GitHub Gives The Push Its Own Identity
GitHub's push-attribution preview records the authenticated account behind a commit's delivery. Author, committer, signer, and pusher remain different pieces of evidence.
// Byline
GitHub's push-attribution preview records the authenticated account behind a commit's delivery. Author, committer, signer, and pusher remain different pieces of evidence.
Deno's move to Cloudflare puts distributed self-hosting on the roadmap. The test is whether object identity, durable data, and recovery can travel with the runtime.
drgn 0.3 hardens a Python-programmable debugger against malformed ELF, DWARF, and core dumps. The larger lesson is that observability evidence crosses a trust boundary too.
Python 3.15 ships a faster experimental JIT, explicit lazy imports, default frame pointers, and clearer runtime choices. The upgrade is less one speed boost than a way to choose where Python pays.
Let’s Encrypt will shorten default certificates in February. The real test is whether renewal, deployment, reload, and public verification form one automated loop.
Kubelet cleans image bytes before crisis, but small-file-heavy containers can exhaust ext4 inodes while the disk still appears to have room.
Coding agents turned Git hosting into a write-heavy coordination problem. GitHub is separating durable storage from the workers that serve it.
On October 11, the DNS root switches to KSK-2024. The cryptography is ready; resolver operators need to prove their trust anchors made the trip.
Meta hot-fixed a Muse control that let unprivileged Mac code redirect dictation, capture agent authentication material, and borrow the assistant's trusted reach.
ZXdesk puts windows, menus, storage backends, apps, and 50Hz dragging on a 1982 ZX Spectrum by measuring the hardware instead of trusting folklore.
Ledger Donjon used photon-emission microscopy, two laser faults, and a rescue reset to reopen Secure debug and recover the RP2350 challenge secret.
Cloudflare recovered more than 100TB of RAM by changing a Rust data layout, trimming virtual nodes, and rolling out a smaller cache-routing ring without a global flush.
GitHub used agents to port Copilot's shared runtime from TypeScript to 832,000 lines of Rust. The more useful story is how it kept shipping throughout.
A new Linux crypto patch series turns post-quantum key exchange from a standards document into kernel infrastructure that protocol authors can actually test.
Valve's first SteamOS 3.9 preview refreshes the handheld's Linux, Plasma, Wi-Fi, hibernation, and virtual-machine foundations.
AI can make an idea sound finished before we have finished thinking. Some awkwardness is worth keeping.
Rust's next borrow checker is now on nightly, giving developers a real shakeout period for flow-sensitive borrowing before stabilization.
A fabricated batch of SQLite vulnerability reports shows why security automation needs verification gates, not just faster ingestion.
GitHub's public preview of stacked pull requests turns a long-running review workaround into first-party developer workflow.
NetBSD 11.0 adds RISC-V support, a fast x86 MICROVM kernel, better Linux syscall compatibility, and the kind of old-machine care that still matters.
Linux 7.2-rc6 is set to disable SATA link power management for several Western Digital drives that can disappear after boot.
Oracle's new EBCDIC compatibility work is a reminder that mainframe migration fails when old byte ordering is treated as a data-conversion footnote.
Red Hat Developer highlighted Anthony, a local AI voice-control layer that turns GNOME desktop actions into spoken commands.
Cloudflare's pvcli gives OHTTP, CONNECT proxying, and future MASQUE work a curl-like test harness for privacy-preserving protocols.