Come, Sir Andrew, there’s no remedy

The eslint-config-prettier compromise last year had a tell: the malicious versions were published to npm without provenance attestation, while the legit ones all had it. So I added a check to Dependabot that warns when a package loses its provenance between updates.

Built a Home Assistant integration for Specialized Turbo e-bikes. Battery health, motor power, speed, cadence, odometer, etc. All over Bluetooth, all local. Works with 2017+ models with TCU. Install via HACS. #HomeAssistant #ebike #BLE #SmartHome github.com/JamieMagee/ha-specialized-turbo

🎆 Go 1.26.0 is released! 🗒️ Release notes: https://go.dev/doc/go1.26 ⬇️ Download: https://go.dev/dl/#go1.26.0 #golang

TypeScript 6.0 beta is now published! This release brings - inference improvements for functions - updates to package.json 'imports' - the Temporal APIs - alignments for the upcoming TypeScript 7.0 - & more! Try it today! devblogs.microsoft.com/typescript/a...

Dependabot now supports OIDC authentication https://github.blog/changelog/2026-02-03-dependabot-now-supports-oidc-authentication

The Dependabot Proxy is now open source with an MIT license https://github.blog/changelog/2026-02-03-the-dependabot-proxy-is-now-open-source-with-an-mit-license

🔐 PASSWORDS? WHERE WE'RE GOING WE DON'T NEED PASSWORDS 🔐 STRAP IN SECURITY FANS: Dependabot just learned how to authenticate WITHOUT storing secrets, and your security team is about to ugly-cry with joy! 😭🎉 OIDC SUPPORT HAS LANDED! github.blog/changelog/20...

🚨CODE RED (BUT LIKE A GOOD RED): WE JUST OPEN SOURCED THE DEPENDABOT PROXY🚨 Attention Dependabot fans and security nerds: The Dependabot Proxy just escaped from its private repo and is now LOOSE ON THE INTERNET under the MIT license! github.com/dependabot/p...

🚌 Today is the first time Seattle transit riders can pay the fare with a credit card or smartphone The new feature launches on Rapid Ride G, and will be rolled out across the bus system in the coming weeks 📲 I wish I was in Seattle this week to try it out! 🙋‍♂️ Give it a try & tell me about it here

There is no better advert for the 2 Line than seeing it fly past bumper to bumper traffic on the I-90 bridge.

💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 💚💙SUPER BOWL 💙💚 #GOHAWKS

Say hello to a truly connected region on March 28! The Crosslake Connection is opening two new stations and a world of new possibilities for the Eastside, Seattle and beyond. 🚊✨   Explore this highly anticipated new connection and get ready to ride! 🎉 www.soundtransit.org/crosslake

The GitHub Copilot SDK is here 🙌 You can take the same Copilot agentic core that powers GitHub Copilot CLI and embed it in any application, with just a few lines of code. github.com/github/copil...

npm's broken UI bugged me enough I wrote a userscript to fix them, and added some features too. Repo: github.com/bluwy/npm-us... Here's a before-and-after comparison:

Just watched the new Knives Out and I think it's really important you know that the scene in the Seminary's Gym is filmed in the same place Rick Astley filmed the music video for Never Gonna Give You Up. I saw the window tracery and immediately made my friends pause the film so I could tell them.

Spotify wrapped 🙂‍↔️ Git wrapped 🙂‍↕️ git-wrapped.com/profiles/Jam...

Just released RubyGems/Bundler 4.0.0: blog.rubygems.org/2025/12/03/4... I also published Upgrading Guide for 4.0.0: blog.rubygems.org/2025/12/03/u... RubyGems reached 4.0 a little earlier than Ruby, but I'm really looking forward to 12/25.

We've got some updates on TypeScript 7! The new native port - can type-check any project - supports --build and --incremental - has rich editor features implemented - is still 10x faster and is ready for you to try today! devblogs.microsoft.com/typescript/p...

Visual Studio is going evergreen: - Feature updates every month, not every quarter. - A new annual version each year, released in November alongside the .NET release. devblogs.microsoft.com/visualstudio...

NEW // How Mayor-elect Katie Wilson Can Hit the Ground Running, Walking, Rolling, and Biking 🏃‍♀️🚶‍♂️👩‍🦽🚴‍♀️🚌 Op-ed by @sngreenways.bsky.social via @theurbanist.org // 🔗 www.theurbanist.org/2025/11/23/h...

Car Size xkcd.com/3167/

Start your downloads

Crosslake light rail update! Via CEO Dow Constantine at today's executive committee meeting: Sound Transit was just granted approval to start running test trains across I-90 during the day, in addition to the overnight testing that had been taking place.

It took one global incident for the world to see how vital open source maintainers are. In this episode of The GitHub Podcast, we talk to Christian Grobmeier about the aftermath of Log4Shell and what it means for the future of open source funding. the-github-podcast.simplecast.com/episodes/fro...

And we have a backpedal from SDOT. "[W]e are updating our approach to meet the changes requested by Metro to support Route 2, while continuing conversations and evaluations with all stakeholders before advancing changes to bus lane uses." sdotblog.seattle.gov/2025/10/02/c...

We're taking action to make the npm supply chain stronger and harder to attack. 🛡️ Check out our plan to create a more secure future for the JavaScript community.👇 https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/

Hearing from sources that the union st busway will soon be reorganized into the union st carway. Now it will be much easier to drive to central Capitol Hill!

Why your next car should be an electric cargo bike

nuget trusted publishing from GitHub actions is rolling out. No more api keys needed to publish from your release process. learn.microsoft.com/en-us/nuget/...

You'll never guess what we're calling the next version of Visual Studio

I vibe coded a free online version of my card game Bedlam, which is like Cards Against Humanity but for techies. Try it out yourself at www.bedlamgame.com, play with others at work or add AI players to test it out single player -or use screenshot mode to generate pictures of funny card combos.

Any em dash fans here? We're currently working on a Windows-wide keyboard keyboard shortcut for em dash and em dash, to make it easier to input for those that need it 😊 blogs.windows.com/windows-insi... #WindowsInsiders

The Seattle City Council is about to start taking votes on the 20-year Comprehensive Plan which will determine how housing in Seattle is built. I biked around Seattle to talk to people about what we need to do to build more housing, and make our communities more walkable, and livable.

🎆 Say hello to Transit 6.0! 🎆 It’s our love letter to public transportation — the brightest, boldest, and best version of ourselves yet 🌟

🦀 Dependabot now supports automatic Rust toolchain updates! Keep your rust-toolchain.toml files up-to-date with the latest stable, beta, or nightly releases without manual intervention. Perfect for maintaining consistent builds across teams and CI environments. #Rust github.blog/changelog/20...

Dependabot version updates now support vcpkg https://github.blog/changelog/2025-08-12-dependabot-version-updates-now-support-vcpkg

With friends like these, who needs enemies?

Excited to share what my team and I have been working on for the past year 🎉 The new Dependabot NuGet updater is here to help keep your .NET dependencies secure and up-to-date. Check out all the details in our blog post devblogs.microsoft.com/dotnet/the-n...

🥳 #OpenSSF is turning 5! From sigstore to SLSA, OpenSSF Scorecard to GUAC—we’ve grown into a global force for open source security. Read the full journey & join the celebration 🎉 👉 openssf.org/blog/2025/08... Tell us how OpenSSF has impacted your work ⬇️

An end of July update on the Crosslake Connection! We’re working closely with our friends @wsdot.wa.gov to prepare the I-90 bridge for trains. Follow along as we get ready to power things up with live wire testing 🚆

Alt + 0151

I wrote up some things I learned about vulnerabilities in .NET Base Class Libraries (BCL) #dotnet #security #appsec #cve #blog jamiemagee.co.uk/blog/underst...

🚀 v1.102 of VS Code is here! Check out what’s new: - MCP is GA with GitHub policy support - GitHub Copilot Chat is open source - Use custom modes for tailored chat - Background task management with Copilot coding agent …and so much more: aka.ms/VSCodeRelease 🧶 Here are some of the highlights…

I just finished Advent of Code 2020! Better late than never 😅 I got stuck on day 20 and never found the time to come back to it

Finally got around to updating my dotnet client package for osv.dev. Hot off the presses! www.nuget.org/packages/OSV...

4️⃣ Explicit Resource Management 4️⃣ Array.fromAsync 4️⃣ Error.isError 2️⃣ Math.clamp 2️⃣ Seeded Pseudo-Random Numbers 1️⃣ Keep trailing zeros in Intl.NumberFormat and Intl.PluralRules 1️⃣ Random Functions 1️⃣ Inspector, originally a part of the Comparisons proposal

Today we're announcing previews of the native port of TypeScript! These nightly previews will be available on npm and the VS Code marketplace! npm install -D @​typescript/native-preview npx tsgo --version Read up more on our blog!

LFG