search
API design
Trends
- 1GhostAction campaign plants credential-stealing workflows across thousands of GitHub reposā¼ā ļø CRITICAL: Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories The GhostAction c
A campaign dubbed GhostAction is compromising GitHub maintainer accounts and injecting malicious Actions workflows into tens of thousands of repositories. The injected workflows are designed to steal secrets such as API keys, tokens, and other credentials from the affected projects. Security researchers are urging maintainers to audit their workflow files, rotate exposed secrets, and review repository permissions, as the malicious code can run automatically in CI environments where sensitive tokens are routinely available.
- 2Developer shares progress on Rust query system with new proc macrosāMy query system is coming together really nicely, but I forgot to post about it! Two massive updates: I wrote some proc
A developer working on a query system has announced two major updates after a posting lapse. The main news is the addition of procedural macros, written in a few hours, which redesigned the API to look much more like Salsa, the incremental computation framework used in the Rust compiler. The work appears to be part of an ongoing personal compiler or language tooling project.
- 3AI agent paid an invoice twice due to retry bugāThe agent paid the invoice once. Then the model regenerated the tool call for a retry, kept the same... # ai # security
An AI agent paid an invoice once, then on retry regenerated the tool call while keeping the same idempotency key but with different arguments, causing concern about duplicate or mismatched payments. Developers are highlighting that systems should refuse a request when a reused idempotency key arrives with changed parameters, a lesson in safely designing API retries for autonomous software agents.
- 4Open-source AI Agent Gateway keeps credentials out of agent configsā¼AI Agent Gateway: Open-source tool keeps credentials out of agent configs
A new open-source tool called AI Agent Gateway has been released, designed to keep credentials out of AI agent configurations. Instead of embedding API keys and secrets directly in agent setup files, the gateway manages authentication separately, reducing the risk of credential leaks. It targets developers building AI agents, a growing area where insecure handling of secrets is a common concern.
- 5Why the Pendulum library built Python's strangest plus operatorāWhy Pendulum had to write the most cursed "+" operator in all of Python
Developer Arie Bovenberg has published a detailed post explaining why Pendulum, a popular Python date and time library, implements an unusual override of the plus operator. The writeup walks through the technical constraints that forced the library's custom handling of datetime arithmetic, and it has drawn attention from Python developers interested in API design quirks.
- 6Open-Source AI System CosmicWatch Analyzes Astronomical Radio SignalsāWe built CosmicWatch, an open-source AI system that analyzes astronomical radio-signal data and... # ai # programming #
A team has built CosmicWatch, an open-source AI system designed to analyze astronomical radio-signal data and flag unusual signals. The project is presented as an open observatory for radio astronomy, with its code, API and development process shared publicly to invite community contributions and broader participation in the search for anomalies in cosmic radio data.
- 7Developer publishes a rant about APIsāA rant about APIs https://dev.clintonblackburn.com/2026/10/08/a-rant-about-apis.html # API # Development # Programming
A developer has published a blog post titled 'A rant about APIs' on his personal site, criticizing aspects of API design and development. The piece, tagged under API, Development and Programming, is being shared and discussed by programmers on tech link-sharing communities.
- 8New bot shares random Smithsonian museum items onlineāHi! Iām a bot posting random art/design/museum items via the Smithsonian's API. [Content warning for possible nudity. So
A new automated account is posting randomly selected art, design and museum objects drawn from the Smithsonian's open API, introducing itself to users with a note about content warnings. The bot flags possible nudity and historically insensitive depictions of people of colour or people with disabilities, promising quick fixes if users report problems, and says it aims to include descriptive alt text for accessibility.
Repos
- debpalash/VoiceStudio VoiceStudio is the open-source, fully-local ElevenLabs alternative ā voice cloning, voice design, video dubbing, dictati
- cloudflare/cf The agentic CLI for the entire Cloudflare API
- rgodha24/walgithub walgit with a GitHub Enterprise Server facade ā git over smart HTTP from an object-store bucket