Flux
Toutes les catégories

Programmation

2142 articles

sqlite-utils 4.0, now with database schema migrations
IA Programmation

sqlite-utils 4.0, now with database schema migrations

This morning I released sqlite-utils 4.0, the 124th release of that project and the first major version bump since 3.0 in November 2020. In addition to some small but significant breaking changes (described in this upgrade guide), this version introduces three major features: database migrations, nested transactions (via a new db.atomic() method), and support for compound foreign keys. Database schema migrations using sqlite-utils Schema migrations define a sequence of changes to be made to a…

Simon Willison's Weblog
Coordinated npm and PyPI Campaign Typosquats Popular Secure Payment Apps
Cybersécurité Programmation

Coordinated npm and PyPI Campaign Typosquats Popular Secure Payment Apps

Socket’s AI scanner detected a cluster of npm and PyPI malware published on July 7, 2026. The 17 packages, published nearly simultaneously, target SDK developers and users of the popular PaySafe, Skrill and Neteller payment applications. Ultimately, the packages perform credential and token theft, exfiltrating stolen data to AWS infrastructure. Affected Packages # At the time of publication, the following packages were affected. Each npm package published four malicious versions (1.0.0 through…

Socket
Where AI Agents Belong in Data Engineering: The Correctness Layer
Programmation IA

Where AI Agents Belong in Data Engineering: The Correctness Layer

With ever-changing models, new and better ones coming out every few months, it’s great if we don’t have to rely on them too heavily. The better your tooling, the less dependent you become on any single model. That’s also why the deterministic harness matters: a correctness layer that lets you reproduce outputs and trace lineage regardless of which model you’re running underneath. This is especially true during maintenance or extending the project, where verification is the real job.

SSP Data Engineering Blog
github-code Web Component
IA Programmation

github-code Web Component

Tool: github-code Web Component An experimental Web Component built using GPT-5.5 and the following prompt: let's build a Web Component for embedding code from GitHub <github-code href="https://github.com/simonw/sqlite-ast/blob/437c759129154f05296324a7f82aa1246340dd14/sqlite_ast/parser.py#L9-L18"></github-code> It takes URLs like that, converts them to https://raw.githubusercontent.com/simonw/sqlite-ast/437c759129154f05296324a7f82aa1246340dd14/sqlite_ast/parser.py, then uses fetch()…

Simon Willison's Weblog
Livewire 4’s Islands Architecture: Build Faster UIs Without the JavaScript Overhead
Programmation Web

Livewire 4’s Islands Architecture: Build Faster UIs Without the JavaScript Overhead

Caleb Porzio shipped Livewire v4 in January 2026, and it’s not a minor bump. The release introduces islands architecture, single-file components as the default format, scoped styles, built-in drag-and-drop sorting, and a suite of optimistic UI directives that make your interfaces feel instant. If you’ve been building with Livewire v3, the upgrade path is smooth […] The post Livewire 4’s Islands Architecture: Build Faster UIs Without the JavaScript Overhead appeared first on PHP Architect.

PHP Architect
tencent/Hy3
IA Programmation

tencent/Hy3

tencent/Hy3 New Apache 2.0 licensed model from Tencent in China: Hy3 is a 295B-parameter Mixture-of-Experts (MoE) model with 21B active parameters and 3.8B MTP layer parameters, developed by the Tencent Hy Team. Following the Hy3 Preview launch in late April, we gathered feedback from 50+ products and scaled up post-training with higher quality data. Today, we introduce Hy3, which outperforms similar-size models and rivals flagship open-source models with 2-5x parameters. It also shows…

Simon Willison's Weblog
sqlite-utils 4.0rc3
IA Programmation

sqlite-utils 4.0rc3

Release: sqlite-utils 4.0rc3 I hoped to release sqlite-utils 4.0 stable this weekend, but as I worked through the backlog of issues and PRs with a combination of Claude Fable 5 and GPT-5.5 the changelog since rc2 kept getting bigger. The biggest new feature is support for introspecting and creating compound foreign keys - a feature that involves a subtle breaking change to table.foreign_keys and hence needed to land for the 4.0 stable release. sqlite-utils also now follows SQLite's convention…

Simon Willison's Weblog
Node.js Considers Public Workflow for Security Reports Amid AI-Driven Surge
Cybersécurité Programmation

Node.js Considers Public Workflow for Security Reports Amid AI-Driven Surge

A controversial proposal inside the Node.js Technical Steering Committee would move lower-severity security reports into a public workflow, reserving private embargo handling for higher-severity vulnerabilities. The proposal, opened in February by Node.js security maintainer Rafael Gonzaga, is now on the agenda for the July 9, 2026 Security Working Group meeting, alongside a follow-up discussion on AI-assisted HackerOne triage. It builds on a year of changes to Node.js security intake,…

Socket