8zero7

Application Architecture Design & Consulting
Never settle for anything less than amazing. All snark is provided free of charge 🦾

[8zero7 @8zero7]

GitHub changelog: https://t.co/yx8iXhrCWC

[8zero7 @8zero7]

If you automate on GitHub secret scanning audit logs: on Nov 12, the business field in secret_scanning_alert and push protection bypass events switches from the enterprise display name to its slug.

Accept both, or filter on business_id.

[8zero7 @8zero7]

Cloudflare's post: https://t.co/fehUvX6yeT

[8zero7 @8zero7]

Cloudflare previewed Clairic, an extraction model on Workers AI: it pulls typed values like totals, dates and names out of unstructured input, and returns numbers with an 80% range.

Pitched as faster and cheaper than an LLM for these calls. Open weights planned.

[8zero7 @8zero7]

The guide: https://t.co/9mIM2srJpi

[8zero7 @8zero7]

Cursor or Devin Desktop (formerly Windsurf)?

The biggest difference is which models your plan pays for. ToolTier's side-by-side covers pricing, free tiers and who each one fits, with prices verified Oct 19.

[8zero7 @8zero7]

GitHub changelog: https://t.co/pDauXy1S7f

[8zero7 @8zero7]

GitHub now lets you convert all of a repo's branch protection rules to rulesets in one action.

Settings, Rulesets, Import branch protection rules. You can preview the result, pick an enforcement status, and choose whether to keep or delete the old rules.

[8zero7 @8zero7]

Release notes: https://t.co/oZxTzNl9Sl

[8zero7 @8zero7]

Claude Code v2.1.305 adds sandbox.allowNestedUserNamespaces so sandboxed Linux commands can create user namespaces (Chromium, rootless podman).

The notes warn it lets them get around the sandbox's file protections, so turn it on deliberately.

[8zero7 @8zero7]

How we approach architecture work: https://t.co/thk1M1Yrt5

[8zero7 @8zero7]

Architecture tip: write down why, not just what.

A short decision record for each big choice (the options, the trade-offs, what you picked) saves the next engineer from relitigating it, or quietly undoing it, a year later.

[8zero7 @8zero7]

Vercel changelog: https://t.co/fbkS99UgMA

[8zero7 @8zero7]

WebSockets in Vercel Functions are now GA.

Since the public beta in late June, Vercel's CDN has served 300 million WebSocket connections and now handles 15 million a day. They're billed like other Function invocations, with CPU charged only while processing messages.

[8zero7 @8zero7]

GitHub changelog: https://t.co/5Rmp7R41yl

[8zero7 @8zero7]

GitHub's package firewall is in public preview for Enterprise Cloud.

It sits between Actions runners or coding agents and the registry and checks downloads against policy: a cooldown period, Advisory Database malware alerts, attestation checks. npm only for now; free in preview.

[8zero7 @8zero7]

Details and how to try the experimental npm package: https://t.co/745LgdaVBx

[8zero7 @8zero7]

Cloudflare and VoidZero are working on tsrs, a Rust port of the TypeScript compiler, with the TypeScript team and as part of the Oxc toolchain. It's not a fork.

Early benchmarks: up to 8x faster and ~70% less memory than TypeScript 7.0 with the same number of type check workers.

[8zero7 @8zero7]

Cloudflare's write-up and full action list: https://t.co/lOqtrWhbqv

[8zero7 @8zero7]

Security heads-up: Cloudflare says private keys for eight eMudhra intermediate certificates were compromised, so forged certs for any domain are possible.

If you run cloudflared, upgrade to 2026.10.2. If you use Full (strict) mode, review your origin certificates.