.
Node JS
fromFrontendmasters
1 day ago

What To Know in JavaScript (2026 Edition)

JavaScript's ECMAScript 2025 introduces new iterator methods and improved set functionalities, enhancing performance and usability for developers.
Vue
fromwww.jqueryscript.net
4 days ago

Weekly Web Design & Development News: Collective #650

TypeScript 6.0 and Vite 8.0 enhance development, while Shopify's Tinker offers over 100 free AI creative tools.
Software development
fromMedium
5 hours ago

The Open-Source AI Agent Frameworks That Deserve More Stars on GitHub

Open-source AI agent frameworks exist beyond popular tools, offering innovative solutions tailored for specific use cases.
DevOps
fromInfoQ
3 hours ago

Replacing Database Sequences at Scale Without Breaking 100+ Services

Validating requirements can simplify complex problems, and embedding sequence generation reduces network calls, enhancing performance and reliability.
Design
fromInfoQ
23 hours ago

Panel: Taking Architecture Out of the Echo Chamber

Architecture's importance is growing, necessitating a shift in practice to avoid past mistakes and engage with broader conversations.
#cybersecurity
Information security
fromSecurityWeek
3 days ago

TeamPCP Moves From OSS to AWS Environments

TeamPCP has exploited compromised credentials to target open source software, leading to significant data exfiltration and supply chain attacks.
Node JS
fromInfoQ
4 days ago

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Organizations are not prepared for the next cybersecurity crisis, similar to Log4Shell.
Information security
fromSecurityWeek
3 days ago

TeamPCP Moves From OSS to AWS Environments

TeamPCP has exploited compromised credentials to target open source software, leading to significant data exfiltration and supply chain attacks.
Node JS
fromInfoQ
4 days ago

Are We Ready for the Next Cyber Security Crisis Like Log4shell?

Organizations are not prepared for the next cybersecurity crisis, similar to Log4Shell.
Java
fromInfoQ
1 day ago

Helidon 4.4.0 Introduces Alignment with OpenJDK Cadence and Support via Java Verified Portfolio

Helidon 4.4.0 introduces alignment with OpenJDK, new features, and support for LangChain4j, changing its versioning to match OpenJDK's release cadence.
Scala
fromInfoQ
1 day ago

Beyond RAG: Architecting Context-Aware AI Systems with Spring Boot

Context-Augmented Generation (CAG) enhances Retrieval-Augmented Generation (RAG) by managing runtime context for enterprise applications without requiring model retraining.
#open-source
Software development
fromZDNET
2 days ago

How AI has suddenly become much more useful to open-source developers

AI tools are becoming increasingly useful for open-source maintainers, but legal and quality issues remain.
Python
fromThe Hacker News
1 day ago

The State of Trusted Open Source Report

AI is reshaping software development and security, influencing container image usage and vulnerability management.
Software development
fromZDNET
2 days ago

How AI has suddenly become much more useful to open-source developers

AI tools are becoming increasingly useful for open-source maintainers, but legal and quality issues remain.
Web frameworks
fromInfoQ
2 days ago

ESLint v10: Flat Config Completion and JSX Tracking

ESLint v10 removes legacy configuration, introduces flat config as default, and enhances developer experience for plugin authors and monorepo teams.
React
fromInfoQ
3 days ago

TanStack Start Introduces Import Protection to Enforce Server and Client Boundaries

TanStack Start introduces import protection to prevent server-only and client-only code from leaking into incorrect bundles.
#github
Software development
fromDevOps.com
1 day ago

Why Code Validation is the Next Frontier - DevOps.com

Shared staging environments are inadequate for modern development; isolated, on-demand setups are needed for effective validation.
#kubernetes
DevOps
fromMedium
5 hours ago

Understanding Kubernetes Architecture is a MUST

Understanding Kubernetes architecture is essential for effective cloud-native deployment and troubleshooting.
DevOps
fromMedium
5 hours ago

Kubernetes Scared Me Too - Until I Actually Understood It A no-fluff intro for devs who keep

Kubernetes simplifies container orchestration, managing deployment, scaling, and traffic routing for applications across multiple servers.
DevOps
fromApp Developer Magazine
3 days ago

Lens Launches MCP Server to Connect AI Coding Assistants with Kubernetes

Lens by Mirantis integrates a Model Context Protocol server, simplifying AI coding assistants' access to Kubernetes clusters.
DevOps
fromInfoQ
5 days ago

Kubescape 4.0 Brings Runtime Security and AI Agent Scanning to Kubernetes

Kubescape 4.0 introduces runtime threat detection and AI security features, enhancing Kubernetes security for AI agents and improving scanning capabilities.
DevOps
fromMedium
5 hours ago

Understanding Kubernetes Architecture is a MUST

Understanding Kubernetes architecture is essential for effective cloud-native deployment and troubleshooting.
DevOps
fromMedium
5 hours ago

Kubernetes Scared Me Too - Until I Actually Understood It A no-fluff intro for devs who keep

Kubernetes simplifies container orchestration, managing deployment, scaling, and traffic routing for applications across multiple servers.
DevOps
fromApp Developer Magazine
3 days ago

Lens Launches MCP Server to Connect AI Coding Assistants with Kubernetes

Lens by Mirantis integrates a Model Context Protocol server, simplifying AI coding assistants' access to Kubernetes clusters.
DevOps
fromInfoQ
5 days ago

Kubescape 4.0 Brings Runtime Security and AI Agent Scanning to Kubernetes

Kubescape 4.0 introduces runtime threat detection and AI security features, enhancing Kubernetes security for AI agents and improving scanning capabilities.
Angular
fromInfoQ
23 hours ago

Swift 6.3 Stabilizes Android SDK, Extends C Interop, and More

Swift 6.3 introduces official Android support, enhances C interoperability, and improves embedded programming capabilities with a unified build system and low-level performance control.
#ai
fromMedium
2 days ago
Software development

The AI Revolution in Development: Why Outer Loop Agents Are the Next Big Thing

Software development
fromMedium
2 days ago

The AI Revolution in Development: Why Outer Loop Agents Are the Next Big Thing

AI is set to revolutionize post-code push processes, automating tasks like security fixes, error logging, and code reviews.
Information security
fromThe Hacker News
2 days ago

Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

Anthropic confirmed a human error led to the accidental release of Claude Code's internal source code, but no sensitive data was exposed.
#npm
Node JS
fromInfoQ
1 day ago

Axios npm Package Compromised in Supply Chain Attack

A significant supply chain attack on Axios introduced a Remote Access Trojan via hijacked maintainer accounts, affecting numerous developer environments.
Node JS
fromBleepingComputer
3 days ago

Hackers compromise Axios npm package to drop cross-platform malware

Hackers compromised the Axios npm account to distribute remote access trojans across multiple operating systems.
Node JS
fromTheregister
3 days ago

Top npm package backdoored to drop dirty RAT on dev machines

A widely used npm library, axios, was compromised to deliver malware through a maintainer's hijacked account.
Node JS
fromInfoQ
1 day ago

Axios npm Package Compromised in Supply Chain Attack

A significant supply chain attack on Axios introduced a Remote Access Trojan via hijacked maintainer accounts, affecting numerous developer environments.
Node JS
fromBleepingComputer
3 days ago

Hackers compromise Axios npm package to drop cross-platform malware

Hackers compromised the Axios npm account to distribute remote access trojans across multiple operating systems.
Node JS
fromTheregister
3 days ago

Top npm package backdoored to drop dirty RAT on dev machines

A widely used npm library, axios, was compromised to deliver malware through a maintainer's hijacked account.
Ruby on Rails
fromTheregister
2 days ago

Ruby Central seeks closure with RubyGems fracture report

Ruby Central published a report on the September 2025 RubyGems fracture, detailing governance issues and future steps for community involvement.
Scala
fromScala-lang
4 days ago

Scala 3.8.3 is now available!

Scala 3.8.3 introduces local coverage exclusions and a safe mode for capability-safe code, enhancing code safety and coverage measurement.
Vue
fromInfoQ
5 days ago

Nuxt Test Utils v4: Vitest v4 Requirement, Mocking Overhaul and Stricter Environment Setup

Nuxt Test Utils v4.0.0 introduces significant changes, including a new test environment setup and improved mock handling.
Java
fromInfoQ
4 days ago

Java News Roundup: GraalVM Build Tools, EclipseLink, Spring Milestones, Open Liberty, Quarkus

Multiple Java frameworks and tools have released updates and new features, enhancing performance and fixing issues.
fromYcombinator
5 days ago

Show HN: QuickBEAM - run JavaScript as supervised Erlang/OTP processes | Hacker News

QuickBEAM runs JavaScript inside OTP supervision trees, allowing each runtime to function as a process with a `Beam` global that can call Elixir code and send/receive messages.
DevOps
fromMedium
5 hours ago

Fair Multitenancy-Beyond Simple Rate Limiting

Fair multitenancy ensures equitable infrastructure access for customers, balancing simplicity, performance, and safety in shared environments.
Information security
fromInfoQ
23 hours ago

Open Source Security Tool Trivy Hit by Supply Chain Attack, Prompting Urgent Industry Response

A malicious release of the Trivy vulnerability scanner exposed critical weaknesses in software supply chain security, allowing for potential credential theft.
Software development
fromMedium
1 day ago

Zero-Effort Production Debugging: How I Automated Bug Fixes for My Side Project

Automating bug fixes with an AI agent streamlines maintenance for full-stack applications, enabling zero-effort management of errors.
fromRubyflow
1 day ago
Ruby on Rails

Internator now runs on OpenCode (bye Codex)

Internator is a Ruby CLI that automates code changes and now operates on OpenCode for enhanced flexibility and efficiency.
Node JS
fromTreehouse Blog
2 days ago

How to Build Your First Full Stack App as a Beginner

Building a simple full stack project enhances understanding of front end, back end, and database interactions beyond theoretical knowledge.
Software development
fromTechzine Global
1 day ago

OutSystems focuses on control and consistency in AI projects

OutSystems introduces Agentic Systems Engineering to enhance coherence and control in AI development, addressing fragmentation and integration challenges.
#aws
fromAmazon Web Services
5 hours ago
DevOps

Streamlining Cloud Compliance at GoDaddy Using CDK Aspects | Amazon Web Services

CDK Aspects enable organization-wide policy enforcement in AWS infrastructure as code, enhancing compliance and security during the development process.
DevOps
fromInfoWorld
3 days ago

What front-end engineers need to know about AWS

Understanding AWS infrastructure improves front-end debugging and UI performance.
DevOps
fromAmazon Web Services
5 hours ago

Streamlining Cloud Compliance at GoDaddy Using CDK Aspects | Amazon Web Services

CDK Aspects enable organization-wide policy enforcement in AWS infrastructure as code, enhancing compliance and security during the development process.
DevOps
fromInfoWorld
3 days ago

What front-end engineers need to know about AWS

Understanding AWS infrastructure improves front-end debugging and UI performance.
fromInfoWorld
2 weeks ago

We mistook event handling for architecture

Events are essential inputs to modern front-end systems. But when we mistake reactions for architecture, complexity quietly multiplies. Over time, many front-end architectures have come to resemble chains of reactions rather than models of structure. The result is systems that are expressive, but increasingly difficult to reason about.
React
fromRubyflow
1 week ago
Ruby on Rails

Hosting options to deploy a Ruby app

Different hosting options for deploying Ruby apps include cloud providers, VPS setups, and managed platforms.
Software development
fromDevOps.com
3 days ago

The Trust Tax Framework: Measuring Developer Confidence in CI/CD Systems - DevOps.com

Test infrastructure credibility is crucial; developers lose trust when re-run rates exceed 30% and override rates surpass 5%.
Information security
fromSiliconANGLE
3 days ago

Hackers compromise popular Axios Javascript library with hidden malware - SiliconANGLE

Axios HTTP client library was hacked to distribute malware via a compromised npm account, affecting multiple operating systems.
Java
fromInfoWorld
2 weeks ago

Project Detroit, bridging Java, Python, JavaScript, moves forward

Detroit project enables Java integration with Python and JavaScript, becoming an official OpenJDK project to support multi-language development within the Java ecosystem.
Java
fromDevOps.com
2 weeks ago

Java 26 Arrives With AI Integration and a New Ecosystem Portfolio - What It Means for DevOps Teams - DevOps.com

Java 26 positions Java as the infrastructure layer for AI workloads, with 73 billion active JVMs already running enterprise systems where agentic AI will operate.
DevOps
fromTechzine Global
3 days ago

Harness adds four capabilities to close AI delivery gap

Harness is launching four new capabilities to enhance its Continuous Delivery platform, addressing the gap between code writing speed and release reliability.
Miscellaneous
fromTheregister
1 month ago

Open source package repositories face sustainability crisis

Open source repositories face unsustainable demand from companies misusing them as CDNs, prompting consideration of tiered payment systems where heavy users pay while individual developers remain free.
JavaScript
fromSubstack
1 month ago

Friday Links #35: Dev Tools, AI & JS Ecosystem Updates

The JavaScript ecosystem continues evolving with AI-powered tools, performance libraries, experimental frameworks, and utilities designed to enhance developer workflows across frontend, backend, and edge environments.
DevOps
fromInfoQ
3 days ago

Failure As a Means to Build Resilient Software Systems: A Conversation with Lorin Hochstein

Using software failures can enhance software architecture and reliability engineering practices.
fromInfoWorld
1 month ago

The right way to architect modern web applications

Modern web applications are no longer just "sites." They are long-lived, highly interactive systems that span multiple runtimes, global content delivery networks, edge caches, background workers, and increasingly complex data pipelines. They are expected to load instantly, remain responsive under poor network conditions, and degrade gracefully when something goes wrong.
Web frameworks
DevOps
fromInfoQ
3 days ago

Event-Driven Patterns for Cloud-Native Banking: Lessons from What Works and What Hurts

Event-driven architecture introduces complexity and requires careful implementation, especially in regulated environments, to ensure reliability and system evolution.
Node JS
fromDEV Community
2 weeks ago

I Scanned 6 Popular Node.js Repos for Undocumented Environment Variables. Here's What I Found.

Many popular Node.js projects lack comprehensive documentation for process.env variables, leading to potential configuration issues.
fromDanielwestheide
5 days ago
Software development

Pair Programming Considered Unnecessary: The Costs of Productive Solitude

JetBrains is discontinuing Code With Me due to declining demand for remote collaborative coding post-pandemic.
DevOps
fromInfoWorld
4 days ago

How to build an enterprise-grade MCP registry

MCP registries are essential for integrating AI agents with enterprise systems, requiring semantic discovery, governance, and developer-friendly controls.
Node JS
fromDEV Community
2 weeks ago

Why I Stopped Maintaining .env.example by Hand

A new tool automatically discovers environment variables used in Node.js code to prevent stale .env.example files from causing deployment failures.
#agentic-workflows
Software development
fromInfoQ
2 weeks ago

Stripe Engineers Deploy Minions, Autonomous Agents Producing Thousands of Pull Requests Weekly

Minions are autonomous coding agents at Stripe that generate production-ready pull requests with minimal human intervention.
DevOps
fromInfoQ
1 week ago

Architecting Autonomy at Scale: Raising Teams Without Creating Dependencies

Aligning architectural decision authority to C4 abstraction levels clarifies ownership boundaries for distributed teams without needing a central approver.
Web frameworks
fromLoicpoullain
1 month ago

The future of web frameworks in the age of AI

AI agents now generate 90-95% of production code, requiring frameworks to be AI-understandable with comprehensive documentation and clear examples to remain competitive.
Philosophy
fromMedium
1 month ago

Why code is not the source of truth

Design specifications and blueprints, not implementation code, are the authoritative source of truth; implementation is derived from and judged against originating design authority.
DevOps
fromDevOps.com
1 week ago

From AI Code to Production: The Case for FeatureOps - DevOps.com

AI coding tools are widely used, but increased usage leads to decreased delivery stability and a control gap in understanding code impact.
Software development
fromMedium
2 weeks ago

From Concept to Production: The Complete Guide to XML Prompt Engineering for Software Developers

Treat LLMs as compilers, not chatbots, using Structured XML Prompting to generate professional-grade code through a five-stage AI-assisted development cycle with rigid constraints.
DevOps
fromInfoQ
2 weeks ago

Harness Reimagines Artifact Management for DevSecOps with New Artifact Registry

Harness Artifact Registry simplifies artifact management by integrating it into the software delivery platform, enhancing security and governance in DevSecOps pipelines.
DevOps
fromInfoQ
2 weeks ago

Configuration as a Control Plane: Designing for Safety and Reliability at Scale

Configuration in cloud-native systems is a dynamic control plane that directly influences system behavior and reliability at runtime.
fromwww.sitepoint.com
2 months ago

Software Development

1. What Are the Key Features Every Modern Business Website Should Have Today? Perfect for UX, performance, and custom web development discussion.
Web design
fromSubstack
2 months ago

Friday Links #33 - Fresh JavaScript Tools & Trends

OpenAI has introduced ChatGPT Health, a dedicated section inside ChatGPT focused entirely on personal health. It's more than a themed chat - users can discuss symptoms, interpret lab results, track metrics over time, and get clear explanations of medical terms. A key feature is integration with health and fitness services. Users can connect Apple Health, MyFitnessPal, and similar apps so the AI can analyze sleep, activity, nutrition, and wellness trends.
Web development
fromTechzine Global
1 month ago

Go developer questions effectiveness of Dependabot

Dependabot sounded the alarm on a large scale. Thousands of repositories automatically received pull requests and warnings, including a high vulnerability score and signals about possible compatibility issues. According to Valsorda, this shows that the tool mainly checks whether a dependency is present, without analyzing whether the vulnerable code is actually accessible within a project.
Information security
Software development
fromInfoWorld
3 weeks ago

Coding for agents

AI agents reward explicit, consistent, well-documented code over clever or personally-preferred approaches, fundamentally changing software engineering standards toward machine-legibility.
JavaScript
fromInfoWorld
1 month ago

Beyond NPM: What you need to know about JSR

The JavaScript Registry simplifies and secures JavaScript package creation, distribution, and consumption while addressing NPM's TypeScript complexity and provenance shortcomings.
Python
fromMedium
4 months ago

uv: The Blazing-Fast Python Package Manager Changing the Game

uv provides dramatically faster Python dependency resolution and installation with a Rust-based tool that consolidates environment, tooling, caching, and version management into one automatic workflow.
Artificial intelligence
fromInfoQ
1 month ago

Working with Code Assistants: The Skeleton Architecture

Combining Vertical Slice architecture with Dependency Inversion and a Skeleton of base classes constrains AI code assistants' context, producing safer, consistent, and maintainable generated code.
#spring
Software development
fromInfoWorld
1 month ago

Abandoned project linking Java, JavaScript makes a comeback

The Detroit project revives native JavaScript and Python script engines for the JVM using Chrome V8 and CPython, with plans to become an official OpenJDK project while leveraging the Foreign Function & Memory API.
fromInfoWorld
2 months ago

Deno boosts dependency management with JSR

JSR offers a modern, TypeScript-first and cross-platform-compatible registry, integrated into Deno, Deno's developers said. For Node.js and NPM compatibility, Deno 1.42 offers numerous improvements. The async_hooks module now supports the EventEmitterAsyncResource and AsyncLocalStorage.enterWith APIs. The crypto module adds getRandomValues(), subtle, getCipherInfo(), publicKey(), and createPublicKey() APIs, along with support for more curves in multiple APIs. The worker_threads module received a major overhaul.
Node JS
Software development
fromInfoQ
1 month ago

The Ideal Micro-Frontends Platform

Micro-frontends apply microservice principles to the frontend, enabling autonomous teams but requiring solutions beyond runtime component loading due to added complexity.
fromInfoWorld
2 months ago

Which development platforms and tools should you learn now?

Software development used to be simpler, with fewer choices about which platforms and languages to learn. You were either a Java, .NET, or LAMP developer. You focused on AWS, Azure, or Google Cloud. Full-stack developers learned the intricacies of selected JavaScript frameworks, relational databases, and CI/CD tools. In the best of times, developers advanced their technology skills with their employer's funding and time to experiment. They attended conferences, took courses, and learned the low-code development platforms their employers invested in.
Software development
DevOps
fromDbmaestro
4 years ago

18 Best DevOps Quotes to Inspire DevOps Teams

DevOps success depends on automation, cultural change, trust, communication, and continuous improvement through Agile practices and visible demonstrations of value.
Software development
fromDbmaestro
1 year ago

Why Do You Need Database Version Control?

Database version control tracks schema and code changes, enabling CI/CD integration, collaboration, rollback, and faster, more reliable deployments across multiple databases.
fromMedium
1 year ago

Modern Web Architectures: Composability with Harmony

Over the past decade, software development has undergone a massive transformation due to continuous innovations in tools, processors and novel architectures. In the past, most applications were monoliths and then shifted to microservices, and now we find ourselves embracing composability - a paradigm that prioritizes modular, reusable, and flexible software design. Instead of writing separate, tightly coupled applications, developers now compose software using reusable business capabilities that can be plugged into multiple projects. This enables greater scalability, maintainability, and collaboration across teams and organizations. At the heart of this movement is Bit Harmony, a framework designed to make composability a first-class citizen in modern web development.
Software development
Software development
fromMedium
1 year ago

How Bit Reduces Development Costs

A composable, well-documented codebase increases reuse, reduces bugs, and enables AI and non-technical stakeholders to contribute effectively.
Software development
fromDbmaestro
4 years ago

Database delivery automation with GitLab: a deep dive |

Integrate databases into DevOps pipelines to eliminate bottlenecks, accelerate releases, and enable close collaboration between application and database teams.
[ Load more ]