Dew Drop - October 19, 2026 (#4773)
https://www.alvinashcraft.com/2026/10/19/dew-drop-october-19-2026-4773/
#dotnet #webdev #ai #csharp #appdev #vscode #windowsdev #cloud #visualstudio #github #dewdrop
Live and recent posts from across the Fediverse tagged #github, aggregated by home.social.
Here it is - I have created Issue 776 on WriteFreely's github for a serious accessibility issue I am meeting with screen readers. Yes, many things should be improved but this one is the most urgent because it's blocking me.
cc @writefreely @write_as @matt
Mentioning also @michael who forked WriteFreely as far as I can remember.
Here's the issue's link:
https://github.com/writefreely/writefreely/issues/1776
#a11y #accessibility #blind #bugReport #css #github #issue #WriteFreely
#Forgejo importer now supports both #Gitlab and #Github imports
You can easily migrate to a self-hosted (or a cloud) Forgejo instance:
https://github.com/nekromoff/forgejo-importer
Also check my Forgejo configurator that fully works locally in your browser:
https://ambience.sk/tools/forgejo-configurator.html
#git #webdev #software #opensource #hosting #selfhosting #tools
Most 11-day-old repos don’t gain 133 stars in a week. AgentGarten does: 183 stars, code worlds for evolving agents. Early signals like this are where the next 100 open-source AI projects start.
"morluto/rea just pulled off the biggest 24h star gain in open-source AI: +14,624 stars (total 321.3k
🚀 This one just started climbing GitHub:
BreezeSolicitorMap/undress.ai — 446★
« Virtual clothing try-on from a single photo — mobile web app. Upload a person and a garment, get a photorealis… »
Discovered in today's radar:
https://olud.ai/latest.html
How to deploy WordPress from GitHub with an AI agent: GitHub MCP reviews and merges[…]
#WordPress #Dev #Tools #GitHub #InstaWP #MCP
https://www.wpnews.io/how-to-deploy-wordpress-from-github-with-an-ai-agent-using-github-mcp/
Show HN: OmniPTY – Opinionated terminal emulator for macOS and Linux
Show HN: WhatsApp MCP running free on Cloudflare
🌍 Where open-source AI is actually built.
· United States 1,855
· China 1,123
· Germany 269
· United Kingdom 248
· France 178
5,547 projects located, from what their GitHub owners declare.
Netflix vmaf: Perceptual video quality assessment based on multi-method fusion
Ah, yes, because what the world truly needs is yet another Lemmings clone for an OS that's been extinct longer than the dinosaurs. 🦖🐭 GitHub's endless feature list is apparently the perfect place to reanimate #PalmOS and watch digital rodents march off a cliff. 🚀💾
https://github.com/ardiri/palmos-lemmings #LemmingsClone #RetroGaming #DigitalRodents #GitHub #HackerNews #ngated
📡 dsh-our-free-model hit 21.7k stars in 24 days (+14.9k this week). A plugin for free, unlimited access to DeepSeek V4.1 Flash, Kimi K3 & more — no login. Health 82/100. What's driving this growth?
#Meta confirma que unos atacantes entraron en sus repositorios de #GitHub con credenciales robadas y se llevaron código y datos de 1.500 personas
https://wwwhatsnew.com/2026/10/18/meta-brecha-github-credenciales-robadas-codigo-datos-1500/
Ah yes, the #RepRapMicron saga—a tangled mess of buzzwords and #GitHub worship, where "developers" pretend #automation will save them from their spaghetti code 🍝. Who needs actual productivity when you can worship at the altar of AI and still not know how to merge a pull request? 🙄 Keep dreaming, code cadets! 🚀
https://github.com/VikOlliver/RepRapMicron/wiki #spaghettiCode #AIworship #codeCadets #HackerNews #ngated
Open MicroManipulator – A sub-micrometer 3D motion control plattform
🎭 Behold the masterpiece of "Parser Combinators" that dares to proclaim its superiority over regex, as if that's the contest of the century we all needed. Clearly, the author thinks linking to #GitHub and #LinkedIn makes them edgy and relevant. Meanwhile, the appendix of unrelated topics could only be more cohesive if they threw in grandma's apple pie recipe. 🍏💻
https://t3.at/blog/2026-10-17-parser-combinators/ #ParserCombinators #RegexVsParserCombinators #CodingHumor #HackerNews #ngated
📜 MIT licensed, source code on #GitHub: https://github.com/obsidianmd/pele
#Development #Launches
/dev/null · A social network for developers where every post is a commit https://ilo.im/16h20n
_____
#OpenSource #Communities #SocialNetwork #Commits #GitHub #DevOps #WebDev #Frontend #Backend
⚡️ Microsoft unveils the Maia 300 architecture
Download GitHub Code Quality license usage as a CSV https://github.blog/changelog/2026-10-15-download-github-code-quality-license-usage-as-a-csv
#github
AgentGarten: 183 stars in 10 days, +133 this week. One of 100 open-source AI projects about to matter before they're famous 📡
[Release notes from capsicum]v2.4.0
https://github.com/pooza/capsicum/releases/tag/v2.4.0
Automating SSL Renewals in GitHub Actions with acme.sh
When our infrastructure team inherited a legacy deployment pipeline that required manual SSL certificate renewals every 90 days, the operational debt became unsustainable. After evaluating several ACME clients, we chose acme.sh for its pure shell implementation and minimal dependencies—critical for containerized CI environments.
The Problem: Certificate Expiry as a Production Incident
Our initial approach used cron jobs on individual VMs, but this created blind spots:
We needed certificate lifecycle management integrated directly into our GitHub Actions deployment pipeline.
Deliverable 1: Hardened GitHub Actions Workflow
This workflow runs on a schedule and can be triggered manually. Key hardening techniques:
name: SSL Certificate Renewal
on:
schedule:
- cron: '0 2 * * 0' # Weekly Sunday 2 AM UTC
workflow_dispatch:
concurrency:
group: ssl-renewal
cancel-in-progress: false # Never cancel mid-renewal
jobs:
renew:
runs-on: ubuntu-22.04
timeout-minutes: 15
strategy:
matrix:
domain:
- api.example.com
- app.example.com
fail-fast: false # Continue other domains on failure
steps:
- name: Checkout acme.sh pinned version
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
with:
repository: acmesh-official/acme.sh
ref: '3.0.7' # Pin exact release
path: acme.sh
- name: Cache acme.sh account
uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
with:
path: ~/.acme.sh
key: acme-account-${{ runner.os }}-v2
- name: Install acme.sh
run: |
cd acme.sh
./acme.sh --install --nocron --home ~/.acme.sh \
--accountemail ${{ secrets.ACME_EMAIL }}
- name: Issue certificate with DNS validation
env:
CF_Token: ${{ secrets.CLOUDFLARE_API_TOKEN }}
CF_Zone_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
run: |
~/.acme.sh/acme.sh --issue \
--dns dns_cf \
--domain ${{ matrix.domain }} \
--keylength ec-256 \
--server letsencrypt \
--log ~/.acme.sh/acme.log
- name: Upload certificate to secrets manager
if: success()
run: |
# Example: AWS Secrets Manager
CERT=$(cat ~/.acme.sh/${{ matrix.domain }}_ecc/fullchain.cer | base64 -w0)
KEY=$(cat ~/.acme.sh/${{ matrix.domain }}_ecc/${{ matrix.domain }}.key | base64 -w0)
aws secretsmanager update-secret \
--secret-id "ssl/${{ matrix.domain }}/cert" \
--secret-string "$CERT"
aws secretsmanager update-secret \
--secret-id "ssl/${{ matrix.domain }}/key" \
--secret-string "$KEY"
- name: Upload logs on failure
if: failure()
uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
with:
name: acme-logs-${{ matrix.domain }}
path: ~/.acme.sh/acme.log
retention-days: 30
Deliverable 2: Pre-Deployment Validation Script
This bash script runs in CI before deploying certificate updates to production:
#!/usr/bin/env bash
set -euo pipefail
# validate-cert.sh - Run in CI to enforce certificate quality gates
DOMAIN="$1"
CERT_FILE="$2"
# Gate 1: Certificate expiry must be > 30 days
EXPIRY=$(openssl x509 -enddate -noout -in "$CERT_FILE" | cut -d= -f2)
EXPIRY_EPOCH=$(date -d "$EXPIRY" +%s)
NOW_EPOCH=$(date +%s)
DAYS_REMAINING=$(( (EXPIRY_EPOCH - NOW_EPOCH) / 86400 ))
if [[ $DAYS_REMAINING -lt 30 ]]; then
echo "FAIL: Certificate expires in $DAYS_REMAINING days (minimum 30)"
exit 1
fi
# Gate 2: Subject Alternative Name must match domain
if ! openssl x509 -noout -text -in "$CERT_FILE" | grep -q "DNS:$DOMAIN"; then
echo "FAIL: Certificate SAN does not include $DOMAIN"
exit 1
fi
# Gate 3: Certificate chain must be complete
CHAIN_DEPTH=$(openssl crl2pkcs7 -nocrl -certfile "$CERT_FILE" | \
openssl pkcs7 -print_certs -noout | grep -c "subject=")
if [[ $CHAIN_DEPTH -lt 2 ]]; then
echo "FAIL: Certificate chain incomplete (depth: $CHAIN_DEPTH)"
exit 1
fi
echo "PASS: Certificate valid for $DAYS_REMAINING days with complete chain"
War Story: The Unpinned Action Incident
In March 2025, a supply chain compromise in a popular GitHub Action inserted credential exfiltration code. We discovered our runner logs were being uploaded to an external S3 bucket—logs that contained temporary AWS credentials.
The root cause: unpinned action versions using @main tags. After incident response, we implemented two policies:
Lessons from Production
Concurrency control matters. Early versions allowed parallel renewal jobs, which triggered Let's Encrypt rate limits. The cancel-in-progress: false directive prevents workflow cancellations mid-validation.
Cache keys must version-bump on breaking changes. When we migrated from RSA to ECDSA certificates, stale cached account data caused validation failures. Explicit cache versioning (-v2 suffix) gives us a manual invalidation lever.
Matrix builds isolate blast radius. With fail-fast: false, a failure renewing one domain doesn't block others. The tradeoff: longer wall-clock time, but acceptable for weekly runs.
Conclusion
Integrating acme.sh into GitHub Actions eliminated an entire class of operational incidents. The workflow runs unattended, with Slack notifications on failure and certificate metrics exported to our observability stack.
The full validation script and workflow are production-tested across 40+ domains handling 2M+ requests daily. Certificate expiry hasn't triggered a page in 18 months.#github #devops #ci #automation #software #coding #development #engineering #inclusive #community
Automating SSL Renewals in GitHub Actions with acme.sh
morluto/rea surged +38,407 stars in a single day — the fastest growth on our board today. Reverse engineering with agents is clearly resonating.
macOS 27 Golden GateのAVFでサポートされたセットアップアシスタントのスキップ、USBパススルー接続などに対応した仮想化ソフトウェア「VirtualBuddy v2.2」がリリース。
https://applech2.com/archives/20261018-virtualbuddy-support-macos-27-golden-gate-avf.html
#applech2 #仮想環境 #Apple_Silicon #github #GoldenGate #Mac #macOS_27 #OSS #Virtualization #アプリ #オープンソース #レビュー #仮想化
Lean now ships with verified kernels
https://leodemoura.github.io/blog/2026-10-15-lean-now-ships-with-verified-kernels/
✨ Trending new AI project on GitHub:
anujasid/blender-ai-mcp-addon — 617★ · Python
« AI assistant and MCP server for Blender: visual chat, scene tools, multi-agent workflows. Works with OpenAI, C… »
Discovered in today's radar:
https://olud.ai/latest.html
🌍 The US dominates open-source AI development with 1,855 projects, but China is close at 1,123. The full list of 5,546 projects shows where the rest are built.
Codex Desktop continuously generates Crashpad pending dumps
Learn everything you need to know about Github via these 500 free HackerNoon blog posts. https://hackernoon.com/500-blog-posts-to-learn-about-github #github
📡 Detected by our signals today: dsh-our-free-model
⭐ 16.1k stars · only 23 days old · +11.7k this week
« 在 dsh 里装上这个插件即可,无需登录、注册或填 API Key,就能使用包括 DeepSeek V4.1 Flash、Kimi K3 在内的前沿模型——完全免费,不限量… »
💚 Health: 82/100
The 100 open-source AI projects about to matter — before they're famous:
https://olud.ai/emerging.html