Very pleased to see that @mlhacks.bsky.social + @dev.to are running Hacktoberfest now, both trusted orgs in the community space!

Hacktoberfest@hacktoberfest.com · 3w ago

We're back for Hacktoberfest 2026! This year, we're not counting PRs. Instead, we’re hosting 300+ in-person “Fests” and an online event all about building with open-source and open-weight AI. Learn more and see how you can get involved. hacktoberfest.com

See it. Say it. Sorted. 🤝 Patching security issues during an incident at midnight is my favourite kind of engineering.

Grateful to the folks at Cloudflare who’ve been working to reduce this risk the last few days. - Package moved to the Astro org, no single-author control - Binary replaced with lightweight native TS version - Bundled into the wrangler build to avoid the install-time dependency

👀 Cloudflare's wrangler CLI (~20m installs/week) has a new dependency... a ~600kb WASM binary used by no other package on npm: `rosie-skills`. I've been told that it is a legitimate package published by an employee, but it really looks like the start of a supply chain attack...

65% humidity at this temperature is just gross. How am I possibly going to sleep like this?

Always disheartening to see a company abandon its community efforts, especially one you've advocated for and supported for a long time. Not the first time I've seen this happen, won't be the last, but it always hurts, and it never goes well for the company in the long run.

Finally, @dependabot.bsky.social works properly with @pnpm.io to create security fix PRs for transitive dependencies 🎉 github.com/dependabot/d...

Audit fix fallback by robaiken · Pull Request #14589 · dependabot/dependabot-core

What are you trying to accomplish? What: Add an audit fix fallback for npm, yarn (berry), and pnpm when the standard subdependency update command is a no-op. When the normal update command (npm upd...

github.com

It is so incredibly fulfilling to see Alveus continue to grow and do good in the world, watching the community continue to support it to each new milestone, knowing that the open-source code I help maintain in my spare time is a small part of making that happen. www.youtube.com/watch?v=-Ywz...

The Wildlife Sanctuary You Can Visit from Anywhere | Maya Higa | TED

YouTube video by TED

youtube.com

Node.js v26.0.0 is out 💚 Temporal API enabled by default, V8 14.6, Undici 8, and key deprecations as we keep modernizing the platform. Check it out nodejs.org/en/blog/rele...

Node.js — Node.js 26.0.0 (Current)

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

nodejs.org

Spent my last few weekends working on the cdnjs API worker to improve the HTML "human" output for it, with the aim being to eventually serve the main site via it. Implemented my own client islands w/ Vite, and has been a lot of fun just writing React + some build tooling again.

YouTube's RSS feed availability is truly odd. Seems to break daily somewhere around 8pm UTC and then comes back promptly at 8am UTC each day. Such an odd availability pattern for something they link in the meta tags of every channel page.

Uh oh, another year older, definitely mid twenties now.

Hey @imgur.com, why are you still holding onto my data and sending me emails when y'all exited the UK? Best bit is the images in the email don't even work because you blocked the UK... and I CANNOT unsubscribe as that link also goes to a blocked page...

Okay, so, with minio abandoned, what are folks using for emulating an S3 bucket in a local dev setup w/ docker compose? Looking for something lightweight and simple, our current minio setup is 15 lines in our docker compose, that's it...

I'd been getting Metro Bank statement emails for a while now, but didn't think I had an account with them. Decided to finally phone them yesterday, and after some verification over the phone, they were able to get me back into an account that I last used in 2013. Impressive.

🎉 Dependabot just updated to Node.js 24 (interesting that they use a single version for their image, rather than using whatever version a given project needs)

Matt Cowley@v4.wtf · 9mo ago

Sigh, Dependabot continues to be a thorn in the side the second it doesn't just work as you expect it to... turns out it doesn't support Node.js 24 at all, and so because we updated our repository, we're no longer getting dependency updates or security fixes.

Not a bad year git-wrapped.com/profiles/Mat...

Sigh, Dependabot continues to be a thorn in the side the second it doesn't just work as you expect it to... turns out it doesn't support Node.js 24 at all, and so because we updated our repository, we're no longer getting dependency updates or security fixes.

This is exciting; the team behind the @grafana.bsky.social Cloud portal landed a feature I originally built as my first hackathon project, an instance picker! Go to grafana.com/launch/explore, pick a Grafana Cloud instance, and you'll land on the explore page. Any route after /launch works.

At ~14:00 UTC, @VodafoneUK effectively dropped off the Internet, with traffic dropping to zero. No word from the provider on outage cause, and their network status checker page is currently unavailable. radar.cloudflare.com/traffic/as53... radar.cloudflare.com/routing/as53... x.com/Independent/...

Having internet-enabled smart home devices is great until the internet goes out for a prolonged period... then you can't tell Alexa to stop the alarm you set, so the only option is to unplug the thing. Oh, and I can't turn the lights on either.

NetBlocks@netblocks.org · 11mo ago

⚠️ Confirmed: Live network data show that operator Vodafone UK is experiencing a national outage with broadband and mobile data impacted, corroborating widespread user complaints 📉 #VodafoneDown

New Era for React = Stronger JavaScript Ecosystem 💙 React doesn’t live in isolation - It works alongside Node.js, Electron, webpack, and more. A dedicated foundation under the Linux Foundation means more collaboration, security, and sustainability across the ecosystem. hubs.la/Q03MylxX0

Celebrating the Launch of the React Foundation | OpenJS Foundation

A New Era for React, and a Stronger JavaScript Ecosystem

hubs.la

Looks like @imgur.com is completely unavailable in the UK now, with all images showing a message that imgur isn’t available in this region. Guessing this is because of the Online Safety Act… surely this being unavailable will have no consequences for internet users in the UK…

I wonder why @github.com has been having mail delivery issues today... couldn't be because of the continual spam issues being filed, mentioning every user on GitHub, generating masses of spam notification emails. Really surprised their send reputation hasn't already gone to zero.

The last week holidaying on a very remote Greek island has been wonderful, but the fact that I've had way faster and more consistent 5G coverage here than I get at home on the outskirts of London is living very rent-free in my mind.

STOMPY HAS A FRIEND! Meet our new emu ambassador, Nolie 💚 Nolie is a ~5 year old female emu that was a pet to a private owner who moved and couldn’t take her with, so now she will be with us here at Alveus to help teach people about the impacts of owning exotic pets.

Sad to see that the folks running @hacktoberfest.com this year decided to abandon the 70,000-strong official Discord server that's been used for the previous five years and switch to the DigitalOcean one... what a waste of an established community.

So I decided to clone the cdnjs/cdnjs repository for the first time in a while... turns out it now consumes right around 1TB on disk (with .git removed), which is not really much of a surprise when you realise it now houses 25 million files.

Just spent an hour chatting with EE about their broadband. They assured me they'd be able to install fiber even if I don't have it currently, including digging up the road. Agent goes to send the contract, and oh dear, there's an error that our address doesn't have fiber... Sigh

GitHub is rate-limiting their own Dependabot runs... leading to Dependabot opening PRs with no change logs in them... this is fun. I've had a ticket open with them for multiple weeks now, no response at all.