Senior Laravel Engineer
Author: drweb
GitHub has made its overhauled pull requests dashboard generally available, giving developers and engineering managers a single view at github.com/pulls to track, prioritize, and act on the pull requests that need their attention.The dashboard moves out of public preview after a rollout that started in March 2026 and shifted to opt-out preview in April. The centerpiece is Inbox, a home base that surfaces review requests, pull requests that need fixing due to CI failures or new comments, and pull requests that are ready to merge or sitting in the merge queue. Developers can reorder or hide sections to fit their…
A team I worked with was proud of their data quality checks, and they had earned it. Dozens of validations, all thoughtful, all catching real problems. Then a bad batch sailed straight into the published table, got read by three dashboards, and set off the usual fire drill.The checks were not wrong. Every one of them fired. They fired at the very end of the pipeline, after the data was already published, which is a bit like wiring your smoke detector to go off the morning after the fire. Technically accurate. Not much help.A check is only as useful as…
IBM has rolled out a significant update to Bob, its agentic software development platform, adding multi-agent coordination, built-in spend tracking, and three prebuilt workflows aimed at some of the toughest modernization jobs in enterprise IT: Mainframe COBOL, IBM i, and large Java codebases.The update lands as most engineering organizations are running into a problem nobody predicted a year ago: AI made writing code the easy part. A recent GitLab survey found that 85% of respondents agreed that AI has shifted the main bottleneck from writing code to reviewing and validating code. IBM cites that same data point in its announcement,…
Over the past several weeks, many of you have probably noticed subtle hints throughout my blog. A few references to new technologies. A growing interest in AWS and PostgreSQL. Discussions around new automation ideas. Even a few comments about learning new systems.If you picked up on those clues, you were right.Today, I’m excited to officially share that I’ve joined ESO as a Senior Database Administrator.Changing employers is certainly news, but that’s not really what this post is about.This post is about growth.It’s about continuing to challenge myself as a database professional and embracing opportunities to learn, build, and solve new…
Docker Captain Jul 1, 2026 Why AI Agents Need Isolation Learn why AI agent isolation matters, how Docker SBX enables safer AI workflows, and how Sandbox Kits help. Written by Docker Captain Karan Verma. Read now
Learn Python with a Book Designed for Beginners Hello! I’m Michael Driscoll, and I’m excited to announce the third edition of Python 101. For years, Python 101 has helped readers take their first steps into programming. Whether you’re a complete beginner, a student, or someone looking to learn Python for work or personal projects, the goal has always been the same: make learning Python approachable, practical, and enjoyable. Python has continued to evolve, and it’s time for the book to evolve with it. This Kickstarter will help fund the writing, editing, production, and publication of the fully updated third edition.…
Node.js is a JavaScript runtime used to build fast and scalable network applications. It uses an event-driven, non-blocking I/O model with single-threaded asynchronous programming, allowing it to handle many requests efficiently. A web application framework provides a set of libraries, tools, and helpers that make it easier to build web applications without writing everything from scratch. When choosing a framework, the most important things to consider are its architecture, ease of customization, extensibility, built-in security features, and how well it integrates with the rest of your technology stack. We first published this roundup in 2023, but the Node.js framework ecosystem…
TL;DR — Key TakeawaysCoordinated threat campaigns are quietly targeting GitHub organizations using the platform’s API and dormant “ghost” accounts to map developers, repositories, and projects.Most activity looks legitimate, making it difficult to detect. Attackers often use public API endpoints, clean authentication, or no authentication at all.Ghost accounts help attackers blend in. More than 50 long-dormant GitHub accounts were reactivated after 2–5 years to evade suspicion while conducting reconnaissance.A cluster of coordinated and overlapping campaigns that have been running for several months is abusing GitHub’s API and leveraging dozens of “ghost” accounts that have been dormant for years to map organizations…
If you’ve ever watched an AI coding agent mess up your Obsidian vault, this can help. I keep my second brain in Obsidian on the same Rocky Linux system I use for everything else. For months, I let Claude Code work with my notes without telling it how Obsidian actually works. It would create regular Markdown links instead of wikilinks, ignore callout blocks, and have no idea what a .base file was when it came across one. The notes still opened in Obsidian, but they lost the features that make Obsidian so useful. Then I found obsidian-skills, a small repository…