I built Nix flake support for Dependabot and it shipped today 🚀 Just add package-ecosystem: "nix" to your dependabot.yml and it'll open PRs for each outdated flake input. github.blog/changelog/2026-04-07-dependabot-version-updates-now-support-the-nix-ecosystem/

Reminds me of this classic shinesolutions.com/2018/01/08/f...

TypeScript 6.0 is now available! This release brings better type-checking for methods, new standard library features, new module features for Node.js, and more! But most important, this release brings us one step closer to the upcoming native-speed 7.0! devblogs.microsoft.com/typescript/a...

The package url spec (the `pkg:` scheme used in SBOMs and CVEs) became a formal ECMA standard in December (ECMA-427). I maintain the .NET implementation and just put out a 2.0 release candidate with full spec conformance. Stable release coming soon. github.com/package-url/packageurl-dotnet

SOUND TRANSIT'S 2 LINE OPENS SOON: Judkins Park Station opens March 28! Are you ready to Flip Your Trip with a whole new way to get to and from the Eastside? https://sdotblog.seattle.gov/2026/03/16/2-line-connection/

Node.js is moving to one major release per year starting with Node 27! 🚀 ✅ Simpler: Every release becomes LTS. ✅ Predictable: Version numbers now align with the year. ✅ New: A 6-month Alpha channel for early testing. https://bit.ly/4rnosLg

The 7 minute Irish animation that is nominated for an Oscar. Worth a watch. #SpeirGorm

I know this country is addicted to cars but it genuinely is so much better when you’re not in a car. People were not made to isolate themselves in private mobile living rooms. When there’s not a literal wall separating you, it turns out a lot of people are friendly.

Routle - King County Metro 02/27/2026 🟥 🟥 🟥 🟥 🟥 www.routle.city/king_county_...

Hot take: package provenance (npm, pypi, etc.) should be a one-way street. You should have to bump a major version to publish without it.

Routle - King County Metro 02/26/2026 🟩 ⬛ ⬛ ⬛ ⬛ www.routle.city/king_county_...

Come, Sir Andrew, there’s no remedy

The eslint-config-prettier compromise last year had a tell: the malicious versions were published to npm without provenance attestation, while the legit ones all had it. So I added a check to Dependabot that warns when a package loses its provenance between updates.

Built a Home Assistant integration for Specialized Turbo e-bikes. Battery health, motor power, speed, cadence, odometer, etc. All over Bluetooth, all local. Works with 2017+ models with TCU. Install via HACS. #HomeAssistant #ebike #BLE #SmartHome github.com/JamieMagee/ha-specialized-turbo

🎆 Go 1.26.0 is released! 🗒️ Release notes: https://go.dev/doc/go1.26 ⬇️ Download: https://go.dev/dl/#go1.26.0 #golang

TypeScript 6.0 beta is now published! This release brings - inference improvements for functions - updates to package.json 'imports' - the Temporal APIs - alignments for the upcoming TypeScript 7.0 - & more! Try it today! devblogs.microsoft.com/typescript/a...

Dependabot now supports OIDC authentication https://github.blog/changelog/2026-02-03-dependabot-now-supports-oidc-authentication

The Dependabot Proxy is now open source with an MIT license https://github.blog/changelog/2026-02-03-the-dependabot-proxy-is-now-open-source-with-an-mit-license

🔐 PASSWORDS? WHERE WE'RE GOING WE DON'T NEED PASSWORDS 🔐 STRAP IN SECURITY FANS: Dependabot just learned how to authenticate WITHOUT storing secrets, and your security team is about to ugly-cry with joy! 😭🎉 OIDC SUPPORT HAS LANDED! github.blog/changelog/20...

🚨CODE RED (BUT LIKE A GOOD RED): WE JUST OPEN SOURCED THE DEPENDABOT PROXY🚨 Attention Dependabot fans and security nerds: The Dependabot Proxy just escaped from its private repo and is now LOOSE ON THE INTERNET under the MIT license! github.com/dependabot/p...

🚌 Today is the first time Seattle transit riders can pay the fare with a credit card or smartphone The new feature launches on Rapid Ride G, and will be rolled out across the bus system in the coming weeks 📲 I wish I was in Seattle this week to try it out! 🙋‍♂️ Give it a try & tell me about it here

There is no better advert for the 2 Line than seeing it fly past bumper to bumper traffic on the I-90 bridge.

💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 #GOHAWKS

Say hello to a truly connected region on March 28! The Crosslake Connection is opening two new stations and a world of new possibilities for the Eastside, Seattle and beyond. 🚊✨   Explore this highly anticipated new connection and get ready to ride! 🎉 www.soundtransit.org/crosslake

The GitHub Copilot SDK is here 🙌 You can take the same Copilot agentic core that powers GitHub Copilot CLI and embed it in any application, with just a few lines of code. github.com/github/copil...

npm's broken UI bugged me enough I wrote a userscript to fix them, and added some features too. Repo: github.com/bluwy/npm-us... Here's a before-and-after comparison:

Just watched the new Knives Out and I think it's really important you know that the scene in the Seminary's Gym is filmed in the same place Rick Astley filmed the music video for Never Gonna Give You Up. I saw the window tracery and immediately made my friends pause the film so I could tell them.

Spotify wrapped 🙂‍↔️ Git wrapped 🙂‍↕️ git-wrapped.com/profiles/Jam...

Just released RubyGems/Bundler 4.0.0: blog.rubygems.org/2025/12/03/4... I also published Upgrading Guide for 4.0.0: blog.rubygems.org/2025/12/03/u... RubyGems reached 4.0 a little earlier than Ruby, but I'm really looking forward to 12/25.

We've got some updates on TypeScript 7! The new native port - can type-check any project - supports --build and --incremental - has rich editor features implemented - is still 10x faster and is ready for you to try today! devblogs.microsoft.com/typescript/p...

Visual Studio is going evergreen: - Feature updates every month, not every quarter. - A new annual version each year, released in November alongside the .NET release. devblogs.microsoft.com/visualstudio...

NEW // How Mayor-elect Katie Wilson Can Hit the Ground Running, Walking, Rolling, and Biking 🏃‍♀️🚶‍♂️👩‍🦽🚴‍♀️🚌 Op-ed by @sngreenways.bsky.social via @theurbanist.org // 🔗 www.theurbanist.org/2025/11/23/h...

Car Size xkcd.com/3167/

Start your downloads

Crosslake light rail update! Via CEO Dow Constantine at today's executive committee meeting: Sound Transit was just granted approval to start running test trains across I-90 during the day, in addition to the overnight testing that had been taking place.

It took one global incident for the world to see how vital open source maintainers are. In this episode of The GitHub Podcast, we talk to Christian Grobmeier about the aftermath of Log4Shell and what it means for the future of open source funding. the-github-podcast.simplecast.com/episodes/fro...

And we have a backpedal from SDOT. "[W]e are updating our approach to meet the changes requested by Metro to support Route 2, while continuing conversations and evaluations with all stakeholders before advancing changes to bus lane uses." sdotblog.seattle.gov/2025/10/02/c...

We're taking action to make the npm supply chain stronger and harder to attack. 🛡️ Check out our plan to create a more secure future for the JavaScript community.👇 https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/

Hearing from sources that the union st busway will soon be reorganized into the union st carway. Now it will be much easier to drive to central Capitol Hill!

Why your next car should be an electric cargo bike

nuget trusted publishing from GitHub actions is rolling out. No more api keys needed to publish from your release process. learn.microsoft.com/en-us/nuget/...

You'll never guess what we're calling the next version of Visual Studio

I vibe coded a free online version of my card game Bedlam, which is like Cards Against Humanity but for techies. Try it out yourself at www.bedlamgame.com, play with others at work or add AI players to test it out single player -or use screenshot mode to generate pictures of funny card combos.

Any em dash fans here? We're currently working on a Windows-wide keyboard keyboard shortcut for em dash and em dash, to make it easier to input for those that need it 😊 blogs.windows.com/windows-insi... #WindowsInsiders

The Seattle City Council is about to start taking votes on the 20-year Comprehensive Plan which will determine how housing in Seattle is built. I biked around Seattle to talk to people about what we need to do to build more housing, and make our communities more walkable, and livable.

🎆 Say hello to Transit 6.0! 🎆 It’s our love letter to public transportation — the brightest, boldest, and best version of ourselves yet 🌟

🦀 Dependabot now supports automatic Rust toolchain updates! Keep your rust-toolchain.toml files up-to-date with the latest stable, beta, or nightly releases without manual intervention. Perfect for maintaining consistent builds across teams and CI environments. #Rust github.blog/changelog/20...

Dependabot version updates now support vcpkg https://github.blog/changelog/2025-08-12-dependabot-version-updates-now-support-vcpkg