Why more companies are investing in open source program offices
By our estimation at GitHub, over 30% of Fortune 100 companies have now implemented OSPOs. Here’s what that means for open source.
The importance of improving supply chain security in open source
We think a lot about a high-profile supply chain attack that might cause developers, teams, and organizations to lose trust in open source. That’s why we’re investing in new ways to protect the open source ecosystem.
Bringing greater financial sustainability to open source communities
We know that companies benefit from open source. That’s why we’re making it easier for companies to financially support projects.
Tulip: Schematizing Meta’s data platform
We’re sharing Tulip, a binary serialization protocol supporting schema evolution. Tulip assists with data schematization by addressing protocol reliability and other issues simultaneously. It replaces multiple legacy formats used in Meta’s data platform and has achieved significant performance and efficiency gains. There are numerous heterogeneous services, such as warehouse data storage and vario
Apollo Cache is Your Friend, If You Get To Know It - Shopify
Shopify's Raman Lally delves into the Apollo GraphQL client cache and the life cycle of objects that are cached within it.
Design Systems: Useful Examples and Resources — Smashing Magazine
Everything design systems on accessibility, enterprise design systems, Figma kits, data visualization, motion design, multi-lingual design, naming, ROI calculator and UX writing.
What CSS Do You Absolutely Have to Know in 2022?
Sacha Greif openly wondered whether CSS has gotten to be, you know, too big. With all the goodies that've shipped in browsers the past couple of years —
Rewrite OR to UNION in PostgreSQL queries
Improve queries in PostgreSQL - it is not always possible to rewrite OR to UNION in a query. Find out when it is safe to do manually.
GitHub Enterprise Server 3.7 is now generally available
GitHub Enterprise Server 3.7 is available now, including a single view of code risk, new forking and repository policies, and security enhancements to the management console.
Your organization should run its own Mastodon server
Run your own Mastodon server to control your social media presence
What’s New In Next.js 13? — Smashing Magazine
Let’s talk about Next.js, one of the most well-known React frameworks used for production. From new components to font optimization, Atila shares a quick overview and invites you to join his [Advanced Next.js Masterclass](https://smashingconf.com/online-workshops/workshops/advanced-nextjs-atila-fassina) taking place later this month.
Making a DNS query in Ruby from scratch
Making a DNS query in Ruby from scratch
Reducing Instagram’s basic video compute time by 94 percent
In our constant quest to prioritize efficiency, Instagram’s engineers have developed a way to process new videos that reduces the cost to produce basic video encodings by 94 percent. With this method in place, Meta’s video infrastructure can continue to scale without needing to add more machines. This frees up resources so more people can […]
Practical Steps To Build Transparency In Your Remote Business — Smashing Magazine
Transparency is part of the fabric of many remote businesses. It doesn’t, however, come naturally to everyone, especially if you’ve only recently become remote. In this article, Siobhan takes you through some of the practical ways that you can build transparency within your organization.
How the Brazilian Presidential elections affected Internet traffic
What happens to the Internet traffic of a country when an important election happens. In Brazil, the first round of the Presidential elections brought a 10% decrease in Internet traffic, but the runoff on Sunday had a bigger: 21% drop
Advocating for developers to the US Copyright Office
How GitHub advocated for developer interests at the US Copyright Office technical measures consultations
How GitHub converts previously encrypted and unencrypted columns to ActiveRecord encrypted columns
This post is the second part in a series about ActiveRecord::Encryption that shows how GitHub upgrades previously encrypted and unencrypted columns to ActiveRecord::Encryption.
Reducing BigQuery Costs: How We Fixed A $1 Million Query - Shopify
We discovered a query that nearly cost us $1 million USD a month in BigQuery. Below, we’ll share our tips for lowering costs in BigQuery.
New Smashing Front-End & UX Workshops — Smashing Magazine
What’s the state of HTML Email, Vue.js and Next.js? Would you like to level up with modern CSS? What are new, smart interface design patterns we could use? Let’s figure it all out together with our [brand new online workshops](https://smashingconf.com/online-workshops/) alongside our free community meetups.
Using Vercel comments to improve the Next.js 13 documentation
Help us build the Next.js 13 documentation by commenting directly on the docs themselves.
Cloudflare is not affected by the OpenSSL vulnerabilities CVE-2022-3602 and CVE-2022-3786
Information on CVE-2022-3602 and CVE-2022-3786, and why Cloudflare was not impacted
Some Links About CSS Gradients
Every once in a while, the blogging zeitgiest seems to coalesce around a certain topic and it's like the saved articles in my bookmarks folder are having a
btree vs. BRIN: 2 options for indexing for PostgreSQL data warehouses
How do you index in a data warehouse? See the advantages and disadvantages of btree (AKA B-tree) and BRIN indexes in PostgreSQL.
GitHub partners with Arm to revolutionize Internet of Things software development with GitHub Actions
Developers creating Internet of Things software use a complex stack of software that needs to be custom built into their CI/CD platform. Arm is leveraging the simplicity and scalability of GitHub Actions with a native integration that will revolutionize IoT software development.
GitHub Availability Report: October 2022
In October, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into an incident that impacted Codespaces in September.
Designing Navigation for Mobile: Design Patterns and Best Practices — Smashing Magazine
When designing navigation on mobile, we don’t have to rely on slide-in-menus or nested accordions. We can also use the curtain design pattern, and show multiple levels of navigation at once.
How we handled a recent phishing incident that targeted Dropbox
Game Off 2022 theme announcement
It’s the moment you’ve all been waiting for. Are you ready?
Preview: referencing public code in GitHub Copilot
We will begin to introduce several new capabilities to GitHub Copilot in 2023 to continue delivering responsible innovation and true happiness at the keyboard.
All In for Students: expanding the next generation of open source leaders
We are pleased to announce the expansion of All In for Students! All In for Students introduces college students to open source and provides them with the education, technical training and career development to prepare them for a summer internship in tech.
Putting The Graph In GraphQL With The Neo4j GraphQL Library — Smashing Magazine
If building a GraphQL API backed by a native graph database sounds interesting or at all helpful for the problems you’re trying to solve as a developer, perhaps you’d like to give the open-source [Neo4j GraphQL Library](https://srv.buysellads.com/ads/long/x/TCZPLYDDTTTTTTFR6JINCTTTTTTGVUIVKKTTTTTTCT2NTYYTTTTTTI4BVH7U4JBCKQ466IDGV2IUWESGCV7WALL5QYYE) a try. Let’s take a closer look at the reasons w
Spotify’s Vulnerability Management Platform
We started developing our vulnerability management platform (VMP) at Spotify in Q2, 2020, and now that we’ve implemented it and use the system in our day-to-day work, we wanted to take a moment to share our journey to help reduce security risks in an efficient and scalable manner.
Strategies and Tools for Performing Migrations on Platform
Needing to deliver faster and more reliably while managing a growing number of contributors and a more complex codebase seems like the fate of every hyper-growth tech company. For platform teams, the challenge is not any different. How can we quickly roll out and increase the adoption of new technologies safely with a growing codebase and organization?
Exploring Mastodon
With the current uncertainty over Twitter, I'm starting to explore using Mastodon
Creating a more inclusive security research field
A glimpse into the backgrounds and day-to-day work of several GitHub employees in cybersecurity roles.
Improving Instagram notification management with machine learning and causal inference
We’re sharing how Meta is applying statistics and machine learning (ML) to improve notification personalization and management on Instagram – particularly on daily digest push notifications. By using causal inference and ML to identify highly active users who are likely to see more content organically, we have been able to reduce the number of notifications […]
Mixing It Up: Remix Joins Shopify to Push the Web Forward - Shopify
We are very excited to announce that the open-source web framework Remix and its team are joining Shopify.
On The Edge Of November (2022 Desktop Wallpapers Edition) — Smashing Magazine
November is just around the corner, and with it, a new collection of desktop wallpapers to celebrate the beginning of the month. Designed by creatives from all across the globe, they come in versions with and without a calendar. Let’s make November colorful!
13 tiny, terrific, and terrifying games to hack, slay, and play this Halloween 🧛🏻♀️
Some seriously spooktacular open source games for the web, Windows, macOS, and Linux with all sorts of fun hacks for infinite lives, invulnerability, and playing with time.
How To Create Advanced Animations With CSS — Smashing Magazine
In this article, Yosra Emad explains how to create a rollercoaster path that a ball follows using cubic beziers and CSS transitions. You’ll also learn how the cubic-bezier function in CSS works in detail and how to stack multiple simple animations to create one complex one.
Fancy Image Decorations: Outlines and Complex Animations
We’ve spent the last two articles in this three-part series playing with gradients to make really neat image decorations using nothing but the <img>
Cybersecurity spotlight on bug bounty researcher @ahacker1
As we wrap up Cybersecurity Awareness Month, the GitHub bug bounty team is excited to spotlight one of the security researchers who participates in the GitHub Security Bug Bounty Program.
Release Radar
Hackatoberfest, hackathons, and open source contributions. It’s been a hectic month with so many community pull requests to all kinds of projects. So many in fact that we had to…
The Management Poles of Developer Infrastructure Teams - Shopify
There are 3 management poles for developer infrastructure teams that are thus tricky to balance: management support, system and domain expertise, and road maps.
Motion Controls In The Browser — Smashing Magazine
If you
Stronger than a promise: proving Oblivious HTTP privacy properties
In this blog post, we describe a formal, computer-aided security analysis of Oblivious HTTP, an emerging IETF standard that applications can use to improve user privacy
Choose your own GitHub Universe 2022 adventure
You can now build your agenda on GitHubUniverse.com! Whether you’re just getting started or you’re a seasoned industry professional, there’s a session for you.
What we learned from the Security Lab’s Community Office Hours
The GitHub Security Lab provided office hours for open source projects looking to improve their security posture and reduce the risk of breach. Here’s what we learned and how you can also participate.
Diversity, inclusion, and belonging at GitHub in 2022
As GitHub continues to grow, our vision of being the home for all developers continues to materialize, expanding our progress, perspectives, and responsibility to the world.
A Software Engineer's Guide to Working Across Time Zones - Shopify
Words I've often heard associated with cross-time zone software engineering teams include “challenging”, “tricky”, and “difficulties”. Here are a few tips to make asynchronous communication a positive experience.
Partial Cloudflare outage on October 25, 2022
Today, a change to our Tiered Cache system caused some requests to fail for users with status code 530
Holographic Trading Card Effect
Simon Goellner (@simeydotme)'s collection of Holographic Trading Cards have captured our attention.
3 strategies for consolidating your toolkit and boosting productivity
Explore how GitHub Enterprise can help you transform your software engineering organization and practices.
Why and how GitHub encrypts sensitive database columns using ActiveRecord::Encryption
You may know that GitHub encrypts your source code at rest, but you may not have known that we encrypt sensitive database columns as well. Read about our column encryption strategy and our decision to adopt the Rails column encryption standard.
Typographic Hierarchies — Smashing Magazine
In this article, Alma Hoffmann discusses six basic variables to establish a typographic hierarchy, explains how to look at each differently, and in turn, designs pieces by intentionally modifying each variable to create a typographic hierarchy effectively.
Email Routing leaves Beta
Today Email Routing leaves Beta and an update on all the new things we've been adding to the service, including behind-the-scenes and not-so-visible improvements
Creating Animated, Clickable Cards With the :has() Relational Pseudo Class
The CSS :has() pseudo-class can help us solve solve situations that used to take an extra wrapper to achieve, including the clickable card pattern many of us love to use from time to time.
PostGIS: Upgrade GEOS with Ubuntu in 3 Steps
How to upgrade current library versions such as GEOS or GDAL in PostGIS - use the latest stunning spatial features. Upgrade GEOS with Ubuntu.
Why we’re excited about the Sigstore general availability
The Sigstore GA means you can protect your software supply chain today with GitHub Actions, and will power new npm security capabilities in the near future.
How We Use Terraform At Slack
At Slack, we use Terraform for managing our Infrastructure, which runs on AWS, DigitalOcean, NS1, and GCP. Even though most of our infrastructure is running on AWS, we have chosen to use Terraform as opposed to using an AWS-native service such as CloudFormation so that we can use a single tool across all of our…