つるすけ @turusuke

ふろんとえんどえんじにゃー🐈 webdelog.info 東京都 Joined October 2009

Tweets

40K
Followers

635
Following

717
Likes

16K

Yoshiya Hinosawa @kt3k

4 days ago

Created "Changelog" website, which summarizes the daily progresses of main branches of selected git repos (currently following 11 repos around JS runtime ecosystem, such as deno, bun, node, etc) kt3k.github.io/changelog/

2 2 5 864 1

View Details

NotebookLM @NotebookLM

5 days ago

Introducing a more powerful NotebookLM 🚀 Massive upgrades deliver agentic capabilities in chat, more advanced reasoning, and a suite of new output formats. Tackling complex, multi-step research problems has never been easier. Rolling out now to Google AI Ultra subscribers.

212 536 4K 852K 2K

View Details

Evan You @evanyou

a week ago

Some notes on the acquisition. - Vue is not part of this - it remains an independent project. That said, the acquisition does make it possible for me to better financially support the people contributing to or working full-time on Vue. More on this soon. - Nothing really changes for the relationship between Vue itself and the people in the Vue ecosystem now working at Vercel. I remain close friends with the Nuxt team and Eduardo. I’m confident that @rauchg will continue to support Nuxt the same way we intended to keep Vite vendor-neutral.

45 77 2K 155K 138

View Details

MdN_後藤憲司 @gotoken_MdN

2 weeks ago

MdNについてのお知らせ。┏○ 連結子会社間の合併に関するお知らせ（株式会社インプレスおよび株式会社エムディエヌコーポレーション） prtimes.jp/main/html/rd/p…

1 255 302 169K 72

View Details

Rohan Varma @TheRohanVarma

2 weeks ago

We just launched Sites into Codex! Software creation was always about more than writing code. Sites in Codex fundamentally gives the power of end-to-end software creation to every user, no matter their technical fluency. These Sites are fully deployed to a URL, private to workspaces, come with authentication, can have static files, and can store dynamic data in databases. It is in preview for business and enterprise teams and will be rolling out to all workspaces over the next day. Give it a try by typing @ Sites into Codex and ask it to build anything! This project took a massive amount of effort across hundreds of people at OpenAI - proud that we were able to get this out and excited to see what you all build with it!

240 265 4K 1.0M 2K

View Details

xAI @xai

2 weeks ago

Composer 2.5 is now available inside Grok Build. Composer 2.5 is a fast, highly intelligent model that excels on long-running tasks and following complex instructions.

599 851 7K 32.0M 1K

View Details

xAI @xai

2 weeks ago

grok-build-0.1 is now available via the xAI API in public beta. This is the same model that powers the Grok Build CLI and excels at agentic coding. Priced at $1/m input and $2/m output, it’s extremely cost effective, intelligent, and fast.

549 1K 5K 1.4M 492

View Details

Jake Archibald @jaffathecake

2 weeks ago

Watch out! Chrome has a huge bug with <input type="number"> which causes values to change unexpectedly. It's fixed in Chrome 150, but that won't land until the end of June.

35 112 970 302K 257

View Details

つるすけ @turusuke

2 weeks ago

NotebookLMのGドラ自動同期機能きた。 / Google Workspace Updates: Keep your sources up to date with automatic Drive syncing in NotebookLM workspaceupdates.googleblog.com/2026/05/keep-y…

0 0 0 119 0

View Details

つるすけ @turusuke

2 weeks ago

Code coverage on pull requests is now in public preview - GitHub Changelog github.blog/changelog/2026…

0 0 0 37 0

View Details

つるすけ @turusuke

3 weeks ago

ノーコードでスマートなワークフローを実現：ワークフロービルダーに新しい AI ステップが登場 | Slack slack.com/intl/ja-jp/blo…

0 0 0 162 0

View Details

ymrl @ymrl

3 weeks ago

Global Accessibility Awareness Day 日本時間には間に合わなかったブログです激しいアニメーションのある絵文字の利用を避けたい - 層の狭間で ymrl-dev.hateblo.jp/entry/2026/05/… #はてなブログ

0 11 28 3K 7

View Details

mehm8128 @mehm8128

3 weeks ago

僕がwptとissueを書いたWebKitのバグを、ついに修正してもらえました！ >Fixed an issue where interactive elements containing an <svg> named by a child <title> element did not expose an accessible name. webkit.org/blog/17962/rel…

1 9 32 4K 3

View Details

Rikiya Ihara / magi @magi1125

3 weeks ago

6/16に新刊『具体例と解決策から学ぶ Webアクセシビリティの教科書』発売！よくある問題をイラストで紹介し、解決アプローチも実例つきで解説。制作会社における組織浸透のテクニックや事例も満載。本書を携えてアクセシビリティ旋風を巻き起こしましょう！ご予約受付中！ amazon.co.jp/dp/4862466613/

2 31 73 5K 15

View Details

OpenAI @OpenAI

4 weeks ago

You've been asking for this one... Now in preview: Codex in the ChatGPT mobile app. Start new work, review outputs, steer execution, and approve next steps, all from the ChatGPT mobile app. Codex will keep running on your laptop, Mac mini, or devbox.

2K 3K 22K 4.7M 5K

View Details

Notion @NotionHQ

a month ago

BIG one for devs today. Introducing the Notion Developer Platform: - Notion CLI, ntn (Notion in your terminal) - Workers (run code on Notion's infra) - Database sync (any data source into Notion) - Agent tools (build any workflow) - Webhook triggers (trigger Notion from any app) - External Agents API (bring any agent into Notion) - Notion Agents SDK (use Notion Agents anywhere) - …and a bunch more API improvements And soon, you won't need to be a developer to build on Notion. Your agent will be one for you.

Notion Developers @NotionDevs

a month ago

Introducing: the Notion Developer Platform New building blocks that help you (and your coding agents) sync any data source, build any tool, and orchestrate any agent. Follow along 👇

32 106 636 523K 457

92 228 2K 969K 1K

View Details

窓の杜 @madonomori

a month ago

「GitHub Copilot」に個人向け最強の「Max」プラン、下位プランにも追加の変動利用枠／6月からの従量課金制移行にあたり、ユーザーの不安を解消 forest.watch.impress.co.jp/docs/news/2108…

0 18 61 24K 17

View Details

International Cyber Digest @IntCyberDigest

a month ago

🚨 How the TanStack npm attack actually happened: 1. Attacker opened a normal-looking pull request (#7378) on the TanStack repo. 2. GitHub automatically ran CI tests on that PR. 3. Code inside the PR stole the workflow's GitHub Actions Cache write token during the test run. 4. The attacker used that token to plant poisoned files in the shared build cache. The PR could be closed afterwards. The poisoned cache stays. 5. The official release workflow later pulled from the cache, baked the malicious files into the build, and signed and published 84 malicious package versions to npm.

Adnan Khan @adnanthekhan

a month ago

This attack leveraged GitHub Actions Cache Poisoning. Payload deployed here: github.com/TanStack/route… It looks like it detonated here: github.com/TanStack/route…

10 36 406 581K 202

61 572 5K 809K 2K

View Details

TANSTACK @tan_stack

a month ago

SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/route… Credit to the security researcher for responsible disclosure.