Kissaki

joined 2 years ago
MODERATOR OF
[–] Kissaki@programming.dev 4 points 8 hours ago (1 children)

Does it float because it's a balloon cat or because of the jetpacks? 😸

[–] Kissaki@programming.dev 4 points 8 hours ago

A lot of them look (very) interesting. Now I have a bunch of tabs open to sift through.

[–] Kissaki@programming.dev 1 points 22 hours ago

I'm sure this gets downvotes because AI. The post talks more about dotnet and webassembly though, and gains through it. Not about AI (beyond the marketing speak referencing the product itself).

[–] Kissaki@programming.dev 1 points 1 day ago* (last edited 1 day ago) (1 children)

How does JPlus handle compile time null checks against Java library interfaces? Does it consider them all nullable and to be handled as nullable?

If nullability information is a type metadata extension for compile-time checking, does that inevitably break on library interfaces when I create both library and consuming app with JPlus?

 

Central to Copilot Studio’s innovation is its deep integration with .NET, including the use of .NET on WebAssembly (WASM).

This post explores how Copilot Studio utilizes .NET, the benefits realized from platform upgrades, and the resulting performance, cost, and productivity improvements.

Copilot Studio is a low-code experience for creating conversational and autonomous agents, but the runtime executing those agents is based on .NET.

 

Four more days until dotnet 10 release. Are you excited?

I am. There's always a ton of new things, some quite pleasant and exciting to use. C# extension usually have the biggest impact on me. This time, I'm excited for

  • Null-conditional assignment
  • Simple lambda parameters with modifiers
  • field backed properties

Last week I tried/had to try RC2 and assess release notes for changes because [developing and] debugging Blazor WebAssembly in dotnet 9 is bothersome. I wasn't successful in making the switch, but I found a service worker registration bug fix noted with "should also be applied to dotnet 9 projects" which solved the biggest issue for now (deployed app not updating).

I'm still concerned about the Blazor WebAssembly tech complexity and indirection (we're working on an offline-capable website/PWA), but I'm somewhat hopeful dotnet 10 will improve working with and on it a bit.

[–] Kissaki@programming.dev 2 points 2 days ago

That's wild

😏

[–] Kissaki@programming.dev 2 points 2 days ago (1 children)

The plan is to eventually make it incremental, however that isn't yet implemented. It is however already pretty fast even without incremental linking.

Not stable yet, either:

The following is working with the caveat that there may be bugs:

[–] Kissaki@programming.dev 2 points 2 days ago (1 children)

It's new to me that it's NFC. I was under the impression I need to buy a reader device to make use of digital auth or signature stuff.

[–] Kissaki@programming.dev 2 points 2 days ago

Actually, avoid using PNGs at all if you can.

👀

[–] Kissaki@programming.dev 36 points 3 days ago (1 children)

I prefer round[ed].

Think of it as a rounded square with a unique, pleasant shape.

I don't find them pleasant. I find them irritating.

Rounded square makes use of the space it reserves/square-fills. Squircles seem wasteful and confusing. They do not represent any common physical shapes, and waste/discard space they could use. They look like an old CRT.

[–] Kissaki@programming.dev 1 points 3 days ago

When PRs begin with a headline and checklist the GitHub hover-preview becomes useless. When the PR description begins with the summation of the change, it is very useful.

Most of the time I see headlines and check lists in tickets I create or contributions I create PRs for, I feel stifled and like I have to produce something very inefficient or convoluted.

The worst I have seen is when, at work, I had to create bug tickets for a new system in a service desk to a third party, and they had a very excessive, guided, formalized submission form [for dumb users]. More than once, I wrote the exact same thing three times into three separate text boxes that required input. (Something like "describe what is wrong", "describe what happens", "describe how to reproduce".) Something that I could have described well, concise, fully and correctly in one or two sentences or paragraphs became an excessively spread, formalized mess. I'm certainly not your average end user, but man that annoyed me. And the response of "we found this necessary" was certainly not for my kind of users, maybe not even experience with IT personnel.

At work, I'm glad I have a small and close enough team where I can guide colleagues and new team members into good or at least decent practice.

Checklists can be a good thing, if processes can be formalized, can serve as guidance for the developer, and proof of consideration for the reviewer. At the same time, they can feel inappropriate and like noise in other cases.

I've been using horizontal line separators to separate description from test description and aside/scoping/wider context and considerations - maybe I will start adding headlines on those to be more explicit.

[–] Kissaki@programming.dev 1 points 3 days ago (1 children)

Invidious says video unavailable

4
submitted 2 weeks ago* (last edited 2 weeks ago) by Kissaki@programming.dev to c/dotnet@programming.dev
 

Today we are excited to announce the new NuGet.org Sponsorship feature which makes it easier than ever for consumers to recognize and support the authors behind their favorite packages.

Approved sponshorship platforms: GitHub Sponsors, Patreon, Open Collective, Ko-fi, Tidelift, Liberapay

 

Alternative press article: https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/

Identified extensions are mainly on OpenVSX - an alternative VS Code Extension Marketplace.

Update (Oct 19, 2025): A new infected extension detected in Microsoft's VSCode marketplace - still active.

Bleepingcomputer:

Microsoft has removed the malicious extension frrom its marketplace following the researchers' alert.

 

Alternative press article: https://www.bleepingcomputer.com/news/security/self-spreading-glassworm-malware-hits-openvsx-vs-code-registries/

Identified extensions are mainly on OpenVSX - an alternative VS Code Extension Marketplace.

Update (Oct 19, 2025): A new infected extension detected in Microsoft's VSCode marketplace - still active.

Bleepingcomputer:

Microsoft has removed the malicious extension frrom its marketplace following the researchers' alert.

 

This post marks the successful completion of my Google Summer of Code 2025 project: Complete Build Retooling of jenkins.io. Over the past months, we’ve transformed the Jenkins documentation infrastructure from legacy systems to a modern, performant, and well-organized platform.

4
submitted 3 weeks ago* (last edited 3 weeks ago) by Kissaki@programming.dev to c/dotnet@programming.dev
 

[…] We are announcing the .NET Security Group, a group of organizations that will collaborate on delivering security fixes to the broadest set of .NET users, simultaneously with Microsoft. We’re all better served by getting more deployments patched, quickly and predictably.

We’re believers in the concept of upstream open source projects. That includes sharing vulnerability information with other organizations that distribute .NET. We’ve done that with a small set of companies since 2016, starting with Red Hat. Members receive source patches prior to public disclosure so that binary packages can be built, validated, and published at the same time as Microsoft. Membership of this group has been private, by invitation only, and grew to include Canonical, IBM, Red Hat, and Microsoft. That’s how the .NET Security Group started.

We are expanding the program to enable organizations that ship their own distribution of .NET to have the same ability to better protect their users. By sharing information about vulnerabilities with trusted partners early, we hope to reduce the time between public disclosure of CVEs and when updates are available for distributions other than Microsoft’s. We believe this will help strengthen the security of the .NET ecosystem.

[…] Several Linux distributions do this, as do independent software vendors (across both Windows and Linux). In fact, we worked in collaboration with these same organizations to reduce the cost of building .NET, resulting in the dotnet/dotnet repo. We want it to be straightforward and low-cost to distribute security fixes to users.

More recently, other organizations came to us asking if they could get access to patches for their End-of-Life servicing businesses. These requests made us realize that it was time to publicize the .NET Security Group and better define its goals. Program members need to be active participants in the .NET upstream project and publish builds for supported .NET versions. Doing that demonstrates a strong commitment to the ecosystem and earned credibility to all participants.

 

This month you will find that these CVEs have been fixed:

CVE # Title Applies to
CVE-2025-55248 .NET Information Disclosure Vulnerability .NET 9.0, .NET 8.0
CVE-2025-55315 .NET Security Feature Bypass Vulnerability .NET 9.0, .NET 8.0
CVE-2025-55247 .NET Denial of Service Vulnerability .NET 9.0, .NET 8.0
CVE-2025-21176 .NET Remote Code Execution Vulnerability .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1
 

About Bun:

Bun is a fast, incrementally adoptable all-in-one JavaScript, TypeScript & JSX toolkit. Use individual tools like bun test or bun install in Node.js projects, or adopt the complete stack with a fast JavaScript runtime, bundler, test runner, and package manager built in. Bun aims for 100% Node.js compatibility.

1.3 release:

The highlights:

  • Full‑stack dev server (with hot reloading, browser -> terminal console logs) built into Bun.serve()
  • Builtin MySQL client, alongside our existing Postgres and SQLite clients
  • Builtin Redis client
  • Better routing, cookies, WebSockets, and HTTP ergonomics
  • Isolated installs, catalogs, minimumRelease, and more for workspaces
  • Many, many Node.js compatibility improvements
view more: next ›