#github — Public Fediverse posts

#Forgejo importer now supports both #Gitlab and #Github imports
You can easily migrate to a self-hosted (or a cloud) Forgejo instance:
https://github.com/nekromoff/forgejo-importer

Also check my Forgejo configurator that fully works locally in your browser:
https://ambience.sk/tools/forgejo-configurator.html

#git #webdev #software #opensource #hosting #selfhosting #tools

Most 11-day-old repos don’t gain 133 stars in a week. AgentGarten does: 183 stars, code worlds for evolving agents. Early signals like this are where the next 100 open-source AI projects start.

https://olud.ai/emerging.html

#OpenSource #AI #GitHub

"morluto/rea just pulled off the biggest 24h star gain in open-source AI: +14,624 stars (total 321.3k

https://olud.ai/project/morluto-rea.html

#OpenSource #AI #GitHub

🚀 This one just started climbing GitHub:

BreezeSolicitorMap/undress.ai — 446★
« Virtual clothing try-on from a single photo — mobile web app. Upload a person and a garment, get a photorealis… »

Discovered in today's radar:
https://olud.ai/latest.html

#OpenSource #AI #GitHub

How to deploy WordPress from GitHub with an AI agent: GitHub MCP reviews and merges[…]
 
#WordPress #Dev #Tools #GitHub #InstaWP #MCP

https://www.wpnews.io/how-to-deploy-wordpress-from-github-with-an-ai-agent-using-github-mcp/

Show HN: OmniPTY – Opinionated terminal emulator for macOS and Linux

https://github.com/omnipty-terminal/omnipty

#github #linux #macos

MacやiPhone/iPad対応の仮想化ソフトウェア「UTM」がiPhone Duoをサポートし、ノートPCのように下のディスプレイにキーボードやタッチパッドを表示するLaptop Modeを追加。
https://applech2.com/archives/20261019-utm-support-iphone-duo-laptop-mode.html

#applech2 #UTM #github #iPhone_Duo #Linux #OSS #Windows #アップデート #仮想マシン #仮想化

Show HN: WhatsApp MCP running free on Cloudflare

https://github.com/finereli/whatsapp-mcp

#cloudflare #github

🌍 Where open-source AI is actually built.

· United States 1,855
· China 1,123
· Germany 269
· United Kingdom 248
· France 178

5,547 projects located, from what their GitHub owners declare.

https://olud.ai/countries.html

#OpenSource #AI #GitHub

Netflix vmaf: Perceptual video quality assessment based on multi-method fusion

https://github.com/Netflix/vmaf

#github #netflix

Also the migration tool is here for anyone to use:
https://github.com/nekromoff/forgejo-importer

#forgejo #import #gitlab #git #migration #github #tools #python

Ah, yes, because what the world truly needs is yet another Lemmings clone for an OS that's been extinct longer than the dinosaurs. 🦖🐭 GitHub's endless feature list is apparently the perfect place to reanimate #PalmOS and watch digital rodents march off a cliff. 🚀💾
https://github.com/ardiri/palmos-lemmings #LemmingsClone #RetroGaming #DigitalRodents #GitHub #HackerNews #ngated

PalmOS Lemmings by Aaron Ardiri

https://github.com/ardiri/palmos-lemmings

#github

📡 dsh-our-free-model hit 21.7k stars in 24 days (+14.9k this week). A plugin for free, unlimited access to DeepSeek V4.1 Flash, Kimi K3 & more — no login. Health 82/100. What's driving this growth?

https://olud.ai/emerging.html

#OpenSource #AI #GitHub

#Meta confirma que unos atacantes entraron en sus repositorios de #GitHub con credenciales robadas y se llevaron código y datos de 1.500 personas

https://wwwhatsnew.com/2026/10/18/meta-brecha-github-credenciales-robadas-codigo-datos-1500/

Ah yes, the #RepRapMicron saga—a tangled mess of buzzwords and #GitHub worship, where "developers" pretend #automation will save them from their spaghetti code 🍝. Who needs actual productivity when you can worship at the altar of AI and still not know how to merge a pull request? 🙄 Keep dreaming, code cadets! 🚀
https://github.com/VikOlliver/RepRapMicron/wiki #spaghettiCode #AIworship #codeCadets #HackerNews #ngated

RepRapMicron

https://github.com/VikOlliver/RepRapMicron/wiki

#github

Open MicroManipulator – A sub-micrometer 3D motion control plattform

https://github.com/0x23/MicroManipulatorStepper

#github

It's time to talk about TEEs

https://alinush.github.io//tee

#github

🎭 Behold the masterpiece of "Parser Combinators" that dares to proclaim its superiority over regex, as if that's the contest of the century we all needed. Clearly, the author thinks linking to #GitHub and #LinkedIn makes them edgy and relevant. Meanwhile, the appendix of unrelated topics could only be more cohesive if they threw in grandma's apple pie recipe. 🍏💻
https://t3.at/blog/2026-10-17-parser-combinators/ #ParserCombinators #RegexVsParserCombinators #CodingHumor #HackerNews #ngated

📜 MIT licensed, source code on #GitHub: https://github.com/obsidianmd/pele

🌐 https://pele.run/

#SVG #frontend #diagrams

#Development #Launches
/dev/null · A social network for developers where every post is a commit https://ilo.im/16h20n

_____
#OpenSource #Communities #SocialNetwork #Commits #GitHub #DevOps #WebDev #Frontend #Backend

⚡️ Microsoft unveils the Maia 300 architecture

🏷️ #devdigest #azure #cloud #git #github #microsoft

https://devdigest.today/goto/6741

Download GitHub Code Quality license usage as a CSV https://github.blog/changelog/2026-10-15-download-github-code-quality-license-usage-as-a-csv
#github

Today I will start traveling and return home next weekend.

Expect slow response times for PRs, issues and so on.

#nixpkgs #nixos #github

AgentGarten: 183 stars in 10 days, +133 this week. One of 100 open-source AI projects about to matter before they're famous 📡

https://olud.ai/emerging.html

#OpenSource #AI #GitHub

[Release notes from capsicum]v2.4.0
https://github.com/pooza/capsicum/releases/tag/v2.4.0

#GitHub #capsicum #precure_fun #delmulin

Show HN: 500 clocks in one 6.3 MB HTML file by Opus 5.5

https://tkgally.github.io/500-clocks/

#github

Automating SSL Renewals in GitHub Actions with acme.sh

When our infrastructure team inherited a legacy deployment pipeline that required manual SSL certificate renewals every 90 days, the operational debt became unsustainable. After evaluating several ACME clients, we chose acme.sh for its pure shell implementation and minimal dependencies—critical for containerized CI environments.

The Problem: Certificate Expiry as a Production Incident

Our initial approach used cron jobs on individual VMs, but this created blind spots:

• No centralized audit trail of renewal attempts
• Failed renewals went unnoticed until expiry warnings
• Inconsistent acme.sh versions across environments
• Manual intervention required during DNS validation

We needed certificate lifecycle management integrated directly into our GitHub Actions deployment pipeline.

Deliverable 1: Hardened GitHub Actions Workflow

This workflow runs on a schedule and can be triggered manually. Key hardening techniques:

name: SSL Certificate Renewal

on:
schedule:
- cron: '0 2 * * 0' # Weekly Sunday 2 AM UTC
workflow_dispatch:

concurrency:
group: ssl-renewal
cancel-in-progress: false # Never cancel mid-renewal

jobs:
renew:
runs-on: ubuntu-22.04
timeout-minutes: 15

strategy:
matrix:
domain:
- api.example.com
- app.example.com
fail-fast: false # Continue other domains on failure

steps:
- name: Checkout acme.sh pinned version
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with:
repository: acmesh-official/acme.sh
ref: '3.0.7' # Pin exact release
path: acme.sh

- name: Cache acme.sh account
uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
with:
path: ~/.acme.sh
key: acme-account-${{ runner.os }}-v2

- name: Install acme.sh
run: |
cd acme.sh
./acme.sh --install --nocron --home ~/.acme.sh \
--accountemail ${{ secrets.ACME_EMAIL }}

- name: Issue certificate with DNS validation
env:
CF_Token: ${{ secrets.CLOUDFLARE_API_TOKEN }}
CF_Zone_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
run: |
~/.acme.sh/acme.sh --issue \
--dns dns_cf \
--domain ${{ matrix.domain }} \
--keylength ec-256 \
--server letsencrypt \
--log ~/.acme.sh/acme.log

- name: Upload certificate to secrets manager
if: success()
run: |
# Example: AWS Secrets Manager
CERT=$(cat ~/.acme.sh/${{ matrix.domain }}_ecc/fullchain.cer | base64 -w0)
KEY=$(cat ~/.acme.sh/${{ matrix.domain }}_ecc/${{ matrix.domain }}.key | base64 -w0)

aws secretsmanager update-secret \
--secret-id "ssl/${{ matrix.domain }}/cert" \
--secret-string "$CERT"

aws secretsmanager update-secret \
--secret-id "ssl/${{ matrix.domain }}/key" \
--secret-string "$KEY"

- name: Upload logs on failure
if: failure()
uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
with:
name: acme-logs-${{ matrix.domain }}
path: ~/.acme.sh/acme.log
retention-days: 30

Deliverable 2: Pre-Deployment Validation Script

This bash script runs in CI before deploying certificate updates to production:

#!/usr/bin/env bash
set -euo pipefail

# validate-cert.sh - Run in CI to enforce certificate quality gates

DOMAIN="$1"
CERT_FILE="$2"

# Gate 1: Certificate expiry must be > 30 days
EXPIRY=$(openssl x509 -enddate -noout -in "$CERT_FILE" | cut -d= -f2)
EXPIRY_EPOCH=$(date -d "$EXPIRY" +%s)
NOW_EPOCH=$(date +%s)
DAYS_REMAINING=$(( (EXPIRY_EPOCH - NOW_EPOCH) / 86400 ))

if [[ $DAYS_REMAINING -lt 30 ]]; then
echo "FAIL: Certificate expires in $DAYS_REMAINING days (minimum 30)"
exit 1
fi

# Gate 2: Subject Alternative Name must match domain
if ! openssl x509 -noout -text -in "$CERT_FILE" | grep -q "DNS:$DOMAIN"; then
echo "FAIL: Certificate SAN does not include $DOMAIN"
exit 1
fi

# Gate 3: Certificate chain must be complete
CHAIN_DEPTH=$(openssl crl2pkcs7 -nocrl -certfile "$CERT_FILE" | \
openssl pkcs7 -print_certs -noout | grep -c "subject=")

if [[ $CHAIN_DEPTH -lt 2 ]]; then
echo "FAIL: Certificate chain incomplete (depth: $CHAIN_DEPTH)"
exit 1
fi

echo "PASS: Certificate valid for $DAYS_REMAINING days with complete chain"

War Story: The Unpinned Action Incident

In March 2025, a supply chain compromise in a popular GitHub Action inserted credential exfiltration code. We discovered our runner logs were being uploaded to an external S3 bucket—logs that contained temporary AWS credentials.

The root cause: unpinned action versions using @main tags. After incident response, we implemented two policies:

1. Pin all actions to full commit SHAs (not tags, which are mutable)
2. Weekly Dependabot PRs to update pinned SHAs with security review

Lessons from Production

Concurrency control matters. Early versions allowed parallel renewal jobs, which triggered Let's Encrypt rate limits. The cancel-in-progress: false directive prevents workflow cancellations mid-validation.

Cache keys must version-bump on breaking changes. When we migrated from RSA to ECDSA certificates, stale cached account data caused validation failures. Explicit cache versioning (-v2 suffix) gives us a manual invalidation lever.

Matrix builds isolate blast radius. With fail-fast: false, a failure renewing one domain doesn't block others. The tradeoff: longer wall-clock time, but acceptable for weekly runs.

Conclusion

Integrating acme.sh into GitHub Actions eliminated an entire class of operational incidents. The workflow runs unattended, with Slack notifications on failure and certificate metrics exported to our observability stack.

The full validation script and workflow are production-tested across 40+ domains handling 2M+ requests daily. Certificate expiry hasn't triggered a page in 18 months.#github #devops #ci #automation #software #coding #development #engineering #inclusive #community
Automating SSL Renewals in GitHub Actions with acme.sh

Custom server to revive neato bots

https://github.com/vacuula/vacuula

Comments: https://news.ycombinator.com/item?id=50097257

#HackerNews #CustomServer #NeatoBots #Robotics #GitHub #TechInnovation

morluto/rea surged +38,407 stars in a single day — the fastest growth on our board today. Reverse engineering with agents is clearly resonating.

https://olud.ai/project/morluto-rea.html

#OpenSource #AI #GitHub

macOS 27 Golden GateのAVFでサポートされたセットアップアシスタントのスキップ、USBパススルー接続などに対応した仮想化ソフトウェア「VirtualBuddy v2.2」がリリース。
https://applech2.com/archives/20261018-virtualbuddy-support-macos-27-golden-gate-avf.html

#applech2 #仮想環境 #Apple_Silicon #github #GoldenGate #Mac #macOS_27 #OSS #Virtualization #アプリ #オープンソース #レビュー #仮想化

Lean now ships with verified kernels

https://leodemoura.github.io/blog/2026-10-15-lean-now-ships-with-verified-kernels/

#github

✨ Trending new AI project on GitHub:

anujasid/blender-ai-mcp-addon — 617★ · Python
« AI assistant and MCP server for Blender: visual chat, scene tools, multi-agent workflows. Works with OpenAI, C… »

Discovered in today's radar:
https://olud.ai/latest.html

#OpenSource #AI #GitHub

Custom server to revive neato bots

https://github.com/vacuula/vacuula

#github

🌍 The US dominates open-source AI development with 1,855 projects, but China is close at 1,123. The full list of 5,546 projects shows where the rest are built.

https://olud.ai/countries.html

#OpenSource #AI #GitHub

GitHubに競プロライブラリを保管したい！を叶える備忘録
https://qiita.com/Un_titled/items/a8620f54cf953ad67365?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #GitHub #AtCoder #ライブラリ #競技プログラミング #競プロ

Codex Desktop continuously generates Crashpad pending dumps

https://github.com/openai/codex/issues/25921

#github #openai

Learn everything you need to know about Github via these 500 free HackerNoon blog posts. https://hackernoon.com/500-blog-posts-to-learn-about-github #github

Source code of the Estonian online voting system

https://github.com/valimised/ivxv

#github

📡 Detected by our signals today: dsh-our-free-model

⭐ 16.1k stars · only 23 days old · +11.7k this week
« 在 dsh 里装上这个插件即可，无需登录、注册或填 API Key，就能使用包括 DeepSeek V4.1 Flash、Kimi K3 在内的前沿模型——完全免费，不限量… »
💚 Health: 82/100

The 100 open-source AI projects about to matter — before they're famous:
https://olud.ai/emerging.html

#OpenSource #AI #GitHub

tsc-ts: TypeScript written in TypeScript

https://github.com/vercel-labs/tsc-ts

Comments: https://news.ycombinator.com/item?id=50132911

#HackerNews #TypeScript #tsc-ts #Vercel #GitHub #Programming

📈 morluto/rea added 224,617 stars (268.2k total). An agent that reverse-engineers everything from app behavior to native binaries—see what drives the spike.

https://olud.ai/project/morluto-rea.html

#OpenSource #AI #GitHub