Skip to main content

Posts

Showing posts from November, 2025

The Builders Era: AI, DevEx, and the Developer as the Hero

The world of software development is undergoing a transformation, and GitKraken’s free, two-day virtual event,  GitKon 2025 ,  is set to redefine what it means to “ship responsibly in the age of AI.”  The theme of the conference is “The Builder’s Era,” and according to Jeremy Castile, VP of developer research at host company GitKraken,  the event will be a celebration of makers, maintaners, mentors and development leaders. “ For developers, it’s sharpen your craft, explore new tools, and learn how to work smarter with AI automation,” he said. “For leaders, it’s discover frameworks for scaling culture, measuring DevEx and leading teams through this transformation.” The event spans two full days – Dec. 10 and 11 – with the first day dedicated to developers and the second day for leaders, all focused on the central idea that developers are—and will remain—first-class citizens in the business. The central message from GitKraken is clear: this era is about AI assiste...

Why generative AI makes ‘perfect data’ obsolete

CIOs and CTOs have heard the same refrain for years on end: before you can deploy AI, you need to clean and unify your data. That belief made sense in the era of legacy machine learning, when reductive models required meticulous preprocessing and endless consulting hours. Vendors and integrators built entire business models on that assumption. Generative AI has turned that assumption on its head. Today’s models don’t need pristine datasets. In fact, they excel at working with information that’s fragmented or messy, and are capable of processing and enriching it dynamically. The belief that data must be perfect before you can act is actively holding organizations back. The generative AI shift Unlike earlier approaches, generative AI can take on the heavy lifting of managing and improving data. Instead of years spent standardizing formats and building pipelines, enterprises can let AI do the hard work and focus human effort on extracting value. Research backs this up. A Stanford stud...

Honeycomb announces native support for OpenTelemetry metrics

Honeycomb has announced that it is expanding its observability platform with native support for standard OpenTelemetry metrics. According to the company, engineers can now use gauges, counters, and histograms to track trends, monitor system health, and detect performance changes over time. This data will give them a better sense of how what is happening in their infrastructure relates to what is happening in their applications. “Full time-series metrics are the industry standard for most developers and site reliability engineers,” said Graham Siener, vice president of product at Honeycomb. “Our new Metrics capabilities meet customers where they are, combining open-standard metrics methodologies with our industry-leading tracing data to better determine the context around critical issues. The Honeycomb Intelligence platform, which includes our improved Metrics, is purpose-built for teams of every size and provides a platform for success that organizations can use to navigate their AI ...

Microsoft unveils Agent 365, a unified control plane for agents

During the Microsoft Ignite conference, Microsoft announced several new products and features designed to enable the agent-powered enterprise. “The future of work will be shaped by Frontier Firms—organizations that are human-led and agent-operated. These companies are reshaping how work gets done, empowering every employee with an AI assistant, amplifying impact with human-agent teamwork, and reinventing business processes with agents. Today at Microsoft Ignite, we introduced new capabilities in Microsoft 365 Copilot to help every customer become Frontier,” Microsoft wrote in a blog post . It announced Agent 365, a control plane for managing agents, whether they are created in Microsoft’s ecosystem or from third-party partners. Agent 365 consists of a registry that acts as a single source of truth for all of an organization’s agents, access controls for those agents, a unified dashboard and analytics engine that shows connections between agents and humans, interoperability with apps...

How Progress Autonomous REST Connector Bridges the Gap Between BI Tools and Internal Applications

I n an increasingly interconnected business world, being able to connect business intelligence (BI)  tools to internal applications or data sources is a must. Fortunately, much of the industry has standardized around REST APIs, which provides a starting point for making these connections, but it’s not a perfect system as it stands today.   Progress Principal Sales Engineer, Dennis Bennett said “Pretty much every SaaS application will expose a REST API to give you access to it. Since [these applications are] hosted in the cloud, they’re never going to give you access to the database that holds your data because that’s just way too insecure, but they can give you access through an API so that you can make a request to get your data and it will go through some logic to ensure what you’re asking for is something you’re entitled to .” Dennis Bennett, Principal Sales Engineer at Progress. He explained that the downside to REST APIs is that they don’t lock you down into any ...

Google announces agentic development platform, Google Antigravity

Coinciding with its announcement of Gemini 3 today, Google announced the launch of a new agentic development platform, Google Antigravity . The company sees Antigravity as an evolution of the IDE into an agent-first future, with capabilities like browser control and asynchronous interaction patterns. “With models like Gemini 3, we have started hitting the point in agentic intelligence where models are capable of running for longer periods of time without intervention across multiple surfaces. Not yet for days at a time without intervention, but we’re getting closer to a world where we interface with agents at higher abstractions over individual prompts and tool calls. In this world, the product surface that enables communication between the agent and user should look and feel different – and Antigravity is our answer to this,” Google wrote in a blog post . According to Google, this new IDE is based on four key tenets of collaborative development: trust, autonomy, feedback, and self...

Cloudflare announces acquisition of AI platform Replicate

Cloudflare today announced its intention to acquire Replicate, an AI platform that allows developers to deploy and run AI models. According to Cloudflare, by bringing Replicate into its portfolio, it will be able to turn Cloudflare Workers into a leading platform for building and running AI applications. “Soon, developers building on Cloudflare will be able to access any AI model globally with just one line of code,” the company wrote in an announcement . Replicate has over 50,000 production-ready AI models, which will be available in Cloudflare Workers AI. Cloudflare will also leverage Replicate’s expertise to add new capabilities to Workers AI, such as the ability to run custom models and pipelines. Existing Replicate users will be able to keep using their APIs and workflows without interruption, and will soon be able to benefit from Cloudflare’s network. “We’re still in the early innings of developers building AI applications, and too much of the complexity falls on the develope...

AWS announces enhanced event processing in Lambda

AWS has announced that Lambda is getting a new capability that will help improve the throughput of event-driven applications. Provisioned mode for Amazon Simple Queue Service ( Amazon SQS ) Event Source Mapping (ESM) allows users to configure dedicated polling resources, allowing events to be processed with lower latency, handle sudden traffic spikes, and maintain precise control over event processing resources. According to Amazon, SQS is often used as an event source for Lambda functions, and though it automatically handles queue polling and function invocation, customers with specific performance requirements have requested more control over polling behavior so they can better handle spikes in traffic. This new provisioned mode is based on event pollers, dedicated resources that can handle unexpected traffic patterns. Admins will be able to configure a minimum and maximum number of event pollers, each of which represents a unit of compute that manages queue polling, event batchi...

Keeper Security Empowers Developers With Secure Secrets Management in Visual Studio Code

Keeper Security , the leading provider of zero-trust and zero-knowledge cybersecurity software protecting passwords and passkeys, infrastructure secrets, remote connections and endpoints, today announces the launch of its Visual Studio Code (VS Code) extension, extending Keeper’s enterprise-grade secrets management directly into developers’ coding environments. The VS Code extension expands the  KeeperPAM®  platform’s reach into the developer ecosystem, enabling secure, zero-trust secrets management throughout the software development lifecycle. Secure secrets management is critical for developers because it directly protects the credentials, API keys, tokens and certificates that applications rely on to function securely. When these secrets are mishandled, such as being stored in plaintext, hardcoded into source code or shared informally, they create severe vulnerabilities that attackers can exploit to compromise systems or data. The new Keeper VS Code extension allows deve...

The story behind Lightning Chart – and its upcoming Dashtera analytics and dashboard solution

The drive for innovation behind Lightning Chart – and its upcoming data analytics and dashboard solution, Dashtera –  is rooted in the history of the company’s founder, Pasi Tuomainen. Though his family had an established electrical company in Finland — Pasi’s passion was always software. He found himself drawn to creating code rather than installing lights. During his academic career in computer science and electronics, he was hired by a local medical company, where his work involved creating complex, demanding applications, including computer games designed for the rehabilitation of brain stroke patients.  “They needed to visualize EEG data from hundreds of different channels, like sensors attached to your head and muscles, with high sampling frequencies,” he recalled, noting that technology hadn’t been created yet.. “So that was the ignition point of Lightning Chart.” At first, Tuomainen said, it was a struggle. “The first two years, it was really challenging.  Ther...

A developer’s Hippocratic Oath: Prioritizing quality and security with the fast pace of AI-generated coding

Doctors have to follow the Hippocratic Oath, swearing to do no harm to their patients. Developers ought to be following a similar oath, promising to do no harm to their codebase when implementing new features or making changes. Mitchell Johnson, chief product development officer at Sonatype, explored this concept and if it’s even still possible in the age of AI-assisted development during the most recent episode of our podcast What the Dev . “In the context of the medical field, physicians are taught ‘do no harm,’ and what that means is their highest duty of care is to make sure that the patient is first, and that they do not conduct any sort of treatments on the patient without first validating that that’s what’s best for the patient,” said Johnson. “When they roll a patient in and the chart says, ‘we need to cut this patient’s leg off,’ obviously, it’s the responsibility of that physician to make sure that’s the treatment that the patient needs. They can’t point to ‘hey, it was on ...

This week in AI updates: GPT-5.1, Cloudsmith MCP Server, and more (November 14, 2025)

OpenAI’s latest update delivers GPT-5.1 models and capabilities to give users more control over ChatGPT’s personality According to the company, users will now have more control over ChatGPT’s tone and style. It had added a few preset tone options earlier this year, and now it is refining the options and adding new ones. The existing ones that will remain unchanged are Cynical (originally Cynic) and Nerdy (originally Nerd), while other presets will be updated, including Default, Friendly (originally Listener), and Efficient (originally Robot). Three entirely new presets are being added as well: Professional, Candid, and Quirky. GPT-5.1 Instant is warmer and more conversational than its GPT-5 counterpart, and is also better at following instructions. “Based on early testing, it often surprises people with its playfulness while remaining clear and useful,” OpenAI wrote. It can use adaptive reasoning to decide when it should think before responding, which results in more thorough and a...

OpenAI’s latest update delivers GPT-5.1 models and capabilities to give users more control over ChatGPT’s personality

OpenAI has announced new ChatGPT capabilities and new models in the GPT-5 family: GPT-5.1 Instant and GPT-5.1 Thinking. According to the company, users will now have more control over ChatGPT’s tone and style. It had added a few preset tone options earlier this year, and now it is refining the options and adding new ones. The existing ones that will remain unchanged are Cynical (originally Cynic) and Nerdy (originally Nerd), while other presets will be updated, including Default, Friendly (originally Listener), and Efficient (originally Robot). Three entirely new presets are being added as well: Professional, Candid, and Quirky. “These options are designed to align with what we’ve learned about how people naturally steer the model, making it quick and intuitive to choose a personality that feels uniquely right,” OpenAI wrote in a post . In addition to these presets, users will be able to finetune some of ChatGPT’s characteristics, such as how concise, warm, or scannable its response...

OWASP Top 10 updated after four years, with many of the same concerns still impacting applications

The OWASP Foundation has revealed the first Release Candidate for the 2025 OWASP Top 10 list, which ranks the most critical security concerns developers should be thinking about. The top 10 security concerns on the updated list are: Broken Access Control Security Misconfiguration Software Supply Chain Failures Cryptographic Failures Injection Insecure Design Authentication Failures Software or Data Integrity Failures Logging and Alerting Failures Mishandling of Exceptional Conditions This list features many of the same concerns from the 2021 versions, with a few notable changes, such as Server-Side Request Forgery, which was in last place in 2021, being rolled into the Broken Access Control category. Additionally, a new category, Software Supply Chain Failures, was added and includes Vulnerable and Outdated Components (#6 in 2021), and Mishandling of Exceptional Conditions made the list for the first time, containing CWEs related to improper error handling, logical erro...

Webflow launches new vibe coding capability called App Gen

The web design platform Webflow today announced new updates to its platform to align it more with the vibe coding experience, allowing any user to bring their ideas to life regardless of their coding skills. According to the company, this new capability, App Gen , enables users to move from creating websites into creating web experiences. It builds on the launch of Webflow Cloud, a full-stack platform for hosting apps directly in Webflow that was announced earlier this year. App Gen leverages a site’s existing design system, content, and structure so that each new creation aligns with their brand and can scale up using Webflow’s cloud infrastructure. The new capability automatically applies all of a site’s topography, colors, and other layout variables to provide a consistent visual experience between the existing site and new AI-generated features. It also can reuse existing Webflow components to further ensure brand consistency and can connect to the site’s CMS to turn structured ...

Microsoft announces release of .NET 10 (LTS)

Microsoft has announced the release of .NET 10, the latest Long Term Support (LTS) release of .NET that will receive support for the next three years. As such, Microsoft is encouraging development teams to migrate their production applications to this version to take advantage of that extended support window. This release features several performance improvements across the runtime, workloads, and languages. For instance, the JIT compiler has been improved with better inlining, method devirtualization, and improved code generation for struct arguments. Additionally, enhanced loop inversion and stack allocation strategies have been implemented to optimize runtimes. Several language improvements were made to C# and F# as well. C# 14 introduces field-backed properties to simplify property declarations, extension properties and methods allow devs to add members to types they don’t own, and more. In F# 10, some of the improvements include the ability to use #warnon and #nowarn to enable...

When AI Drove the Cost of Testing to Zero

The year is 2030. And hindsight is truly 20/20. We witnessed AI drive the cost of content creation to zero. Illustrations that once cost hundreds, headshots that cost thousands, and blog posts that once needed full creative teams could suddenly be produced in seconds for pennies. That collapse in creative costs reshaped entire industries. And a few short years later, the same dynamic swept through software quality assurance—with equally transformational results. For decades, the cost of testing had been defined by human labor. Traditional automation frameworks required engineers to write, debug, and maintain endless libraries of scripts. Even the best teams struggled to keep up as applications evolved. The work was slow, brittle, and expensive. Global system integrators built multibillion-dollar businesses on that inefficiency, charging (in hours) hundreds of dollars per test script per year across thousands of applications. Then AI arrived. At first, it appeared in small, assistiv...

Report: AI may lead to faster coding, but introduces new bottlenecks that slow down delivery

Over the past several years, the productivity gains of AI have been touted left and right, but just because AI can generate code doesn’t necessarily mean that it helps speed up the software development life cycle. According to a report from GitLab, an “AI Paradox” has emerged. “While AI accelerates coding, fragmented toolchains and new compliance complexities are creating bottlenecks that cost teams nearly a full workday per team member each week,” the company wrote. GitLab’s research, which gathered responses from over 3,000 DevSecOps professionals, found that those workers are losing 7 hours per week to inefficient processes, such as a lack of cross-functional communication, limited knowledge sharing, and use of different tools across teams. Additionally, 60% of respondents use more than five tools for software development and 49% use more than five AI tools. GitLab believes the solution to these issues lies in following platform engineering approaches to address requirements for...

The Value of Software Integration with Planview Hub

The value of tools integration and model-based integration was the subject of a recent SD Times Live! webinar with Jeff McCollum, vice president of product management at portfolio management platform provider Planview, and Giorgio Leon-Guerrero, a senior solution consultant. This transcript was edited for length and clarity. SDT: What are the key drivers for interest in integration solutions? Jeff McCollum: There are four things that we usually cite when we talk about this. One is fidelity of work items across the tool chain. So just making sure that if you’re working in different systems, that the things that you’re working on, the description of a story or the description of a defect or feedback from a customer, that remains consistent across your entire tool chain. Next, it’s important to maintain a single system of record for analytics, which means allowing users to run queries on one integrated system to gather all necessary information for reports, rather than querying multi...

How Developers Use Proxies to Test Geo Targeted APIs? Neeraj Mishra The Crazy Programmer

Creating and updating geo targeted APIs may seem easy, but there are countless challenges involved. Every country, every city, and every mobile network can respond differently and will require distinct adjustments. When pricing endpoints contain location-based compliance features and payment options, testing them will require more than one physical location. Proxies are a crucial part of the developer’s toolkit–they enable you to virtually “stand” in another country to observe what the users see. Developers encounter many problems when it comes to testing geo targeted APIs and it is the use of proxies that addresses this concern. In this article, we will outline the proxy use case and its benefits, the different proxy types, and potential challenges. We will maintain a practical approach so that you can pass it to a QA engineer or a backend developer and they will be able to use it directly. What Are Geo Targeted APIs and Why Do They Matter? A geo targeted API is an API that custom...

This week in AI updates: Syncfusion Code Studio, MCP support in Linkerd, and more (November 7, 2025)

Syncfusion Code Studio now available Code Studio is an AI-powered IDE that offers capabilities like autocompletion, code generation and explanations, refactoring of selected code blocks, and multistep agent automation for large-scale tasks. Customers can use their preferred LLM to power Code Studio, and will also get access to security and governance features like SSO, role-based access controls, and usage analytics. “Every technology leader is seeking a responsible path to scale with AI,” said Daniel Jebaraj, CEO of Syncfusion. “With Code Studio, we’re helping enterprise teams harness AI on their own terms, maintaining a balance of productivity, transparency, and control in a single environment.” Linkerd to get MCP support Buoyant, the company behind Linkerd, announced its plans to add MCP support to the project, which will enable users to get more visibility into their MCP traffic, including metrics on resource, tool, and prompt usage, such as failure rates, latency, and volum...