TechLogHub Blog — Page 2 of 25
Insights, guides, and product strategy for builders and product teams.
TypeScript 7.1 Beta: The API That Lets You Leave TypeScript 6
TypeScript 7.1 Beta adds the compiler API 7.0 lacked and content mappers for Vue and Svelte files. What changed, what breaks, and when to drop TypeScript 6.
GitHub Apps Can Now Create Repos Without Admin Rights
GitHub's new repository_creation and installation_repositories permissions let apps and fine-grained PATs do what used to need a classic PAT. What changed.
GitHub Actions Lockfiles: What actions.lock Pins and What It Doesn't
GitHub Actions now supports a workflow lockfile, actions.lock, in public preview. What it pins, how it beats SHA pinning, and the gaps to know before rollout.
pg_vectorsearch vs pgvector HNSW: Read the Benchmark Right
Tiger Data's pg_vectorsearch builds a 100M-vector Postgres index in 49 minutes versus 42 hours for HNSW. What the benchmark proves, and what it doesn't.
uv 0.13 Breaking Changes: What Will Fail in Your CI
uv 0.13.0 defaults to Python 3.15, enforces --require-hashes in constraints files and switches tar backends. What breaks in CI and how to fix each one.
pnpm 12.11 Can Install Agent Skills From Your Dependencies
pnpm 12.11 links agent skills from direct dependencies into .claude/skills after pnpm approve. What the new permissions setting covers and how to review it.
Google Now Wants Your AI-Written Metadata Fact-Checked Too
Google's 1 October 2026 edit says to fact-check all AI content before publishing, including titles, meta descriptions, structured data and alt text.
Most Package Managers Don't Verify What They Download
Trail of Bits tested 25 package managers against a tampered registry. Only Go and vcpkg checked every download. Here are the flags that close the gap.
Google's UGC Fresh Data Program: Who Qualifies and Who Shouldn't
Google opened a separate pipeline for fresh user-generated content. Most developer sites won't qualify, but the requirements are a solid checklist anyway.
Meta's New Crawl Terms: What robots.txt Still Controls
Meta's commercial terms change on October 30. Here is what they allow, what Meta revised, and how to set robots.txt for each of Meta's five crawlers.
pnpm Now Speaks Turborepo's Remote Cache API
pnpm 12.12 shares build output through any Turborepo Remote Cache server, but signs artifacts with P-256 keys instead of a shared HMAC secret.
Copilot Code Review Bills the Pull Request Author
Copilot code review now defaults to Balanced effort, documented at $0.25 to $5 of AI credits per review, and the credits are billed to the PR author.
Your SBOM Depends On Which Tool Generated It
Two 2026 studies found SBOM generators produce different dependency sets for the same code, and the cause is specification ambiguity, not bugs.
Deno Joins Cloudflare: One Year of Releases
Cloudflare hired the Deno team. The runtime gets 12 months of patches, Deno Deploy shuts down in six months, JSR survives. What to do, by use case.
Python 3.15 Lazy Imports: Which Mode Pays
Python 3.15 shipped PEP 810 lazy imports on 9 October 2026. The keyword is safe and slow; the global all mode is where the 50-70% startup numbers come from.
Version Comparison Has No Standard
SemVer defines no range syntax. Debian, PEP 440, npm, Maven, RPM and Go each order versions differently, and the cross-ecosystem spec is still unpublished.
A local model in Copilot CLI is not local privacy
Copilot CLI 1.0.94-0 discovers local Ollama models, but GitHub says that does not enable offline mode or disable telemetry. Those are separate settings.
node:sqlite renamed DatabaseSync to Database
Node 26.11.0 renamed DatabaseSync to Database. The old names survive as documentation-only aliases, so no code breaks and no runtime warning fires.
pnpm 12.10 can install without a node_modules tree
pnpm 12.10.0 adds an experimental loaded nodeLinker that reads packages from the content-addressable store. It ships with an exclusion list for a reason.
Copilot Local Sandboxing Is GA and Off by Default
GitHub called local Copilot sandboxing generally available on 7 October. Its own docs still say public preview, experimental, and off by default.
Showing 20 of 485 articles