npm is now scanning packages for malware at publish time before they become available for consumption
npm publish-time malware scanning and dual-use metadata - GitHub Changelog
As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time. This changelog covers what publishers can expect and a new metadata requirement…
github.blog
TestLens now Generally Available! We are proud to announce that TestLens is now available for all GitHub users! If you develop with Java/Kotlin on GitHub, TestLens is here to ease your pain with flakiness in your test pipelines. testlens.app/blog/2026/07...
TestLens now Generally Available!
Get it now: free for personal accounts and open-source projects; free trials for everyone!
testlens.app
Hi Spring fans! Spring Boot 4.1 is here and with it a ton of amazing features. I'm delighted to have had the opportunity to sit down with Moritz Halbritter, of Spring Boot and Spring Initializr fame, to talk about some of the amazing features. https://www.podbean.com/ew/pb-i8j4u-1b0abfa
Spring Boot legend Moritz Halbritter on the latest and greatest in Spring Boot 4 and 4.1
Hi Spring fans! Spring Boot 4.1 is here and with it a ton of amazing features. I'm delighted to have had the opportunity to sit down with Moritz Halbritter, of Spring Boot and Spring Initializr fame, to talk about some of the amazing features.
podbean.com
JobRunr is now on Spring Initializr. 🚀 We could not be prouder. Add JobRunr from the dependency list at start.spring.io, generate, and background jobs are wired into your Spring Boot app. Massive thanks to @starbuxman.joshlong.com & @spring.io 🙏 #Java #SpringBoot #opensource #oss
This @graalvm.org 25.1 release is the first in our series of monthly innovation releases that bring the latest performance improvements to our users for free. If you are using Java 25, definitely try the upgrade!
GraalVM@graalvm.org · last mo.GraalVM 25.1 is here!🎉 It's our first innovation release based on a new release train. Learn more: medium.com/graalvm/graa... Download: www.graalvm.org/downloads/
also the ceos of ai companies that trained their models on everybody else's work then turning round and complaining about people stealing their shit is fucking hilarious to me
ffmpeg is an amazing piece of software, but it should *always* be run in a sandbox when processing untrusted input. Modern browsers decode videos in a sandbox for the same reason. Handling complex codecs in an entirely secure way remains an unsolved problem in software engineering.
I've worked with Jenkins, GitLab CI, Travis CI, CircleCI, Bamboo, GitHub Actions and possible half a dozen more CI systems. None was as bad as Azure DevOps. Not even in the slightest. I pitty anyone who is forced to use this crap.
No, everyone is not using AI for everything. gabrielweinberg.com/p/people-are... People are consuming AI like they eat meat: some are embracing it, some are limiting their use of it, and some are avoiding it altogether.
No, everyone is not using AI for everything.
People are consuming AI like they eat meat: some are embracing it, some are limiting their use of it, and some are avoiding it altogether.
gabrielweinberg.com
Spring Boot 4.1.0 available now! spring.io/blog/2026/06... See the blog post for the highlights! #java #spring #springboot
Spring Boot 4.1.0 available now
Level up your Java code and explore what Spring can do for you.
spring.io
Out of the 1000 most downloaded artifacts from Maven Central, more than a third are not actively maintained. commons-io is the second most downloaded artifact. That is a little bit sad. github.com/raphw/jenesi...
github.com
"Java AOT in Production at Netflix" Interesting to see real-world numbers from Netflix on Project Leyden. www.youtube.com/watch?v=4kEh... #java #leyden
Java AOT in Production at Netflix
YouTube video by Java
youtube.com
Kotlin is moving toward name-based destructuring – new syntax that will make reordering and moving properties a breeze. No worries: There will be a long migration period with compiler and IDE support. Learn what’s changing and how the migration will work 👇 https://kotl.in/8nny1l
The Road to Name-Based Destructuring | The Kotlin Blog
Kotlin is introducing new destructuring syntax. See what changes, why it matters, and how migration will work.
kotl.in
More information why you need a local mirror for #Apache #Maven: www.sonatype.com/blog/maven-c...
Maven Central: Addressing the Tragedy of the Commons
Maven Central is experiencing a tragedy of the commons situation in which 83% of its total bandwidth is being consumed by just 1% of the IP addresses.
sonatype.com
A local AWS emulator that starts in 24 ms and uses just 13 MiB of idle memory? Meet Floci — free, open-source, and powered by @graalvm.org 🚀 github.com/floci-io/floci
🎯 JEP 534 proposed to target JDK 27 Title: Compact Object Headers by Default Type: feature Component: hotspot / runtime Release: 27 See openjdk.org/jeps/534
Flaky GitHub PRs are an annoying reality. Just when you think a change is good to merge, you are greeted with an ❌. To unblock your PR, you need to rerun lengthy test pipelines just because of one rogue test. TestLens can help you: testlens.app/blog/2027/05... #Java #JUnit #Gradle #Maven
Rerun Pull Request Builds Faster by Reusing Successful Test Results
Flaky GitHub Pull Request (PR) builds are an annoying reality in many projects and rerunning workflows manually is a recurring task. TestLens makes this less painful by offering convenient and quick r...
testlens.app
📑There are now more edge cases, richer code samples, and better structure. Explore the updated docs and see what’s new for your backend 👇 https://kotl.in/o09xzu
If I had invested over 1.000.000.000.000 $ in a technology, I would certainly also invest in a massive marketing campaign to convince the perceived mainstream that this technology is "inevitable", resistance is futile, and whoever doesn't follow will be left behind.
"AI does not work - but we have someone to blame" dierk.github.io/Home/AiDoesN...
AI Does Not Work
dierk.github.io
Spring Boot 4.1.0-RC1 available now Notable new features include: - Support for OpenTelemetry SDK environment variables - HTTP Client SSRF Mitigation with InetAddressFilter - Support for LazyConnectionDataSourceProxy spring.io/blog/2026/04... #spring #springboot #java
Spring Boot 4.1.0-RC1 available now
Level up your Java code and explore what Spring can do for you.
spring.io
You can use support for the @sdkman.io .sdkmanrc file in @intellijidea.com to download #Java26, Set as project JDK and navigate to Project Structure. #Java #IntelliJIDEA
Announcing the Zero Token architecture. Instead of burning AI tokens, you learn to think for yourself, and complete tasks using your brain.
![July 2010
I realized recently that what one thinks about in the shower in the morning is more important than I'd thought. I knew it was a good time to have ideas. Now I'd go further: now I'd say it's hard to do a really good job on anything you don't think about in the shower.
Everyone who's worked on difficult problems is probably familiar with the phenomenon of working hard to figure something out, failing, and then suddenly seeing the answer a bit later while doing something else. There's a kind of thinking you do without trying to. I'm increasingly convinced this type of thinking is not merely helpful in solving hard problems, but necessary. The tricky part is, you can only control it indirectly. [1]
I think most people have one top idea in their mind at any given time. That's the idea their thoughts will drift toward when they're allowed to drift freely. And this idea will thus tend to get all the benefit of that type of thinking, while others are starved of it. Which means it's a disaster to let the wrong idea become the top one in your mind.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:tpg43qhh4lw4ksiffs4nbda3/bafkreicttabxr7p6lhebk4xk4yrpjetghuk565qum4sir4y6735rzujekq)
