SShortSingh.

Programming

0
ProgrammingHacker News ·

Ledge.sh lets users run shell commands and code directly inside Markdown notes

A developer has released Ledge.sh, an open-source Markdown notebook that allows users to execute shell commands, code, SQL, and API calls from within their notes. The tool was created to eliminate the repetitive process of copying commands from notes into a terminal. Ledge runs a real shell environment and can be hosted locally or accessed remotely via SSH through a companion ledge-server component. It supports Mac, Windows (via WSL), Linux, iOS, and Android, with Android support currently in beta. Built on Bun and Electrobun, the project is freely available on GitHub and actively seeking community feedback and contributors.

0
ProgrammingDEV Community ·

How AI Agents Should Handle Test Results After a Dependency Version Upgrade

When a software dependency upgrades to a new version, a previous PASS result from an AI agent remains valid only for the version it was tested against, not the newer one. The article argues that deleting old results loses useful history, while silently applying them to new versions misrepresents what was actually proven. Instead, the recommended approach is to preserve historical observations with their original scope and mark the new version's status as 'not established' until a fresh check is run. A new observation should be created for each distinct version, environment, or configuration being tested, keeping outcomes tightly bound to their specific context. If two runs produce conflicting results under apparently identical conditions, the disagreement should be recorded and investigated rather than resolved by defaulting to the most recent result.

0
ProgrammingDEV Community ·

Rust Framework Proposes Five-Tier Cryptographic Identity System for Multi-Device Security

A new software specification called Spec 02 outlines a multi-device identity architecture implemented in a Rust crate called siar-identity-multidevice. The design challenges the longstanding practice of assigning a single cryptographic keypair to a single user, arguing this model fails in real-world scenarios where people use multiple devices. Instead, it separates identity into five distinct tiers, ranging from an offline root keypair to ephemeral transport identities, ensuring no single layer conflates account ownership with device or session state. A root private key is kept offline or in hardware-backed secure enclaves and is only used for high-consequence administrative actions such as issuing device certificates. The architecture also aims to support instant revocation, zero-knowledge device pairing, and resilient messaging across fragmented or hostile networks.

0
ProgrammingDEV Community ·

How to prevent false positives when LLM agents test social login flows

When LLM agents test social login or signup flows, a passing result can be misleading if the agent reuses an existing browser session, stale cookies, or a mismatched identity. The core problem is that social login carries more state than a simple email-password form, including provider sessions, redirects, consent steps, and confirmation emails. Developers are advised to treat test identities as explicit dependencies by using synthetic, short-lived references like 'identity-qa-17' in isolated staging environments rather than relying on browser state. Each step in the flow should be verified against a small contract that confirms which identity was used, what state changed, and which signals were observed. Deterministic checks at every handoff point, such as validating session freshness, redirect URIs, and domain events, are recommended to ensure agents cannot falsely assert a signup completed.

0
ProgrammingDEV Community ·

How to Safely Delete node_modules Folders on Windows and Reclaim Drive Space

JavaScript developers who clone multiple projects often accumulate tens of gigabytes in node_modules folders that are no longer needed, since these directories store installed dependencies and can be fully rebuilt by running npm install. On Windows, users can delete these folders via File Explorer, Command Prompt using rmdir /s /q, or PowerShell using Remove-Item -Recurse -Force. Deeply nested dependency trees can trigger path-too-long or access-denied errors due to Windows' historical 260-character path limit, which can be resolved by enabling long path support in Group Policy or using robocopy to empty the folder first. For developers with many old projects, the free command-line tool npkill can scan an entire drive, display each node_modules folder with its size, and allow selective deletion interactively. Beyond node_modules, related storage bloat from Docker Desktop, WSL2 disk images, and build caches from tools like Webpack or Vite can also accumulate silently and are not easily visible in Windows' built-in storage settings.

0
ProgrammingDEV Community ·

How to Reclaim C: Drive Space Eaten by Docker Desktop on Windows

Docker Desktop on Windows stores all container data inside a single virtual disk file (.vhdx) that grows automatically but never shrinks on its own, even after deleting images. Running 'docker system prune' frees space within the virtual disk but does not return that space to the host drive until the file itself is compacted. Users must first quit Docker Desktop and shut down WSL2, then compact the disk using either the Optimize-VHD PowerShell command on Pro/Enterprise editions or the diskpart utility on Windows Home. The compacted virtual disk reattaches automatically when Docker Desktop is restarted. To prevent runaway disk growth in future, Docker Desktop's Settings allow users to set a maximum disk size limit under Resources > Advanced.

0
ProgrammingDEV Community ·

How to manually shrink WSL2 virtual disk files and reclaim Windows storage

WSL2 stores each Linux distribution inside a dynamically expanding virtual disk file (.vhdx) on the Windows C: drive, which grows automatically but never shrinks on its own even after files are deleted inside Linux. The freed space remains within the .vhdx container until the file is manually compacted, meaning Windows does not reclaim it automatically. To compact the disk, users must first fully shut down WSL2 using 'wsl --shutdown', then run the Optimize-VHD PowerShell command on Windows Pro or Enterprise, or use diskpart on Windows Home where Hyper-V is unavailable. For compaction to recover meaningful space, users should first clean up unused packages, logs, and Docker layers from within the Linux environment before shutting down and running the compaction process. Docker Desktop users face the same issue but their virtual disk resides in a separate folder, and the same manual compaction steps apply.

0
ProgrammingDEV Community ·

Calnode v0.10.1 ships community-driven security fixes and one-click NethServer module

Open-source scheduling tool Calnode released versions 0.10.0 and 0.10.1 within days of each other, with the bulk of new features contributed by external deployers rather than the core maintainer. Developer Marijn Bent submitted ten pull requests in sixteen minutes, covering improvements across booking, calendar, and user-preference features. Version 0.10.1 followed two days later with a security sweep addressing five vulnerabilities, including rate-limiting a public booking route, masking CalDAV error details to prevent network scanning, and fixing credential forwarding on cross-origin redirects. The release also introduces a one-click NethServer 8 module that installs Calnode as a self-hosted app with automated routing and persistent storage, though it is marked preview-grade pending end-to-end live testing. The project credited its growing deployer community as the primary driver of both feature development and security hardening.

0
ProgrammingDEV Community ·

Dev shares key lessons from building a Twitch chat overlay

A developer documented the technical challenges encountered while building a Twitch chat overlay, sharing lessons broadly applicable beyond the platform. Twitch chat runs over IRC and WebSocket, allowing anonymous read access without an account, but enabling the tags and commands capabilities is essential to receive emote positions and moderation events. A key pitfall involves string indexing: Twitch counts Unicode code points while JavaScript uses UTF-16 units, meaning emoji before emotes shift character positions and cause incorrect text slicing. Third-party emotes from services like 7TV and BetterTTV are not flagged in messages and must be looked up per word, including zero-width emotes that stack visually on top of others. CSS individual transform properties such as translate, rotate, and scale were used instead of animating the transform shorthand, preventing conflicts between static flips and keyframe animations.

0
ProgrammingDEV Community ·

Why Atomic Commits Make Git History Cleaner and Debugging Faster

Atomic commits are a Git practice where each commit represents a single, logical change rather than bundling multiple unrelated updates together. When commits mix changes — such as a new feature, a bug fix, and dependency updates — Git tools like bisect, revert, and cherry-pick become harder to use effectively. By staging and committing files separately, developers can isolate the intent of each change, making it easier to pinpoint regressions or safely roll back specific updates. For example, splitting a dark-mode toggle implementation into four distinct commits — UI, styling, dependencies, and tests — allows each one to be reverted independently without affecting the others. This approach transforms a project's Git history into a readable, navigable record that saves debugging time and reduces the risk of unintended side effects.

0
ProgrammingHacker News ·

NRC grants first US construction permit for GE Vernova BWRX-300 small modular reactor

The US Nuclear Regulatory Commission has issued the first construction permit in the country for a small modular reactor, specifically GE Vernova's BWRX-300 design. The permit is linked to the Tennessee Valley Authority's Clinch River site, marking a significant milestone for advanced nuclear energy development in the US. The BWRX-300 is a boiling water reactor design scaled down to 300 megawatts, intended to offer a more flexible and cost-effective nuclear power option. This approval represents a major regulatory step forward for the small modular reactor industry, which has long sought commercial deployment in the United States.

0
ProgrammingDEV Community ·

Backend Engineer Builds Home Lab-Testing Platform in Rust, Documents the Journey

A backend engineer is developing an application that connects patients with medical laboratories for at-home sample collection, where phlebotomists visit patients rather than the other way around. The developer chose Rust to build the backend despite being more experienced with Python and Node.js. The decision was driven by Rust's strong type system and strict compiler, which make it difficult to represent invalid states or ignore error handling — critical for a platform managing appointments, patient data, and payments. The engineer has launched a public series documenting the development process, with this article serving as the first entry.

0
ProgrammingDEV Community ·

Four common accessibility failures that plague most websites and how to fix them

Web accessibility auditing tools like Lighthouse and axe DevTools consistently flag the same four issues across marketing sites, blogs, and online stores: poor color contrast, missing image alt text, unlabeled icon buttons or links, and form fields without proper labels. Color contrast failures occur when text does not meet WCAG 2.2's minimum ratio requirements, such as light grey text on white backgrounds, while the fix involves darkening the foreground color to achieve at least a 4.5:1 ratio for normal text. Images require descriptive alt attributes so screen readers can convey meaning, with purely decorative images using an empty alt value to be skipped entirely. Icon-only controls like hamburger menus and social icons must carry an accessible name via aria-label or visually hidden text so assistive technologies announce their purpose. Form fields, particularly in footers and checkout flows, need explicit label elements rather than relying on placeholder text, which disappears during input and typically fails contrast standards.

0
ProgrammingDEV Community ·

VIDRAFT's Darwin-180B-RSI MoE Model Claims Top Spots on Five Hugging Face Leaderboards

Korean Pre-AGI startup VIDRAFT has released Darwin-180B-RSI, a 180-billion-parameter mixture-of-experts reasoning model built on Qwen3.8-Flash-Next, in late September 2026. The model uses selective model merging combined with a recursive self-improvement loop, where verified correct outputs are used to retrain the model across multiple iterations. VIDRAFT reports perfect scores on AIME 2026 and HMMT 2026 math benchmarks, along with strong results on GPQA Diamond, MMLU-Pro, and MMMU-Pro, claiming first place on five Hugging Face leaderboards. Despite its large parameter count, the sparse MoE architecture activates only 10 of 512 experts per inference pass, keeping computational costs lower than a comparable dense model. However, all benchmark results are self-reported by VIDRAFT and have not been independently verified by third parties.

0
ProgrammingHacker News ·

How a Dev Team Used AI-Assisted 'Vibe Coding' to Build a Polished Website

The team behind RailCode shared their experience building a professional-looking website using a approach they call 'vibe coding,' which relies heavily on AI tools. Despite lacking a dedicated designer, the result closely resembles work produced by a design professional. The blog post, shared on Hacker News, attracted modest engagement with 13 points and 13 comments. The write-up details the workflow and tools that helped bridge the gap between developer-built and designer-built aesthetics.

0
ProgrammingDEV Community ·

Developer Seeks Beta Testers for No-Code HTML-to-Gutenberg WordPress Plugin

A developer has built a WordPress plugin called Magic Blocks that converts any HTML element into a configurable Gutenberg block without requiring coding. The tool works alongside a companion browser extension available for Firefox and Chrome. Users activate the extension, click any HTML element on a webpage, and the plugin automatically calculates CSS and installs a fully functional Gutenberg block on their WordPress site. Text, links, and images — including background images — are turned into editable parameters that can be updated directly from The Loop. The developer plans to release Magic Blocks as free and open-source software and is currently seeking beta testers.

0
ProgrammingDEV Community ·

MergeKit Cloud Brings AI Model Merging Online, Seeks Open-Source Contributors

MergeKit, a tool that enables developers to merge large language models without costly retraining, is expanding into a cloud-based platform called MergeKit Cloud. The project aims to make model merging accessible beyond local machine constraints by supporting cloud-bucket storage layers with optimized tensor chunking and lazy weight loading. The team is also working to integrate automated benchmarking suites such as LMSYS and AlpacaEval directly into the merging workflow. Additionally, a visual recipe block builder is being developed to allow non-technical enterprise users to participate in model creation. The project is actively inviting open-source contributors across MLOps, evaluation, and frontend development areas.

0
ProgrammingDEV Community ·

Why Embracing 'Unknown' States Leads to Better Code and Clearer Thinking

A software developer draws parallels between system design and personal psychology, arguing that tolerating uncertainty is more honest and effective than forcing premature conclusions. In a payment settlement engine they built, an explicit UNKNOWN state handles ambiguous outcomes — such as gateway failures or database deadlocks — rather than retrying until a false yes or no is produced. The same logic applies to concurrent transaction handling, where allowing two requests to proceed and letting a database constraint resolve the conflict outperforms upfront locking that causes deadlocks. The developer extends this principle to self-reflection, treating beliefs about their own anxiety as hypotheses to be tested rather than settled truths. The core argument is that a slow, correct answer is more valuable than a fast, manufactured certainty — in both code and life.

0
ProgrammingDEV Community ·

Banco do Brasil Billing API: Key Technical Challenges and Limitations

Banco do Brasil's Billing API enables businesses to automate the issuance, querying, and management of bank payment slips (boletos), but its implementation comes with notable technical and operational hurdles. Credential management is a critical concern, as regenerating access keys can invalidate existing ones and disrupt live systems. High-volume applications must carefully manage request frequency and implement processing queues to stay within API usage limits. Financial reconciliation remains a manual responsibility even after automation, requiring systems to handle duplicate payments, delayed updates, and a 60-day query restriction on settled invoices. Experts recommend separating boleto registration, status queries, and payment confirmation into distinct architectural layers, alongside robust audit logging and contingency procedures.

← NewerPage 797 of 3168Older →