Skip to main content

Posts

Atlassian announces release of Compass DevX Platform

Atlassian today is announcing the general availability of Compass, the company’s new developer experience platform. With developers getting lost in today’s decentralized, complex world of APIs, libraries, UI elements, frameworks and tools, Compass is designed to guide developers to their true north – delivering exciting new products that align with business goals and satisfy customers. According to Taylor Pechacek, Atlassian’s head of product for Compass, developers need to navigate through this ocean of complexity to find the information and context they need around the work they’re doing, and to collaborate across the tech stack to make sure the software is kept in a healthy state. So this, he said, is not just a technology problem, but very much a collaboration problem. Pechacek explained that Compass improves the developer experience by creating a single, reliable and standardized place to capture all the context around the code. “There’s all these different software components

GitKraken announces integrated suite of dev tools

GitKraken introduced a set of dev tools tools are now available as part of a unified suite, ensuring seamless interaction between different developer environments.  It has introduced the GitKraken CLI, which enables Git collaboration directly from the command line.  The second new tool is the GitKraken Browser Extension, which enables developers to open repositories and commits from the browser. It is compatible with Chrome, Firefox, and Edge, and supports popular platforms like GitHub, GitLab, Azure DevOps, and Bitbucket.  ​​“More than ever before, building software is a team sport. Our customers have been asking  GitKraken to fill the void around dev collaboration, and the early adoption of our new team  features has been incredible across 2023,” said Matt Johnston, CEO of GitKraken. “Adding a CLI, an IntelliJ extension, and making the browser a first-class developer environment, enable GitKraken to bring better productivity and collaboration to every developer – whether they work

JetBrains launches new tool for creating technical documentation

JetBrains is hoping to improve the way technical documentation is created with a new tool called Writerside . Currently in an Early Access Program , Writerside is a platform for writing and collaborating on documentation, API references, tutorials, developer guides, and how-tos. It can be used as a plugin in the JetBrains IDE or as a standalone tool. “With Writerside, we want to empower writers with the tools that developers have long been using. Unfortunately, documentation is still often overlooked, and technical writers don’t get the acknowledgement or the support they deserve”, said Anna Gasparyan, product lead for Writerside at JetBrains. “Our mission is to bridge the gap between developers and writers and make documentation a team sport. If tech writers use the same tools as developers, such as Git, automated check, and build pipelines, it not only ensures the quality of the final output, but it should also make it easier for the entire team to contribute to docs, review the

OpenSSF launches Malicious Packages repository to track reports of compromised open source packages

The Open Source Security Foundation (OpenSSF) is attempting to tackle the issue of malicious open source software with a new repository that will aggregate reports of malicious packages.  “Currently, each open source package repository has its own approach to handling malicious packages. When a malicious package is reported by the community, it is common for the package repository’s security team to remove the package and its associated metadata. Unfortunately, these actions often occur without any public record. Discovering what malicious packages exist requires piecing together data from many disparate public sources, or through proprietary threat intelligence feeds,” Caleb Brown, senior software engineer on the Google Open Source Security Team and Jossef Harush Kadouri, head of software supply chain security at Checkmarx, wrote in a blog post .  The Malicious Packages repository acts as a public database where reports of malicious packages are stored.  OpenSSF believes that

SD Times Open-Source Project of the Week: Kargo

Kargo is a multi-stage application lifecycle orchestrator designed to help with continuous delivery and deployment of changes across various environments.  Kargo, created by the developers behind the Argo Project, represents a novel approach to CD pipelines, tailored for the cloud-native landscape, featuring robust GitOps support, progressive delivery capabilities, and complete open-source accessibility. The name “Kargo” reflects its core function of transporting build and configuration artifacts (referred to as “freight”) to multiple environments through a GitOps approach. GitOps has played a pivotal role in elevating infrastructure-as-code practices, yet it has introduced challenges for traditional CI/CD pipelines, according to the maintainers.  Pull-based GitOps operators, such as Argo CD, have disrupted the direct access of CI pipelines to production environments. The asynchronous nature of Kubernetes declarative APIs and the eventual consistency have made it challenging to coor

Microsoft introduces Windows Terminal Canary channel with nightly feature updates

Microsoft is introducing a way for developers to get new features in their Windows Terminal installation before they are released.  Windows Terminal is on a quarterly release cycle, meaning that an update is published every three months. To get new features faster, you can now install the Windows Terminal Canary channel . This new channel ships new features nightly and gives you the opportunity to try new features before they make it to the preview version.   It can be installed in addition to Windows Terminal stable and Windows Terminal Preview. Right now it is available either as an App Installer or Portable ZIP distribution.  Microsoft does note that this Canary channel is the least stable release channel, which means users may find bugs before Microsoft has a chance to discover and address them.  “We hope that Windows Terminal Canary can become a place for you to try our new experimental features and provide us feedback as we build them,” Christopher Nguyen, product manager I

Atlassian acquires Loom

Team Anywhere/SAN FRANCISCO–(BUSINESS WIRE)–Atlassian Corporation (NASDAQ: TEAM), a leading provider of team collaboration and productivity software, today announced it has entered into a definitive agreement to acquire Loom, the video messaging platform that has amassed more than 25 million users and was named among the top 50 of  Fast Company ’s World’s Most Innovative companies in 2023. The global movement towards distributed work has fueled a need for new ways to help teams collaborate when they are not in the same location or even the same hemisphere. Asynchronous (async) video has been at the forefront of this movement with Loom’s business users recording almost 5 million videos per month. “Async video is the next evolution of team collaboration, and teaming up with Loom helps distributed teams communicate in deeply human ways,” said Mike Cannon-Brookes, co-founder and co-CEO of Atlassian. Atlassian has deep expertise in how teams work. It’s already the go-to place for over 26

7 Different Types of Keys in DBMS Jitendra Ajmera The Crazy Programmer

The key is unique for every lock. Similarly, those attributes which are unique for every entity in a single table, are known as key attributes. Keys are nothing else only the unique attributes associated with every entity. Keys are useful in dbms for various reasons such as data integrity, efficient data retrieval, data consistency, data sorting, and many more. Let’s have a look at the different types of keys available in DBMS. Candidate Key Those attributes which may be unique for an entity can be considered as Candidate keys. Like ID, name, mobile number, and address in the above table. Primary Key From candidate keys, we choose a key that is almost unique for every entity, called the Primary key for that entity and the whole table. Name, address, and mobile number may be not unique, but the ID number will be unique for every entity, so we choose the ID number as a primary key. The primary keys should be easy to find, and allocate, and not be much complex. Mobile numbers are

Tidelift introduces new intelligence capabilities for minimizing open-source risk

Tidelift has added new intelligence capabilities that will help customers minimize risk related to using open-source components. These capabilities are being added to Tidelift Subscription , which is a program that provides evaluations on security, licensing, and maintenance risks of open-source software.  The company has access to open-source package intelligence data through partnerships with thousands of open-source projects. It pays the maintainers of those projects to follow secure development practices, like the ones outlined in the NIST Secure Software Development Framework and the OpenSSF Scorecards project. Tidelift also aggregates data from upstream package managers and source repositories into a centralized format. This data is then analyzed by Tidelift’s data team, which provides contextual insights on it. Tidelift Subscription also includes a Software Bill of Materials feature to enable companies to build a list of all the components that are in use.  It also includes

Google enables passkeys as default authentication method in Google Accounts

Google is making passkeys more accessible by offering them as the default option for authentication across personal Google Accounts. In the future, when you log in to your account, users will be prompted to create and use passkeys for easier sign-ins. Additionally, the “Skip password when possible” option in Google Account settings will be enabled. Passkeys offer a convenient and faster way to log in using methods like fingerprints, face scans, or pins. They are 40% quicker than traditional passwords and boast enhanced security due to advanced cryptography, according to Google in a blog post . They also alleviate the burden of remembering complex passwords and are more resistant to phishing attacks. While they represent a significant advancement, the transition to new technologies takes time. Consequently, individuals will still have the choice to use passwords for login and can disable the “Skip password when possible” feature to opt out of passkeys.  Google introduced passkeys e

Vercel launches beta for tool that uses generative AI to create UI components

Frontend development company Vercel is releasing a new tool that uses generative AI to help developers quickly create new website and user interface (UI) components.  Called v0, the new tool enables you to use plain text prompts to describe what you want and then receive a component generated based on your request.   “With v0, we’re introducing a new concept to the world, one that embraces the power of generative AI specifically for web development. We’re calling it Generative UI (genUI). GenUI refers to using AI models—specifically language learning models (LLMs)—to generate frontend code. This code can then be integrated directly into your application, where you can continue to iterate and build off of a solid foundation,” Vercel said.  Once you submit your prompt, v0 provides three choices of user interfaces it has generated. Then, you can choose the one you want by copy+pasting its code into your application. If it’s not quite what you’re looking for, you will also have the op

Pulumi releases secrets management solution

Pulumi has launched a new product called Pulumi ESC, aimed at simplifying the management of secrets and configuration in cloud infrastructure and applications.  It addresses the challenges of handling secrets and configuration at scale across various cloud environments. Pulumi ESC allows teams to gather secrets and configurations from multiple sources, and organize them into hierarchical collections called “environments.” It then utilizes them across different infrastructure and application services. It can be used alongside Pulumi IaC for streamlined configuration management or independently to manage secrets and configuration for any project. Pulumi ESC tackles common configuration and secrets management challenges with several key design principles by allowing users to define environments that contain secrets and configurations, offering integrations with secrets stored in various providers like AWS Secrets Manager, Vault, Azure OIDC, consume from anywhere capabilities, and much

Staying relevant in tech requires continual learning

The constantly shifting economy is a reminder to technical professionals seeking new roles that change is the only constant. The Linux Foundation’s 2023 State of Tech Talent Report, viewable here , highlights what some 400 IT hiring managers and staffing professionals view as must-haves for new hires. Here are three insights and the takeaways technical professionals should know, as they seek their next challenge. Insight 1: New hiring continues to focus on developers and newer technologies, especially: cloud/containers (50%); cyber security (50%); and Artificial Intelligence (AI) and Machine Learning (ML) (46%). As technology development continues to accelerate, hiring managers are seeking technical staff who have existing strong skill sets in high-demand areas. Not surprisingly, evolving technologies such as cloud and cyber security remain in high demand. The fact that respondents said they have cloud native professionals (59%) and cyber security (59%) already on staff, indicates

To help developers be more productive, foster joy

What makes developers productive? And how is that measured? This is an issue that’s top of mind in the industry these days. Some believe that lines of code written per day is still a valid metric. Some say you should measure development teams, not individuals.  Others say productivity stems from removing obstacles in the SDLC toolchain, and still others find more esoteric explanations. Andrew Boyagi, senior technical evangelist at Atlassian, believes developers are most productive when they are happy. “Developer joy is the key to developer productivity,” he said. But unfortunately, the goals of companies often don’t align with work that gives developers joy, and since developers are paid to do a certain job, they often have to do things they find more mundane to put food on their tables. Yet Boyagi believes the goals of business and developers are actually aligned, “but they speak past each other,” he said. “Senior leaders want their developers to be productive. If you look at a CIO

Docker, Neo4j, LangChain, and Ollama launch GenAI stack for devs

Docker announced a new GenAI Stack in partnership with Neo4j, LangChain, and Ollama during its annual DockerCon developer conference keynote. This GenAI Stack is designed to help developers quickly and easily build generative AI applications without searching for and configuring various technologies. It includes pre-configured components like large language models (LLMs) from Ollama, vector and graph databases from Neo4j, and the LangChain framework. Docker also introduced its first AI-powered product, Docker AI. The GenAI Stack addresses popular use cases for generative AI and is available in the Docker Learning Center and on GitHub. It offers pre-configured open-source LLMs, assistance from Ollama for setting up LLMs, Neo4j as the default database for improved AI/ML model performance, knowledge graphs to enhance GenAI predictions, LangChain orchestration for context-aware reasoning applications, and various supporting tools and resources. This initiative aims to empower developers