Chainguard, a company that provides a repository of trusted container images, has announced the launch of a new collection of trusted builds for JavaScript dependencies. According to Chainguard, recent attacks against the JavaScript package manager npm have underscored the need for more secure mechanisms to consume JavaScript libraries. The company says that public registries do … continue reading
AWS has announced the launch of its open source Nova Act extension, which allows developers to build browser automation agents in their IDE, reducing the need to switch between dev and test environments. With the new extension, developers can use natural language to describe their workflow and then the Nova Act extension will generate an … continue reading
Microsoft has announced that NuGet now supports Trusted Publishing for publishing packages from GitHub Actions. Trusted Publishing is an authentication method that utilizes the OpenID Connect (OIDC) standard. Rather than using long-lived API tokens when publishing software packages, an OIDC identity token can be exchanged for a short-lived API token. It has been adopted by … continue reading
A number of data companies—including Snowflake, Salesforce, BlackRock, dbt Labs, and RelationalAI—have announced the formation of a new open source initiative to create a vendor- neutral standard for defining and sharing semantic metadata. The Open Semantic Interchange has three main goals: enhance interoperability across tools and platforms, accelerate adoption of AI and BI applications, and … continue reading
Syncfusion, a company that provides a library of UI components, has announced the release of Essential Studio 2025 Volume 3. For this latest release, the company has reorganized the entire suite, splitting it up into multiple smaller solutions so that developers who only use a subset of the features can get what they need without … continue reading
In response to the recent supply chain attack in the JavaScript package manager npm, GitHub has made a few changes that will enable stronger security. The attack on the npm ecosystem was caused by a worm, named Shai-Hulud, that infects and republish other packages with its malware to spread it across the npm ecosystem. “By … continue reading
Digital.ai has created a new product that will make white-box cryptography accessible to all developers, not just cryptography experts. White-box cryptography is a technique that adds cryptographic protections directly into application code, making it hard for attackers to obtain secret information, like cryptographic keys. Digital.ai’s White-box Cryptography Agent provides access to a white-box cryptography library … continue reading
A quick browse of LinkedIn, DevTok, and X would lead you to believe that almost every developer has jumped on board the vibe coding hype train with full gusto. And while it’s not that far-fetched, with 84% of developers confirming they are currently using (or planning to use) AI coding tools in their daily workflows, … continue reading
A new study from Adaptavist revealed that 42% of knowledge workers are reporting a reduction in motivation at work, leading to a phenomenon dubbed “quiet cracking.” Specifically, 38% of the 4,000 respondents from the UK, US, Canada, and Germany said they felt hopeless about their career advancement prospects, 38% had concerns around job security, 37% … continue reading
OpenAI updates Codex The company released GPT-5-Codex, a variant of GPT-5 that is optimized for Codex, OpenAI’s AI coding agent. It was trained on real-world engineering tasks like building projects from scratch, adding features and tests, debugging, large-scale refactoring, and code reviews. “With these updates, Codex moves closer to what we’ve been building toward all … continue reading
Engineering leadership and executives are out of touch when it comes to software testing and how AI can be applied to the process, according to Sauce Labs’ 2025 Software Testing Vibe Check: Agentic Edition report. 61% of survey respondents—who consisted of 400 testing executives and engineering leaders surveyed in June 2024—said that their top leadership … continue reading
Version 3.0 of the WebAssembly (Wasm) standard is now complete and considered the “live” standard for Wasm. This announcement comes three years after the completion of Wasm 2.0, which had added many features like vector instructions, bulk memory operations, multiple return values, and simple reference types. According to the Wasm W3C Community Group and Working … continue reading
Progress has announced that it is bringing its AI coding assistants to the Telerik and Kendo UI libraries. Previously, the company had added AI assistants to Progress Telerik UI for Blazor and Progress KendoReact. According to the company, with today’s release, it now offers AI coding assistance across all major UI component libraries, including ASP.NET … continue reading
Today at its user conference MongoDB.local NYC, the popular database company announced that the Search and Vector Search capabilities that have been available in the Atlas cloud platform are now available in preview in the Community Edition and Enterprise Server. Previously, customers using self-managed versions of MongoDB would have needed to use a third-party service … continue reading
