Author: drweb

May 12, 2026 Docker AI Governance: Unlock Agent Autonomy, Safely Introducing Docker AI Governance: centralized control over how agents execute, what they can reach on the network, which credentials they can use, and which MCP tools they can call, so every developer in your company can run AI agents safely, wherever they work. Your laptop is the new prod Agents are the biggest productivity unlock… Read now

Read More
SQL

I almost did not publish this book.Not because I doubted the ideas. Because I was not ready for anyone to see how much of it was about me. And, I suspect, about you.For twenty-five years my job was to make slow things fast. Queries, indexes, servers. I was good at it, and I built a quiet pride on being good at it. I never imagined that a fast thing would be the one to break my heart a little.I have written more than five thousand articles. Not one of them ever kept me awake at night. This one did, for…

Read More
PHP

Together with The PHP Foundation, we’re embarking on an exciting expedition – the first annual State of PHP census that aims to tally the elePHPant population across the world. Come join us! With the help of the community, we’ve designed a comprehensive survey that aims to unearth the PHP developer trends – from years of experience and favorite frameworks to AI preferences and beyond. Our goal is to draw the most representative picture of the PHP ecosystem and the developers behind it, and share insights that will benefit the community and help shape the future direction of PHP. For this…

Read More

Ubuntu Livepatch is a feature that applies kernel security fixes while the system is still running, so you do not need to reboot immediately after every kernel update. Ubuntu Livepatch is useful mainly on servers, where rebooting is not always convenient because it can interrupt services, disconnect users, or require a maintenance window. Livepatch reduces the gap between a security fix being released and it actually protecting the running system. The Linux kernel sits at the core of the system and is a frequent target for security issues, because when Canonical releases a kernel update, you would normally install it…

Read More

A vulnerability in Anthropic’s Claude Code development tool could have been exploited by threat actors to expose credentials and other secrets within CI/CD workflows, the latest example of the security risks to software development pipelines posed by such AI coding agents.Microsoft security researchers Dor Edry and Amit Eliahu wrote in a report that the now-patched flaw in Claude Code GitHub Action could have been manipulated through a prompt injection attack in which the bad actor inserts malicious commands that an AI agent would follow, exposing secrets such as issue bodies, pull request descriptions, and comments.This form of a prompt injection…

Read More

Internal developer platforms have become a tangled web of orchestration tools, CI runners and deployment systems that rarely speak the same language. Every new integration adds another translation layer, and as AI-driven automation starts to plug into those pipelines, the lack of a shared vocabulary for what is actually happening across the software delivery lifecycle becomes a real bottleneck. Without a consistent way to describe build, test and deploy events, both humans and agents are left stitching together logs and webhooks from systems that were never designed to interoperate.Dadisi Sanyika of the Continuous Delivery Foundation sat down with Mike Vizard…

Read More

In previous articles on this website, you learned how to extract EXIF data from JPG image files. This week, you will learn how to get similar data from the TIFF image format. The TIFF format also has its metadata. Pillow provides a similar dictionary for TIFF images in its TiffTags module. If you need a TIFF image, you can use this one, which is a cover from one of the author’s other books on ReportLab: You can create your own TIFF metadata extractor utility by making a new file named tiff_metadata.py and adding this code to it: # tiff_metadata.py from PIL import Image from…

Read More

Let’s say you’ve got some interactive element. This element works perfectly fine in just HTML, which is the foundation of progressive enhancement. And now, in your JavaScript, the functionality this button provides isn’t really necessary anymore, and your plan is to hide this element. What is the best way to accomplish this? I think it’s good to think of this abstractly, but if what I’ve presented above is so abstract that it makes it hard to think about, here are some examples: A “Load More” anchor link that loads the next set of items (i.e. Load More) which you don’t…

Read More

Datadog this week significantly extended the reach of its Bits artificial intelligence (AI) framework to enable DevOps teams to automatically discover and resolve issues based on the telemetry data collected by its observability platform.Announced at the company’s DASH 2026 conference, Datadog is now embedding an AI coding tool, dubbed Bits Code, across its entire portfolio that proposes remediations and generates the code to resolve issues based on the data residing in the Datadog observability platform.There is also a Bits Release agent that verifies every code change by analyzing the intended impact of the change, including generating a validation plan, running…

Read More

I’m just hearing about the closedby=”any” attribute/value for <dialog>. HTML popovers have this “light dismiss” behavior where you can “click outside” to close them, but not dialogs (until this). I forked a previous demo to try it and it works great (in Chrome & Firefox, just waiting for Safari). I’ve been using a custom <ClickOutsideDetector /> element for ages, so this is a welcome feature. CodePen Embed Fallback

Read More