The latest links, tools, and ideas selected by Sébastien Rigaux.https://sebastien.rigaux.beenhttps://sebastien.rigaux.be/en/tech-watch/links/reticle-gives-coding-agents-a-verdict-on-the-running-apphttps://sebastien.rigaux.be/en/tech-watch/links/reticle-gives-coding-agents-a-verdict-on-the-running-appReticle helps coding agents check what they actually built rather than stopping at the code change. The repository presents a runtime-perception tool for web and desktop apps; reticle compare drives two builds in a browser and reports differences users can see, network calls, and console errors. Verification happens from outside the app, with no SDK required. The comparator can pit a main build against a pull request preview and, with --base, classify differences as regressions, missed targets, or changes.Sun, 08 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/owWNlWV7HEROjmVg_image-0.png?auto=format,compress" alt="GitHub preview card for the reticlehq/reticle repository, showing its name, a description of runtime perception for AI agents, a black icon, and counts for contributors, users, discussions, stars, and forks." width="1200" height="600" /></p><p>Reticle helps coding agents check what they actually built rather than stopping at the code change. The repository presents a runtime-perception tool for web and desktop apps; <code>reticle compare</code> drives two builds in a browser and reports differences users can see, network calls, and console errors.</p> <p>Verification happens from outside the app, with no SDK required. The comparator can pit a main build against a pull request preview and, with <code>--base</code>, classify differences as regressions, missed targets, or changes.</p><p><a href="https://github.com/reticlehq/reticle">Open original link</a></p>GitHub preview card for the reticlehq/reticle repository, showing its name, a description of runtime perception for AI agents, a black icon, and counts for contributors, users, discussions, stars, and forks.AI AgentsEnd-to-end testingTestingObservabilityhttps://sebastien.rigaux.be/en/tech-watch/links/fimo-automates-website-maintenance-and-search-visibilityhttps://sebastien.rigaux.be/en/tech-watch/links/fimo-automates-website-maintenance-and-search-visibilityFimo helps marketing teams maintain a website and improve its visibility in search engines and AI answers with specialized agents for SEO, GEO, content, performance, accessibility, and compliance. The platform also includes a visual editor, hosting, previews, and change history. Agents run on a schedule or when the site changes. Small fixes can publish automatically; changes that need a decision arrive as proposals with previews for approval. The site stays connected to its existing framework without being rebuilt, while developers continue working in the code.Sat, 07 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/6paiUEqVDxsGt6eK_image-0.png?auto=format,compress" alt="Fimo graphic reading “Your website, with superpowers” and “Get found in AI answers and search,” on a light background with colored circular shapes." width="2400" height="1260" /></p><p>Fimo helps marketing teams maintain a website and improve its visibility in search engines and AI answers with specialized agents for SEO, GEO, content, performance, accessibility, and compliance. The platform also includes a visual editor, hosting, previews, and change history.</p> <p>Agents run on a schedule or when the site changes. Small fixes can publish automatically; changes that need a decision arrive as proposals with previews for approval. The site stays connected to its existing framework without being rebuilt, while developers continue working in the code.</p><p><a href="https://fimo.ai/">Open original link</a></p>Fimo graphic reading “Your website, with superpowers” and “Get found in AI answers and search,” on a light background with colored circular shapes.AI AgentsSEOGenerative engine optimizationhttps://sebastien.rigaux.be/en/tech-watch/links/x18n-checks-i18n-keys-across-code-and-locale-fileshttps://sebastien.rigaux.be/en/tech-watch/links/x18n-checks-i18n-keys-across-code-and-locale-filesx18n finds missing, unused, or broken translation keys by cross-checking code calls against locale files. Its CLI can fail CI on errors, while search and rename commands connect translated values to their usages. The CLI, VS Code extension, and browser UI share the same engine. Renaming can update locale files and code, with --dry-run available to inspect changes before writing; the UI also exposes MCP tools for coding agents.Sat, 07 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/9UONh-VeHMuUCwBb_image-0.png?auto=format,compress" alt="Screenshot of the x18n site in a dark theme: the left side shows “i18n files, checked and maintained,” while the right shows a translation interface with keys, values in several languages, and a missing French translation." width="2400" height="1260" /></p><p>x18n finds missing, unused, or broken translation keys by cross-checking code calls against locale files. Its CLI can fail CI on errors, while search and rename commands connect translated values to their usages.</p> <p>The CLI, VS Code extension, and browser UI share the same engine. Renaming can update locale files and code, with <code>--dry-run</code> available to inspect changes before writing; the UI also exposes MCP tools for coding agents.</p><p><a href="https://x18n.dev/">Open original link</a></p>Screenshot of the x18n site in a dark theme: the left side shows “i18n files, checked and maintained,” while the right shows a translation interface with keys, values in several languages, and a missing French translation.Internationalizationhttps://sebastien.rigaux.be/en/tech-watch/links/react-detect-unnecessary-effects-with-eslinthttps://sebastien.rigaux.be/en/tech-watch/links/react-detect-unnecessary-effects-with-eslintThis ESLint plugin flags useEffect patterns that unnecessarily complicate React code, pairing each anti-pattern with a specific alternative and a link to the documentation. It covers derived state, chained state updates, and effects used as event handlers, among other cases. Its analysis considers state, props, context, refs, and dependencies to assess when an effect runs. It offers recommended and strict configurations, and also works with Oxlint.Sat, 07 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/u9AMptLq8gFgu6PB_image-0.png?auto=format,compress" alt="GitHub repository banner showing its name, a profile photo, and counts for contributors, users, discussions, stars, and forks." width="1200" height="600" /></p><p>This ESLint plugin flags <code>useEffect</code> patterns that unnecessarily complicate React code, pairing each anti-pattern with a specific alternative and a link to the documentation. It covers derived state, chained state updates, and effects used as event handlers, among other cases.</p> <p>Its analysis considers state, props, context, refs, and dependencies to assess when an effect runs. It offers recommended and strict configurations, and also works with Oxlint.</p><p><a href="https://github.com/nickjvandyke/eslint-plugin-react-you-might-not-need-an-effect">Open original link</a></p>GitHub repository banner showing its name, a profile photo, and counts for contributors, users, discussions, stars, and forks.https://sebastien.rigaux.be/en/tech-watch/links/skullet-generates-skeleton-states-shaped-like-your-contenthttps://sebastien.rigaux.be/en/tech-watch/links/skullet-generates-skeleton-states-shaped-like-your-contentSkullet automates loading states without hand-drawn placeholders: the npm package renders invisible sample data, measures the elements, then draws skeletons in their shape to avoid layout shift. The demo shows several interfaces, from metrics to notifications, and also raises the question of server rendering.Sat, 07 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/z6fxozLANK3DKxNU_image-0.png?auto=format,compress" alt="Black graphic with a large gray skull in the background and the text “Skullet — Smart Skeleton States”." width="1440" height="760" /></p><p>Skullet automates loading states without hand-drawn placeholders: the npm package renders invisible sample data, measures the elements, then draws skeletons in their shape to avoid layout shift.</p> <p>The demo shows several interfaces, from metrics to notifications, and also raises the question of server rendering.</p><p><a href="https://skullet.lochie.me/">Open original link</a></p>Black graphic with a large gray skull in the background and the text “Skullet — Smart Skeleton States”.https://sebastien.rigaux.be/en/tech-watch/links/react-resizable-panels-three-patterns-for-resizable-layoutshttps://sebastien.rigaux.be/en/tech-watch/links/react-resizable-panels-three-patterns-for-resizable-layoutsThe react-resizable-panels documentation introduces React components for building resizable interfaces: panels arranged in rows or columns, grids that resize in two dimensions, and workspaces with tab sets users can rearrange by dragging. The workspace example shows how to provide an initial model with defaultModel and select tab content through renderTabContent. The package includes TypeScript definitions.Sat, 07 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/IogWwmmMVwggH229_image-0.png?auto=format,compress" alt="Purple graphic with the words “react resizable panels” beside a symbol made of chevrons and a vertical bar." width="1200" height="630" /></p><p>The react-resizable-panels documentation introduces React components for building resizable interfaces: panels arranged in rows or columns, grids that resize in two dimensions, and workspaces with tab sets users can rearrange by dragging.</p> <p>The workspace example shows how to provide an initial model with <code>defaultModel</code> and select tab content through <code>renderTabContent</code>. The package includes TypeScript definitions.</p><p><a href="https://react-resizable-panels.vercel.app/">Open original link</a></p>Purple graphic with the words “react resizable panels” beside a symbol made of chevrons and a vertical bar.Reacthttps://sebastien.rigaux.be/en/tech-watch/links/react-hydration-and-ssr-prevent-mismatches-without-hiding-contenthttps://sebastien.rigaux.be/en/tech-watch/links/react-hydration-and-ssr-prevent-mismatches-without-hiding-contentIn Next.js, a localStorage value can make server-rendered HTML differ from the first client render. The article compares the trade-offs: waiting until mount avoids the error but leaves the real content out of the SSR HTML; using the same initial value for both renders preserves that content, though a later update can cause flicker. To synchronize a sidebar without that flash, an inline script applies its saved state to the DOM before hydration and passes it to React, which uses the same classes. The article also distinguishes an isolated theme control from a mobile backdrop handled with CSS.Sat, 07 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/mJPowUL3fg3mosuC_image-0.png?auto=format,compress" alt="A white card on a pale blue background displays “Fixing a Hydration Mismatch Error and UI Flicker in React” and the label “Blog”." width="1200" height="630" /></p><p>In Next.js, a <code>localStorage</code> value can make server-rendered HTML differ from the first client render. The article compares the trade-offs: waiting until mount avoids the error but leaves the real content out of the SSR HTML; using the same initial value for both renders preserves that content, though a later update can cause flicker.</p> <p>To synchronize a sidebar without that flash, an inline script applies its saved state to the DOM before hydration and passes it to React, which uses the same classes. The article also distinguishes an isolated theme control from a mobile backdrop handled with CSS.</p><p><a href="https://www.gmoniava.com/blog/hydration-mismatch-errors-and-how-to-fix-them">Open original link</a></p>A white card on a pale blue background displays “Fixing a Hydration Mismatch Error and UI Flicker in React” and the label “Blog”.Next.jsReactSSRHydrationhttps://sebastien.rigaux.be/en/tech-watch/links/decap-cms-brings-content-editing-into-a-git-workflowhttps://sebastien.rigaux.be/en/tech-watch/links/decap-cms-brings-content-editing-into-a-git-workflowDecap CMS adds an editorial interface to static sites while keeping content in the Git repository. Teams can manage drafts, reviews, and publishing with version history and a live preview that supports non-technical contributors. Its declarative setup lives in a config.yml file for defining collections, fields, and workflows, while custom widgets extend the editor. For teams needing centralized access or relief from Git API limits, Decap Turbo adds features including hosted authentication and a database proxy.Fri, 06 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/El7JBafYDAXWFmzE_image-0.jpg?auto=format,compress" alt="White Decap logo on a purple-to-pink gradient background." width="1500" height="900" /></p><p>Decap CMS adds an editorial interface to static sites while keeping content in the Git repository. Teams can manage drafts, reviews, and publishing with version history and a live preview that supports non-technical contributors.</p> <p>Its declarative setup lives in a <code>config.yml</code> file for defining collections, fields, and workflows, while custom widgets extend the editor. For teams needing centralized access or relief from Git API limits, Decap Turbo adds features including hosted authentication and a database proxy.</p><p><a href="https://decapcms.org/">Open original link</a></p>White Decap logo on a purple-to-pink gradient background.Headless CMSSSGOpen Sourcehttps://sebastien.rigaux.be/en/tech-watch/links/taste-skill-gives-coding-agents-design-rules-and-browser-checkshttps://sebastien.rigaux.be/en/tech-watch/links/taste-skill-gives-coding-agents-design-rules-and-browser-checksTaste Skill gives coding agents a system for building less generic company websites: palettes, hero layouts, UI fragments and real photographs, with art direction tailored to the type of business. The repository offers Claude Code and Codex integrations, plus installation through npx skills. Its distinctive feature is automated checking in headless Chrome: pages render at four widths, from 390 to 1440 px, and are checked for empty visuals, contrast, alignment and images missing on slow networks. WebGL and scroll effects are limited to tech, gaming and software pages, with static fallbacks for phones and reduced motion.Fri, 06 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/1kRnF--NxAGvLbtr_image-0.jpg?auto=format,compress" alt="Taste Skill banner on a beige background, with the project name on the left and stacked interface mockups on the right." width="1731" height="909" /></p><p>Taste Skill gives coding agents a system for building less generic company websites: palettes, hero layouts, UI fragments and real photographs, with art direction tailored to the type of business. The repository offers Claude Code and Codex integrations, plus installation through <code>npx skills</code>.</p> <p>Its distinctive feature is automated checking in headless Chrome: pages render at four widths, from 390 to 1440 px, and are checked for empty visuals, contrast, alignment and images missing on slow networks. WebGL and scroll effects are limited to tech, gaming and software pages, with static fallbacks for phones and reduced motion.</p><p><a href="https://github.com/Leonxlnx/taste-skill">Open original link</a></p>Taste Skill banner on a beige background, with the project name on the left and stacked interface mockups on the right.Agent skillsAI AgentsUI/UXTestingResponsive designhttps://sebastien.rigaux.be/en/tech-watch/links/kiri-a-docker-compatible-container-runtime-for-three-oseshttps://sebastien.rigaux.be/en/tech-watch/links/kiri-a-docker-compatible-container-runtime-for-three-osesKiri replaces Docker Desktop and OrbStack with a lightweight container runtime for macOS, Windows, and Linux, compatible with the Docker CLI, Compose, and buildx. The repository also describes a native UI and support for Kubernetes clusters and Linux machines. Its architecture uses a Linux VM and a Rust agent that starts containers through clone3, without runc, a shim, or dockerd. The project publishes startup-time benchmarks against Docker Desktop and OrbStack, along with instructions for reproducing them.Fri, 06 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/PAyxHjMwSwHVENZ3_image-0.png?auto=format,compress" alt="GitHub banner for the libracoder/kiri repository, showing its name, a short description of the container runtime, a man&#39;s portrait, and counts for contributors, issues, discussions, stars, and forks." width="1200" height="600" /></p><p>Kiri replaces Docker Desktop and OrbStack with a lightweight container runtime for macOS, Windows, and Linux, compatible with the Docker CLI, Compose, and buildx. The repository also describes a native UI and support for Kubernetes clusters and Linux machines.</p> <p>Its architecture uses a Linux VM and a Rust agent that starts containers through <code>clone3</code>, without runc, a shim, or dockerd. The project publishes startup-time benchmarks against Docker Desktop and OrbStack, along with instructions for reproducing them.</p><p><a href="https://github.com/libracoder/kiri">Open original link</a></p>GitHub banner for the libracoder/kiri repository, showing its name, a short description of the container runtime, a man&#39;s portrait, and counts for contributors, issues, discussions, stars, and forks.DockerLinuxDeveloper Experiencehttps://sebastien.rigaux.be/en/tech-watch/links/newreleases-centralizes-version-tracking-and-alertshttps://sebastien.rigaux.be/en/tech-watch/links/newreleases-centralizes-version-tracking-and-alertsNewReleases tracks new project and package versions across platforms such as GitHub, npm, NuGet, and Docker Hub, then sends alerts by email, instant messaging, or webhook. It removes the need to check each dependency or tool manually. Notifications can be instant or scheduled, and tracking can be configured from dependency files such as package.json, requirements.txt, or go.mod. Regular-expression and prerelease-status filters help narrow down which versions trigger alerts.Thu, 05 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/1FPaxTPWGTJ8z2p2_image-0.png?auto=format,compress" alt="NewReleases logo: “new” in blue and “(releases)” in black on a white background." width="2400" height="1254" /></p><p>NewReleases tracks new project and package versions across platforms such as GitHub, npm, NuGet, and Docker Hub, then sends alerts by email, instant messaging, or webhook. It removes the need to check each dependency or tool manually.</p> <p>Notifications can be instant or scheduled, and tracking can be configured from dependency files such as <code>package.json</code>, <code>requirements.txt</code>, or <code>go.mod</code>. Regular-expression and prerelease-status filters help narrow down which versions trigger alerts.</p><p><a href="https://newreleases.io/">Open original link</a></p>NewReleases logo: “new” in blue and “(releases)” in black on a white background.Dependency managementAutomationhttps://sebastien.rigaux.be/en/tech-watch/links/papra-an-open-source-document-archive-to-self-hosthttps://sebastien.rigaux.be/en/tech-watch/links/papra-an-open-source-document-archive-to-self-hostPapra brings document storage and management together in an open-source archiving platform. Full-text search, advanced filters, tags, and automatic imports from email or a folder help organize files and retrieve them later. The project can be deployed with Docker and also provides a CLI, API, SDKs, and webhooks for integration with other tools. Its online demo runs entirely in browser-local storage, with no backend.Tue, 03 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/UhviEfcR4XFEzS4Z_image-0.png?auto=format,compress" alt="Papra GitHub banner showing the repository name, a light-green document icon on a black background, and contributor, usage, star, and fork counts." width="1200" height="600" /></p><p>Papra brings document storage and management together in an open-source archiving platform. Full-text search, advanced filters, tags, and automatic imports from email or a folder help organize files and retrieve them later.</p> <p>The project can be deployed with Docker and also provides a CLI, API, SDKs, and webhooks for integration with other tools. Its online demo runs entirely in browser-local storage, with no backend.</p><p><a href="https://github.com/papra-hq/papra">Open original link</a></p>Papra GitHub banner showing the repository name, a light-green document icon on a black background, and contributor, usage, star, and fork counts.Document managementSelf-hostingSearchhttps://sebastien.rigaux.be/en/tech-watch/links/pullboard-coordinates-ai-agents-with-specs-and-independent-verificationhttps://sebastien.rigaux.be/en/tech-watch/links/pullboard-coordinates-ai-agents-with-specs-and-independent-verificationPullboard coordinates development agents around approved specifications: each claims an item in its own worktree, passes a test gate, then another agent verifies the commit before it is accepted. Rules and activity stay in the repository, with a local board instead of a hosted service. Its workflow puts concrete controls around agent work: approved requirements are frozen when an item is claimed, lanes restrict writable paths, and a state machine shared by the commands, interface, and documentation governs each transition.Tue, 03 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/rihWX1gUkQAdBa6H_image-0.png?auto=format,compress" alt="GitHub preview of the pullboard-dev/pullboard repository, showing its name, a truncated description, and contributor, issue, star, and fork counts." width="1200" height="600" /></p><p>Pullboard coordinates development agents around approved specifications: each claims an item in its own worktree, passes a test gate, then another agent verifies the commit before it is accepted. Rules and activity stay in the repository, with a local board instead of a hosted service.</p> <p>Its workflow puts concrete controls around agent work: approved requirements are frozen when an item is claimed, lanes restrict writable paths, and a state machine shared by the commands, interface, and documentation governs each transition.</p><p><a href="https://github.com/pullboard-dev/pullboard">Open original link</a></p>GitHub preview of the pullboard-dev/pullboard repository, showing its name, a truncated description, and contributor, issue, star, and fork counts.AI AgentsWorkflow OrchestrationSpec-driven developmentCode reviewhttps://sebastien.rigaux.be/en/tech-watch/links/zerobyte-automates-restic-backups-for-self-hostershttps://sebastien.rigaux.be/en/tech-watch/links/zerobyte-automates-restic-backups-for-self-hostersZerobyte brings scheduling, management, and monitoring of encrypted Restic backups into a web interface. It supports NFS, SMB, WebDAV, and SFTP sources as well as local directories, with destinations including S3, GCS, Azure, and rclone. The Docker Compose setup can be pared down when backing up only already-mounted directories: removing SYS_ADMIN and the FUSE device reduces the container’s granted capabilities, but prevents direct mounting of remote shares.Tue, 03 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/SVr7cLf4nJYzzKtq_image-0.png?auto=format,compress" alt="Screenshot of the Zerobyte interface showing scheduled backup jobs, their status, and destination repositories." width="3048" height="1714" /></p><p>Zerobyte brings scheduling, management, and monitoring of encrypted Restic backups into a web interface. It supports NFS, SMB, WebDAV, and SFTP sources as well as local directories, with destinations including S3, GCS, Azure, and rclone.</p> <p>The Docker Compose setup can be pared down when backing up only already-mounted directories: removing <code>SYS_ADMIN</code> and the FUSE device reduces the container’s granted capabilities, but prevents direct mounting of remote shares.</p><p><a href="https://github.com/nicotsx/zerobyte">Open original link</a></p>Screenshot of the Zerobyte interface showing scheduled backup jobs, their status, and destination repositories.Backup and restoreResticSelf-hostingDockerhttps://sebastien.rigaux.be/en/tech-watch/links/ai-agents-to-find-exposed-personal-data-and-request-its-removalhttps://sebastien.rigaux.be/en/tech-watch/links/ai-agents-to-find-exposed-personal-data-and-request-its-removalA three-agent workflow aims to find exposed personal data, identify removal procedures, and draft GDPR requests. The document sets out each agent’s role and instructions, then explains how to have them collaborate in a Cue group chat. The process keeps human approval before emails are sent and says never to share passwords. It also distinguishes sites that catalogue data breaches from the organizations responsible for them, helping avoid contacting the wrong party.Tue, 03 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/ZBmCZPRuUI4LbJ3T_image-0.png?auto=format,compress" alt="Screenshot of a document showing links to Have I Been Pwned and multisearch, plus a warning about data-breach sources." width="1200" height="630" /></p><p>A three-agent workflow aims to find exposed personal data, identify removal procedures, and draft GDPR requests. The document sets out each agent’s role and instructions, then explains how to have them collaborate in a Cue group chat.</p> <p>The process keeps human approval before emails are sent and says never to share passwords. It also distinguishes sites that catalogue data breaches from the organizations responsible for them, helping avoid contacting the wrong party.</p><p><a href="https://docs.google.com/document/d/1UKPyj16OonZsQg-Q0NQ-jbvfAvvCC9Qcn7BL3VLLLJY/mobilebasic?">Open original link</a></p>Screenshot of a document showing links to Have I Been Pwned and multisearch, plus a warning about data-breach sources.Data privacyAI AgentsAutomationhttps://sebastien.rigaux.be/en/tech-watch/links/cloudflare-security-audit-skill-structures-agent-led-auditshttps://sebastien.rigaux.be/en/tech-watch/links/cloudflare-security-audit-skill-structures-agent-led-auditsThis skill turns a coding agent into a security auditor by orchestrating a six-phase repository audit, from reconnaissance to report generation. Findings are structured as machine-readable data and independently verified. A separate agent tries to disprove each candidate; results distinguish confirmed findings, leads needing validation, and rejected candidates. Running target code requires an OS-enforced sandbox with external networking disabled and resource limits in place.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/DHxWGOm7aMU9wETg_image-0.png?auto=format,compress" alt="Banner for the cloudflare/security-audit-skill GitHub repository, showing its coding-agent skill description and contributor, issue, star, and fork counts." width="1200" height="600" /></p><p>This skill turns a coding agent into a security auditor by orchestrating a six-phase repository audit, from reconnaissance to report generation. Findings are structured as machine-readable data and independently verified.</p> <p>A separate agent tries to disprove each candidate; results distinguish confirmed findings, leads needing validation, and rejected candidates. Running target code requires an OS-enforced sandbox with external networking disabled and resource limits in place.</p><p><a href="https://github.com/cloudflare/security-audit-skill">Open original link</a></p>Banner for the cloudflare/security-audit-skill GitHub repository, showing its coding-agent skill description and contributor, issue, star, and fork counts.Agent skillsAI AgentsSecurityhttps://sebastien.rigaux.be/en/tech-watch/links/fetch-metadata-using-request-context-to-strengthen-csrf-defenseshttps://sebastien.rigaux.be/en/tech-watch/links/fetch-metadata-using-request-context-to-strengthen-csrf-defensesThe four Fetch Metadata headers tell servers where a request came from and how its response will be used. Andrew Lock explains Sec-Fetch-Site, Sec-Fetch-Mode, Sec-Fetch-Dest, and Sec-Fetch-User to help distinguish, for example, a legitimate navigation from a suspicious cross-site request. Examples contrast an image loaded from a CDN with a JavaScript fetch() call. Because JavaScript cannot modify these signals, servers can use them in a Resource Isolation Policy as an additional layer of defense against CSRF requests.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/fpIu5TX2H8lLzQw3_image-0.webp?auto=format,compress" alt="A black-and-white dog runs after a green tennis ball on a field." width="799" height="533" /></p><p>The four Fetch Metadata headers tell servers where a request came from and how its response will be used. Andrew Lock explains <code>Sec-Fetch-Site</code>, <code>Sec-Fetch-Mode</code>, <code>Sec-Fetch-Dest</code>, and <code>Sec-Fetch-User</code> to help distinguish, for example, a legitimate navigation from a suspicious cross-site request.</p> <p>Examples contrast an image loaded from a CDN with a JavaScript <code>fetch()</code> call. Because JavaScript cannot modify these signals, servers can use them in a Resource Isolation Policy as an additional layer of defense against CSRF requests.</p><p><a href="https://andrewlock.net/understanding-the-fetch-metadata-http-headers-sec-fetch-site-and-friends/">Open original link</a></p>A black-and-white dog runs after a green tennis ball on a field.Securityhttps://sebastien.rigaux.be/en/tech-watch/links/finbucklemultitenant-isolate-tenants-in-a-net-applicationhttps://sebastien.rigaux.be/en/tech-watch/links/finbucklemultitenant-isolate-tenants-in-a-net-applicationFinbuckle.MultiTenant provides ASP.NET Core with tenant resolution, per-tenant configuration, and data-isolation building blocks. A basic setup combines a host-based strategy, a configuration-backed store, and the UseMultiTenant() middleware. The middleware must run before components that depend on the tenant, such as authentication and authorization. The library also includes integrations for per-tenant options, authentication, and Entity Framework Core data isolation.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/Ltse_jt-4ItPqO0T_image-0.png?auto=format,compress" alt="A cube-shaped logo made of gray blocks, with an orange block in the center." width="512" height="512" /></p><p>Finbuckle.MultiTenant provides ASP.NET Core with tenant resolution, per-tenant configuration, and data-isolation building blocks. A basic setup combines a host-based strategy, a configuration-backed store, and the <code>UseMultiTenant()</code> middleware.</p> <p>The middleware must run before components that depend on the tenant, such as authentication and authorization. The library also includes integrations for per-tenant options, authentication, and Entity Framework Core data isolation.</p><p><a href="https://www.finbuckle.com/MultiTenant/#getting-started">Open original link</a></p>A cube-shaped logo made of gray blocks, with an orange block in the center.Multi-tenancyFinbuckle.MultiTenantASP.NET CoreEntity Framework Core.NEThttps://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-move-a-tenant-without-downtime-part-44https://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-move-a-tenant-without-downtime-part-44This installment explains how to move a tenant from a shared database to a dedicated one without taking the application offline or disrupting other tenants. The catalog drives the switch, while the same EF Core model and query filter serve both isolation modes. The migration uses an initial copy, a temporary read-only window, a delta copy, and verification before cutover. The runbook waits for the cache to expire before reopening writes, preventing instances that still hold the old connection from writing to the shared database after the switch.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/fZlgTf99AQbWhZzY_image-0.jpg?auto=format,compress" alt="Banner reading “Multi-Tenant .NET, Part 4: Moving Day,” with moving boxes, a guild emblem, and an illustrated portrait." width="1200" height="630" /></p><p>This installment explains how to move a tenant from a shared database to a dedicated one without taking the application offline or disrupting other tenants. The catalog drives the switch, while the same EF Core model and query filter serve both isolation modes.</p> <p>The migration uses an initial copy, a temporary read-only window, a delta copy, and verification before cutover. The runbook waits for the cache to expire before reopening writes, preventing instances that still hold the old connection from writing to the shared database after the switch.</p><p><a href="https://barretblake.dev/posts/development/2026/08/multi-tenant-moving-day/">Open original link</a></p>Banner reading “Multi-Tenant .NET, Part 4: Moving Day,” with moving boxes, a guild emblem, and an illustrated portrait.Multi-tenancy.NETEntity Framework CoreDatabasesSoftware Architecturehttps://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-one-database-per-tenant-part-34https://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-one-database-per-tenant-part-34With one database per tenant, EF Core no longer needs a global query filter, a TenantId column, or a tenant-specific model cache key: the tenant is selected through a connection string resolved from a catalog database. This isolation simplifies the model but shifts complexity to operations: each migration must be applied to every database. The article also explains how IDesignTimeDbContextFactory lets dotnet ef create the context without an active request or tenant.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/6Kkj_x73h6-CDgUF_image-0.jpg?auto=format,compress" alt="A hand handles colorful network cables in front of rack-mounted equipment." width="1200" height="630" /></p><p>With one database per tenant, EF Core no longer needs a global query filter, a <code>TenantId</code> column, or a tenant-specific model cache key: the tenant is selected through a connection string resolved from a catalog database.</p> <p>This isolation simplifies the model but shifts complexity to operations: each migration must be applied to every database. The article also explains how <code>IDesignTimeDbContextFactory</code> lets <code>dotnet ef</code> create the context without an active request or tenant.</p><p><a href="https://barretblake.dev/posts/development/2026/08/multi-tenant-part-3/">Open original link</a></p>A hand handles colorful network cables in front of rack-mounted equipment.Multi-tenancy.NETEntity Framework CoreDatabasesSoftware Architecturehttps://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-isolate-data-by-sql-server-schema-part-24https://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-isolate-data-by-sql-server-schema-part-24Part 2/4 shows how to isolate each tenant’s data in its own SQL Server schema, without a global query filter or a required TenantId column. EF Core can use a simple primary key again, while the database structure itself enforces the isolation boundary. The key change is model caching: OnModelCreating runs only once per model. The schema must be included in the cache key through IModelCacheKeyFactory, or EF Core may reuse the first tenant’s schema. The article also covers per-schema provisioning and migrations, plus strict validation of schema names interpolated into SQL.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/vzw31Z0w6cBjGZ5P_image-0.jpg?auto=format,compress" alt="Graphic titled “Multi-Tenant .NET, Part 2 — Shared Database with Schema Separation,” showing a “House for Rent” sign, a circular emblem with two swords, and an illustrated portrait." width="1200" height="630" /></p><p>Part 2/4 shows how to isolate each tenant’s data in its own SQL Server schema, without a global query filter or a required <code>TenantId</code> column. EF Core can use a simple primary key again, while the database structure itself enforces the isolation boundary.</p> <p>The key change is model caching: <code>OnModelCreating</code> runs only once per model. The schema must be included in the cache key through <code>IModelCacheKeyFactory</code>, or EF Core may reuse the first tenant’s schema. The article also covers per-schema provisioning and migrations, plus strict validation of schema names interpolated into SQL.</p><p><a href="https://barretblake.dev/posts/development/2026/07/multi-tenant-part-2/">Open original link</a></p>Graphic titled “Multi-Tenant .NET, Part 2 — Shared Database with Schema Separation,” showing a “House for Rent” sign, a circular emblem with two swords, and an illustrated portrait.Multi-tenancy.NETEntity Framework CoreSQL ServerSoftware Architecturehttps://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-query-isolation-and-sql-server-partitions-part-14https://sebastien.rigaux.be/en/tech-watch/links/net-multi-tenancy-query-isolation-and-sql-server-partitions-part-14This first installment presents a shared-schema .NET multi-tenant design: EF Core filters reads by tenant, while SQL Server physically partitions rows to speed up data access. The key distinction is that partitioning is not a security boundary; isolation relies on the EF Core global query filter. The article also explains resolving the tenant per request, assigning its ID to new rows, and adding partitions to migrations with raw SQL. The primary key must include GuildId, a constraint SQL Server imposes when partitioning a unique index.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/hfTn_IrZQUYpxQ9__image-0.jpg?auto=format,compress" alt="Banner over a photograph of apartment buildings, titled “Multi-Tenant .NET, Part 1 — Shared Database with Partitions,” with a crossed-swords emblem and an illustrated portrait." width="1200" height="630" /></p><p>This first installment presents a shared-schema .NET multi-tenant design: EF Core filters reads by tenant, while SQL Server physically partitions rows to speed up data access. The key distinction is that partitioning is not a security boundary; isolation relies on the EF Core global query filter.</p> <p>The article also explains resolving the tenant per request, assigning its ID to new rows, and adding partitions to migrations with raw SQL. The primary key must include <code>GuildId</code>, a constraint SQL Server imposes when partitioning a unique index.</p><p><a href="https://barretblake.dev/posts/development/2026/07/multi-tenant-part-1/">Open original link</a></p>Banner over a photograph of apartment buildings, titled “Multi-Tenant .NET, Part 1 — Shared Database with Partitions,” with a crossed-swords emblem and an illustrated portrait.Multi-tenancy.NETEntity Framework CoreSQL ServerSecurityhttps://sebastien.rigaux.be/en/tech-watch/links/agent-loops-in-c-with-microsoft-agent-frameworkhttps://sebastien.rigaux.be/en/tech-watch/links/agent-loops-in-c-with-microsoft-agent-frameworkAgent loops combine action, observation, and evaluation to refine an answer or retry an operation until it meets a criterion. Jesse Liberty demonstrates the pattern in C# with Microsoft Agent Framework: a loop agent, an evaluator, and an iteration limit. The example contrasts a deterministic marker such as DONE with a model-based judge, then outlines safeguards to add: timeouts, idempotent calls, logging, and cost tracking. Each iteration adds latency and token usage.Mon, 02 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/sDf9Rzn57jqZWsGe_image-0.jpg?auto=format,compress" alt="Diagram of an agentic loop: the agent acts, observes, evaluates, then repeats or ends." width="800" height="340" /></p><p>Agent loops combine action, observation, and evaluation to refine an answer or retry an operation until it meets a criterion. Jesse Liberty demonstrates the pattern in C# with Microsoft Agent Framework: a loop agent, an evaluator, and an iteration limit.</p> <p>The example contrasts a deterministic marker such as <code>DONE</code> with a model-based judge, then outlines safeguards to add: timeouts, idempotent calls, logging, and cost tracking. Each iteration adds latency and token usage.</p><p><a href="https://jesseliberty.com/2026/10/26/prompts-are-dead-long-live-loops/">Open original link</a></p>Diagram of an agentic loop: the agent acts, observes, evaluates, then repeats or ends.Microsoft Agent FrameworkC#AI AgentsModel EvaluationWorkflow Orchestrationhttps://sebastien.rigaux.be/en/tech-watch/links/elephant-goldfish-model-googles-skills-for-shaping-specshttps://sebastien.rigaux.be/en/tech-watch/links/elephant-goldfish-model-googles-skills-for-shaping-specsElephant-Goldfish Model, Google’s open-source plugin, provides skills to explore an idea, draft a specification, and challenge it before implementation. An “Elephant” agent keeps the project context; “Goldfish” reviewers inspect the document without the conversation history to surface unstated assumptions and risks. The repository also covers resolving review findings and comparing documentation with code. Reviews require fresh subagent contexts; if the environment cannot create them, EGM stops that step.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/5iR3jqCDBycrtrSv_image-0.png?auto=format,compress" alt="Elephant-Goldfish Model graphic: two panels show a blue elephant that remembers everything and an orange goldfish that remembers nothing." width="2400" height="1260" /></p><p>Elephant-Goldfish Model, Google’s open-source plugin, provides <strong>skills</strong> to explore an idea, draft a specification, and challenge it before implementation. An “Elephant” agent keeps the project context; “Goldfish” reviewers inspect the document without the conversation history to surface unstated assumptions and risks.</p> <p>The repository also covers resolving review findings and comparing documentation with code. Reviews require fresh subagent contexts; if the environment cannot create them, EGM stops that step.</p><p><a href="https://github.com/google/elephant-goldfish-model">Open original link</a></p>Elephant-Goldfish Model graphic: two panels show a blue elephant that remembers everything and an orange goldfish that remembers nothing.Agent skillsSpec-driven developmentAI Agentshttps://sebastien.rigaux.be/en/tech-watch/links/web-accessibility-laura-kalbags-book-is-free-to-read-onlinehttps://sebastien.rigaux.be/en/tech-watch/links/web-accessibility-laura-kalbags-book-is-free-to-read-onlineLaura Kalbag has made Accessibility for Everyone free to read on the web. First published by A Book Apart in 2017, the book is now available to the web community as a resource for learning about accessibility. Kalbag notes that accessibility best practices have changed little, while some recommended tools and job titles may be outdated; the Web Content Accessibility Guidelines are also approaching version 3.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/y7vCKGXoUTU4Qeh2_image-0.png?auto=format,compress" alt="A green cover showing the title “Accessibility for Everyone,” Laura Kalbag’s name, and the words “Read for free.”" width="1200" height="630" /></p><p>Laura Kalbag has made <em>Accessibility for Everyone</em> free to read on the web. First published by A Book Apart in 2017, the book is now available to the web community as a resource for learning about accessibility.</p> <p>Kalbag notes that accessibility best practices have changed little, while some recommended tools and job titles may be outdated; the Web Content Accessibility Guidelines are also approaching version 3.</p><p><a href="https://accessibilityforeveryone.site/">Open original link</a></p>A green cover showing the title “Accessibility for Everyone,” Laura Kalbag’s name, and the words “Read for free.”Accessibilityhttps://sebastien.rigaux.be/en/tech-watch/links/modern-web-guidance-brings-current-web-practices-to-coding-agentshttps://sebastien.rigaux.be/en/tech-watch/links/modern-web-guidance-brings-current-web-practices-to-coding-agentsModern Web Guidance gives coding agents expert guidance on browser APIs, CSS, performance, and accessibility, steering them toward native solutions instead of legacy patterns. The repository brings together 232 features and 186 use cases as skills installable in multiple agents. Its CLI searches locally for a guide and adds it to the agent’s context. The guidance incorporates Baseline compatibility data, targeted fallbacks, and automated evaluation; the project is marked as a preview release.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/J1hz0dvFok1vq_YK_image-0.png?auto=format,compress" alt="Image for the GoogleChrome/modern-web-guidance repository, showing the Chrome logo and contributor, issue, star, and fork counts." width="1200" height="600" /></p><p>Modern Web Guidance gives coding agents expert guidance on browser APIs, CSS, performance, and accessibility, steering them toward native solutions instead of legacy patterns. The repository brings together 232 features and 186 use cases as skills installable in multiple agents.</p> <p>Its CLI searches locally for a guide and adds it to the agent’s context. The guidance incorporates Baseline compatibility data, targeted fallbacks, and automated evaluation; the project is marked as a preview release.</p><p><a href="https://github.com/GoogleChrome/modern-web-guidance">Open original link</a></p>Image for the GoogleChrome/modern-web-guidance repository, showing the Chrome logo and contributor, issue, star, and fork counts.Agent skillsAI AgentsProgressive enhancementAccessibilityWeb Performancehttps://sebastien.rigaux.be/en/tech-watch/links/emoji-picker-react-customize-a-react-emoji-pickerhttps://sebastien.rigaux.be/en/tech-watch/links/emoji-picker-react-customize-a-react-emoji-pickeremoji-picker-react provides an emoji picker for React, either with its built-in styling or adapted to a product’s visual design. The interactive playground lets developers try props, CSS themes, and customization examples. Features include search, skin tones, custom emojis, and multiple languages. Its reactions mode starts with a compact set of popular reactions, then opens access to the full emoji library.Sun, 01 Nov 2026 00:00:00 GMT<p>emoji-picker-react provides an emoji picker for React, either with its built-in styling or adapted to a product’s visual design. The interactive playground lets developers try props, CSS themes, and customization examples.</p> <p>Features include search, skin tones, custom emojis, and multiple languages. Its reactions mode starts with a compact set of popular reactions, then opens access to the full emoji library.</p><p><a href="https://ealush.com/emoji-picker-react/#playground">Open original link</a></p>ReactUI/UXhttps://sebastien.rigaux.be/en/tech-watch/links/opentui-builds-typescript-terminal-interfaces-with-a-native-zig-rendererhttps://sebastien.rigaux.be/en/tech-watch/links/opentui-builds-typescript-terminal-interfaces-with-a-native-zig-rendererOpenTUI lets developers build terminal user interfaces in TypeScript, directly or with React and Solid. Its native renderer is written in Zig, and layouts use flexbox. The library supports selects, inputs, and scroll boxes controlled by keyboard or mouse. It can also display images, play sounds, and render 3D graphics.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/d0ol22PzIPoNO4uR_image-0.png?auto=format,compress" alt="Black OpenTUI logo on a white background." width="1200" height="630" /></p><p>OpenTUI lets developers build terminal user interfaces in TypeScript, directly or with React and Solid. Its native renderer is written in Zig, and layouts use flexbox.</p> <p>The library supports selects, inputs, and scroll boxes controlled by keyboard or mouse. It can also display images, play sounds, and render 3D graphics.</p><p><a href="https://opentui.com/">Open original link</a></p>Black OpenTUI logo on a white background.TypeScriptZigUI/UXhttps://sebastien.rigaux.be/en/tech-watch/links/puck-a-visual-editor-for-react-field-and-canvas-updates-in-024https://sebastien.rigaux.be/en/tech-watch/links/puck-a-visual-editor-for-react-field-and-canvas-updates-in-024Puck, a visual page editor for React, adds field groups and tabs in version 0.24, along with a checkbox field for selecting multiple options. Drag handles also make it easier to reorder components in nested layouts. The renderFields API lets you compose these layouts. In the canvas, InlineTextField enables direct text editing, while fieldTransforms transforms values at render time without changing the underlying data.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/fqX2nrhIvI2o0pBt_image-0.png?auto=format,compress" alt="Puck logo in a blue-to-purple gradient on a white background." width="1200" height="675" /></p><p>Puck, a visual page editor for React, adds field groups and tabs in version 0.24, along with a <code>checkbox</code> field for selecting multiple options. Drag handles also make it easier to reorder components in nested layouts.</p> <p>The <code>renderFields</code> API lets you compose these layouts. In the canvas, <code>InlineTextField</code> enables direct text editing, while <code>fieldTransforms</code> transforms values at render time without changing the underlying data.</p><p><a href="https://puckeditor.com/blog/puck-024">Open original link</a></p>Puck logo in a blue-to-purple gradient on a white background.PuckReactNo-code / low-codeUI/UXhttps://sebastien.rigaux.be/en/tech-watch/links/react-preserve-progressive-enhancement-with-server-actionshttps://sebastien.rigaux.be/en/tech-watch/links/react-preserve-progressive-enhancement-with-server-actionsReact combines <form action>, useActionState, and useOptimistic to handle pending feedback and optimistic updates while keeping form submission available before JavaScript runs. The article shows how this continuity can enhance the interface after hydration without giving up the browser’s native form behavior. The key is to keep the server action directly in action: inserting a client function breaks submission without JavaScript. For optimistic updates, useHydrated() lets the form choose between the server action and its client-enhanced version.Sun, 01 Nov 2026 00:00:00 GMT<p>React combines <code>&lt;form action&gt;</code>, <code>useActionState</code>, and <code>useOptimistic</code> to handle pending feedback and optimistic updates while keeping form submission available before JavaScript runs. The article shows how this continuity can enhance the interface after hydration without giving up the browser’s native form behavior.</p> <p>The key is to keep the server action directly in <code>action</code>: inserting a client function breaks submission without JavaScript. For optimistic updates, <code>useHydrated()</code> lets the form choose between the server action and its client-enhanced version.</p><p><a href="https://ebey.dev/blog/3myyseusgd22h">Open original link</a></p>ReactServer ActionsProgressive enhancementFormsHydrationhttps://sebastien.rigaux.be/en/tech-watch/links/c-15-unions-exhaustive-matching-with-boxing-to-considerhttps://sebastien.rigaux.be/en/tech-watch/links/c-15-unions-exhaustive-matching-with-boxing-to-considerC# 15 introduces the union keyword to represent a value drawn from several types without forcing them into a base class or losing their type information in object. Andrew Lock shows how switch expressions enforce handling every case, and how to declare unions such as Result<T>. One performance detail to weigh: the generated implementation stores the value in an object, boxing value types. The article demonstrates a custom implementation using TryGetValue to avoid boxing in switch expressions.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/yi5OJqeAKwzhGLHH_image-0.png?auto=format,compress" alt="C# code showing Windows, Linux and MacOS records, followed by a SupportedOS union containing those three types." width="600" height="400" /></p><p>C# 15 introduces the <code>union</code> keyword to represent a value drawn from several types without forcing them into a base class or losing their type information in <code>object</code>. Andrew Lock shows how <code>switch</code> expressions enforce handling every case, and how to declare unions such as <code>Result&lt;T&gt;</code>.</p> <p>One performance detail to weigh: the generated implementation stores the value in an <code>object</code>, boxing value types. The article demonstrates a custom implementation using <code>TryGetValue</code> to avoid boxing in <code>switch</code> expressions.</p><p><a href="https://andrewlock.net/exploring-the-dotnet-11-preview-2-dotnet-gets-union-types/">Open original link</a></p>C# code showing Windows, Linux and MacOS records, followed by a SupportedOS union containing those three types.C#.NEThttps://sebastien.rigaux.be/en/tech-watch/links/microsoft-agent-framework-choosing-where-to-intercept-callshttps://sebastien.rigaux.be/en/tech-watch/links/microsoft-agent-framework-choosing-where-to-intercept-callsIn Microsoft Agent Framework, ChatClient middleware intercepts messages exchanged with the LLM, while agent middleware operates on the agent’s overall run, including session, identity, or token-budget management. This distinction helps place logging or modification at the right level. The C# example adds function-invocation middleware to log calls to the Researcher agent’s Tavily tool, without changing the other agents. The trace shows the function name and its arguments.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/Ekq7OL1aNFQGqPQX_image-0.jpg?auto=format,compress" alt="Three basketball players illustrate a sequence: the first holds the ball, the second watches through binoculars, and the third shoots toward the hoop." width="765" height="457" /></p><p>In Microsoft Agent Framework, <code>ChatClient</code> middleware intercepts messages exchanged with the LLM, while agent middleware operates on the agent’s overall run, including session, identity, or token-budget management. This distinction helps place logging or modification at the right level.</p> <p>The C# example adds function-invocation middleware to log calls to the Researcher agent’s Tavily tool, without changing the other agents. The trace shows the function name and its arguments.</p><p><a href="https://jesseliberty.com/2026/08/08/chatclient-middleware-vs-agent-middleware/">Open original link</a></p>Three basketball players illustrate a sequence: the first holds the ball, the second watches through binoculars, and the third shoots toward the hoop.Microsoft Agent FrameworkAI AgentsC#Observabilityhttps://sebastien.rigaux.be/en/tech-watch/links/c-ifitquacks-turns-duck-typing-into-a-libraryhttps://sebastien.rigaux.be/en/tech-watch/links/c-ifitquacks-turns-duck-typing-into-a-libraryIfItQuacks lets C# code accept objects that match an interface without implementing it or sharing a base class. The [DuckTyped] attribute invokes a source generator that checks compatibility at compile time and creates an adapter—without reflection or dynamic. Anonymous types can also act as test stubs: an object such as { Name = "Steven", Age = 90 } can satisfy an IPerson interface. Adapters also preserve identity by forwarding Equals, GetHashCode, and ToString to the wrapped instance.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/dW9zy7zmosJKDENv_image-1.png?auto=format,compress" alt="Yellow “Buy me a coffee” graphic with a stylized cup." width="580" height="146" /></p><p>IfItQuacks lets C# code accept objects that match an interface without implementing it or sharing a base class. The <code>[DuckTyped]</code> attribute invokes a source generator that checks compatibility at compile time and creates an adapter—without reflection or <code>dynamic</code>.</p> <p>Anonymous types can also act as test stubs: an object such as <code>{ Name = &quot;Steven&quot;, Age = 90 }</code> can satisfy an <code>IPerson</code> interface. Adapters also preserve identity by forwarding <code>Equals</code>, <code>GetHashCode</code>, and <code>ToString</code> to the wrapped instance.</p><p><a href="https://steven-giesel.com/blogPost/41599817-4457-441e-b874-1a5c67f4e7cc">Open original link</a></p>Yellow “Buy me a coffee” graphic with a stylized cup.C#.NEThttps://sebastien.rigaux.be/en/tech-watch/links/net-range-types-as-first-class-domain-objectshttps://sebastien.rigaux.be/en/tech-watch/links/net-range-types-as-first-class-domain-objectsCodoMetis.ValueRanges offers .NET range types to replace pairs of dates and their scattered logic. Its five variants—finite, unbounded on either side, infinite, and empty—make possible shapes and rules explicit, while operations such as Contains and Overlaps run in memory. The companion EF Core package bridges the domain model to PostgreSQL: the same operations are translated into SQL operators through Npgsql. The article also explains the design trade-off: abstract records rather than structs, so each variant can be represented by a type hierarchy.Sun, 01 Nov 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/2CXATPwyNQbCQXAM_image-0.webp?auto=format,compress" alt="Article banner showing its title, Ricardo Groß’s name, and the date “Jun 11” on a white background." width="1200" height="627" /></p><p>CodoMetis.ValueRanges offers .NET range types to replace pairs of dates and their scattered logic. Its five variants—finite, unbounded on either side, infinite, and empty—make possible shapes and rules explicit, while operations such as <code>Contains</code> and <code>Overlaps</code> run in memory.</p> <p>The companion EF Core package bridges the domain model to PostgreSQL: the same operations are translated into SQL operators through Npgsql. The article also explains the design trade-off: abstract records rather than structs, so each variant can be represented by a type hierarchy.</p><p><a href="https://dev.to/caffeinatedcoder/the-interval-is-the-thing-modelling-range-types-as-first-class-domain-objects-in-net-3jha">Open original link</a></p>Article banner showing its title, Ricardo Groß’s name, and the date “Jun 11” on a white background..NETC#Entity Framework CorePostgreSQLSoftware Architecturehttps://sebastien.rigaux.be/en/tech-watch/links/wordpress-rce-flaw-targets-the-update-windowhttps://sebastien.rigaux.be/en/tech-watch/links/wordpress-rce-flaw-targets-the-update-windowA remote code execution flaw in WordPress Core can let an unauthenticated attacker run code during a full-package update if the temporary directory is web-accessible. Wordfence says it blocked 62,969 attempts in 24 hours; a fix is available in version 7.1.4. The attack hinges on racing cleanup: installer files are unpacked to a predictable path under wp-content/upgrade, and attackers are repeatedly probing files such as setup-config.php to catch the exposure window, which may last only seconds. The flaw affects versions 4.7 through 7.1.3.Sat, 31 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/XZwPRoEwVwbHUkLi_image-0.webp?auto=format,compress" alt="White WordPress logo on layered blue panels, with file paths visible in the background." width="900" height="470" /></p><p>A remote code execution flaw in WordPress Core can let an unauthenticated attacker run code during a full-package update if the temporary directory is web-accessible. Wordfence says it blocked 62,969 attempts in 24 hours; a fix is available in version 7.1.4.</p> <p>The attack hinges on racing cleanup: installer files are unpacked to a predictable path under <code>wp-content/upgrade</code>, and attackers are repeatedly probing files such as <code>setup-config.php</code> to catch the exposure window, which may last only seconds. The flaw affects versions 4.7 through 7.1.3.</p><p><a href="https://thehackernews.com/2026/10/wordpress-rce-flaw-draws-nearly-63000.html?m=1&amp;fbclid=IwVERDUAVSgZFleHRuA2FlbQIxMQBwZG9mBWZkaWQWURVldsH84Prb_V9O7MJ8RzmvQSBsuHNydGMGYXBwX2lkCjY2Mjg1NjgzNzkAAR8-ptU2QLdLnxH-DOwi8ZTpvDQvoHH5ARUtADcS_XgLJpuQ6RDMlL_aD1TW9g_aem_-NUl7MFU_kQudSHH6dvgVQ">Open original link</a></p>White WordPress logo on layered blue panels, with file paths visible in the background.Securityhttps://sebastien.rigaux.be/en/tech-watch/links/cvengine-connects-attack-surface-discovery-with-cve-validationhttps://sebastien.rigaux.be/en/tech-watch/links/cvengine-connects-attack-surface-discovery-with-cve-validationCVEngine brings continuous asset discovery, vulnerability scanning, and matching against exploited CVEs into a self-hosted platform. It aims to prioritize flaws that actually apply, using read-only validation and evidence rather than presenting only a list of alerts. Version 1.3 adds Sentinels to run scans from private networks, along with an OpenVAS integration that is disabled by default. Results feed the same inventory and severity ratings; the tool also provides a REST API and MCP integration.Sat, 31 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/5CEuysgDJnMsu6zd_image-0.png?auto=format,compress" alt="GitHub banner for CVEngine showing its name, a short description, contributor, issue, star, and fork counts, plus a small image of a person holding out their hands." width="1200" height="600" /></p><p>CVEngine brings continuous asset discovery, vulnerability scanning, and matching against exploited CVEs into a self-hosted platform. It aims to prioritize flaws that actually apply, using read-only validation and evidence rather than presenting only a list of alerts.</p> <p>Version 1.3 adds Sentinels to run scans from private networks, along with an OpenVAS integration that is disabled by default. Results feed the same inventory and severity ratings; the tool also provides a REST API and MCP integration.</p><p><a href="https://github.com/hevnsnt/CVEngine">Open original link</a></p>GitHub banner for CVEngine showing its name, a short description, contributor, issue, star, and fork counts, plus a small image of a person holding out their hands.SecurityPenetration testingSelf-hostinghttps://sebastien.rigaux.be/en/tech-watch/links/mautic-automate-marketing-while-keeping-control-of-your-datahttps://sebastien.rigaux.be/en/tech-watch/links/mautic-automate-marketing-while-keeping-control-of-your-dataMautic is an open-source marketing automation platform that brings together campaigns, email, landing pages, and contact management. It can be self-hosted on an organization’s infrastructure, with a REST API and plugins for integration and extension. The page also highlights drag-and-drop campaign creation, lead scoring, and privacy-focused features. Cited use cases include sending more than a million personalized, multilingual emails daily for an e-commerce business.Sat, 31 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/QcT3-uJG_tmmZosI_image-0.jpg?auto=format,compress" alt="Snow-covered mountains beneath a purple overlay, with the text “Free Your Marketing! empowered by mautic.”" width="1919" height="640" /></p><p>Mautic is an open-source marketing automation platform that brings together campaigns, email, landing pages, and contact management. It can be self-hosted on an organization’s infrastructure, with a REST API and plugins for integration and extension.</p> <p>The page also highlights drag-and-drop campaign creation, lead scoring, and privacy-focused features. Cited use cases include sending more than a million personalized, multilingual emails daily for an e-commerce business.</p><p><a href="https://mautic.org/">Open original link</a></p>Snow-covered mountains beneath a purple overlay, with the text “Free Your Marketing! empowered by mautic.”Marketing automationSelf-hostingOpen Sourcehttps://sebastien.rigaux.be/en/tech-watch/links/billionmail-self-host-an-email-platform-and-campaign-workflowhttps://sebastien.rigaux.be/en/tech-watch/links/billionmail-self-host-an-email-platform-and-campaign-workflowBillionMail combines a mail server, newsletters, and email marketing in an open-source, self-hosted package. Its repository outlines a setup flow connecting a domain and DNS verification to campaign creation and sending, with list and tag management. The project supports Docker and installation through aaPanel. It also integrates RoundCube for webmail, offers delivery analytics, and is licensed under AGPLv3; the team running it remains responsible for hosting the service.Sat, 31 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/XjK3o0AbUsXd_m7Y_image-0.png?auto=format,compress" alt="BillionMail GitHub banner showing the project name, a description of a self-hosted mail and email marketing service, and contributor, issue, star, and fork counts." width="1200" height="600" /></p><p>BillionMail combines a mail server, newsletters, and email marketing in an open-source, self-hosted package. Its repository outlines a setup flow connecting a domain and DNS verification to campaign creation and sending, with list and tag management.</p> <p>The project supports Docker and installation through aaPanel. It also integrates RoundCube for webmail, offers delivery analytics, and is licensed under AGPLv3; the team running it remains responsible for hosting the service.</p><p><a href="https://github.com/Billionmail/BillionMail?fbclid=IwZnRzaAVSfsRleHRuA2FlbQIxMQBwZG9mBWZkaWQWURXNcp56FMhsSBMENWsMwQT7qCd6y3NydGMGYXBwX2lkCjY2Mjg1NjgzNzkAAR_MI9RcqU99pGd4uxK2p9-mnrPt77hPr6xfWTGamacb-oeBIqlbmf9PZ_hfIA_aem__boTMF88wTbUjGAZtHUMgQ">Open original link</a></p>BillionMail GitHub banner showing the project name, a description of a self-hosted mail and email marketing service, and contributor, issue, star, and fork counts.Marketing automationSelf-hostingOpen SourceDockerhttps://sebastien.rigaux.be/en/tech-watch/links/metalama-generates-c-patterns-and-enforces-architecture-at-build-timehttps://sebastien.rigaux.be/en/tech-watch/links/metalama-generates-c-patterns-and-enforces-architecture-at-build-timeMetalama automates cross-cutting C# patterns with aspects that generate code at compile time, while checking architecture rules as you edit. The repetitive implementation stays out of business code and the repository, and one aspect can be applied to a method or to a set of methods selected in code. For example, an aspect can wrap a method in try/catch to log its entry, result, and exceptions. Metalama also lets you preview and debug the transformed code, making those changes inspectable.Fri, 30 Oct 2026 00:00:00 GMT<p><img src="https://bd7d5fa0.cdn.prismic.io/bd7d5fa0/M-33MF2ZXaLfipgW_image-0.svg?auto=compress,format" alt="" width="750" height="700" /></p><p>Metalama automates cross-cutting C# patterns with aspects that generate code at compile time, while checking architecture rules as you edit. The repetitive implementation stays out of business code and the repository, and one aspect can be applied to a method or to a set of methods selected in code.</p> <p>For example, an aspect can wrap a method in <code>try/catch</code> to log its entry, result, and exceptions. Metalama also lets you preview and debug the transformed code, making those changes inspectable.</p><p><a href="https://postsharp.net/metalama">Open original link</a></p>C#.NETSoftware ArchitectureDeveloper Experiencehttps://sebastien.rigaux.be/en/tech-watch/links/motherload-imports-typed-yaml-jsonc-csv-and-markdown-into-typescripthttps://sebastien.rigaux.be/en/tech-watch/links/motherload-imports-typed-yaml-jsonc-csv-and-markdown-into-typescriptMotherload lets you import data files as TypeScript modules typed from their contents. It supports TOML, YAML, JSONC, JSON5, CSV, TSV, Markdown, plain text and .env files; types appear in the editor, and tsc reports parsing errors with their locations. Type-checking uses TypeScript 7.1 content mappers, currently in beta, and requires --runExternalCode. At runtime, a preload or plugin adapts the same imports for Node.js and a range of bundlers.Fri, 30 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/dXKQOoq5YQNzTzMV_image-0.png?auto=format,compress" alt="Motherload graphic with the text “Import data files into TypeScript, fully typed” on the left and TypeScript code importing plans.toml, team.yaml, strings.jsonc, posts.csv, notes.md and .env on the right." width="1200" height="630" /></p><p>Motherload lets you import data files as TypeScript modules <strong>typed from their contents</strong>. It supports TOML, YAML, JSONC, JSON5, CSV, TSV, Markdown, plain text and <code>.env</code> files; types appear in the editor, and <code>tsc</code> reports parsing errors with their locations.</p> <p>Type-checking uses TypeScript 7.1 <em>content mappers</em>, currently in beta, and requires <code>--runExternalCode</code>. At runtime, a preload or plugin adapts the same imports for Node.js and a range of bundlers.</p><p><a href="https://motherload.dev/">Open original link</a></p>Motherload graphic with the text “Import data files into TypeScript, fully typed” on the left and TypeScript code importing plans.toml, team.yaml, strings.jsonc, posts.csv, notes.md and .env on the right.TypeScriptDeveloper ExperienceNode.jshttps://sebastien.rigaux.be/en/tech-watch/links/nextjs-an-ai-skill-analyzes-imports-to-reduce-shipped-javascripthttps://sebastien.rigaux.be/en/tech-watch/links/nextjs-an-ai-skill-analyzes-imports-to-reduce-shipped-javascriptNext.js 16.4 includes an AI agent skill that analyzes Turbopack’s module and chunk graph to find imports that add to shipped JavaScript. It can, for example, spot when a static import elsewhere in the bundle prevents a component from staying deferred, then suggest changes for review before applying them. The analyzer also compares snapshots and filters code loaded on the initial render. Vercel reports nearly two megabytes of compressed JavaScript saved across v0 and vercel.com; the fixes were checked on preview deployments. The tool requires Turbopack, the default bundler since Next.js 16.Fri, 30 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/LsCiTo3_qcg8nIQG_image-0.png?auto=format,compress" alt="Black graphic with the text “Ship less JavaScript in Next.js with your AI agent” and the Next.js logo." width="2400" height="1256" /></p><p>Next.js 16.4 includes an AI agent skill that analyzes Turbopack’s module and chunk graph to find imports that add to shipped JavaScript. It can, for example, spot when a static import elsewhere in the bundle prevents a component from staying deferred, then suggest changes for review before applying them.</p> <p>The analyzer also compares snapshots and filters code loaded on the initial render. Vercel reports nearly two megabytes of compressed JavaScript saved across v0 and vercel.com; the fixes were checked on preview deployments. The tool requires Turbopack, the default bundler since Next.js 16.</p><p><a href="https://nextjs.org/blog/ship-less-javascript-with-ai">Open original link</a></p>Black graphic with the text “Ship less JavaScript in Next.js with your AI agent” and the Next.js logo.Next.jsAgent skillsWeb PerformanceTurbopackhttps://sebastien.rigaux.be/en/tech-watch/links/tanstack-db-10-rc1-using-test-oracles-to-harden-agent-written-codehttps://sebastien.rigaux.be/en/tech-watch/links/tanstack-db-10-rc1-using-test-oracles-to-harden-agent-written-codeTanStack DB reaches 1.0 RC1 after extensive stabilization work. Kyle Mathews explains how test oracles—independent models that calculate expected behavior—and property-based testing uncovered bugs in collection updates and the change messages sent to subscribers. These executable references also give coding agents precise rules to preserve when changing the implementation. The trade-off is clear: writing and refining models takes work, but their simplicity makes complex algorithms easier to verify. The RC also supports incremental adoption, from existing REST APIs to local persistence, offline mutations, and real-time sync.Fri, 30 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/21BsJxsdofB3ufTH_image-0.jpg?auto=format,compress" alt="Illustrated map of mountains, valleys, and dotted paths connecting different points." width="1200" height="630" /></p><p>TanStack DB reaches 1.0 RC1 after extensive stabilization work. Kyle Mathews explains how <strong>test oracles</strong>—independent models that calculate expected behavior—and property-based testing uncovered bugs in collection updates and the change messages sent to subscribers.</p> <p>These executable references also give coding agents precise rules to preserve when changing the implementation. The trade-off is clear: writing and refining models takes work, but their simplicity makes complex algorithms easier to verify. The RC also supports incremental adoption, from existing REST APIs to local persistence, offline mutations, and real-time sync.</p><p><a href="https://tanstack.com/blog/tanstack-db-1.0-rc1-going-all-in-on-oracles">Open original link</a></p>Illustrated map of mountains, valleys, and dotted paths connecting different points.TanStack DBProperty-based testingTestingAI AgentsLocal-firsthttps://sebastien.rigaux.be/en/tech-watch/links/vinext-14-cuts-server-work-and-speeds-up-hydrationhttps://sebastien.rigaux.be/en/tech-watch/links/vinext-14-cuts-server-work-and-speeds-up-hydrationVinext 1.4 reduces work across several rendering stages: App Router layouts run once per request, prefetching dynamic routes no longer renders the entire page, and the chunks needed for hydration can compile in the background in recent Chrome. On the Hacker News benchmark, the author reports 31.1 ms of CPU per request, versus 54.4 ms in 1.3 and 33.7 ms for Next.js. The release also keeps cached HTML and RSC payload generation in sync. Results still depend on the workload: on a content-site prototype, Next.js paints sooner and uses less CPU per request. A TanStack Redact test shows another trade-off: less JavaScript to download, but substantially more expensive hydration on content-heavy pages.Fri, 30 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/VoW3Vlu1ZaFTUg9z_image-0.png?auto=format,compress" alt="Visual for the Vinext 1.4 post, showing its title, a summary of the changes, and the October 28, 2026 date." width="1200" height="630" /></p><p>Vinext 1.4 reduces work across several rendering stages: App Router layouts run once per request, prefetching dynamic routes no longer renders the entire page, and the chunks needed for hydration can compile in the background in recent Chrome. On the Hacker News benchmark, the author reports 31.1 ms of CPU per request, versus 54.4 ms in 1.3 and 33.7 ms for Next.js.</p> <p>The release also keeps cached HTML and RSC payload generation in sync. Results still depend on the workload: on a content-site prototype, Next.js paints sooner and uses less CPU per request. A TanStack Redact test shows another trade-off: less JavaScript to download, but substantially more expensive hydration on content-heavy pages.</p><p><a href="https://vinext.dev/blog/vinext-1-4">Open original link</a></p>Visual for the Vinext 1.4 post, showing its title, a summary of the changes, and the October 28, 2026 date.VinextNext.jsWeb PerformanceHydrationPrefetchinghttps://sebastien.rigaux.be/en/tech-watch/links/tanstack-ai-10-stabilizes-its-core-the-agent-harness-remains-experimentalhttps://sebastien.rigaux.be/en/tech-watch/links/tanstack-ai-10-stabilizes-its-core-the-agent-harness-remains-experimentalTanStack AI 1.0 stabilizes its core APIs for combining chat, tools, media, and integrations across multiple providers and UI frameworks. Tree-shakable adapters and end-to-end tests using deterministic fixtures check the flows without live model calls. The agent harness adds durable sessions, interrupts, and background work, but remains 0.x and may change in minor releases. Upgrading requires moving the stable packages together and supplying a threadId explicitly; passing the type check does not migrate persisted conversations or files.Fri, 30 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/WLRRw7i7xhI86EPe_image-0.jpg?auto=format,compress" alt="TanStack AI 1.0 graphic with TanStack logos, the text “AI building blocks for TypeScript,” and a palm tree against a gradient background." width="1920" height="1080" /></p><p>TanStack AI 1.0 stabilizes its core APIs for combining chat, tools, media, and integrations across multiple providers and UI frameworks. Tree-shakable adapters and end-to-end tests using deterministic fixtures check the flows without live model calls.</p> <p>The agent harness adds durable sessions, interrupts, and background work, but remains 0.x and may change in minor releases. Upgrading requires moving the stable packages together and supplying a <code>threadId</code> explicitly; passing the type check does not migrate persisted conversations or files.</p><p><a href="https://tanstack.com/blog/tanstack-ai-1-0">Open original link</a></p>TanStack AI 1.0 graphic with TanStack logos, the text “AI building blocks for TypeScript,” and a palm tree against a gradient background.TanStack AILLMsAI AgentsTypeScriptTestinghttps://sebastien.rigaux.be/en/tech-watch/links/tanstack-redact-trims-reacts-browser-runtimehttps://sebastien.rigaux.be/en/tech-watch/links/tanstack-redact-trims-reacts-browser-runtimeTanStack Redact 0.2.0 replaces React and React DOM in the browser without changing application code. Its stable integrations support TanStack Start, Vite, Vinext, and Next.js; with the latter two, React still handles server rendering while Redact takes over hydration and client rendering. TanStack’s measurements show bundle reductions from 20.4% to 70.5% across its reference apps, but actual savings vary by project. The tradeoff is explicit: Redact renders synchronously, without React’s time slicing or interruptible rendering. A heavy render can therefore delay input, so compatibility and the busiest screens should be checked in each application.Thu, 29 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/VmfoXPThQXMAljxd_image-0.jpg?auto=format,compress" alt="TanStack Redact graphic reading “Your React app. Less JavaScript.” with logos for TanStack Start, Vite, Vinext, and Next.js." width="1200" height="630" /></p><p>TanStack Redact 0.2.0 replaces React and React DOM in the browser without changing application code. Its stable integrations support TanStack Start, Vite, Vinext, and Next.js; with the latter two, React still handles server rendering while Redact takes over hydration and client rendering.</p> <p>TanStack’s measurements show bundle reductions from 20.4% to 70.5% across its reference apps, but actual savings vary by project. The tradeoff is explicit: Redact renders synchronously, without React’s time slicing or interruptible rendering. A heavy render can therefore delay input, so compatibility and the busiest screens should be checked in each application.</p><p><a href="https://tanstack.com/blog/introducing-tanstack-redact?ck_subscriber_id=2550494205&amp;utm_source=convertkit&amp;utm_medium=email&amp;utm_campaign=%E2%9A%9B%EF%B8%8F%20This%20Week%20In%20React%20%23303%3A%20TanStack%2C%20Next.js%2C%20Vinext%2C%20Motion%2C%20React%20Hook%20Form%20%7C%20Expo%20Desktop%2C%20Legend%20Spark%2C%20Nitro%2C%20Exact%2C%20Skia%2C%20Screens%2C%20Unistyles%20%7C%20Node.js%2C%20Bun%2C%20SWC%2C%20Content%20Mappers%2C%20pnpm%2C%20Biome%20-%2023928066">Open original link</a></p>TanStack Redact graphic reading “Your React app. Less JavaScript.” with logos for TanStack Start, Vite, Vinext, and Next.js.TanStack RedactReactHydrationWeb Performancehttps://sebastien.rigaux.be/en/tech-watch/links/opnform-open-source-forms-for-cloud-or-self-hosted-deploymentshttps://sebastien.rigaux.be/en/tech-watch/links/opnform-open-source-forms-for-cloud-or-self-hosted-deploymentsOpnForm is an open-source form builder available as both a managed cloud service and a self-hosted application. Its repository documents practical operational details: bundle-size limits, PostgreSQL index migrations that keep writes available, isolated Docker environments for worktrees, and dependency security checks. It also provides an MCP server that lets AI agents create and preview drafts, with versioned previews that support restoring earlier revisions.Thu, 29 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/2LIDtYs1BVosHHc__image-0.png?auto=format,compress" alt="OpnForm logo on a light background, with the tagline “The open-source form builder”." width="1200" height="675" /></p><p>OpnForm is an open-source form builder available as both a managed cloud service and a self-hosted application. Its repository documents practical operational details: bundle-size limits, PostgreSQL index migrations that keep writes available, isolated Docker environments for worktrees, and dependency security checks. It also provides an MCP server that lets AI agents create and preview drafts, with versioned previews that support restoring earlier revisions.</p><p><a href="https://github.com/OpnForm/OpnForm">Open original link</a></p>OpnForm logo on a light background, with the tagline “The open-source form builder”.FormsSelf-hostingOpen SourceMCPhttps://sebastien.rigaux.be/en/tech-watch/links/redact-a-smaller-react-runtime-with-synchronous-renderinghttps://sebastien.rigaux.be/en/tech-watch/links/redact-a-smaller-react-runtime-with-synchronous-renderingTanner Linsley’s AI-driven React projection experiment has become a TanStack project used in production. Redact is a smaller, React-compatible runtime that already works with Start, Next.js, Vinext, and Vite. On the server, React still handles SSR and Server Components. The tradeoff is in rendering: Redact renders synchronously, without React’s time slicing. As the blog post acknowledges, a heavy render can still delay input. The smaller runtime therefore comes with a constraint worth considering for interfaces that need to remain responsive under load.Thu, 29 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/NfJa-Z3e60CZByow_image-0.png?auto=format,compress" alt="GitHub preview of the shader-effects-inc/shaders repository, described as a WebGPU component library for React, Vue, Svelte, Solid, JavaScript, and Framer." width="1200" height="600" /></p><p>Tanner Linsley’s AI-driven React projection experiment has become a TanStack project used in production. Redact is a smaller, React-compatible runtime that already works with Start, Next.js, Vinext, and Vite. On the server, React still handles SSR and Server Components.</p> <p>The tradeoff is in rendering: Redact renders synchronously, without React’s time slicing. As the blog post acknowledges, a heavy render can still delay input. The smaller runtime therefore comes with a constraint worth considering for interfaces that need to remain responsive under load.</p><p><a href="https://github.com/shader-effects-inc/shaders">Open original link</a></p>GitHub preview of the shader-effects-inc/shaders repository, described as a WebGPU component library for React, Vue, Svelte, Solid, JavaScript, and Framer.TanStack RedactReactWeb PerformanceSSRhttps://sebastien.rigaux.be/en/tech-watch/links/webcheck-inspect-the-public-signals-a-website-exposeshttps://sebastien.rigaux.be/en/tech-watch/links/webcheck-inspect-the-public-signals-a-website-exposesWebCheck brings publicly exposed domain information into one interface: DNS, TLS certificates, HTTP headers, subdomains, detected technologies, and potential threat-list matches. It offers 44 checks and can also examine redirects, trackers, and email configuration. The results provide a useful starting point for surface-level checks, not a substitute for a thorough audit: some data, such as vulnerabilities linked by Shodan, depends on external sources. The project is open source, can be self-hosted, and provides an API.Thu, 29 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/R77N_VHqf9Zrt_l7_image-0.png?auto=format,compress" alt="WebCheck banner with the project name in green, the text “On-demand OSINT tool for exploring website data,” and a globe icon protected by a shield." width="1280" height="640" /></p><p>WebCheck brings publicly exposed domain information into one interface: DNS, TLS certificates, HTTP headers, subdomains, detected technologies, and potential threat-list matches. It offers <strong>44 checks</strong> and can also examine redirects, trackers, and email configuration.</p> <p>The results provide a useful starting point for surface-level checks, not a substitute for a thorough audit: some data, such as vulnerabilities linked by Shodan, depends on external sources. The project is open source, can be self-hosted, and provides an API.</p><p><a href="https://web-check.xyz/">Open original link</a></p>WebCheck banner with the project name in green, the text “On-demand OSINT tool for exploring website data,” and a globe icon protected by a shield.SecuritySelf-hostingOpen Sourcehttps://sebastien.rigaux.be/en/tech-watch/links/rag-anything-handling-charts-in-multimodal-documentshttps://sebastien.rigaux.be/en/tech-watch/links/rag-anything-handling-charts-in-multimodal-documentsRAG-Anything is a framework built on LightRAG for indexing and querying documents that mix text, images, tables, equations, and charts. It coordinates parsing and content analysis in a single multimodal pipeline. The project combines vector similarity with a knowledge graph, provides processors for different content types, and can pass retrieved images to a vision model during queries. A recent change also routes rendered charts through the image pipeline while preserving captions and extracted text. To update a previously indexed document, multimodal reprocessing must be explicitly enabled with force_multimodal_reprocess=True.Thu, 29 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/Yb0opRRi9ZimdNWl_image-0.png?auto=format,compress" alt="GitHub preview of the HKUDS/RAG-Anything repository, showing the Open DataScience logo and contributor, issue, discussion, star, and fork counts." width="1200" height="600" /></p><p>RAG-Anything is a framework built on LightRAG for indexing and querying documents that mix text, images, tables, equations, and charts. It coordinates parsing and content analysis in a single multimodal pipeline.</p> <p>The project combines vector similarity with a knowledge graph, provides processors for different content types, and can pass retrieved images to a vision model during queries. A recent change also routes rendered charts through the image pipeline while preserving captions and extracted text. To update a previously indexed document, multimodal reprocessing must be explicitly enabled with <code>force_multimodal_reprocess=True</code>.</p><p><a href="https://github.com/HKUDS/RAG-Anything">Open original link</a></p>GitHub preview of the HKUDS/RAG-Anything repository, showing the Open DataScience logo and contributor, issue, discussion, star, and fork counts.RAGVector searchKnowledge graphsDocument managementhttps://sebastien.rigaux.be/en/tech-watch/links/microkit-54-react-css-and-tailwind-microinteractions-to-copyhttps://sebastien.rigaux.be/en/tech-watch/links/microkit-54-react-css-and-tailwind-microinteractions-to-copyMicroKit collects copy-ready interactions—animated buttons, tabs, inputs and hover effects—with React or CSS and Tailwind variants. Each component is copied separately in JavaScript or TypeScript, with no package to install; 26 of the 54 have no dependencies, while 28 use lucide-react. The code is MIT-licensed, and Tailwind variants are designed for versions 3 and 4. In the Next.js App Router, most components work in server components; those using state, refs or event handlers need « use client ».Thu, 29 Oct 2026 00:00:00 GMT<p><img src="https://images.prismic.io/bd7d5fa0/mMYhzXU28q2z9KG7_image-0.png?auto=format,compress" alt="MicroKit UI graphic on a black background, showing the text “Microinteractions worth copying” beside concentric orange rounded squares." width="1200" height="630" /></p><p>MicroKit collects copy-ready interactions—animated buttons, tabs, inputs and hover effects—with React or CSS and Tailwind variants. Each component is copied separately in JavaScript or TypeScript, with no package to install; 26 of the 54 have no dependencies, while 28 use lucide-react.</p> <p>The code is MIT-licensed, and Tailwind variants are designed for versions 3 and 4. In the Next.js App Router, most components work in server components; those using state, refs or event handlers need « use client ».</p><p><a href="https://microkit.co/">Open original link</a></p>MicroKit UI graphic on a black background, showing the text “Microinteractions worth copying” beside concentric orange rounded squares.AnimationReactCSSTailwind CSSUI/UX