What're Your Top 4 CSS Properties?
Everyone has a different opinion which is great because it demonstrates the messy, non-linear craft that is thinking like a front-end developer.
Issue no.12: New roles, new rules
Figma’s editorial newsletter about how products take shape—and shape our world.
Are roles and responsibilities a thing of the past?
For years, the boundaries between product development roles have become less defined. Our latest report quantifies this shift and explores what it means for you and your team.
Your guide to GitHub Universe 2025: The schedule just launched!
Create your own agenda of favorites, sign up for one-on-on mentoring sessions, and register if you haven’t already. We’ll see you there!
Integrating CSS Cascade Layers To An Existing Project — Smashing Magazine
The idea behind this is to share a full, unfiltered look at integrating CSS Cascade Layers into an existing legacy codebase. In practice, it’s about refactoring existing CSS to use cascade layers without breaking anything.
Can Collations Be Used Over citext?
Benchmarking PostgreSQL collations vs citext for case-insensitive columns: can custom collations replace citext with better performance?
The anatomy of a summer campaign: How Instacart staged a sick ’90s throwback
Instacart’s creative studio and marketing teams pulled off a nostalgic summer campaign featuring our favorite snacks from 1999.
How to harness skills that AI can’t automate
With more teams moving faster than ever, the real differentiator is craft—the curiosity, intuition, taste, and intention behind every detail.
How to use the GitHub and JFrog integration for secure, traceable builds from commit to production
Connect commits to artifacts without switching tools.
The second wave of MCP: Building for LLMs, not developers
The second wave of MCP, building for LLMs, not developers. Explore the evolution of MCP as it shifts from developer-focused tools to LLM-native integrations. Discover the future of AI connectivity.
Bringing Node.js HTTP servers to Cloudflare Workers
We've implemented the node:http client and server APIs in Cloudflare Workers, allowing developers to migrate existing Node.js applications with minimal code changes. This post explains how we built a bridge between the Workers serverless environment and Node.js's traditional HTTP model, complete with examples for running frameworks like Express.js at the edge.
Composition in CSS
CSS is a composable language by nature. This composition nature is already built into the cascade. We simply don't talk about composition as a Big Thing because it's the nature of the language.
color npm package compromised
On September 8 2025, around 13:00 UTC, someone compromised Josh Junon’s npm account (qix) and started publishing backdoored versions of his package. Someone noticed and let Josh know: Charlie Eriksen on BlueSky Josh confirmed he’d gotten pwned by a fake 2FA (two-factor authentication) reset e-mail: Josh Junon on BlueSky The phishing e-mail came from npmsj.help (registered 3 days prior) and claimed
Color Shifting in CSS
A little while ago, I was trying to animate an element’s background color, so that it cycled through the rainbow. Seems easy, but it turns out, browsers have a surprisingly big limitation when it comes to color processing! In this tutorial, we’ll dig into the issue, and I’ll share a couple of strategies you can use to work around this limitation.
Critical npm supply chain attack response – September 8, 2025
How Vercel responded to the September 2025 npm supply chain attack on chalk, debug and 16 other packages. Incident timeline, impact analysis, and customer remediation.
How to debug a web app with Playwright MCP and GitHub Copilot
Reproduce and debug web app issues with ease using the Playwright MCP server and GitHub Copilot.
Migrating to React Native's New Architecture (2025) - Shopify
Shopify successfully migrated two of its largest apps, Shopify Mobile and Shopify Point of Sale (POS) to React Native's New Architecture while maintaining weekly releases and serving millions of merchants. This migration involved a complex codebase with hundreds of screens and native modules, extensive custom components, and deep integration with first-party libraries like FlashList.
Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1
Unauthorized TLS certificates were issued for 1.1.1.1 by a Certification Authority without permission from Cloudflare. These rogue certificates have now been revoked. Read our blog to see how this could affect you.
Why is corpcore suddenly such a thing?
Software swag has upped its swag factor. Here’s why wearing your app on your sleeve has gone from cringeworthy to cool.
GitHub is enabling broader access for developers in Syria following new government trade rules
With the relaxation of sanctions and export controls on Syria, GitHub will once again be broadly available to Syrian developers.
Building smarter interactions with MCP elicitation: From clunky tool calls to seamless user experiences
Explore how MCP elicitation transforms AI tool interactions by gathering missing information upfront.
Building Slack’s Anomaly Event Response
As cyberattacks evolve to unprecedented levels of sophistication and speed, the time gap between breach detection and response has never been more critical. Traditional security approaches often operate reactively, identifying compromises only after damage has occurred. This delay grants attackers a tactical advantage, forcing security teams to focus on damage assessment and remediation rather tha
Designing For TV: Principles, Patterns And Practical Guidance (Part 2) — Smashing Magazine
After covering in detail the underlying interaction paradigms of TV experiences in [Part 1](https://www.smashingmagazine.com/2025/08/designing-tv-evergreen-pattern-shapes-tv-experiences/), it’s time to get practical. In the second part of the series, you’ll explore the building blocks of the “10-foot experience” and how to best utilise them in your designs.
IDC study says the global workforce engaged in software design is expanding
IDC forecasts that the number of people involved in software design will increase from 2025 to 2029—signaling the rising importance of design as a competitive differentiator.
5 tips for writing better custom instructions for Copilot
This guide offers five essential tips for writing effective GitHub Copilot custom instructions, covering project overview, tech stack, coding guidelines, structure, and resources, to help developers get better code suggestions.
The impact of the Salesloft Drift breach on Cloudflare and our customers
An advanced threat actor, GRUB1, exploited the integration between Salesloft’s Drift chat agent and Salesforce to gain unauthorized access to Salesforce tenants of Cloudflare and many other companies.
Spec-driven development with AI: Get started with a new open source toolkit
Developers can use their AI tool of choice for spec-driven development with this open source toolkit.
A New Ranking Framework for Better Notification Quality on Instagram
We’re sharing how Meta is applying machine learning (ML) and diversity algorithms to improve notification quality and user experience. We’ve introduced a diversity-aware notification ranking framework to reduce uniformity and deliver a more varied and engaging mix of notifications. This new framework reduces the volume of notifications and drives higher engagement rates through more diverse […] Re
A Lean Syntax Primer
Programming with proofs.
Making the most of a dumb fax switcher box in the old days
A Breeze Of Inspiration In September (2025 Wallpapers Edition) — Smashing Magazine
Could there be a better way to welcome the new month than with a new collection of desktop wallpapers? We’ve got some eye-catching designs to make your September just a bit more colorful. Enjoy!
Cloudflare is the best place to build realtime voice agents
We're at a critical inflection point where conversational AI is moving from experimental demos to production-ready systems. If you’re already a developer in the real-time AI ecosystem, we want to build the best building blocks for you to get the lowest latency at a global scale.
Cloudy Summarizations of Email Detections: Beta Announcement
We're now leveraging our internal LLM, Cloudy, to generate automated summaries within our Email Security product, helping SOC teams better understand what's happening within flagged messages.
Troubleshooting network connectivity and performance with Cloudflare AI
Troubleshoot network connectivity issues by using Cloudflare AI-Power to quickly self diagnose and resolve WARP client and network issues.
The crawl-to-click gap: Cloudflare data on AI bots, training, and referrals
By mid-2025, training drives nearly 80% of AI crawling, while referrals to publishers (especially from Google) are falling. GPTBot and ClaudeBot surged, Amazonbot and Bytespider collapsed, and crawl-to-refer ratios show AI consumes far more than it sends back.
Under the hood: Exploring the AI models powering GitHub Copilot
Learn how GitHub Copilot’s evolving models and infrastructure center developer choice and power agentic workflows.
Prompting Is A Design Act: How To Brief, Guide And Iterate With AI — Smashing Magazine
Prompting is more than giving AI some instructions. You could think of it as a design act, part creative brief and part conversation design. This second article on AI augmenting design work introduces a designerly approach to prompting: one that blends creative briefing, interaction design, and structural clarity.
Evaluating image segmentation models for background removal for Images
An inside look at how the Images team compared dichotomous image segmentation models to identify and isolate subjects in an image from the background.
Make Your Website Conversational for People and Agents with NLWeb and AutoRAG
Bring conversational search to your website so people and AI agents can ask natural language questions and get direct answers. With NLWeb, an open project by Microsoft, and Cloudflare AutoRAG, conversational search is now a one-click setup for your website.
A deeper look at AI crawlers: breaking down traffic by purpose and industry
We are extending AI-related insights on Cloudflare Radar with new industry-focused data and a breakdown of bot traffic by purpose, such as training or user action. These new views help website owners better understand the impact of AI crawlers.
The age of agents: cryptographically recognizing agent traffic
Cloudflare now lets websites and bot creators use Web Bot Auth to segment agents from verified bots, making it easier for customers to allow or disallow the many types of user and partner directed bots the explosion of AI agents has created.
The next step for content creators in working with AI bots: Introducing AI Crawl Control
Cloudflare launches AI Crawl Control (formerly AI Audit) and introduces easily customizable 402 HTTP responses. Instead of blocking crawlers outright, content creators can now send "Payment Required" responses with custom messages, creating direct communication channels for AI partnerships.
From Black Box to Blueprint
A common enterprise problem: crucial legacy systems become “black boxes”—key to operations but opaque and risky to touch. We worked with a client to use AI-assisted reverse engineering to reconstruct functional specifications from UI elements, binaries, and data lineage to overcome analysis paralysis. We developed a methodical “multi-lens” approach—starting from visible artifacts, enriching increm
Some thoughts on LLMs and Software Development
I’m about to head away from looking after this site for a few weeks (part vacation, part work stuff). As I contemplate some weeks away from the daily routine, I feel an urge to share some scattered thoughts about the state of LLMs and AI.
How GitHub Models can help open source maintainers focus on what matters
Learn how GitHub Models helps open source maintainers automate repetitive tasks like issue triage, duplicate detection, and contributor onboarding — saving hours each week.
How we accelerated Secret Protection engineering with Copilot
Learn how the Secret Protection engineering team collaborated with GitHub Copilot coding agent to expand validity check coverage.
Preparing for the worst: Our core database failover test
On July 24, 2025, we successfully performed a full production failover of our core control-plane database from Azure West US to East US 2 with zero customer impact.
AI Gateway now gives you access to your favorite AI models, dynamic routing and more — through just one endpoint
AI Gateway simplifies AI app development with unified billing, secure key storage, and dynamic routing. Gain observability and control over costs, API keys, and traffic, connecting to major AI providers through a single endpoint.
How Cloudflare runs more AI models on fewer GPUs: A technical deep-dive
In order to support a growing catalog of AI models while maximizing GPU utilization, Cloudflare built an internal platform called Omni. This platform uses lightweight isolation and memory over-commitment to run multiple AI models on a single GPU, allowing us to serve inference requests closer to users and improve overall availability across our network.
How we built the most efficient inference engine for Cloudflare’s network
Existing LLM serving engines aren’t efficient enough when deployed across a globally distributed network, so we built our own, in Rust. Infire is an LLM inference engine that employs a range of techniques to maximize resource utilization, allowing us to serve AI models more efficiently and with better performance for Cloudflare workloads.
State-of-the-art image generation Leonardo models and text-to-speech Deepgram models now available in Workers AI
We're expanding Workers AI with new partner models from Leonardo.Ai and Deepgram. Start using state-of-the-art image generation models from Leonardo (Phoenix, Lucid Origin) and real-time TTS and STT models from Deepgram (Nova 3, Aura 1). Build full-stack, low-latency AI applications, all hosted on Cloudflare's global network.
Research, Review, Rebuild
The Bahmni open-source hospital management system started over nine years ago with a front end using AngularJS and an OpenMRS REST API. We wished to convert this to use a React + TypeScript front end with an HL7 FHIR API. In exploring how to do this modernization we used a structured prompting workflow of Research, Review, and Rebuild - together with Cline, Claude 3.5 Sonnet, Atlassian MCP server,
Building your own CLI Coding Agent with Pydantic-AI
CLI coding agents are a fundamentally different tool to chatbots or autocomplete tools - they're agents that can read code, run tests, and update a codebase. While commercial tools are impressive, they don't understand the particular context of our environment and the eccentricities of our specific project. Instead we can build our own coding agent by assembling open source tools, using our specif
How to use GitHub Copilot on github.com: A power user’s guide
Explore how to use GitHub Copilot on github.com to automate tasks, assign agents, prototype ideas, and streamline your entire workflow — all without an IDE.
Designing For TV: The Evergreen Pattern That Shapes TV Experiences (Part 1) — Smashing Magazine
TV interface design is a unique, fascinating, and often overlooked field. It’s been guided by decades of evolution and innovation, yet still firmly constrained by its legacy. Follow Milan into the history, quirks, and unshakable rules that dictate how we control these devices.
Introducing Cloudflare Application Confidence Score For AI Applications
Cloudflare will provide confidence scores within our application library for Gen AI applications, allowing customers to assess their risk for employees using shadow IT.
ChatGPT, Claude, & Gemini security scanning with Cloudflare CASB
GenAI tools bring power — and risk. Cloudflare CASB now scans ChatGPT, Claude, and Gemini for misconfigurations, sensitive data exposure, and compliance issues, helping organizations adopt AI with confidence.
Best Practices for Securing Generative AI with SASE
This guide provides best practices for Security and IT leaders to securely adopt generative AI using Cloudflare’s SASE architecture as part of a strategy for AI Security Posture Management (AI-SPM).
Securing the AI Revolution: Introducing Cloudflare MCP Server Portals
We’re excited to announce Cloudflare MCP Server Portals are now available in Open Beta. MCP Server Portals are a new capability that enable you to centralize, secure, and observe every MCP connection in your organization. This feature is part of Cloudflare One, our secure access service edge (SASE) platform that helps connect and protect your workspace.
Block unsafe prompts targeting your LLM endpoints with Firewall for AI
Cloudflare's AI security suite now includes unsafe content moderation, integrated into the Application Security Suite via Firewall for AI. Built with Llama, it detects and blocks harmful prompts before they reach your AI applications.
