Following the "now contained" npm incident, it's a good time to revisit trusted publishing. Here's how you do it for GitHub/npm.
Setting GitHub as a trusted publisher for npm
How to set GitHub as a trusted publisher for npm.
stevefenton.co.uk
Steve Fenton
@stevefenton.co.uk
🧷 Software Punk 🐙 Swabbie / Octonaut at #OctopusDeploy ✂️ Yak Stylist 🔬 DORA Community Guide 🛡 Deputy Head Boy (BPCS) 🏆 8-Time MVP 🔁 #ContinuousDelivery and #DevOps 👟 #Agile #Lean and #PlatformEngineering 🧠 Opinions were implanted by smarter people
Did you miss our CD Office Hours on multi-tenancy? Here's a short summary. octopus.com/blog/con... #ContinuousDelivery #DevOps
Continuous Delivery Office Hours Ep.7: Modern multi-tenancy
Find out why traditional SaaS multi-tenancy has been replaced with a superior approach.
octopus.com
Faster code generation doesn't automatically mean faster software delivery. Steve Fenton explores why downstream deployment batches continue to slow the flow of value.
AI hasn't shifted the bottleneck from coding to code review
Think AI shifted your bottleneck to code review? Think again. The real issue is downstream deployment batches blocking your value stream.
thenewstack.io
We’re all for protecting these incredible, intelligent creatures. An Octopus belongs on the reef! #SaveTheOcean #ProtectMarineLife
We have issued so many badges for the people who completed the WHOLE State of CD survey. These people are research heroes because they are helping us see well beyond our own experiences. Want to be one of us? Just grab a coffee and and your response! futureof.dev/badges/asser...
State of CD Research Contributor 2026
This badge recognizes professionals who went above and beyond to support the 2026 State of Continuous Delivery research survey, an industry-wide study by Octopus Deploy.Research Contributors completed...
futureof.dev
Cool project alert!
charli xkcd@ky.fyi · 7d agothe good thing about being unemployed is i have more time to work on my hobby projects that 3 other people use. astro-lilypond v0.14 will now automatically install the lilypond binary if it isn't available, which saves you from having to do that manually during builds. yay lilypond.ky.fyi
The bigger your to-be-read pile is, the less chance there is for the book to be snatched by a political ban or an AI ingest-and-pulp deathbot. Hoarding unread books is resistance. Future historians will thank us.
If you only read one article on Chesterton's Fence, make it this one. Chesterton's apologist views may be questionable, but the truth and wit of this idea is evergreen. stevefenton.co.uk/ch...
Large-scale studies paint a clear picture - if you have slow feedback cycles, long lead times and unreliable releases, AI will make it worse Join me Sept 1st 18:45 BST to learn the principles and practices evidence tells us can tame the code-generating firehose www.tickettailor.com/events/codem...
Register – Code Craft & AI – Zoom
Code Craft & AI – Zoom, Tue 1 Sep 2026 - Tuesday Sept 1st 18:45 BST £99 + UK VAT Large-scale studies by the DevOps Research & Assessment group, CircleCI, Faros and others show an undeniable pictu...
tickettailor.com
It's been so great to start issuing these Open Badge Assertions for folks who submitted fully complete submissions for our software delivery survey. You can take part and get this badge, just tell us how you deliver the software you build. oc.to/state-of-cd-su...
Okay then. Folks have been asking, and it seems a shame to waste 3 1/2 years of legwork, so I'm scheduling one Code Craft & AI workshop. Tues Sept 1st - 18:45 - 21:00 BST £99 + VAT Plus you get a copy of my book-in-progress, The AI-Ready Software Developer www.tickettailor.com/events/codem...
Register – Code Craft & AI – Zoom
Code Craft & AI – Zoom, Tue 1 Sep 2026 - Tuesday Sept 1st 18:45 BST £99 + UK VAT Large-scale studies by the DevOps Research & Assessment group, CircleCI, Faros and others show an undeniable pictu...
tickettailor.com
ok, I totally understand that "Data Lake" and "Data Warehouse" can lead you to think, "What would connote self-hosting and self-storage"... but "databasement" has another word in it.
What often-misunderstood part of 'agile' winds you up the most when you come across it? 😖
Coffee seems to bring with it some antioxidant and anti-inflammatory benefits. Oh yeah, and joy. Some folks learn this and try to find a way to get that caffeine without drinking coffee. This is problematic because they've immediately removed the joy, but there's more... 1/3
A clarifying note on the "improve your video/audio/presentation skills" calls. I vehemently reject that these things are more important than what you have to say, but it does help to remove obstacles to people hearing your message
Think AI shifted your bottleneck to code review? Think again. The real issue is downstream deployment batches blocking your value stream.
AI hasn't shifted the bottleneck from coding to code review
Think AI shifted your bottleneck to code review? Think again. The real issue is downstream deployment batches blocking your value stream.
bit.ly
Excited about Bandcamp testing out a Subsonic API? I've got you covered, including iOS, Mac, Linux, and Android Subsonic client that works with Bandcamp so you can start listening today! www.phonotonal.com/2026/07/band...
Bandcamp Adds Subsonic | Opinion | Culture | Music | Phonotonal
When we all gave up our physical formats and MP3 collections to embrace streaming, we didn’t realize how an album…
phonotonal.com
This article blew up on TNS, but I've not received the hate mail I've been bracing for. What gives?
Steve Fenton@stevefenton.co.uk · 3w agoIn an echo of all the claims that "AI has shifted the bottleneck from coding to code review", I argue that coding was never the bottleneck, and it's not code review now. What's more, I have receipts to prove it, thanks to an early peek at our State of CD data. thenewstack.io/ai-code-bott...
The experience I'm finding from workmates, as well as others elsewhere, is the inner loop is speeding up but it's not really having an overall effect in the end to end delivery chain. Which is just like any other "optimise one link, instead of the whole" story ever.
In an echo of all the claims that "AI has shifted the bottleneck from coding to code review", I argue that coding was never the bottleneck, and it's not code review now. What's more, I have receipts to prove it, thanks to an early peek at our State of CD data. thenewstack.io/ai-code-bott...
AI hasn't shifted the bottleneck from coding to code review
Think AI shifted your bottleneck to code review? Think again. The real issue is downstream deployment batches blocking your value stream.
thenewstack.io
This explains a lot! If you ship faster in a way that adds instability, controls ratchet up to compensate, pulling throughput back to equilibrium. So you end up paying for something like AI without any net gain in delivery rate, just a higher cost for the same output. octopus.com/blog/the...
When I worked in the Financial Industry, I sat next to a more senior developer who didn't believe in continuous integration. They assured me that long-lived branches were the superior approach to developing software. 1/4
'Tis the last day to preorder The Psychology of Software Teams! By ordering today you'll join the POST advance squad which comes with benefits like a) I remember every early post forever b) bragging rights c) enormous increases to your persuasion d) a faint glowing aura www.drcathicks.com#book
Dr. Cat Hicks
Leading the science of software success
drcathicks.com
Cat Hicks@grimalkina.bsky.social · 4w agoSo how do you help the authors you want to help? - Preorder - Tell one specific person "you'd like this book" — this converts at a far higher rate than anything! - If you're on a team or in a reading group, suggest it there - Request it at your local library! www.drcathicks.com#book