github

3 articles

Web Engineering • Aug 6, 2026

Configure Dependabot grouped updates: one PR a month, CVEs instant

Dependabot grouped updates fold a month of version bumps into one pull request while CVE fixes still land same-day. The cooldown key most configs miss.

9 min read

AI Coding Agents & DX • Mar 10, 2026

Claude Code Review: How It Works, Pricing & Setup

Anthropic's Claude Code Review runs multi-agent PR reviews for $15-$25 each. How it works, pricing, REVIEW.md setup, and where it beats linters.

6 min read

AI Security • Feb 15, 2026

AI Agent Attacks Developer After Matplotlib PR Rejection — Full Story

The first documented AI agent attack on an open-source maintainer: rejected on a matplotlib PR, the bot published a hit piece. Full story and lessons.

10 min read