WinterTC: Write once, run anywhere (for real this time)

The WinterCG community group was recently promoted to a technical committee, signaling a growing maturity for the standard that aims to solidify JavaScript runtimes. Now is good time to catch up with this key feature of modern JavaScript and the web development landscape. The WinterTC manifesto To understand what WinterTC is about, we can begin…

Read More

How to choose the best LLM using R and vitals

Is your generative AI application giving the responses you expect? Are there less expensive large language models—or even free ones you can run locally—that might work well enough for some of your tasks? Answering questions like these isn’t always easy. Model capabilities seem to change every month. And, unlike conventional computer code, LLMs don’t always…

Read More

Enterprise use of open source AI coding is changing the ROI calculation

Coders are understandably complaining about AI coding problems, with the technology often delivering what’s become known as “AI slop,” but their concerns are signaling a more strategic issue about how enterprises calculate coding ROI. The issues, according to IT analysts and consultants, go far beyond vastly faster production of code accompanied by the kinds of…

Read More

GlassFish 8 Java server boosts data access, concurrency

The Eclipse Foundation has released the final version of GlassFish 8, an update of its enterprise Java application server. The new release serves as a compatible implementation of the Jakarta EE 11 Java platform and accommodates Jakarta Data repositories for simplifying data access, according to GlassFish development participant OmniFish. Virtual threads support for scalable concurrency…

Read More

GitHub readies agents to automate repository maintenance

GitHub is readying a new feature to automate some of the most expensive work in DevOps: the invisible housekeeping no one wants to own. Developers would rather be building features than debugging flaky continuous integration (CI) pipelines, triaging low-quality issues, updating outdated documentation, or closing persistent gaps in test coverage. In order to help developers…

Read More

Flaws in four popular VS Code extensions left 128 million installs open to attack

Critical and high-severity vulnerabilities were found in four widely used Visual Studio Code extensions with a combined 128 million downloads, exposing developers to file theft, remote code execution, and local network reconnaissance. Application security company OX Security published the findings this week, saying it had begun notifying vendors in June 2025 but received no response…

Read More