Introducing the commerce payments protocol (2025) - Shopify
Learn how we partnered with Coinbase to bring payments onchain at scale with a new smart contract protocol to meet the complex requirements of commerce.
We shipped FinalizationRegistry in Workers: why you should never use it
Cloudflare Workers now support FinalizationRegistry, but just because you can use it doesn’t mean you should. Dive into the tricky world of JavaScript and WebAssembly memory management and see why newer features make life a lot easier.
Issue no.11: Made with love
Figma’s editorial newsletter about how products take shape—and shape our world.
GitHub Availability Report: May 2025
In May, we experienced three incidents that resulted in degraded performance across GitHub services.
Suppressions of Suppressions
I heard you like linting.
I'm Doing a Little Consulting
Personal update post.
Creating The “Moving Highlight” Navigation Bar With JavaScript And CSS — Smashing Magazine
In this tutorial, Blake Lundquist walks us through two methods of creating the “moving-highlight” navigation pattern using only plain JavaScript and CSS. The first technique uses the `getBoundingClientRect` method to explicitly animate the border between navigation bar items when they are clicked. The second approach achieves the same functionality using the new View Transition API.
Designing and building the Vercel Ship conference platform
Here's how we designed and built our Vercel Ship conference platform. We generated 15,000+ images and videos with tools like Flux, Veo 2, Runway, and Ideogram. Then, we moved to v0 for prototyping. See our iterations, examples, tech stack, and more.
8 essential tips for using Figma Make
We share our team’s favorite prompts, pro tips, and best practices for using Figma Make.
How GitHub engineers tackle platform problems
Our best practices for quickly identifying, resolving, and preventing issues at scale.
Partial Keyframes
CSS Keyframe animations are so much more powerful than most developers realize. In this tutorial, I’ll show you something that completely blew my mind, a technique that makes our keyframe animations so much more reusable and dynamic! 🤯
Using `make` to compile C programs (for non-C-programmers)
Creating an Auto-Closing Notification With an HTML Popover
The HTML popover attribute transforms elements into top-layer elements that can be opened and closed with a button or JavaScript. Popovers can be dismissed a number of ways, but there is no option to auto-close them. Preethi has a technique you can use.
Bill Atkinson’s 10 rules for making interfaces more human
We commemorate the Apple pioneer whose QuickDraw and HyperCard programs made the Macintosh intuitive enough for nearly anyone to use.
GitHub for Beginners: Code review and refactoring with GitHub Copilot
Learn how to use GitHub Copilot to help review and polish your code.
Decoding The SVG path Element: Line Commands — Smashing Magazine
SVG is easy — until you meet `path`. However, it’s not as confusing as it initially looks. In this first installment of a pair of articles, Myriam Frisano aims to teach you the basics of `` and its sometimes mystifying commands. With simple examples and visualizations, she’ll help you understand the easy syntax and underlying rules of SVG’s most powerful element so that by the end, you’re fully ab
Assigning and completing issues with coding agent in GitHub Copilot
Have you tried the new coding agent in GitHub Copilot? Here’s how developers are using it to work more efficiently.
Exploring the CSS contrast-color() Function… a Second Time
The contrast-color() function doesn’t check color contrast, but rather it outright resolves to either black or white (whichever one contrasts the most with your chosen color). Safari Technology Preview recently implemented it and we explore its possible uses in this article.
The State of CSS 2025 Survey is out!
The State of CSS 2025 Survey dropped a few days ago, and besides anticipating the results, it's exciting to see a lot of the new things shipped to CSS reflected in the questions.
Introducing facet: Reflection for Rust
I have long been at war against Rust compile times. Part of the solution for me was to buy my way into Apple Silicon dreamland, where builds are, like… faster. I remember every time I SSH into an x86_64 server, even the nice 64-core ones. And another part was, of course, to get dirty with Rust itself. I wrote Why is my Rust build so slow? , which goes in-depth into rust build performance, down to
Double click: What does MCP mean for agentic AI?
The sudden boom in MCP has kicked excitement about the agentic web into high gear. Is this the missing link we’ve needed between AI and all our other tools?
How to create issues and pull requests in record time on GitHub
Learn how to spin up a GitHub Issue, hand it to Copilot, and get a draft pull request in the same workflow you already know.
How Imports Work in RSC
A layered module system.
Collaboration: The Most Underrated UX Skill No One Talks About — Smashing Magazine
We often spotlight wireframes, research, or tools like Figma, but none of that moves the needle if we can’t collaborate well. Great UX doesn’t happen in isolation. It takes conversations with engineers, alignment with product, sales, and other stakeholders, and the ability to listen, adapt, and co-create. That’s where design becomes a team sport, and when your ability to capture the outcomes multi
Stripe Tax: An all-in-one global tax compliance solution
Stripe Tax is now an all-in-one global tax compliance solution, after adding international registration and filing to round out its tax calculation and collection features.
Introducing our MCP server: Bringing Figma into your workflow
Today we’re announcing the beta release of the Dev Mode MCP server, which brings Figma directly into the developer workflow to help LLMs achieve design-informed code generation.
Smashing Animations Part 4: Optimising SVGs — Smashing Magazine
What’s the best way to make your SVGs faster, simpler, and more manageable? In this article, pioneering author and web designer Andy Clarke explains the process he relies on *to* prepare, optimise, and structure SVGs for animation and beyond.
The no-nonsense approach to AI agent development
Learn how to build reliable, domain-specific AI agents by simulating tasks manually, structuring logic with code, and optimizing with real-world feedback. A clear, hands-on approach to practical automation.
Building an AI Agent that puts humans in the loop with Knock and Cloudflare’s Agents SDK
How Knock shipped an AI Agent with human-in-the-loop capabilities with Cloudflare’s Agents SDK and Cloudflare Workers.
Quick Hit #49
Chrome 137 introduces the newly-specced if() function. Una Kravets posted a nice video overview and Temani Afif writes about it as well.
Getting Creative With HTML Dialog
So, how can you take dialogue box design beyond the generic look of frameworks and templates? How can you style them to reflect a brand’s visual identity and help to tell its stories? Here’s how I do it in CSS using ::backdrop, backdrop-filter, and animations.
A free hands-on course on AI security: Hack the LLM and then fix it
Dive into the novel security challenges AI introduces with the open source game that over 10,000 developers have used to sharpen their skills.
DNS rebinding attacks explained: The lookup is coming from inside the house!
DNS rebinding attack without CORS against local network web applications. Explore the topic further and see how it can be used to exploit vulnerabilities in the real-world.
Why Designers Get Stuck In The Details And How To Stop — Smashing Magazine
Designers love to craft, but polishing pixels before the problem is solved is a time-sink. This article pinpoints the five traps that lure us into premature detail — being afraid to show rough work, fixing symptoms instead of causes, solving the wrong problem, drowning in unactionable feedback, and plain fatigue — then hands you a four-step rescue plan to refocus on goals, ship faster, and keep yo
The Fun of Open Source: Roman Numerals in PostgreSQL
This article talks about the new support for converting Roman numerals to numbers in PostgreSQL v18, as well as fun in general.
The difference between coding agent and agent mode in GitHub Copilot
We’ll decode these two tools—and show you how to use them both to work more efficiently.
Designing For Neurodiversity — Smashing Magazine
Designing for neurodiversity means recognizing that people aren’t edge cases but individuals with varied ways of thinking and navigating the web. So, how can we create more inclusive experiences that work better for everyone?
Global Payouts: A new way to send money directly to third parties
Last month at Stripe Sessions, we announced Global Payouts, which is part of our biggest-ever upgrade to Stripe to make it less expensive, complex, and time-consuming for you to fund, store, and pay out in multiple currencies.
RSC for LISP Developers
Quoting for modules.
Introducing the v0 composite model family
Learn how v0's composite AI models combine RAG, frontier LLMs, and AutoFix to build accurate, up-to-date web app code with fewer errors and faster output.
Progressive JSON
Why streaming isn't enough.
rsync's defaults are not always enough
Prelude To Summer (June 2025 Wallpapers Edition) — Smashing Magazine
Let’s kick off June — and the beginning of summer — with some fresh inspiration! Artists and designers from across the globe once again tickled their creativity to welcome the new month with a new collection of desktop wallpapers. Enjoy!
Cloudflare named a Strong Performer in Email Security by Forrester
Forrester has recognized Cloudflare Email Security as a Strong Performer in the ‘current offering’ category in “The Forrester Wave™: Email, Messaging, And Collaboration Security Solutions.
Better CSS Shapes Using shape() — Part 2: More on Arcs
This is the second part of a series that dives deep into the CSS shape() command, continuing with a more detailed look at the arc command.
GitHub Universe 2025: Here’s what’s in store at this year’s developer wonderland
Sharpen your skills, test out new tools, and connect with people who build like you.
Why Does RSC Integrate with a Bundler?
One does not simply serialize a module.
Let’s DO this: detecting Workers Builds errors across 1 million Durable Objects
Workers Builds, our CI/CD product for deploying Workers, monitors build issues by analyzing build failure metadata spread across over one million Durable Objects.
The virtue of unsynn
Addressing the rumors There have been rumors going around, in the Reddit thread for facet , my take on reflection in Rust, which happened a bit too early, but here we are, cat’s out of the bag, let’s talk about it! Rumors that I, podcaster/youtuber fasterthanlime, want to kill serde , serialization / deserialization framework loved by many and which contributed greatly to Rust’s success, and I jus
4 trends shaping open source funding—and what they mean for maintainers
Get insights on the latest trends from GitHub experts while catching up on these exciting new projects.
One Roundtrip Per Navigation
What do HTML, GraphQL, and RSC have in common?
Say Your Writing
Resilient Import Maps - Better Theme Development and Beyond (2025) - Shopify
Import maps are great for both performance and developer experience, but their original limitations made them hard to use, especially at Shopify’s scale. We stepped up and pushed changes across the HTML spec, Chromium and WebKit to fix these issues at the web platform level. Now, developers can interleave JavaScript modules and multiple import maps on their HTML pages without worrying about correc
Reliably Detecting Third-Party Cookie Blocking In 2025 — Smashing Magazine
The web is mired in a struggle to eliminate third-party cookies, with the World Wide Web Consortium Technical Architecture Group leading the charge. But there are obstacles preventing this from happening, and, as a result, many essential web features continue to rely on cookies to function properly. That’s why detecting third-party cookie blocking isn’t just good technical hygiene but a frontline
Quick Hit #48
Firefox 139 includes an update where content inside a <details> element is included in an in-page search. Previously, that content was ignored when the
Inside GitHub: How we hardened our SAML implementation
Maintaining and developing complex and risky code is never easy. See how we addressed the challenges of securing our SAML implementation with this behind-the-scenes look at building trust in our systems.
Data Vs. Findings Vs. Insights In UX — Smashing Magazine
What’s the difference between data, findings, and UX insights? And how do you argue for statistical significance in your UX research? Let’s unpack it.
GitHub for Beginners: Test-driven development (TDD) with GitHub Copilot
See how to use GitHub Copilot to engage in some test-driven development.
Cloudflare named in 2025 Gartner® Magic Quadrant™ for Security Service Edge
For the third consecutive year, Gartner has named Cloudflare to the Gartner® Magic Quadrant™ for Security Service Edge (SSE) report.
Bypassing MTE with CVE-2025-0072
In this post, I’ll look at CVE-2025-0072, a vulnerability in the Arm Mali GPU, and show how it can be exploited to gain kernel code execution even when Memory Tagging Extension (MTE) is enabled.
