🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Do you worry about technical debt?

This week's Once a Maintainer is with @davidwobrock of Back Market . We spoke with David about how he got into open source and working on Django. Thanks David! onceamaintainer.substack.com/p/once-a-maint…

On a personal note, backporting fixes to Rails versions that old is not fun so please upgrade! rubyonrails.org/2024/2/21/Rail…

Excited to share our interview with Ralf Gommers, maintainer of NumPy and SciPy as well as the Array API standard. Loved hearing what's next for NumPy with the release of 2.0! open.substack.com/pub/onceamaint…

We created an open database of every gem version that’s silently incompatible with Rails. Check it out at github.com/infieldai/gemc…

Steve joined Ben Lorica 罗瑞卡 on the Data Exchange podcast to talk about automating open source upgrades. Check it out here! thedataexchange.media/automating-sof…

this week's Pragmatic Engineer highlights the dangers of using deprecated components and outdated dependencies, weakening your overall security posture

Thoroughly enjoyed getting to speak with Armin Ronacher ⇌ for the substack about his thoughts on open source today. open.substack.com/pub/onceamaint…

Recently, we saw a heavy debate about insecure open-source commercial software. Yet, many security holes stem from missing updates and bad dependency management. My latest Forbes Technology Council article takes a closer look. #opensource #cybersecurity forbes.com/sites/forbeste…

we wholeheartedly agree 😉

Upgrade your rubies!

We've branched for Rails 7.2 (coming soon!), so rails/main now targets Rails 8. Time to load up on the new defaults! First up is Kamal for in-the-box deployment guidance. The next 15-minute video will deploy to production. github.com/rails/rails/pu…

"Development of Rails 8.0 starts now" "🎉" Rafael França 🇧🇷 github.com/rails/rails/co…

dependabot-core is now open source with an MIT license github.blog/changelog/2024…

we're here to help

Two big releases this week ➡ 🗒 : 1. A dependency digest that includes new versions of your dependencies that came out this week, upgrades performed on your repo this week, and any dependencies added/removed. 2. Support for internal packages.🚀

Infield tells you which packages block a Rails (or Ruby) upgrade so you know what to upgrade, in what order. Then we tell you which entries from the changelog are relevant to your codebase so you can upgrade safely and 10x faster.

This week we spoke to Sofie Van Landeghem about her work as a core maintainer of spaCy, the evolution of NLP, and why dependency management in python is so terrible. onceamaintainer.substack.com/p/once-a-maint…

Rails 7.2 is out! If you're considering upgrading, but overwhelmed by the thought, you can get a free diagnostic and upgrade plan at infield.ai/diagnostic

Great interview!