SShortSingh.
Back to feed

Editing .xlsx files outside Excel: which tools work in 2026 and where they fail

0
·2 views

An .xlsx file is a zip archive of XML parts, so editing it without Excel is less like changing text and more like modifying a small database with layout rules. Many tools corrupt files by rebuilding the whole workbook instead of rewriting only the cells that changed, which can silently lose column widths, fills, merged ranges, or number formats. The article compares three approaches: Excel or LibreOffice for full fidelity, command-line libraries such as Apache POI, openpyxl, and ExcelJS for control, and IDE plugins that have a poor record for corruption. The author argues the key question is whether a tool writes back only what changed and protects the original file. The biggest risks come from writing in place without a safe fallback and from overwriting the only copy without a backup.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Tutorial: Pulling Google Images results via an API using Python, Node or no-code tools

Google does not offer a public API for Google Images search results, so bulk collection of full-size URLs and source pages is difficult to do by hand. The tutorial uses Google Images Scraper, an Apify actor created by the author, which returns image URLs, dimensions, thumbnails, titles and source pages for each search. It supports filters for size, type, date and country, plus an only-new mode for scheduled runs. Use cases include gathering mood-board references, monitoring where a brand image appears online, and building size-filtered image datasets. Working examples in Python, Node and curl are available on GitHub.

0
ProgrammingDEV Community ·

Reverting AI agent edits in a CRM requires per-record before-images and run-level undo

An AI agent with write access to a CRM can make mistakes like bad merges or mass field overwrites, and an audit log alone does not restore the lost data. A safe undo needs before-and-after snapshots of each record, stored append-only with the actor, run identifier and request ID. Reverts should operate on whole agent runs rather than individual changes, and the agent's own credentials should be unable to undo its work. A reliable revert also skips records a person has edited since, reporting the reason, and keeps the full history visible. Emails that have already been sent cannot be recalled, so outbound workflows benefit from review queues and dry runs.

0
ProgrammingDEV Community ·

Tutorial Shows Python Method to Track New SAM.gov Contract Opportunities Without an API Key

A tutorial explains how companies selling to the US federal government can automatically monitor SAM.gov for new solicitations, sources-sought notices, and presolicitations. It describes using a hosted scraper on Apify, which requires an Apify account and API token but no SAM.gov account or key. The author provides a roughly 30-line Python script that pulls open IT-services opportunities by NAICS code and exports them to a CSV sorted by response deadline, including links to attached documents. The post notes that the synchronous Apify endpoint suits short runs, since runs over 300 seconds return an HTTP 408 error. In the author's test run on November 12, 2026, the script saved 48 open opportunities in about 20 seconds.

0
ProgrammingDEV Community ·

HotGo CVE-2026-120447 Lets Attackers Bypass SMS Login for Admin Accounts

A security advisory describes CVE-2026-120447, affecting HotGo versions 2.8.4 through 2.15.1. The flaw allows an unauthenticated attacker to supply their own verification code via the SMS send endpoint and then sign in through the mobile login path. Successful exploitation requires only a target mobile number and can lead to takeover of an administrator account. The advisory does not state that any internet-facing HotGo host has been compromised. Researchers used ZoomEye counts to estimate candidate deployments, but the matches must be confirmed as live, owned installations. Recommended mitigations include restricting admin and mobile login endpoints and disabling SMS login for privileged users until a fixed build is verified.