There is a bug in Claude Code in GitHub Actions that requires MCP servers to be installed beforehand, delaying startup time. The optimal approach would be to install MCP servers in parallel and connect only when needed, but the MCP_TIMEOUT variable is completely ignored.

This is frustrating. Recent releases of Claude Code have also been poor quality. Unbelievable.

https://github.com/anthropics/claude-code/issues/424

#ClaudeCode #Github #GithubActions

🚨 OMG, #npm is like a free-for-all hacker buffet! #Axios got #hijacked faster than a kid in a candy store, dropping RATs like they're hot. šŸ­ But hey, who needs #cybersecurity when you can just update your GitHub Actions? šŸ™„šŸ”’
https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan #GitHubActions #hackernews #HackerNews #ngated
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity

Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.

>> GitHub deletes your traffic logs every 14 days. <<

I built a Ruby dashboard that archives them forever, with custom charts using ruby-libgd.
Open source. Automated. Your metrics, permanently yours.

https://rubystacknews.com/2026/03/30/github-deletes-your-traffic-logs-every-14-days-heres-how-to-stop-that-with-ruby/

#Ruby #GitHubActions #OpenSource #DataVisualization #DevOps

GitHub Deletes Your Traffic Logs Every 14 Days. Here’s How to Stop That with Ruby

GitHub Deletes Your Traffic Logs Every 14 Days. Here’s How to Stop That with Ruby March 30, 2026 Motivation: I didn’t want to lose the metrics for ruby-libgd and libgd-gis. So I built a…

Linking Ruby knowledge from the most remote places in the world.

Are your WordPress plugins GPL compatible?

A little over two months ago I spoke at WordCamp US on the topic of "[u]sing a GitHub Action to ensure your plugins are GPL compatible.ā€ The primary concern was ensuring that WordPress plugins focus on more than just first-party code being properly licensed and expanding that to ensure that all third-party libraries (aka dependencies) are also properly licensed. So that folks don't need to continually check for that in every pull request, using a GitHub Action to help automate the process […]

https://jeffpaul.com/2023/10/are-your-wordpress-plugins-gpl-compatible/

Do you want #OpenTelemetry support in #GitHubActions?

Since GitHub is asking for input on their GitHub Actions roadmap, maybe upvoting https://github.com/orgs/community/discussions/190621#discussioncomment-16358205 will give them a nudge to implement it. šŸ˜„

. @zmk builds on GitHub Actions have always been uploading artifacts as "firmware.zip". It has always been utter annoying to me.

So I wrote a small GitHub Actions workflow to overcome this: It adds built firmware files to the release as separate files, just like QMK does:

https://github.com/Ardakilic/zmk-config/commit/0a04b0106389c2517413cfe9c695939bd17d5cf8

Example release:

https://github.com/Ardakilic/zmk-config/releases/tag/latest

Might be useful for you. It definitely will be for me :)

I wish this was in core ZMK thogh.

#zmk #qmk #mechanicalkeyboard #githubactions

chore: add workflow name to build GitHub Actions configuration Ā· Ardakilic/zmk-config@0a04b01

Contribute to Ardakilic/zmk-config development by creating an account on GitHub.

GitHub

$ echo "True autonomy engineered in the shell."
$ echo "Who is ready for a revolution?"
$ echo "Lets get the Data we deserve!"

System Status:

Core: Stable / 217 Jurisdictions

Workflow: Hardening GH_PAT & ENV

Agentic Bridge: Closing the loop

Deep Dive & Support:
https://www.patreon.com/posts/insight-how-we-154120693?utm_medium=clipboard_copy&utm_source=copyLink&utm_campaign=postshare_creator&utm_content=join_link

#ArchBTW #IT #hiringgap #analsys #GitHubActions #AnarchyInTheShell #ContinuumHQ #Data#Dataengineering #DataScience#agenticworkflow #Grit #Gritlab

I had some free time last year, so I decided to punish myself with learning some #DevOps. I decided to build my own #CI/CD pipeline to automate deploying my website.

It was a lot more work than I anticipated, but I'm getting the time back day by day. The experience also taught me the difference between good #CI/CD and #CI/CD that works.

https://carledwardlyons.ca/articles/devlogs/blank/ci-cd?ref_id=mastodon&ref_source=post

#terraform #docker #github #githubactions #bash #software #blog #devlog

Exploring CI/CD for a Modern (SvelteKit) Web Application

I'm building a new SvelteKit web app to host my weblog. To make it easier, I built a CI/CD pipeline (for the first time). During research and development, I explored containerization, IaC, testing, and observability solutions to learn how to best deliver a modern web app.

The Scraper-Base-Kit is now Private.

After reviewing the velocity of our global ingest, I’ve decided to move the base-kit to the Private Core.

The engine is too fast, the footprint too small.

This thing is like a shotgun that fires once at the world!!!!
We are not just building tools; we are guarding the data.

#ArchLinux #RootCause #IT #hiringgap #analsys #GitHubActions #AnarchyInTheShell #ContinuumHQ #Dataengineering #DataScience#agenticworkflow #SRE #Grit #Gritlab #buildInPublic

0:07! It's midnight!
The Machine is silent, but the Pipeline is Green. 🟢

What started as a day of debugging ended as a fully automated Intelligence. The ElƩgence Report Engine is live. 217 countries, one Grit-Score, zero human error.

T480 closing now. Tomorrow, the world gets the data it deserves.

#ArchLinux #RootCause #IT #hiringgap #analsys #GitHubActions #AnarchyInTheShell #ContinuumHQ #Dataengineering #DataScience#agenticworkflow #SRE #Grit #Gritlab #buildInPublic