並び順

ブックマーク数

期間指定

  • から
  • まで

1 - 14 件 / 14件

新着順 人気順

github disable dependabot pull requestsの検索結果1 - 14 件 / 14件

  • jQuery 4.0.0 BETA! | Official jQuery Blog

    jQuery 4.0.0 has been in the works for a long time, but it is now ready for a beta release! There’s a lot to cover, and the team is excited to see it released. We’ve got bug fixes, performance improvements, and some breaking changes. We removed support for IE<11 after all! Still, we expect disruption to be minimal. Many of the breaking changes are ones the team has wanted to make for years, but co

    • Announcing .NET 10 - .NET Blog

      Today, we are excited to announce the launch of .NET 10, the most productive, modern, secure, intelligent, and performant release of .NET yet. It’s the result of another year of effort from thousands of developers around the world. This release includes thousands of performance, security, and functional improvements across the entire .NET stack-from languages and developer tools to workloads-enabl

        Announcing .NET 10 - .NET Blog
      • Github Actions and Go

        TLDR: See cristalhq/.github build workflow and how it can be used cristalhq/jsn Intro I love open source, and also I love Go. So, a few months ago I decided to build the best CI for Go that I could easily reuse across my projects. This post shares the results. Note: Post is based on version v0.5.0 of cristalhq/.github repository. Github Actions You probably know what GitHub Actions are, and becaus

          Github Actions and Go
        • Open source security at Astral

          Astral builds tools that millions of developers around the world depend on and trust. That trust includes confidence in our security posture: developers reasonably expect that our tools (and the processes that build, test, and release them) are secure. The rise of supply chain attacks, typified by the recent Trivy and LiteLLM hacks, has developers questioning whether they can trust their tools. To

            Open source security at Astral
          • jQuery 3.6.1 Maintenance Release | Official jQuery Blog

            jQuery 3.6.1 has been released! It’s been a while since our previous release. We were looking at fixing some elusive edge cases related to focus and blur, but we never quite got the fix right. If there’s any area of jQuery that’s hard to change, it’s likely related to focus somehow. We’re leaving those as-is for now and will address them in the future, especially since the changes may end up warra

            • Dependabot Updates on Actions for GitHub Enterprise Cloud and Free, Pro, and Teams Users - GitHub Changelog

              Dependabot Updates on Actions for GitHub Enterprise Cloud and Free, Pro, and Teams Users Starting today, developers using GitHub Enterprise Cloud (GHEC) and Free, Pro, and Teams accounts can enable their repositories and/or organizations to run Dependabot updates as an Actions workflow. With this change, the job that Dependabot runs to generate pull requests will run in GitHub Actions. This is the

                Dependabot Updates on Actions for GitHub Enterprise Cloud and Free, Pro, and Teams Users - GitHub Changelog
              • Renovate を使ってほぼ完全自動で依存パッケージをアップデートする

                依存パッケージを自動アップデートすることで、プロジェクトに影響を及ぼす可能性があるケースがあります。 一時期話題になった faker.js や color.js の開発者が意図的に改ざんした事件 は記憶に新しいですね。 「自動で処理する」ということのメリットとデメリットを把握して利用しましょう。 環境 Renovate v34.156.0 GitHub Actions Runner v2.302.1 Ubuntu 22.04.2 LTS (ubuntu-latest) Renovate とは renovatebot/renovate - GitHub package.json や pom.xml、composer.json といった依存パッケージを定義しているファイルを読み取り それらのパッケージに新しいバージョンがないかどうかを確認し 新しいバージョンがあれば依存パッケージ定義ファイルを

                  Renovate を使ってほぼ完全自動で依存パッケージをアップデートする
                • Dependabot user-defined rules for security updates and alerts; enforcement of auto-triage rules and presets for organizations (public beta) - GitHub Changelog

                  Dependabot user-defined rules for security updates and alerts; enforcement of auto-triage rules and presets for organizations (public beta) Auto-triage rules are a powerful tool to help you reduce alert and pull request fatigue substantially, while better managing your alerts at scale. What's changing? Starting today, you can define your own rules to control and enforce Dependabot behaviors across

                    Dependabot user-defined rules for security updates and alerts; enforcement of auto-triage rules and presets for organizations (public beta) - GitHub Changelog
                  • Secure Node.js Applications from Supply Chain Attacks

                    This isn’t another AI-generated blog post about generic security practices. It contains detailed instructions on protecting Node.js applications from supply-chain attacks and describes best practices for security in any programming language. According to the GitHub report, The state of open source and rise of AI in 2023, JavaScript and TypeScript are the #1 and #3 most popular languages hosted on

                      Secure Node.js Applications from Supply Chain Attacks
                    • Visual Studio Code 1.118

                      Follow us on LinkedIn, X, Bluesky | Release date: April 29, 2026 Downloads: Windows: x64 Arm64 | Mac: Universal Intel silicon | Linux: deb rpm tarball Arm snap Welcome to the 1.118 release of Visual Studio Code. This release expands where you can work with Copilot agents and makes them more efficient. Here are the highlights for this release: Remote control: Track and control your ongoing Copilot

                      • JupyterLab Changelog — JupyterLab 4.6.0a1 documentation

                        JupyterLab Changelog# v4.5# JupyterLab 4.5 includes a number of new features (described below), bug fixes, and enhancements. This release is compatible with extensions supporting JupyterLab 4.0. Extension authors are encouraged to consult the Extension Migration Guide which lists deprecations and changes to the public API. Performance and windowing# The default windowing mode is now contentVisibil

                        • Announcing .NET 9 - .NET Blog

                          Today, we are excited to announce the launch of .NET 9, the most productive, modern, secure, intelligent, and performant release of .NET yet. It’s the result of another year of effort on the part of thousands of developers from around the world. This new release includes thousands of performance, security, and functional improvements. You will find sweeping enhancements across the entire .NET stac

                            Announcing .NET 9 - .NET Blog
                          • Rebuilding A Large E-Commerce Website With Next.js (Case Study) — Smashing Magazine

                            Developing with Next.js is amazing, but there are definitely some challenges. The developer experience with Next.js is something you just need to experience. We made the switch from a more traditional integrated e-commerce platform to a headless platform with Next.js. Here are the most important lessons learned while rebuilding a large e-commerce site with Next.js. At our company, Unplatform, we h

                              Rebuilding A Large E-Commerce Website With Next.js (Case Study) — Smashing Magazine
                            • ROUTE06 の「OSS 公開チュートリアル」を公開します - ROUTE06 Tech Blog

                              こんにちは。ソフトウェアエンジニアの id:masutaka26 です。 最近 ROUTE06 では、Giselle と Liam というプロダクトを OSS 化しました。 https://github.com/giselles-ai/giselle https://github.com/liam-hq/liam 本記事では、ROUTE06 の OSS 推進室が OSS 化の際に作成し実際に使用した、「OSS 公開チュートリアル」を公開します。一部、内部リンクへの参照などは削除しています。 👉 ROUTE06 の OSS 推進室は Open Source Program Office (OSPO) として、OSS の活用促進やリスク管理、コミュニティ貢献支援に加え、社内プロダクトやプロジェクトの OSS 化を推進する部門です。 OSS 公開チュートリアル 1. 前準備 2. リポジトリの

                                ROUTE06 の「OSS 公開チュートリアル」を公開します - ROUTE06 Tech Blog
                              1