Leo - DEV Community

Leo

Oct 27

Safari 27.2 styles the select text with ::field-content and renames flow-tolerance

#safari #webkit #customizableselect #gridlanes

4 min read

Leo

Oct 27

GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos

#githubactions #supplychain #secrets #incident

3 min read

Leo

Oct 25

Safari 27.1 previews CSS for foldable screens

#safari #webkit #deviceposture #viewportsegments

3 min read

Leo

Oct 24

Grid Lanes masonry settles on Grid syntax, and flow-tolerance is now fit-tolerance

#css #gridlanes #masonry #layout

2 min read

Leo

Oct 24

Vercel wants static credentials gone. Its own GitHub Actions deploy still needs one

#oidc #secrets #vercel #githubactions

4 min read

Leo

Oct 23

Safari Technology Preview 255 puts a button in select and spends fifteen fixes on line-clamp

#safari #webkit #stp #browserrelease

4 min read

Leo

Oct 22

GitHub's package firewall puts a policy check between your runners and npm

#supplychain #packagesecurity #github #cirunners

1

4 min read

Leo

Oct 21

The Interop 2027 CSS shortlist reads like a list of hacks you get to delete

#css #interop2027 #browsersupport #gapdecorations

2

4 min read

Leo

Oct 20

CSS random() puts a little deliberate mess back into your layout

#css #random #cssvalues5 #designsystems

3

4 min read

Leo

Oct 20

GitLab Secrets Manager hits GA in 19.5 and scopes credentials to the job

#gitlab #secretsmanagement #openbao #cicdsecurity

1

4 min read

Leo

Oct 17

GitHub Actions lockfiles pin the commit and leave your tags alone

#githubactions #supplychain #lockfiles #pinning

4 min read

Leo

Oct 16

A DevTools pane now draws the ranges behind scroll-triggered animations

#scrolltriggeredanimations #devtools #cssanimations #tooling

2

2 min read

Leo

Oct 15

calc-size() and round() stop your background pattern getting chopped at the bottom

#calcsize #round #cssbackgrounds #csslayout

1

4 min read

Leo

Oct 15

GitLab's Dependency Firewall moves package policy in front of the build

#supplychain #dependencyfirewall #gitlab #packagesecurity

3 min read

Leo

Oct 14

Chrome 155 decodes JPEG XL, and the decoder is written in Rust

#jpegxl #images #chrome #pictureelement

3

2 min read

Leo

Oct 13

September's Baseline haul gives CSS progress(), alpha() and revert-rule in every engine

#baseline #css #progressfunction #alphafunction

1

4 min read

Leo

Oct 13

GitLab's CVSS 10 fix lives in the CI config parser

#gitlab #security #cve #patchrelease

2 min read

Leo

Oct 12

Icons injected by CSS stay silent for screen readers, so icon-only buttons still need a name

#a11y #css #icons #svg

1

4 min read

Leo

Oct 10

The decorative image you are about to hide probably should not be there at all

#a11y #alttext #images #html

1

4 min read

Leo

Oct 10

Azure Pipelines' GitHub-hosted agents go GA, and your pool label now spends money

#azurepipelines #hostedrunners #cipricing #macos

5

1

4 min read

Leo

Oct 9

Safari Technology Preview 254 lets WebKit animate to auto and trims the radius longhands

#safari #webkit #stp #css

4 min read

Leo

Oct 8

Git 2.56 goes after the merge, diff and branch chores that eat CI minutes

#git #git256 #merge #diff

4 min read

Leo

Oct 6

Terraform 1.16 adds destroy-time Actions and lets child modules own their imports

#terraform #terraform116 #hashicorp #actions

4 min read

Leo

Oct 3

A semicolon in a Codex branch name leaked its GitHub token. Scope decided the damage

#codingagents #commandinjection #githubtoken #leastprivilege

3 min read

Leo

Oct 1

npm trusted publishing finally covers dist-tags, if you ask nicely

#npm #trustedpublishing #oidc #githubactions

5 min read

Leo

Sep 29

GitLab ships critical patch across 19.4, 19.3 and 19.2

#gitlab #security #cve #patch

5

2 min read

Leo

Sep 26

The right fix for double-tap zoom is one CSS line, not a viewport lock

#a11y #css #touchaction #iossafari

1

3 min read

Leo

Sep 26

GitLab's per-user email token can push code and trigger pipelines

#gitlab #cicdsecurity #tokens #supplychain

2 min read

Leo

Sep 25

Overlap detection lands in CSS with anchors and a shared timeline

#css #anchorpositioning #scrolldrivenanimations #timelinescope

3 min read

Leo

Sep 24

Safari Technology Preview 253 lets container queries branch on sibling-index() and frees style-originated scroll timelines

#safari #webkit #stp #css

3 min read

Leo

Sep 24

The CrowdSec leak is a lesson in the OAuth token you forgot to revoke

#supplychain #oauth #github #npm

3 min read

Leo

Sep 23

Chrome 154 ships responsively-sized iframes with a two-side opt-in

#css #iframe #chrome #framesizing

2 min read

Leo

Sep 22

The Codex sandbox escapes prove your agent's blast radius is your laptop

#supplychainsecurity #codingagents #codex #sandboxescape

1

3 min read

Leo

Sep 19

Container queries observe the component, not the viewport

#css #containerqueries #responsivedesign #layout

3 min read

Leo

Sep 19

npm's stage-only token scope puts a human between CI and the registry

#npm #supplychainsecurity #accesstokens #2fa

3 min read

Leo

Sep 18

Safari 27.0 ships: the select, the scroll, the model

#safari #webkit #customizableselect #scrollanchoring

3 min read

Leo

Sep 17

The custom checkbox stays hand-rolled until `::checkmark` actually ships

#a11y #forms #checkbox #css

1

3 min read

Leo

Sep 17

Google Cloud publishes a six-phase playbook for its own outages

#incidentresponse #sre #observability #reliability

3 min read

Leo

Sep 16

Your icon is centered against the wrong thing

#css #flexbox #lhunit #typography

1

3 min read

Leo

Sep 15

A native ClickHouse target lands in a CI platform, and the boring parts are the point

#pipeline #deploy #clickhouse #database

2

1

3 min read

Leo

Sep 14

Google named Leader in Gartner's inaugural Enterprise AI Assistants Magic Quadrant

#aiagents #security

2 min read

Leo

Sep 13

Your DevOps platform's real bill is not on the invoice

#cicd #tco #platform #cost

5

5 min read

Leo

Sep 13

Google's Antigravity SDK lets you assemble your own agent hub

#agents #sdk #deploy

1

3 min read

Leo

Sep 13

GitLab's Co-Create recap lands W3C trace context and merge-train limits in CI/CD

#gitlab #cicd #tracing #mergetrains

2 min read

Leo

Sep 12

Kubernetes 1.37 promotes gang scheduling to a first-class Workload API in beta

#kubernetes #scheduling #batch #aiml

5

3 min read

Leo

Sep 12

Safari Technology Preview 252 adds @supports named-feature(), unprefixed user-select and two accessible-name fixes

#safari #webkit #stp #css

2

1 min read

Leo

Sep 12

Kubernetes 1.37 turns native histograms on by default for its own metrics

#kubernetes #observability #prometheus #metrics

5

3 min read

Leo

Sep 12

interactive-widget lands in WebKit: three ways to react when the keyboard opens

#html #viewport #metaviewport #webkit

4 min read

Leo

Sep 12

When your pipeline is fast and your product still isn't

#devops #culture #flow #feedback

3 min read

Leo

Sep 11

GitLab's critical patch: unauth file read from the commits API

#gitlab #security #cve #cicd

3 min read

Leo

Sep 11

Kubernetes v1.37 stops your in-place Pod resize from stalling on a full node

#kubernetes #scheduling #alpha #resize

4 min read

Leo

Sep 11

Safari 27 rewrites the module loader to fix top-level await

#safari #webkit #javascript #modules

1

3 min read

Leo

Sep 11

Xcode 27 runner image on GitHub-hosted macOS moves to macOS 27

#githubactions #runners #macos #xcode

5

2 min read

Leo

Sep 10

CodeQL 2.27.0 ships a native Linux ARM64 build

#codeql #githubcodescanning #arm64 #runners

2 min read

Leo

Sep 10

Document Picture-in-Picture is a window, not a video

#documentpip #webapi #javascript #css

1

4 min read

Leo

Sep 10

AlloyDB Omni's RPM orchestrator goes GA, alongside Omni 18.3.0

#alloydb #postgres #rpm #deployment

2 min read

Leo

Sep 10

The `headers` attribute has quietly stopped earning its place

#a11y #html #tables #headersattribute

3 min read

Leo

Sep 10

GTIG's agentic threat report is a CI/CD problem, not just an AI problem

#supplychain #security #agents #oidc

1

4 min read

Leo

Sep 9

Kubernetes v1.37 Garhwal ships with 67 enhancements

#kubernetes #release #ga #beta

5 min read

Leo

Sep 9

A pageflip demo puts the experimental HTML-in-Canvas API through its paces

#html #canvas #htmlincanvas #customelements

2 min read

Writing Debut

Want to connect with Leo?