nyxd now builds images, is rootless, runs on macOS & Windows
Back in May, Mohamed wrote about getting fed up with the container stack using more RAM than the workloads on his Raspberry Pis, and building nyxd t…
Testing & QA
⚑ Сообщить о проблемеПоследние новости Testing & QA от Tech News
Все темы
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
GitView CodeAudit: Go security reviews that never leave your laptop
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle What I Built GitView CodeAudit is a security review for Go b…
A date is not a version: strict parsing under OSV ranges
A vulnerability range is a claim about ordering, and it is worth no more than the version parser sitting underneath it. Walk an OSV range's events i…
Go Typing Indicator Debugging: 5 Checks for Missing Stop Event Expiry
Short answer: Treat every typing-start signal as a renewable client-side lease, expire it locally, and use the stop event only to hide the indicator…
The AI Bottleneck Isn't Generating Code — It's Governing It
Anyone who has given autonomous AI coding agents (Claude, Devin, Antigravity, or Copilot Workspace) free rein in a production repository knows the u…
Two-Plane Observability on Google Cloud: Signal Contracts, Alert Policies and a Hexagonal Dispatcher
We stopped learning about production failures from other teams by splitting observability into two planes: telemetry that's always on, and notificat…
Кoгдa яблoкo yпaлo cлишкoм близкo не к той яблoнe: copy-paste oшибки в cтpyктypнo изoмopфнoм Go кoдe
Bы нaвepнякa дeлaли этo мнoгo paз: нaшли в пpoeктe пoдxoдящий для peшeния зaдaчи кoд, cкoпиpoвaли, зaмeнили в кoпии пepeмeнныe или вызoвы фyнкций нa…
Circuit Breakers Protect Callers from Failing Dependencies
A payment service slows down. Checkout continues sending requests and waiting for timeouts. Lab 14 places a circuit breaker before the payment clien…
From 22 to 23: Evasion Detection, Elicitation, and 231 New Tests
In my last post , I walked through the architecture of AegisGate MCP — a standalone MCP server framework with 22 security layers, zero external Go d…
Я написал 61 тест для AI-ментора. Потом выяснилось, что тестам тоже нельзя верить
Репетитора не нанимают по резюме. Ему дают тетрадь реального ученика и смотрят не на то, знает ли он ответ, а на то, где он остановится. Подскажет,…
Go regexp too slow? I built coregex, a drop-in replacement. An audit found 16 bugs — here's what broke
Six months ago I published "Go's Regexp is Slow. So I Built My Own" . The project grew, got contributors, beat Rust on several patterns. Tested on G…
Baize v0.4.0: Tool Matching Upgraded — Optional Vector Retrieval, Lexical Baseline Unchanged
What this release is about Baize is a team-facing AI assistant runtime: you point it at an existing service, upload an OpenAPI / Swagger-style doc,…
Node.js SMS Alerts API: How SaaS Apps Audit E-commerce Status Without Webhooks
Compliance evidence changes the SMS API decision: choose the provider and architecture that let you prove what your e-commerce signup system request…
Code Review: When Checkout Success Still Breaks Inventory
A checkout can return success after reducing stock without creating an order. It can also accept two purchases when only one unit exists. Lab 09 mak…
The Trace Ends Where The Message Starts
The synchronous path is one tree; everything after the publish is another one - and the audit found out why: the headers were empty. 👋 Hi, I'm Anton…
Governing Next.js Phone Verification Login SMS OTP Resends in Production
TL;DR: In a Next.js phone verification login, treat the SMS OTP resend countdown as a backend admission-control decision, not a browser timer. For m…
Two-Factor Authentication: How to Observe SMS and Trigger Backup Email
The page says that a marketplace seller cannot open a new property order because the login code never arrived. Support sees an impatient seller. On-…
Reusable Product Assets with Go: Reliable Background Removal Under Upload Bursts
The page fires after a course-merchandising upload: the original garment photo exists, but one or more fashion catalog cutouts still show the studio…
ForgeZero and Gloria: Build Tooling for People Who Still Want to Know What Their CPU Is Doing
I'm Alex Voste, the person behind ForgeZero and its resident experimental language, Gloria. I'm not going to open with a mission statement. I'm goin…
Why your topological sort gives a different answer on every run
You have a few tasks, and some of them depend on others. You put them in a graph, sort it topologically, and print the order. Then you run the progr…
Self-Hosted vs SaaS Uptime Monitoring for Small Go Apps (EU Cron Alerting)
TL;DR: Use SaaS endpoint monitoring plus a managed cron heartbeat for a small edtech application in an EU region. That is the least complex way for…
Go 1.27's Method Generics Underutilized in Production: Strategies to Boost Adoption and Realize Benefits
Introduction Go 1.27’s introduction of method generics was billed as a game-changer, promising to enhance the language’s suitability for data proces…
Почему я требую увидеть новый тест красным
Сигнализацию в доме проверяют не по зелёной лампочке. Открывают дверь и слушают, сработает ли она. Лампочка может гореть зелёным и когда всё в поряд…
Building VidFixa: A Video Downloader Built with Go, Nuxt, PostgreSQL and Bachs
I built VidFixa as a real project to learn, experiment, and actually ship something instead of building another tutorial project that never leaves m…
API Versioning with Separate Invoice Contracts
An invoice endpoint returns customer information as a string. A new representation replaces that string with an object containing the customer's ID,…
Concurrency Programming (4): Mutex Implementation — From Runtime to CPU
Table of Contents 0. What Does This Article Continue to Answer? 1. How Does HotSpot Implement synchronized? 1.1 Layers 1.2 The Complete Path of One…
'No tools listed' should mean deny, not allow-all
Here's a config bug that has shipped in more systems than anyone would like to admit: # grant this service access to... nothing? everything? allowed…
Concurrency Programming (3): Mutexes — Atomicity, Visibility, and Ordering at the Language Level
Table of Contents 0. Continue from the Previous Article 1. What Guarantees Do the Lock Rules in Each Language Provide? 1.1 Java: synchronized and Mo…
A Service Exists When It Is Declared
The card in a service catalog is a rendering of the manifest, not a table somebody remembers to update. 👋 Hi, I'm Anton - a software engineer workin…
containerd 2.2's mount manager panics on a one-mount mkfs chain
containerd 2.2 shipped a mount manager: a service that can format a file as ext4 or xfs, attach it as a loopback device, and hand the result to a ru…