Changelog Master Feed

Welcome to Song Encoder, a special series of The Changelog podcast featuring people who create at the intersection of software and music. This episode features Pwnie Award-winning songwriter Forrest Brazeal. Join the discussionChangelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!Sponsors:Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com Changelog++ – You love our content and you want to take it to the next level by showing your support. We’ll take you closer to the metal with no ads, extended episodes, outtakes, bonus content, a deep discount in our merch store (soon), and more to come. Let’s do this! Featuring:Forrest Brazeal – Website, GitHub, XJerod Santo – GitHub, LinkedIn, Mastodon, XShow Notes: 168 AWS Services in 2 minutes The Ransomware Song That Sinking Feeling (The #HugOps Song) Serverless v Containers Look At You Now (The Google Cloud Song) Kingston Trio-Merry Minuet Big Tech ((It’s Probably Fine)) The AWS Elastic Load Balancer Yodel Rag Song Encoder: $STDOUT Something missing or broken? PRs welcome!

Tobie Langel, Open source strategist and Principal at UnlockOpen, joins Chris, Feross, and Amal to discuss recent widespread incidents affecting the JavaScript community (and breaking CI builds) around the globe. Two widely used npm libraries were self-sabotaged by their single maintainer, yet again, highlighting the many gaps in our OSS supply chain security, sustainability and overall practices. We explore all these topics and solution on what our ecosystem needs to be more resilient to these types of attacks in the future. Join the discussionChangelog++ members save 3 minutes on this episode because they made the ads disappear. Join today!Sponsors:Sentry – Working code means happy customers. That’s exactly why teams choose Sentry. From error tracking to performance monitoring, Sentry helps teams see what actually matters, resolve problems quicker, and learn continuously about their applications - from the frontend to the backend. Use the code CHANGELOG and get the team plan free for three months. Changelog++ – You love our content and you want to take it to the next level by showing your support. We’ll take you closer to the metal with no ads, extended episodes, outtakes, bonus content, a deep discount in our merch store (soon), and more to come. Let’s do this! Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com Featuring:Tobie Langel – Website, GitHub, XAmal Hussein – GitHub, XFeross Aboukhadijeh – Website, GitHub, XChristopher Hiller – Website, GitHub, Mastodon, XShow Notes: Open source developer corrupts widely-used libraries, affecting tons of projects - The Verge Tobie’s tweet thread on this self-sabotage Tobie’s talk on OSS Sustainability Working in Public | A book by Nadia Eghbal Four types of OSS projects mentioned in Nadia’s book Renovate | A Dependency Management Bot Dependabot | Another OSS Dependency Bot Sustain OSS | A space for conversations about sustaining open source Tidelift SBOM - Software Bill of Materials (official US Government Site & Docs) Software Bill of Materials’ — Not just good for security, good for business | The Hill Executive Order on Improving the Nation’s Cybersecurity Tidelift’s SBOM generation service Popular NPM package UA-Parser-JS poisoned with cryptomining, password-stealing malware | The Daily Swig Roads and Bridges: The Unseen Labor Behind Our Digital Infrastructure / Ford Foundation Socket (Security project that Feross is working on) Does open source need its own Priority of Constituencies? Unlock Open who accused me of co-founding npm Something missing or broken? PRs welcome!

This week Adam is joined by Christine Yen, co-founder and CEO of Honeycomb. Christine and Adam recorded this show late last year, just after their Series C funding round. They talk about the superpower of observability for developers, how she and Charity Majors got to the place to found Honeycomb, the state of their platform today, what exactly observability is, and their goals for the future of Honeycomb. Join the discussionChangelog++ members save 6 minutes on this episode because they made the ads disappear. Join today!Sponsors:WorkOS – A platform that gives developers a set of building blocks for quickly adding enterprise-ready features to their application. Add Single Sign-On (Okta, Azure, Google, Microsoft OAuth), sync users from any SCIM directory, HRIS integration, audit trails (SIEM), free magic link sign-in. WorkOS is designed for developers and offers a single, elegant interface that abstracts dozens of enterprise integrations. Learn more and get started at WorkOS.com Rewatch – Rewatch gives product and engineering teams async superpowers and helps them move faster with greater clarity. Imagine all of your team’s videos, all in one place. Record, organize, and share the videos that your team needs to ship great work. Get started for free with 14-day trial at rewatch.com. FireHydrant – The reliability platform for every developer. Incidents impact everyone, not just SREs. FireHydrant gives teams the tools to maintain service catalogs, respond to incidents, communicate through status pages, and learn with retrospectives. Try FireHydrant free for 14 days at firehydrant.io Gitpod – Spin up fresh, ephemeral automated dev environments, in the cloud, in seconds. Their free tier is open to every developer with a GitLab, GitHub, and/or Bitbucket account. Learn more at gitpod.io Featuring:Christine Yen – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XShow Notes: How Honeycomb Is Using $50M in New Funding to Bring Observability to All The Changelog #356: Observability is for your unknown unknowns with Christine Yen 2020: The Year Bee-hind Us Something missing or broken? PRs welcome!

One of the most common questions we receive at Go Time is how to handle schema migrations in Go. In this episode Jon is joined by Mike Fridman and Vojtech Vitek, maintainers of the popular schema migration tool pressly/goose, to discuss techniques, tools, and tips for handling schema migrations. Join the discussionChangelog++ members get a bonus 16 minutes at the end of this episode and zero ads. Join today!Sponsors:GitLab – The DevOps platform that empowers organizations to maximize the overall return on software development by delivering software faster, more efficiently, while strengthening security and compliance. Identify and address blockers immediately, focus on delivering value — not maintaining integrations, automate security and compliance. Get started with their free tier (no credit card required). Learn more at about.gitlab.com/solutions/devops-platform Changelog++ – You love our content and you want to take it to the next level by showing your support. We’ll take you closer to the metal with no ads, extended episodes, outtakes, bonus content, a deep discount in our merch store (soon), and more to come. Let’s do this! Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com Featuring:Mike Fridman – Website, GitHub, XVojtech Vitek – GitHub, XJon Calhoun – Website, GitHub, XShow Notes: goose migrate squirrel Something missing or broken? PRs welcome!

Vincent Ambo –the person behind nixery.dev, tvl.fyi, and a former Google engineer– shares his take on monorepos, Nix, and fully declarative systems without any Flux, Argo or Kubernetes. While the tooling is impressive, it’s the principles behind it that captivated Gerhard’s imagination. Vincent has a rather interesting take on the monorepository idea, including one change - one version - one deploy. There are a lot of interesting links in the show notes, including all the code that Vincent uses to manage infrastructure. As a result of this conversation, Gerhard is running Nix on one of his Macs, and also started experimenting with his first NixOS production instance. Join the discussionChangelog++ members save 6 minutes on this episode because they made the ads disappear. Join today!Sponsors:Shortcut – The first project management platform for software development that brings every team across the org together to build better products. More than 10,000 companies from all over the world use Shortcut to plan, collaborate, and build better software together. FireHydrant – The reliability platform for every developer. Incidents impact everyone, not just SREs. FireHydrant gives teams the tools to maintain service catalogs, respond to incidents, communicate through status pages, and learn with retrospectives. Try FireHydrant free for 14 days at firehydrant.io MongoDB – An integrated suite of cloud database and services — They have a FREE forever tier, so you can prove to yourself and to your team that they have everything you need. Check it out today at mongodb.com/changelog GitLab – The DevOps platform that empowers organizations to maximize the overall return on software development by delivering software faster, more efficiently, while strengthening security and compliance. Identify and address blockers immediately, focus on delivering value — not maintaining integrations, automate security and compliance. Get started with their free tier (no credit card required). Learn more at about.gitlab.com/solutions/devops-platform Featuring:Vincent Ambo – Website, GitHub, LinkedInGerhard Lazu – Website, GitHub, LinkedIn, XShow Notes: Nixery - just-in-time container images via the Nix package manager Nixery: Improved Layering Design Nix, The One Pager - (more or less) one page introduction to Nix, the language NixOS - Reproducible builds and deployments Tvix: We are rewriting Nix Feature Request: Bring nix builds to buildkit buildGo - an alternative Nix build system for Go The Virus Lounge - TVL - build systems and monorepo socialising in the year of the pandemic TVL Code Reviews TVL Monorepo - Gerrit Just One Single History - JOSH - combines the advantages of monorepos with those of multirepos 🗂One Minute Presubmits - Eric Burnett, Google - London Build Meetup 2019 Trustix: Solving trust in binary distribution and software builds Trustix: Distributed trust and reproducibility tracking for binary caches Something missing or broken? PRs welcome!

From drug discovery at the Quebec AI Institute to improving capabilities with low-resourced languages at the Masakhane Research Foundation and Google AI, Bonaventure Dossou looks for opportunities to use his expertise in natural language processing to improve the world - and especially to help his homeland in the Benin Republic in Africa. Join the discussionChangelog++ members save 3 minutes on this episode because they made the ads disappear. Join today!Sponsors:Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com Changelog++ – You love our content and you want to take it to the next level by showing your support. We’ll take you closer to the metal with no ads, extended episodes, outtakes, bonus content, a deep discount in our merch store (soon), and more to come. Let’s do this! Featuring:Bonaventure Dossou – Website, GitHub, LinkedIn, XChris Benson – Website, GitHub, LinkedIn, XNatalie Pistunovich – GitHub, XShow Notes: Bonaventure Dossou | Instagram 2020 — ongoing: My Year of Fame and how I joined the world of Research Something missing or broken? PRs welcome!

This week Paul Copplestone, CEO of Supabase joined us to catch us up on the next big thing happening in the world of Postgres. Supabase might be best known as “the open source Firebase alternative,” a tagline they might be reluctant to maintain. But from Adam’s perspective, he’s never been more excited about what they’re bringing to market for Postgres fans. In the last year, Supabase has gone from 0 to more than 80,000 databases on their platform — and they’re still in beta…and it’s open source. Hopefully today’s show sheds some light on why everyone is talking about Supabase. Join the discussionChangelog++ members save 5 minutes on this episode because they made the ads disappear. Join today!Sponsors:Sentry – Working code means happy customers. That’s exactly why teams choose Sentry. From error tracking to performance monitoring, Sentry helps teams see what actually matters, resolve problems quicker, and learn continuously about their applications - from the frontend to the backend. Use the code CHANGELOG and get the team plan free for three months. FireHydrant – The reliability platform for every developer. Incidents impact everyone, not just SREs. FireHydrant gives teams the tools to maintain service catalogs, respond to incidents, communicate through status pages, and learn with retrospectives. Try FireHydrant free for 14 days at firehydrant.io Subspace – Network-as-a-Service that helps developers accelerate real-time applications for hundreds of millions of users worldwide. When every millisecond counts, Subspace gives you the fastest, most reliable network to route your traffic through. And it all works via a global IP proxy that sets up using a simple API. Learn more and get started for free at subspace.com/changelog MongoDB – An integrated suite of cloud database and services — They have a FREE forever tier, so you can prove to yourself and to your team that they have everything you need. Check it out today at mongodb.com/changelog Featuring:Paul Copplestone – Website, GitHub, XAdam Stacoviak – Website, GitHub, LinkedIn, Mastodon, XJerod Santo – GitHub, LinkedIn, Mastodon, XShow Notes: Supabase Supabase docs supabase/supabase Supabase Realtime Tweet: Total databases on the Supabase platform Tweet: In 2021 Supabase grew… The Changelog #461: Fauna is rethinking the database with Evan Weaver postgresql.org Firebase Something missing or broken? PRs welcome!

Cloudflare has a lot more to offer than merely DDoS protection and CDN services. On this episode, Jon Kuperman joins Amal & Jerod to talk through many of their cool new things like Workers, KV, Durable Objects, and R2 Storage. Thanks to listener Matt Mannucci for requesting this episode! Join the discussionChangelog++ members save 4 minutes on this episode because they made the ads disappear. Join today!Sponsors:Raygun – Never miss another mission-critical issue again — Raygun Alerting is now available for Crash Reporting and Real User Monitoring, to make sure you are quickly notified of the errors, crashes, and front-end performance issues that matter most to you and your business. Set thresholds for your alert based on an increase in error count, a spike in load time, or new issues introduced in the latest deployment. Start your free 14-day trial at Raygun.com Changelog++ – You love our content and you want to take it to the next level by showing your support. We’ll take you closer to the metal with no ads, extended episodes, outtakes, bonus content, a deep discount in our merch store (soon), and more to come. Let’s do this! Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com Featuring:Jon Kuperman – Website, GitHub, XAmal Hussein – GitHub, XJerod Santo – GitHub, LinkedIn, Mastodon, XShow Notes: Workers Workers Chat Demo Argo Smart Routing R2 announcement Durable Objects KV Something missing or broken? PRs welcome!

Ildar Iskhakov and Matvey Kukuy, co-founders of Amixr (Grafana OnCall), join a lively discussion on simplifying on-call processes. They share insights on the complexities of being on call, the emotional toll it takes, and the importance of clear communication during incidents. The duo dives into the tech stack that powers their solution, emphasizing operational efficiency with tools like Django and Kubernetes. They also talk about mastering on-call alert notifications and creating customizable incident management tools to empower engineers while minimizing alert fatigue.

Alexey Palazhchenko joins Natalie to discuss the implications of GitHub’s Copilot on code generation. Go’s design lends itself nicely to computer generated authoring: thanks to go fmt, there’s already only one Go style. This means AI-generated code will be consistent and seamless. Its focus on simplicity & readability make it tailor made for this new approach to software creation. Where might this take us? Join the discussionChangelog++ members save 2 minutes on this episode because they made the ads disappear. Join today!Sponsors:GitLab – The DevOps platform that empowers organizations to maximize the overall return on software development by delivering software faster, more efficiently, while strengthening security and compliance. Identify and address blockers immediately, focus on delivering value — not maintaining integrations, automate security and compliance. Get started with their free tier (no credit card required). Learn more at about.gitlab.com/solutions/devops-platform Changelog++ – You love our content and you want to take it to the next level by showing your support. We’ll take you closer to the metal with no ads, extended episodes, outtakes, bonus content, a deep discount in our merch store (soon), and more to come. Let’s do this! Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com Featuring:Alexey Palazhchenko – GitHub, XNatalie Pistunovich – GitHub, XShow Notes: FerretDB OpenAI Codex GitHub Copilot Something missing or broken? PRs welcome!