It's that time again! I made this about 7 years ago and it's still the most useful thing I've built.

Two weeks off work means I'm bound to be tinkering. Thinking of building a little PDS that runs on a Cloudflare Worker. Anyone tried this? It should be a good platform for atproto stuff.

I ended up reading a lot of great climate fiction this year. My favourites were: Blue Skies by T.C. Boyle Extremophile by @ianthegreen.bsky.social Venomous Lumpsucker by @nedbeauman.bsky.social Clade by @ghostspecies.bsky.social Saturation Point, and Firewalkers by @aptshadow.bsky.social

Reading the replies to this and praying to the lord that I never have to work on a project where the users are as entitled as Bluesky users.

It's nearly two weeks til new year! Don't be that sucker editing all your footers at midnight. Set it automatically with the power of ✨AI✨

rip piss filter. ur with the angles now

Finally undoing one of the most ridiculous self-inflicted injuries of Brexit

Big improvement to frameworks on Cloudflare! You can now deploy most frameworks from the CLI with zero config. No adding adapters. No editing configs. No wrangler.toml! It's all done automatically. Experimental now, with 10 frameworks supported today. developers.cloudflare.com/changelog/20...

made a thing rsc-playground.pages.dev

I can't remember the last time a Safari release caused so much buzz in the web dev community. Half my feed seems to be excited posts about it. It's a good one!

ECMA has just published the first edition of ECMA-429: the Minimum Common Web API, defining a baseline set of platform APIs for browser and JavaScript server runtimes. An important milestone. Well done to @jasnell.me and WinterTC for getting this across the line.

Annual reminder that Time Person of the Year isn't supposed to be the best person of the year, it's the person who influenced the events of the year "for better or worse". By that criterion, 2001 was the worst decision, and 1938 was correct.

A chance to hire an Astro core maintainer! Yan would be an incredible hire for anyone who needs an Astro expert, or someone with experience leading a very active OSS community. He'll also track down every tiny error in grammar or punctuation in your docs. Those misused commas don't stand a chance.

The @cloudflare.social threat intelligence team have published this great blog with a really detailed breakdown on the exploitation activity against React and Next.js. Some massive numbers of attempts, as well as confident attribution of the attacks as mostly coming from Chinese state actors.

You know the drill: upgrade right now. These aren't as serious as last week's RCE, but they're still bad. Platforms are blocking these, but once again you shouldn't rely on it.

My clever wife has written a book that's being published in the UK by Faber in April. As one of the few people who has already read it, I can say in a totally unbiased way that it's really good and interesting. Wolves and hares and will-o'-the-wisps! Pre-order it from your local bookshop! #booksky

This is great! Built with Astro too 🚀

Why yes, I did spend £50 to go to the cinema yesterday to watch a movie that's going to be on Netflix on Thursday. I have no regrets.

If you are running a vulnerable Next.js or RSC app behind Cloudflare or other WAF, but your origin is still accessible directly from the internet then you are not protected! Attackers are iterating IP addresses so you will probably be found. Upgrade right now!

The original React2shell PoC is now public. This is as bad as it gets – full RCE. You must upgrade now. There are mitigations in place in CDNs including Cloudflare, Netlify, Vercel and AWS (and sites on Workers aren't vulnerable to this sort of attack), but there are variants in the wild now.

Cloudflare was down for half an hour this morning, and it was caused by work we were doing to try to mitigate the React CVE. (Seriously, people: upgrade Next.js/React Router etc right now)

A monster PR

Instead of using low-paid gig economy workers, they're replacing humans with robots.

Well, I'm certainly consistent anisota.net/harvest

Loved BASIC and HyperCard as a kid but didn't know coding could be a job. Trained and worked as a pastry chef. Got 1st gen iMac and discovered web dev and PHP. Quit the chef job and founded a startup at the peak of the dotcom bubble.

Whoa. This would be incredible for frameworks like Astro. Enough to make me reconsider my dream of removing streaming support.

cloudflare's on-duty IT staff bangs on the doors which I have padlocked from the inside as I calmly break open lava lamp after lava lamp and drink the contents

This is a great post mortem, and as someone who only joined Cloudflare last month it's a hell of a lot more understandable than our internal incident channel

Every time a new vision model comes out I test it with some photos like these of docs from my grandfather's papers, asking them to transcribe and translate them. They all lie and make shit up. Gemini 3 is the first one that gives a response that matches the context that I know about them.

We wrote a blog! If you're curious about how remote bindings work in Wrangler, give it a read: blog.cloudflare.com/connecting-t...

I recently bought a new kettle, and every day since I first searched for one it now sends me one of these. A reasonable guess, but every day?

Side note to this – and this is a good article – but it's amazing that the VPN affiliate link business is so lucrative that TechRadar employs a "VPN Managing Editor" to write all these articles to rank on "best VPN" searches

Claude has really taken my "don't bowlderise" custom instruction to heart and become surprisingly foul-mouthed when "annoyed". This one is in response to asking it to analyse an article about changes to salary sacrifice NI relief limits.

Gecko: Intent to prototype and ship: Navigation API

I create quite a lot of libraries, and use a template repo for them., including a CLAUDE.͏͏md with instructions to set the repo up and then delete that section. My latest addition says to use the gh cli to configure repo settings and rules, including adding secrets from 1pass. It works great!

My headless Mac mini m1 has found a new life: screen sharing non-work stuff to my ultra locked-down work MBP. Work on my two external monitors, personal stuff fullscreen shared to the laptop monitor.

Watching @jess.sh's Vitest browser mode talk at @viteconf.org immediately made me want to build an Astro renderer. Testing isolated Astro components in real browsers is a real prize. It took a bit of work, and still does't support Vitest 4, but I have I working package. Give it a try:

Astro is growing faster than TypeScript, but the Roblox kids are beating us all

My ViteConf talk is up. A chance to see some of the stuff coming up in Astro

Some of you got it! I'm super excited to share that I'm joining @cloudflare.social to help it be the best place to deploy every web framework. No bias to Astro, I promise!

Early start for an exciting day. Where could I be going?

These are totally legitimate real accounts in Gaza that just happen to craft posts that abuse a Bluesky bug to invisibly mention 651 accounts.

Some personal news: today is my last day as Astro framework lead! I will still be on the Astro core team, but I'm no longer an Astro employee. I am incredibly grateful to @fks.bsky.social for giving me this role: it's been a joy and honour. As for what's next? Well, I'll share that soon...

I have a new RFC up for route caching in Astro. It's our answer to ISR etc, but it has some important differences that I think would make it really powerful. If you saw my talk at ViteConf you will have seen a preview, but this has a lot more detail on implementation and API. I'd love feedback!

This is a great post

I am far more positively-inclined to AI than the median Bluesky user, but even I believe the world would be better if Sora didn't exist.

Smooth

I may not have been to many in-person conferences recently, but ViteConf had considerably more drones flying 50cm above people's heads then I would have expected (2).

In Amsterdam this weekend? Come join us for drinks and games!

My entry for the @nordcraft.com bad UX date picker challenge. Drag the Earth around the sun to pick the date. Bad, enough for you @whitep4nth3r.com?