Thinking Elixir Podcast

The discussion kicks off with important updates on EEF board elections and key dates for candidacy and voting. There’s buzz around ElixirConf US 2025 and ElixirConf EU with details on the speaker lineup. Gleam's new version is set to enhance software security through better visibility into dependencies. The Elixir Secure Coding Training is finding a stable home with the EEF, promising better guidance for developers. Plus, insights on recent security vulnerabilities in the Ash framework and upcoming Phoenix features keep the excitement going!

Krzysztof Nalepa, a software engineer at Software Mansion and the creator of LiveDebugger, joins the discussion to share insights on debugging LiveView states. He reveals the origins of LiveDebugger and its potential upcoming features. The talk also covers the latest in Phoenix 1.8, including new security enhancements and the exciting concept of ‘scopes’ for better data management. Listeners will appreciate the community-focused initiatives, like the Elixir Secure Coding Training and the importance of collaboration in the development sphere.

Michael Lubas, founder of Paraxial.io, shares deep insights into securing Elixir applications. He delves into the critical elements of conducting security audits and the importance of automated versus manual testing in identifying vulnerabilities. The conversation touches on the latest features of Paraxial's software, emphasizing its integration with CI/CD processes. Lubas also discusses the significance of effective communication in security findings and the rising threats in cybersecurity, offering valuable advice for developers in the Elixir community.

The podcast dives into the controversial integration of DaisyUI into the Phoenix framework, sparking lively community debates. There’s an exploration of the EEF Security Working Group's roadmap aimed at bolstering ecosystem security. Listeners will also discover advancements in Elixir and Erlang tools, including the latest Erlang OTP release and enhancements for faster compilation of dependencies. Plus, the intriguing backstory behind the quirky name 'Goatmire' adds a unique twist to the technical insights shared!

Discover the latest with Plug's dark mode support for debugging, enhancing developer comfort. Learn about co-located hooks to streamline code organization in Phoenix applications. Explore a new RAG library that optimizes AI interactions and document management. Check out Pinchflat, an Elixir-based YouTube downloader, and Autumn, a syntax highlighter that integrates with Markdown. Dive into hardware integration with Phoenix and the new Vite Plus JavaScript toolchain designed to unify development efforts.

News includes a new library called phoenix_sync for real-time sync in Postgres-backed Phoenix applications, Peter Solnica released a Text Parser for extracting structured data from text, a useful tip on finding Hex package versions locally with mix hex.info, Wasmex updated to v0.10 with WebAssembly component support, and Chrome introduces a new browser feature similar to LiveView.JS. We also talked with Alistair Woodman and Jonatan Männchen from the EEF about Jonatan's role as CISO, the Security Working Group, and their work on OpenChain compliance for supply-chain security, Software Bill of Materials (SBoMs), and what these initiatives mean for the Elixir community, and more! Show Notes online - http://podcast.thinkingelixir.com/245 Elixir Community News https://gigalixir.com/thinking – Gigalixir is sponsoring the show, offering 20% off standard tier prices for a year with promo code "Thinking". https://github.com/electric-sql/phoenix_sync – New library called phoenix_sync providing real-time sync for Postgres-backed Phoenix applications. https://hexdocs.pm/phoenix_sync/readme.html – Documentation for phoenix_sync, a solution for building modern, real-time apps with local-first/sync in Elixir. https://github.com/josevalim/sync – José Valim's original proof of concept repo that was promptly archived. https://electric-sql.com/ – Electric SQL's platform that syncs subsets of Postgres data into local apps and services, allowing data to be available offline and in-sync. https://solnic.dev/posts/announcing-textparser-for-elixir/ – Peter Solnica released TextParser, a library for extracting interesting parts of text like hashtags and links. https://hexdocs.pm/text_parser/readme.html – Documentation for the Text Parser library that helps parse text into structured data. https://www.elixirstreams.com/tips/mix-hex-info – Elixir stream tip on using mix hex.info to find the latest package version for a Hex package locally, without needing to search on hex.pm or GitHub. https://github.com/phoenixframework/tailwind/blob/main/README.md#updating-from-tailwind-v3-to-v4 – Guide for upgrading Tailwind to V4 in existing Phoenix applications using Tailwind's automatic upgrade helper. https://gleam.run/news/hello-echo-hello-git/ – Gleam 1.9.0 release with searchability on hexdocs, Echo debug printing for improved debugging, and ability to depend on Git-hosted dependencies. https://d-gate.io/blog/everything-i-was-lied-to-about-node-came-true-with-elixir – Blog post discussing how promises made about NodeJS actually came true with Elixir. https://hexdocs.pm/wasmex/Wasmex.Components.html – Wasmex updated to v0.10 with support for WebAssembly components, enabling applications and components to work together regardless of original programming language. https://ashweekly.substack.com/p/ash-weekly-issue-8 – AshWeekly Issue 8 covering AshOps with mix task capabilities for CRUD operations and BeaconCMS being included in the Ash HQ installer script. https://developer.chrome.com/blog/command-and-commandfor – Chrome update brings new browser feature with commandfor and command attributes, similar to Phoenix LiveView.JS but native to browsers. https://codebeamstockholm.com/ – Code BEAM Lite announced for Stockholm on June 2, 2025 with keynote speaker Björn Gustavsson, the "B" in BEAM. https://alchemyconf.com/ – AlchemyConf coming up March 31-April 3 in Braga, Portugal. Use discount code THINKINGELIXIR for 10% off. https://www.gigcityelixir.com/ – GigCity Elixir and NervesConf on May 8-10, 2025 in Chattanooga, TN, USA. https://www.elixirconf.eu/ – ElixirConf EU on May 15-16, 2025 in Kraków & Virtual. https://goatmire.com/#tickets – Goatmire tickets are on sale now for the conference on September 10-12, 2025 in Varberg, Sweden. Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com Discussion Resources https://elixir-lang.org/blog/2025/02/26/elixir-openchain-certification/ https://cna.erlef.org/ – EEF CVE Numbering Authority https://erlangforums.com/t/security-working-group-minutes/3451/22 https://podcast.thinkingelixir.com/220 – previous interview with Alistair https://digital-strategy.ec.europa.eu/en/policies/cyber-resilience-act – CRA - Cyber Resilience Act https://www.cisa.gov/ – CISA US Government Agency https://www.cisa.gov/sbom – Software Bill of Materials https://oss-review-toolkit.org/ort/ – Desire to integrate with tooling outside the Elixir ecosystem like OSS Review Toolkit https://github.com/voltone/rebar3_sbom https://cve.mitre.org/ https://openssf.org/projects/guac/ https://erlef.github.io/security-wg/security_vulnerability_disclosure/ – EEF Security WG Vulnerability Disclosure Guide Guest Information https://x.com/maennchen_ – Jonatan on Twitter/X https://bsky.app/profile/maennchen.dev – Jonatan on Bluesky https://github.com/maennchen/ – Jonatan on Github https://maennchen.dev – Jonatan's Blog https://www.linkedin.com/in/alistair-woodman-51934433 – Alistair Woodman on LinkedIn awoodman@erlef.org https://github.com/ahw59/ – Alistair on Github http://erlef.org/ – Erlang Ecosystem Foundation Website Find us online Message the show - Bluesky Message the show - X Message the show on Fediverse - @ThinkingElixir@genserver.social Email the show - show@thinkingelixir.com Mark Ericksen on X - @brainlid Mark Ericksen on Bluesky - @brainlid.bsky.social Mark Ericksen on Fediverse - @brainlid@genserver.social David Bernheisel on Bluesky - @david.bernheisel.com David Bernheisel on Fediverse - @dbern@genserver.social Sponsored By:Gigalixir: Today’s Thinking Elixir show is brought to you by our friends at Gigalixir, the premier deployment platform for Elixir and Phoenix projects. Use the promo code “Thinking” during signup to get 20% off the standard tier prices for an entire year. Or, visit https://gigalixir.com/thinking to sign up and get 20% off your first year. Promo Code: Thinking

News includes the release of Elixir 1.18.2 with various enhancements and bug fixes, a new experimental SQL sigil for Ecto that brings automatic parameterized queries, a recent GOTO 2025 talk featuring Saša Jurić on code reviews. We talked with Jonatan Kłosko about his work on PythonX, a new library for executing Python code inside Elixir, the Fine library for working with C++ NIFs, and much more! Show Notes online - http://podcast.thinkingelixir.com/244 Elixir Community News https://gigalixir.com/thinking – Visit Gigalixir.com to sign up and get 20% off your first year. Or use the promo code "Thinking" during signup. https://github.com/elixir-lang/elixir/releases/tag/v1.18.2 – Elixir 1.18.2 was released with enhancements to Code.Fragment and Regex, plus bug fixes for CLI, ExUnit, IEx.Autocomplete, and mix deps.update. https://github.com/elixir-lang/elixir/releases/tag/v1.18.1 – Elixir 1.18.1 included bug fixes for Kernel, ExUnit.Case, mix compile.elixir, mix escript.build, and Mix.Shell, especially related to error handling and Windows compatibility. https://www.erlang.org/news/174 – Erlang OTP 28 RC-1 is out with a new source Software Bill of Materials (SBOM) on the Github Releases page. https://github.com/elixir-dbvisor/sql – A new experimental SQL sigil for Ecto brings an extensible SQL parser to Elixir with automatic parameterized queries. https://groups.google.com/g/elixir-ecto/c/8MOkRFAdLZc – The experimental SQL sigil for Ecto is being discussed on the Elixir-Ecto mailing list. https://www.youtube.com/watch?v=AYUNI2Pm6_w – New talk from GOTO 2025 with Saša Jurić and Adrienne Braganza Tacke on "Small PRs, Big Impact - The Art of Code Reviews." https://alchemyconf.com/ – AlchemyConf is coming up March 31 - April 3 in Braga, Portugal. https://www.gigcityelixir.com/ – GigCity Elixir and NervesConf are happening in Chattanooga, TN, USA with NervesConf on May 8 and the main event on May 9-10. https://www.elixirconf.eu/ – ElixirConf EU will be held May 15-16, 2025 in Kraków & Virtual. https://goatmire.com/#tickets – Goatmire tickets are on sale now for the event happening September 10-12, 2025 in Varberg, Sweden. Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com Discussion Resources https://dashbit.co/blog/dashbit-plans-2025 https://github.com/thewca/wca-live – Speed cubing software https://dashbit.co/blog/running-python-in-elixir-its-fine https://hexdocs.pm/pythonx/Pythonx.html https://github.com/livebook-dev/pythonx https://bsky.app/profile/josevalim.bsky.social/post/3liyrfvlth22c – Jose said “We said we will focus on interoperability for 2025 and we are ready to share the first results.” https://github.com/elixir-nx/fine – “Fine” is a new package related to the elixir-nx organization. It's a C++ library enabling more ergonomic NIFs, tailored to Elixir. https://peps.python.org/pep-0703/ – Discussion about removing the Python GIL Find us online Message the show - Bluesky Message the show - X Message the show on Fediverse - @ThinkingElixir@genserver.social Email the show - show@thinkingelixir.com Mark Ericksen on X - @brainlid Mark Ericksen on Bluesky - @brainlid.bsky.social Mark Ericksen on Fediverse - @brainlid@genserver.social David Bernheisel on Bluesky - @david.bernheisel.com David Bernheisel on Fediverse - @dbern@genserver.social Sponsored By:Gigalixir: Today’s Thinking Elixir show is brought to you by our friends at Gigalixir, the premier deployment platform for Elixir and Phoenix projects. Use the promo code “Thinking” during signup to get 20% off the standard tier prices for an entire year. Or, visit https://gigalixir.com/thinking to sign up and get 20% off your first year. Promo Code: Thinking

Kimberly Erni, an Elixir developer with extensive experience in the job market, shares vital insights for job seekers. She discusses the evolving tech landscape, emphasizing the challenges for junior and mid-level developers amidst economic shifts. Kimberly offers practical networking and resume strategies while highlighting the importance of hiring junior talent for fostering growth. The conversation also touches on the integration of AI in development, making this an essential listen for anyone navigating today's job market.

News includes exciting updates to Phoenix gen_auth with magic links and sudo mode security features, a comprehensive guide on Elixir and Phoenix security best practices from Paraxial.io, significant updates to the DaisyUI Components library for Phoenix LiveView reaching version 0.7.0, more on LiveDebugger tool for Phoenix applications, performance improvements in PostgreSQL's self-join handling, and more! Show Notes online - http://podcast.thinkingelixir.com/242 Elixir Community News https://gigalixir.com/thinking – Visit to sign up and get 20% off your first year. Or use the promo code "Thinking" during signup. https://github.com/phoenixframework/phoenix/pull/6081 – Phoenix gen_auth is adding support for magic links (passwordless login) and sudo mode for sensitive operations. https://elixirstream.dev/gendiff – Additional resource for Phoenix gen_auth updates. https://github.com/9elements/hex-mcp – New Model Context Protocol server providing real-time Hex package version information for AI tools like Cursor. https://paraxial.io/blog/elixir-best – Michael Lubas shares 11 best practices for security in Elixir and Phoenix applications. https://elixirstatus.com/p/7bQOj-daisyuicomponents---a-phoenix-liveview--daisyui-library – DaisyUI Components library for Phoenix LiveView updated to version 0.7.0. https://github.com/phcurado/daisy_ui_components – GitHub repository for DaisyUI Components, featuring over 30 pre-styled components. https://daisy-ui-components-site.fly.dev/storybook/welcome – Interactive Storybook for exploring DaisyUI Components. https://github.com/phcurado/daisy_ui_components/blob/main/CHANGELOG.md – Changelog showing recent updates to DaisyUI Components. https://github.com/software-mansion-labs/live-debugger – LiveDebugger tool for Phoenix LiveView applications, providing insights into LiveViews, components, and state transitions. https://www.phoronix.com/news/PostgreSQL-Self-Join-Eliminate – Postgres adds optimization for self-joins, improving query performance. https://www.lambdadays.org/lambdadays2025 – Lambda Days conference tickets on sale, happening June 12-13 in Kraków, Poland, focusing on functional programming. https://alchemyconf.com/ – Alchemy Conf happening April 2-3 in Braga, Portugal with 10% discount code "THINKINGELIXIR". https://membrz.club/alchemyconf/events – Direct link for purchasing Alchemy Conf tickets. Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com Find us online Message the show - Bluesky Message the show - X Message the show on Fediverse - @ThinkingElixir@genserver.social Email the show - show@thinkingelixir.com Mark Ericksen on X - @brainlid Mark Ericksen on Bluesky - @brainlid.bsky.social Mark Ericksen on Fediverse - @brainlid@genserver.social David Bernheisel on Bluesky - @david.bernheisel.com David Bernheisel on Fediverse - @dbern@genserver.social Sponsored By:Gigalixir: Today’s Thinking Elixir show is brought to you by our friends at Gigalixir, the premier deployment platform for Elixir and Phoenix projects. Use the promo code “Thinking” during signup to get 20% off the standard tier prices for an entire year. Or, visit https://gigalixir.com/thinking to sign up and get 20% off your first year. Promo Code: Thinking

Tim Knight, CTO of Gigalixir, shares his insights on the evolution of deployment for Elixir applications. He discusses the new LiveDebugger tool, enhancing debugging for Phoenix LiveView apps. Tim also dives into Gigalixir's features, focusing on easy application management and scalability. He emphasizes the significance of comprehensive cloud services and the unique customer support philosophy aimed at Elixir developers. The conversation covers exciting new tools and strategies that make the Elixir development experience more robust and user-friendly.