#deprecation-warnings

[ follow ]
Software development
fromMedium
1 day ago

Async Logging Is Not a Silver Bullet - What Actually Limits Performance

Async logging redistributes costs rather than reducing them, impacting performance in different ways depending on implementation.
#java
Java
fromInfoQ
21 hours ago

Java News Roundup: JDK 27 Release Schedule, Hibernate, LangChain4j, Keycloak, Helidon, Junie CLI

Java updates include JEP 532 for primitive types in patterns, JDK 27 release schedule, and Jakarta EE 12 discussions.
fromDevOps.com
2 months ago
Java

Survey Surfaces Massive Amount of Java Technical Debt

Dead and unused code and frequent Java CVEs reduce developer productivity; Java remains widely used with growing AI use and many migrating from Oracle Java.
Java
fromInfoQ
21 hours ago

Java News Roundup: JDK 27 Release Schedule, Hibernate, LangChain4j, Keycloak, Helidon, Junie CLI

Java updates include JEP 532 for primitive types in patterns, JDK 27 release schedule, and Jakarta EE 12 discussions.
Artificial intelligence
fromInfoQ
4 days ago

Choosing Your AI Copilot: Maximizing Developer Productivity

Most developers are at an intermediate level of AI-assisted coding, with around 50% generating little to no code using AI.
fromTheregister
6 days ago

Stack Overflow abandons redesign beta after criticism

We will be retiring the beta shortly and will be removing the button to get to it and ceasing support for it. The beta garnered negative feedback from the Stack Overflow community, including observations that it looked more like a general discussion site such as Reddit and was losing the essence of what made it successful: precise questions and community-validated answers.
Online Community Development
DevOps
fromDevOps.com
6 days ago

Why Most DevSecOps Pipelines Fail at Runtime Security (not Build Time) - DevOps.com

Runtime risk arises from configuration and infrastructure changes post-deployment, necessitating DevSecOps to enhance security earlier in the delivery process.
JavaScript
fromInfoWorld
6 days ago

Rust team warns of WebAssembly change

Undefined symbols in WebAssembly can lead to unexpected behavior and errors, necessitating better diagnostics for developers.
#github
Software development
fromInfoQ
1 day ago

GitHub Copilot CLI Reaches General Availability

GitHub's Copilot CLI is now generally available, enhancing AI-assisted development in software through natural language commands and autonomous workflows.
Information security
fromDevOps.com
1 week ago

GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents - DevOps.com

GitHub expanded secret scanning with 37 new detectors, enhanced push protection, and introduced scanning for AI coding agents in March.
fromInfoWorld
2 months ago
Software development

GitHub eyes restrictions on pull requests to rein in AI-based code deluge on maintainers

GitHub is considering tools to let maintainers delete or disable pull requests and add AI filters to curb a surge of low-quality, AI-generated contributions.
fromTheregister
2 months ago
Software development

GitHub ponders kill switch for pull requests to stop AI slop

GitHub is confronting a surge of low-quality, often AI-generated contributions that burden open-source maintainers and is planning tools and restrictions to mitigate the problem.
Software development
fromInfoQ
1 day ago

GitHub Copilot CLI Reaches General Availability

GitHub's Copilot CLI is now generally available, enhancing AI-assisted development in software through natural language commands and autonomous workflows.
Information security
fromDevOps.com
1 week ago

GitHub Adds 37 New Secret Detectors in March, Extends Scanning to AI Coding Agents - DevOps.com

GitHub expanded secret scanning with 37 new detectors, enhanced push protection, and introduced scanning for AI coding agents in March.
fromInfoWorld
2 months ago
Software development

GitHub eyes restrictions on pull requests to rein in AI-based code deluge on maintainers

Ruby on Rails
fromRubyflow
1 week ago

The Signals That Predict a Difficult Rails Upgrade

Rails upgrades are challenging due to accumulated system structure, not the framework itself.
Apple
fromwww.businessinsider.com
2 weeks ago

Developers warn flood of vibe-coded apps could slow Apple approvals

Artificial intelligence simplifies app development but may lead to longer approval times on the App Store.
#nodejs
Node JS
fromThe Cyber Express
2 weeks ago

Node.js Fixes CVE-2026-21637 And Critical Flaws Now

Node.js has released security updates addressing multiple vulnerabilities, including critical issues in TLS error handling and HTTP request processing.
Node JS
fromDEV Community
3 weeks ago

I Scanned 6 Popular Node.js Repos for Undocumented Environment Variables. Here's What I Found.

Many popular Node.js projects lack comprehensive documentation for process.env variables, leading to potential configuration issues.
#aspnet-core
Ruby on Rails
fromTheregister
1 week ago

Ruby Central seeks closure with RubyGems fracture report

Ruby Central published a report on the September 2025 RubyGems fracture, detailing governance issues and future steps for community involvement.
Agile
fromInfoQ
2 weeks ago

AI Coding Assistants Haven't Sped up Delivery Because Coding Was Never the Bottleneck

AI coding tools increase individual developer output, but project-level gains are modest due to bottlenecks in specification and verification requiring human judgment.
fromJames Bennett
3 weeks ago

Rewriting a 20-year-old Python library

Akismet launched in 2005 as a web service to classify user-generated content as spam or not, quickly gaining popularity among bloggers facing spam issues.
Privacy technologies
Python
fromDEV Community
3 weeks ago

I Analyzed the Readability of 10 Popular Developer Documentation Sites

Readability of developer documentation is crucial; many popular docs score below standard readability levels.
#ai
Information security
fromThe Hacker News
1 week ago

Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

Anthropic confirmed a human error led to the accidental release of Claude Code's internal source code, but no sensitive data was exposed.
Software development
fromTheregister
6 days ago

AI slop got better, so now maintainers have more work

AI-generated reports improve quality but increase workload for maintainers, necessitating more reviewers in open-source projects.
Information security
fromThe Hacker News
1 week ago

Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

Anthropic confirmed a human error led to the accidental release of Claude Code's internal source code, but no sensitive data was exposed.
Software development
fromTheregister
6 days ago

AI slop got better, so now maintainers have more work

AI-generated reports improve quality but increase workload for maintainers, necessitating more reviewers in open-source projects.
Software development
fromInfoQ
5 days ago

State of Play: AI Coding Assistants

Context engineering has evolved significantly in AI coding, focusing on curating information for better results with coding agents.
#ai-coding-tools
DevOps
fromInfoQ
3 weeks ago

Sonatype Launches Guide to Enhance Safety in AI-Assisted Code Generation

Sonatype Guide ensures AI-generated code uses safe, valid, and maintainable dependencies through real-time security intelligence and optimized dependency management.
DevOps
fromInfoQ
3 weeks ago

Sonatype Launches Guide to Enhance Safety in AI-Assisted Code Generation

Sonatype Guide ensures AI-generated code uses safe, valid, and maintainable dependencies through real-time security intelligence and optimized dependency management.
fromRubyflow
3 weeks ago

The tool I wish I had 25 apps ago

Every iOS app I've shipped over the last nine years started the same way: a Rails developer with a great web app, users who want it in the App Store, and weeks spent on Xcode, signing certificates, and Swift boilerplate that has nothing to do with the actual product.
Software development
fromInfoWorld
5 days ago

GitHub Copilot CLI adds Rubber Duck review agent

Rubber Duck enhances problem-solving in coding, particularly for complex issues, achieving notable performance improvements with Claude Sonnet 4.6 and GPT-5.4.
#claude-code
UX design
fromMedium
1 month ago

Claude Code Best Practices

Plan before executing when using Claude Code to avoid spending excessive time fixing errors and redirecting the AI toward correct solutions.
UX design
fromMedium
1 month ago

Claude Code Best Practices

Plan before executing when using Claude Code to avoid spending excessive time fixing errors and redirecting the AI toward correct solutions.
Software development
fromDevOps.com
1 week ago

Why Code Validation is the Next Frontier - DevOps.com

Shared staging environments are inadequate for modern development; isolated, on-demand setups are needed for effective validation.
Node JS
fromDEV Community
3 weeks ago

Why I Stopped Maintaining .env.example by Hand

A new tool automatically discovers environment variables used in Node.js code to prevent stale .env.example files from causing deployment failures.
Software development
fromMedium
1 week ago

Zero-Effort Production Debugging: How I Automated Bug Fixes for My Side Project

Automating bug fixes with an AI agent streamlines maintenance for full-stack applications, enabling zero-effort management of errors.
Artificial intelligence
fromZDNET
1 month ago

Why AI is both a curse and a blessing to open-source software - according to developers

AI can benefit open source when properly applied for security analysis, but causes harm when generating low-quality automated bug reports that overwhelm maintainers with false positives.
Software development
fromDevOps.com
1 week ago

The Trust Tax Framework: Measuring Developer Confidence in CI/CD Systems - DevOps.com

Test infrastructure credibility is crucial; developers lose trust when re-run rates exceed 30% and override rates surpass 5%.
fromInfoWorld
1 month ago

Ruby sinking in popularity, buried by Python - Tiobe

The main reason for Ruby's drop is Python's popularity. There is no need for Ruby anymore. Ruby was the Tiobe language of the year in 2006, having displayed the highest growth rate in popularity that year, it is now close to dropping out of the top 30, according to Tiobe CEO Paul Jansen.
Ruby on Rails
Node JS
fromTechzine Global
1 month ago

New npm browser npmx addresses shortcomings of npmjs

Npmx, an open-source alternative interface to npm's official website, addresses widespread developer dissatisfaction with the current package registry's user experience and presentation of package information.
Software development
fromArs Technica
2 weeks ago

Mozilla dev's "Stack Overflow for agents" targets a key weakness in coding AI

cq aims to enhance coding agents' efficiency by enabling knowledge sharing and addressing outdated information and resource consumption issues.
Philosophy
fromMedium
1 month ago

Why code is not the source of truth

Design specifications and blueprints, not implementation code, are the authoritative source of truth; implementation is derived from and judged against originating design authority.
Software development
fromInfoQ
3 weeks ago

Stripe Engineers Deploy Minions, Autonomous Agents Producing Thousands of Pull Requests Weekly

Minions are autonomous coding agents at Stripe that generate production-ready pull requests with minimal human intervention.
Web development
fromVue.js Jobs
2 months ago

Senior Software Full-Stack Engineer - (C#.Net/ Vue.js/Typescript) at Codurance - VueJobs

Full-Stack Engineer role requiring C#.Net, TypeScript, React, and AWS experience to build scalable, maintainable web applications within a transparent, collaborative, learning-focused company.
fromInfoWorld
2 months ago

Are you ready for JavaScript in 2026?

React tutorial: Get started with the React libraryDespite the endless churn of new frameworks, React remains the quintessential reactive engine. This updated guide walks you through the fundamentals of React development, including a This is Spinal Tap variant on the canonical counter application. Sometimes, your components just need to go to 11.
Web frameworks
Software development
fromMedium
3 weeks ago

From Concept to Production: The Complete Guide to XML Prompt Engineering for Software Developers

Treat LLMs as compilers, not chatbots, using Structured XML Prompting to generate professional-grade code through a five-stage AI-assisted development cycle with rigid constraints.
Web development
fromInfoWorld
2 months ago

PHP language still relevant, advocate insists

PHP remains widely used and relevant in 2026, powering many websites and integrating well with modern tools and performance improvements.
fromComputerworld
2 months ago

Jamf has a warning for macOS vibe coders

But like everything else in life, there will always be a more powerful AI waiting in the wings to take out both protagonists and open a new chapter in the fight. Acclaimed author and enthusiastic Mac user Douglas Adams once posited that Deep Thought, the computer, told us the answer to the ultimate question of life, the universe, and everything was 42, which only made sense once the question was redefined. But in today's era, we cannot be certain the computer did not hallucinate.
Artificial intelligence
fromTechzine Global
1 month ago

Go developer questions effectiveness of Dependabot

Dependabot sounded the alarm on a large scale. Thousands of repositories automatically received pull requests and warnings, including a high vulnerability score and signals about possible compatibility issues. According to Valsorda, this shows that the tool mainly checks whether a dependency is present, without analyzing whether the vulnerable code is actually accessible within a project.
Information security
Software development
fromInfoWorld
1 month ago

The AI coding hangover

Replacing developers with LLMs creates brittle, unmaintainable systems with hidden costs rather than eliminating complexity, as enterprises discover engineering judgment cannot be automated away.
Artificial intelligence
fromInfoQ
2 months ago

Working with Code Assistants: The Skeleton Architecture

Combining Vertical Slice architecture with Dependency Inversion and a Skeleton of base classes constrains AI code assistants' context, producing safer, consistent, and maintainable generated code.
Information security
fromThe Hacker News
1 month ago

Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware

A coordinated campaign uses fake Next.js repositories and job assessment lures to trick developers into executing malicious code that establishes persistent command-and-control access.
Software development
fromInfoWorld
1 month ago

Claude Code adds code reviews

Anthropic launched Code Review for Claude Code, a multi-agent system that identifies bugs in pull requests with high accuracy, finding issues in 84% of large pull requests while maintaining less than 1% false positive rate.
fromSecurityWeek
1 month ago

How to Eliminate the Technical Debt of Insecure AI-Assisted Software Development

This extends to the software development community, which is seeing a near-ubiquitous presence of AI-coding assistants as teams face pressures to generate more output in less time. While the huge spike in efficiencies greatly helps them, these teams too often fail to incorporate adequate safety controls and practices into AI deployments. The resulting risks leave their organizations exposed, and developers will struggle to backtrack in tracing and identifying where - and how - a security gap occurred.
Artificial intelligence
Information security
fromTechzine Global
2 months ago

Misuse of VS Code tasks poses risk to developers

VS Code tasks.json can automatically run commands when a folder is opened, enabling supply-chain attacks that execute malicious, persistent code across platforms.
fromVerou
3 months ago

Web dependencies are broken. Can we fix them? * Lea Verou

Dear JS ecosystem, I love you, but you have a dependency management problem when it comes to the Web, and the time has come for an intervention. No, this is not another rant about npm's security issues. Abstraction is the cornerstone of modern software engineering. Reusing logic and building higher-level solutions from lower-level building blocks is what makes all the technological wonders around us possible. Imagine if every time anyone wrote a calculator they also had to reinvent floating-point arithmetic and string encoding!
Node JS
Artificial intelligence
fromInfoWorld
2 months ago

Output from vibe coding tools prone to critical security flaws, study finds

Popular AI code-generation tools frequently produce insecure code, including critical API authorization and business-logic vulnerabilities, requiring careful debugging and context-aware review.
#ai-coding-agents
Software development
fromInfoQ
1 month ago

New Research Reassesses the Value of AGENTS.md Files for AI Coding

AGENTS.md context files often hinder rather than help AI coding agents, with LLM-generated files reducing task success rates by 3% and increasing costs by over 20%.
Software development
fromInfoQ
1 month ago

New Research Reassesses the Value of AGENTS.md Files for AI Coding

AGENTS.md context files often hinder rather than help AI coding agents, with LLM-generated files reducing task success rates by 3% and increasing costs by over 20%.
fromTechzine Global
2 months ago

Critical vulnerability in React Native development tool actively exploited

Attackers are actively exploiting a critical vulnerability in React Native's Metro server to infiltrate development environments. The vulnerability, CVE-2025-11953, allows malicious actors to execute code on Windows and Linux systems via exposed development servers. Metro is React Native's default JavaScript bundler during application development and testing. In many configurations, this server runs locally, but by default, Metro can also bind to external network interfaces. This makes HTTP endpoints available that are intended for development. It is precisely this functionality that now constitutes an attack vector,
Information security
Artificial intelligence
fromDevOps.com
1 month ago

GitHub Tests AI Agents to Handle Repository Maintenance

Agentic Workflows embed AI agents into GitHub Actions to automate routine repository maintenance, translating plain-language Markdown into executable automation while preserving human review.
Software development
fromDevOps.com
1 month ago

When AI Gets It Wrong: The Insecure Defaults Lurking in Your Code - DevOps.com

Generative AI accelerates code development but introduces security vulnerabilities because AI models learn insecure patterns from training data rather than understanding security principles.
fromSecurityWeek
2 months ago

VS Code Configs Expose GitHub Codespaces to Attacks

It allows developers to test code, review pull requests, and more, but also exposes them to attacks via repository-defined configuration files, Orca says. "Codespaces is essentially VS Code running in the cloud, backed by Ubuntu containers, with built-in GitHub authentication and repository integration. This means any VS Code feature that touches execution, secrets, or extensions can potentially be abused when attackers control the repository content," the cybersecurity firm notes.
Information security
#ai-generated-code
fromPybites
1 month ago

How Even Senior Developers Mess Up Their Git Workflow - Pybites

There are few things in software engineering that induce panic quite like a massive git merge conflict. You pull down the latest code, open your editor, and suddenly your screen is bleeding with <<<<<<< HEAD markers. Your logic is tangled with someone else's, the CSS is conflicting, and you realise you just wasted hours building on top of outdated architecture.
Software development
Software development
fromMedium
1 year ago

How Bit Reduces Development Costs

A composable, well-documented codebase increases reuse, reduces bugs, and enables AI and non-technical stakeholders to contribute effectively.
Software development
fromInfoWorld
2 months ago

When writing code is no longer the bottleneck

Writing application code is the primary bottleneck in software development; removing it via agentic coding shortens development timelines to days or weeks.
Software development
fromDevOps.com
2 months ago

Breaking the Code Review Bottleneck Created By AI

Qodo's multi-agent LLM code-review platform uses recall and memory to reach near-senior engineer accuracy, reducing DevOps code-review bottlenecks amid rising AI-generated flawed code.
Software development
fromInfoQ
1 month ago

TSSLint 3.0: Final Major Release with Reduced Dependencies

TSSLint v3 reduces dependencies, improves migration from TSLint/ESLint, adds compatibility layers and tooling, and requires Node.js 22.6.0 or newer.
Software development
fromInfoWorld
2 months ago

Go developers mixed on AI coding tools - survey

Most Go developers use AI-powered development tools, but satisfaction with those tools is moderate; 91% report satisfaction with the Go language.
fromTheregister
2 months ago

VS Code for Linux may be secretly hoarding trashed files

The reason for this is Snap - a Linux application packaging format - creates a local Trash folder for each VS Code version, one that's separate from the system-managed Trash, according to a VS Code bug report dating back to November 11, 2024. Not only that, but Snap keeps older versions of VS Code after updates, potentially multiplying the number of local Trash folders and the trashed-but-not-deleted files therein. Emptying the system Trash folder doesn't affect the local instances.
Software development
[ Load more ]