Shine a spotlight on your open source project
Celebrate #MaintainerMonth with two big opportunities to showcase your open source project at GitHub Universe and WeAreDevelopers World Congress. Applications are open. Don’t miss out!
What Zen And The Art Of Motorcycle Maintenance Can Teach Us About Web Design — Smashing Magazine
Road-tripping along the line between engineering and spirituality, Robert M. Pirsig’s musings on the arts, sciences, and Quality ring as true now as they ever have.
Vercel security roundup: improved bot defenses, DoS mitigations, and insights
Since February, Vercel blocked over 148 billion attacks from 108 million IPs. This roundup highlights improvements to bot protection, DoS mitigation, and firewall tooling to help teams build securely by default.
3 Years of Extremely Remote Work
Resolving a request smuggling vulnerability in Pingora
Cloudflare patched a vulnerability (CVE-2025-4366) in the Pingora OSS framework, which exposed users of the framework and Cloudflare CDN’s free tier to potential request smuggling attacks. After being notified, Cloudflare mitigated the issue within 22 hours.
You can style alt text like any other text
Clever, clever that Andy Bell. He shares a technique for displaying image alt text when the image fails to load. Well, more precisely, it's a technique to apply styles to the alt when the image doesn't load, offering a nice UI fallback for what would otherwise be a busted-looking error.
Agent mode 101: All about GitHub Copilot’s powerful mode
A full look at agent mode in GitHub Copilot, including what it can do, when to use it, and best practices.
Extending the Malbec subsea cable to Southern Brazil
Meta is partnering with V.tal to extend the Malbec subsea cable to Porto Alegre, Brazil by 2027. With this new extension, Malbec will become the first subsea cable to land in the state of Rio Grande do Sul, bringing more connectivity to millions of people in Southern Brazil and neighboring countries. Malbec will improve the […]
Why I no longer have an old-school cert on my https site
Bringing connections into view: real-time BGP route visibility on Cloudflare Radar
Real-time BGP route visualization is now available on Cloudflare Radar, providing immediate insights into global Internet routing. This new feature, accessible through the updated prefix pages or the API, enables operators to gain a better understanding of prefix routing status in real time.
How to thrive as a junior engineer: Tips and insights
Plus, ways teammates and leaders can be better mentors for their new counterparts.
Journey to 1000 models: Scaling Instagram’s recommendation system
In this post, we explore how Instagram has successfully scaled its algorithm to include over 1000 ML models without sacrificing recommendation quality or reliability. We delve into the intricacies of managing such a vast array of models, each with its own performance characteristics and product goals. We share insights and lessons learned along the way—from […]
Smashing Animations Part 3: SMIL’s Not Dead Baby, SMIL’s Not Dead — Smashing Magazine
While there are plenty of ways that CSS animations can bring designs to life, adding simple SMIL (Synchronized Multimedia Integration Language) animations in SVG can help them do much more. Andy Clarke explains where SMIL animations in SVG take over where CSS leaves off.
Vercel Blob is now generally available: Cost-efficient, durable storage
Vercel Blob is now generally available, providing durable object storage that's integrated with Vercel's application delivery network.
How Vapi built their MCP server on Vercel
Performance measurements… and the people who love them
Developers have a gut-felt understanding for performance, but that intuition breaks down when systems reach Cloudflare’s scale. We need the rigor of statisticians to understand latency’s impact on users. Here we discuss our work to communicate customer-centric measurements of latency in our network.
When The Dead Won't Die
How do PostgreSQL's VACUUM optimizations affect dead tuple metrics? Find out why they might persist or reappear when using VACUUM.
Threat Modeling Guide for Software Teams
Threat modeling is a systems engineering practice where teams examine how data flows through systems to identify what can go wrong - a deceptively simple act that reveals security risks that automated tools cannot anticipate. Rather than conducting security analysis as a separate or upfront activity, teams should integrate threat modeling into their development process through small, regular activ
Meta’s Full-stack HHVM optimizations for GenAI
As Meta has launched new, innovative products leveraging generative AI (GenAI), we need to make sure the underlying infrastructure components evolve along with it. Applying infrastructure knowledge and optimizations have allowed us to adapt to changing product requirements, delivering a better product along the way. Ultimately, our infrastructure systems need to balance our need to […]
Introducing stablecoins for Stripe Treasury in 101 countries
With Stripe Treasury, businesses in 101 countries can now easily access a dollar-denominated stablecoin balance to store and move money on crypto or established financial rails.
Introducing the AI Gateway
With the AI Gateway, build with any model instantly. No API keys, no configuration, no vendor lock-in.
Your IPs, your rules- enabling more efficient address space usage
IPv4 is expensive, and moving network resources around is hard. Previously, when customers wanted to use multiple Cloudflare services, they had to bring a new address range. Now, they can use their resources more efficiently, saving space and reducing operational costs.
A Reader's Question on Nested Lists
Answering a reader's question about how to create a complex numbering system with CSS list counters.
Andrew “Boz” Bosworth's 10 rules for navigating the next design paradigm
Meta’s Chief Technology Officer on consciousness, questioning design paradigms, and building for the future.
GitHub Copilot: Meet the new coding agent
Implementing features has never been easier: Just assign a task or issue to Copilot. It runs in the background with GitHub Actions and submits its work as a pull request.
Design System In 90 Days — Smashing Magazine
Helpful PDF worksheets and tools to get the design system effort up and running — and adopted! Kindly powered by How To Measure UX and Design Impact, a friendly course on how to show the impact of your incredible UX work on business.
Vulnerability transparency: strengthening security through responsible disclosure
In line with CISA’s Secure By Design pledge, Cloudflare shares its vulnerability disclosure process, CVE issuance criteria, and CNA duties. This post outlines how findings are triaged based on real-world exploitability, coordinate disclosures, and contribute to the broader security community.
Code. Create. Commit. Welcome to dev/core
The new GitHub Shop collection is here. We’re celebrating you.
Vibe coding: Your roadmap to becoming an AI developer
Learn how to go from curious coder to AI wizard—with a little help from GitHub.
Building A Practical UX Strategy Framework — Smashing Magazine
Learn how to create and implement a UX strategy framework that shapes work and drives real business value.
Forget IPs: using cryptography to verify bot and agent traffic
Bots now browse like humans. We're proposing bots use cryptographic signatures so that website owners can verify their identity. Explanations and demonstration code can be found within the post.
Scroll-Driven Animations Inside a CSS Carousel
Hey, isn't there a fairly new CSS feature that works with scroll regions? Oh yes, that's Scroll-Driven Animations. Shouldn't that mean we can trigger an animation while scrolling through the items in a CSS carousel?
Double click: Does efficiency kill love?
At Config 2025, we were in our feelings about AI—but not in the ways you’d expect. This time around, the buzz was around building connection and care.
Our pledge to help improve the accessibility of open source software at scale
GitHub takes the Global Accessibility Awareness Day (GAAD) pledge.
Open-sourcing Pyrefly: A faster Python type checker written in Rust
Back in 2017, engineers at Meta sought to create a type checker for Instagram’s typed Python codebase. Years later, as the type system continued to evolve, that type checker eventually became Pyrefly. Pyrefly is a new type checker and IDE experience for Python, written with Rust, and now available for the entire Python community to […]
Introducing Pyrefly: A new type checker and IDE experience for Python
Today we are announcing an alpha version of Pyrefly, an open source Python type checker and IDE extension crafted in Rust. Pyrefly is a static type checker that analyzes Python code to ensure type consistency and help you catch errors throughout your codebase before your code runs. It also supports IDE integration and CLI usage […]
Fewer Ideas: An Unconventional Approach To Creativity — Smashing Magazine
Remember that last team brainstorming session where you were supposed to generate a long list of brilliant ideas? How many of those ideas actually stuck? Did leadership act on any of those ideas? In this article, Eric Olive challenges the value of exercises like brainstorming and explores more effective methods for sparking creativity to improve design and enhance the user’s experience.
Using AI to optimize payments performance with the Payments Intelligence Suite
Last week at Stripe Sessions, we introduced our Payments Intelligence Suite, which uses AI to make hundreds of automated, real-time decisions to maximize your profits—with no effort required.
How Fern delivers 6M+ monthly views and 80% faster docs with Vercel
From VACUUM to Deutsche Bahn: The Most Unexpected Moments at PGConf.DE 2025
Discover PGCONF.DE VACUUM talk highlights, community moments, and PostgreSQL insights from Christoph Berg’s 2025 conference recap in Berlin.
GitHub Availability Report: April 2025
In April, we experienced three incidents that resulted in degraded performance across GitHub services.
Documentation done right: A developer’s guide
Learn why and how you should write docs for your project with the Diátaxis framework.
Smashing Animations Part 2: How CSS Masking Can Add An Extra Dimension — Smashing Magazine
What if you could take your CSS animations beyond simple fades and slides — adding an extra dimension and a bit of old-school animation magic? In this article, pioneering author and web designer [Andy Clarke](https://stuffandnonsense.co.uk) will show you how masking can unlock new creative possibilities for CSS animations, making them feel more fluid, layered, and cinematic.
How Consensys rebuilt MetaMask.io with Vercel and Next.js
CYBERTEC at PGConf.DE: Talks, Booth Buzz & PostgreSQL’s New Education Alliance
Discover what CYBERTEC was up to at PGConf.DE 2025, Berlin. Watch out for the launch of the Open Alliance for PostgreSQL Education.
GitHub Issues search now supports nested queries and boolean operators: Here’s how we (re)built it
Plus, considerations in updating one of GitHub’s oldest and most heavily used features.
GitHub for Beginners: Building a React App with GitHub Copilot
Follow along and build a frontend client using React and Copilot Chat.
The Height Enigma
One of the most perplexing and befuddling things in CSS for me, for many years, was the behaviour of percentage-based heights. Sometimes, seemingly at random, setting height: 100% would have no effect at all. When I finally figured out what was going on, it was like a puzzle piece snapping into place; everything made so much more sense! In this post, I’ll share the epiphany I had, and we’ll explor
Integrating Localization Into Design Systems — Smashing Magazine
Learn how two designers tackled the challenges of building a localization-ready design system for a global audience. This case study dives into how Rebecca and Mark combined Figma Variables and design tokens to address multilingual design issues, such as text overflow, RTL layouts, and font inconsistencies.
Real‑world video demo: Using different AI models in GitHub Copilot
Curious about how AI models perform in real-world scenarios with GitHub Copilot? Same. We made a live video demo to find out, and wrote up our key takeaways.
Design system annotations, part 2: Advanced methods of annotating components
How to build custom annotations for your design system components or use Figma’s Code Connect to help capture important accessibility details before development.
Design system annotations, part 1: How accessibility gets left out of components
The Accessibility Design team created a set of annotations to bridge the gaps that design systems alone can’t fix and proactively addresses accessibility issues within Primer components.
First-party tags in seconds: Cloudflare integrates Google tag gateway for advertisers
Cloudflare introduces a one-click integration with Google tag gateway for advertisers.
Accelerating GPU indexes in Faiss with NVIDIA cuVS
Meta and NVIDIA collaborated to accelerate vector search on GPUs by integrating NVIDIA cuVS into Faiss v1.10, Meta’s open source library for similarity search. This new implementation of cuVS will be more performant than classic GPU-accelerated search in some areas. For inverted file (IVF) indexing, NVIDIA cuVS outperforms classical GPU-accelerated IVF build times by up […]
Static as a Server
You wouldn't download a site.
Evolution of Product Classification at Shopify: From Categories to Comprehensive Product Understanding (2025) - Shopify
Shopify’s product classification system has evolved from basic categorization to an AI-driven framework using Vision Language Models and the Shopify Product Taxonomy. It accurately classifies products, extracts attributes, and processes over 30 million predictions daily, improving search, discovery, trust, and efficiency.
Integrating Design And Code With Native Design Tokens In Penpot — Smashing Magazine
The Penpot team is not slowing down on its mission to build a free design tool that not only offers powerful design features but is also well-integrated with code and modern development practices. In its latest release, Penpot, as the first design tool ever, introduces support for native design tokens. Let’s take a closer look at this concept and how you can employ it in your process.
QUIC restarts, slow problems: udpgrm to the rescue
udpgrm is a lightweight daemon for graceful restarts of UDP servers. It leverages SO_REUSEPORT and eBPF to route new and existing flows to the correct server instance. Designed for modern protocols like QUIC, udpgrm hides kernel complexity behind a clean, configurable API.
Figma launches Brazilian Portuguese localization, expanding global reach
Brazilian Portuguese becomes the fourth language for localization, with Latin American Spanish expected later this year.
Config 2025 launches deepen Figma’s design capabilities as its platform expands
Doubles product offering with new design and AI-powered features to help teams go from idea to product, all in one place