The Changelog: Software Development, Open Source

Haroon Meer is back! Haroon is the Founder of Thinkst, the ~50-person bootstrapped company behind Canary and Canarytokens — honeypots and tripwires you sprinkle inside your network and forget about until an attacker touches one. We talk about the AWS API key token attackers just can’t resist trying, the real credit card token backed by an actual bank partnership, Breadcrumbs (their brand-new feature that leads intruders straight to your canaries), a live demo where a hardware Canary becomes a Synology NAS in one click, and how a company with zero outbound sales and no price increase in ten years quietly passed $22.5 million in ARR. Join the discussion Changelog++ members get a bonus 4 minutes at the end of this episode and zero ads. Join today! Sponsors: Buildkite – You deserve better CI. Buildkite is engineered for frontier scale and trusted by the teams setting the pace. WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com Featuring: Haroon Meer – Website, LinkedIn, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Thinkst Thinkst Canary Thinkst Canary Security Canary Tokens Canary Tokens Docs Canary Tokens on GitHub OpenCanary on GitHub OpenCanary Docs TechCrunch: A decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC funding Grafana Labs: Canary Tokens, the unsung heroes of security Canary Love Something missing or broken? PRs welcome!

Haroon Meer

Founder

ThinkstThinkst Canary

This week I’m talking with Max Stoiber, currently working on ChatGPT’s plugin directory and app platform at OpenAI. We discuss the hundreds of open source projects nobody remembers alongside the big ones like react-boilerplate and styled-components, how Spectrum became part of GitHub and eventually helped shape GitHub Discussions, the founder growth that came from building Stellate, the GraphQL cache that turned into a dual acquisition by Shopify and The Guild, and why ChatGPT apps feel like a new surface for software. Join the discussion Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today! Sponsors: Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default. WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com Notion – Custom Agents that automate the busywork so your team can focus on real work. Try them free at notion.com/changelog Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Max Stoiber – Website, GitHub, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Featured Max Stoiber Max Stoiber on GitHub OpenAI ChatGPT Developers can now submit apps to ChatGPT ChatGPT Developer mode OpenAI Apps SDK examples OpenAI Apps SDK UI Model Context Protocol Max’s open source and community path styled-components styled-components on GitHub react-boilerplate Max’s open source projects Spec.fm GitHub acquires Spectrum GitHub Discussions Slack Circle GraphQL and Stellate Stellate Announcing Stellate, the CDN for GraphQL APIs GraphCDN is now Stellate and we’ve raised $30M The Guild acquires Stellate GraphQL GraphQL Hive GraphQL Yoga GraphiQL Firebase Vercel RethinkDB Apollo Client urql DataLoader Shopify and storefronts Shopify Shopify Liquid reference Shopify themes Horizon: 10 new free themes by Shopify Horizon documentation Shopify Agentic Storefronts ChatGPT apps and MCP Building MCP servers for ChatGPT and API integrations Build with the Apps SDK Apps in ChatGPT MCP Apps overview Zillow Expedia Leadership and founder references COIN feedback framework Gatsby GitHub The Guild Shopify Engineering Tools, platforms, and companies mentioned Node.js TypeScript Bun Zed Ghostty Fly.io DX Incident.io Clerk Raycast Something missing or broken? PRs welcome!

Max Stoiber

Engineer

OpenAI

This week I’m talking with Matt Carey about Code Mode and how most of us have been thinking about MCP all wrong. Matt works on the Agents SDK and MCP at Cloudflare — we discuss how server-side Code Mode lets one MCP server expose all ~2,500 Cloudflare API endpoints in about 1,000 tokens of context, the dynamic Worker loader that runs model-written code safely in a V8 isolate, Matt’s own workflow with Claude, where memory fits into the future of agents, and his Zaggy git wrapper that keeps agents from force-pushing his repos. Join the discussion Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today! Sponsors: Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default. Tailscale – Adam loves Tailscale! Easy, secure, identity-based access to anything. Tailscale deploys quickly and enables Zero Trust access to any resource on your network. From CI/CD runners across multi-cloud environments, to SaaS tools and infrastructure, Tailscale connects it all, seamlessly. RWX – CI/CD platform for high velocity teams. When agents help developers write code in minutes, validation becomes your bottleneck. RWX gives agents programmatic control, sub-second cached builds, and semantic outputs they can act on. No commit required. Just iterate until CI passes, then push. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Matt Carey – Website, GitHub, LinkedIn, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Featured Matt Carey on the Cloudflare blog You’ve Been a Bad Agent Cloudflare Code Mode: give agents an entire API in 1,000 tokens Code Mode: the better way to use MCP Cloudflare MCP Server Cloudflare Agents SDK Cloudflare Agents SDK on GitHub Cloudflare platform Dynamic Workers Cloudflare Workers Durable Objects AI Gateway Vectorize MCP and code-mode references Model Context Protocol Introducing the Model Context Protocol Code execution with MCP CodeAct paper GitHub MCP Server Datadog MCP Server Pydantic Monty Coding agents and tools Claude Code Claude Code voice dictation OpenCode Cursor OpenAI Codex CLI Changesets Handy Agent memory and personal AI Granola Letta Mastra Supermemory Poke Pi coding agent Homelab and infrastructure Swamp Club Proxmox VE Tailscale 1Password K3s Pi-hole DuckDB Apache Parquet ClickHouse Something missing or broken? PRs welcome!

Matt Carey

Engineer, Agents SDK and MCP

Cloudflare

This week I’m talking with Adam Jacob, founder of System Initiative and creator of Swamp, about what happens when AI agents change the entire shape of software development. We discuss how he went from an 18-person team down to five and shipped Swamp 900 times in four weeks, why he brought User Acceptance Testing (UAT) testing back from the 90s, why software architecture (and domain-driven design) suddenly matters more than knowing how to write code, the live demo where I pointed Swamp at my Proxmox box and watched it write its own automation (blew my mind!!), and why he’ll never accept a pull request to Swamp, ever. Join the discussion Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today! Sponsors: Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default. Tailscale – Adam loves Tailscale! Easy, secure, identity-based access to anything. Tailscale deploys quickly and enables Zero Trust access to any resource on your network. From CI/CD runners across multi-cloud environments, to SaaS tools and infrastructure, Tailscale connects it all, seamlessly. RWX – CI/CD platform for high velocity teams. When agents help developers write code in minutes, validation becomes your bottleneck. RWX gives agents programmatic control, sub-second cached builds, and semantic outputs they can act on. No commit required. Just iterate until CI passes, then push. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Adam Jacob – Website, GitHub, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Featured Swamp Club Swamp manual Swamp extensions Swamp leaderboard Swamp on GitHub Swamp extensions on GitHub System Initiative System Initiative on GitHub AI coding tools Claude Code Claude Code docs OpenAI Codex CLI Codex on GitHub Infrastructure and automation Chef Infra Proxmox VE QEMU Grafana Honeycomb Better Auth TypeScript Talos Linux Ubiquiti DigitalOcean Hetzner Cloud Amazon S3 Incus Kubernetes Developer platforms and companies GitHub GitLab Block Related Changelog episodes Rebuilding DevOps from the ground up From Chef to System Initiative From Chef to System Initiative (remastered) The war for the soul of open source OSCON Something missing or broken? PRs welcome!

Adam Jacob

Founder

System InitiativeChef

Bitwarden’s CLI got hit by the Checkmarx supply-chain campaign, TypeScript 7.0 beta lands with the Go-rewritten compiler running ~10x faster than 6.0, and pgBackRest lost its maintainer of thirteen years leaving anyone running production Postgres with a real dependency-trust task this week. We’ve also got Ubuntu 26.04 LTS shipping with TPM-backed full-disk encryption, and Matz dropping Spinel as an AOT path that takes Ruby to native binaries. This week was a good reminder that the tools we depend on are all moving at once. Security, performance, and maintenance aren’t isolated threads. View the newsletter Join the discussion Changelog++ members save 2 minutes on this episode because they made the ads disappear. Join today! Sponsors: Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default. Featuring: Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Today on the show I’m talking with Amelia Wattenberger — designer, data-viz veteran, ex-GitHub Next, and now designing Intent at Augment Code. What if the last 30% of any software project is about to become the hardest part you’ve ever done? That’s the argument Amelia is making today. We discuss the identity crisis developers are having as agents take over the keyboard, the epic redesign of developer tooling in this agent-first world, the arc from autocomplete to chat to CLI back to UI, why Intent treats a workspace as their core primitive not a chat thread, the tradeoffs between one-worktree-per-agent vs. one-worktree-per-task, and why she thinks prototyping just got easier but finishing got harder. Join the discussion Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today! Sponsors: WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog RWX – CI/CD platform for high velocity teams. When agents help developers write code in minutes, validation becomes your bottleneck. RWX gives agents programmatic control, sub-second cached builds, and semantic outputs they can act on. No commit required. Just iterate until CI passes, then push. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Amelia Wattenberger – Website, GitHub, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: GitHub Copilot — the launch that kicked off this era (mentioned ~12×) GitHub Next — GitHub’s R&D team; where Amelia worked GitHub Actions Intent — Augment Code’s new workspace-first agent app that Amelia is building (the core product discussion) Augie — Augment’s agent Claude Code Codex Notion AI VS Code Incus — system-level containers/VMs; the Canonical LXD fork Proxmox — Adam’s hypervisor platform for the sandbox ZFS — storage layer Incus is built on Bun — JavaScript runtime Rust Go Ruby on Rails SvelteKit Svelte TypeScript TanStack Start Something missing or broken? PRs welcome!

Amelia Wattenberger

Designer

Augment CodeGitHub

Astral is joining OpenAI, which says a lot about where the center of gravity is moving for developer tools, LiteLLM got hit by a nasty supply-chain attack, and OpenCode blew up as the latest serious open source swing at the coding-agent stack. We’ve also got Rust doing a very public reality check on its own pain points, WorkOS pushing AuthKit into CLI auth, Ryan Lizza using AI to build an open source TurboTax alternative, and a fresh httpx fork that turns open source maintenance drama into a real dependency story. If nothing else, this week was a good reminder that tools, trust, and control all move together. View the newsletter Join the discussion Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today! Sponsors: WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com Featuring: Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Adam talks with Tailscale co-founder and Chief Strategy Officer David Carney about where Tailscale is headed next: TSIDP, TSNet, multiple tailnets, and Aperture. They get into clickless auth (via TSIDP), TSNet apps, multiple tailnets for isolation and control, and Aperture, Tailscale’s private AI gateway for API key management, observability, and agent security. Join the discussion Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today! Sponsors: Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow. NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog Squarespace – Turn your expertise into a business with the all-in-one platform for websites, services, and getting paid. Use code CHANGELOG to save 10% on your first website purchase. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: David Carney – Website, GitHub, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Send an email to David ~> aperture@tailscale.com Mentioned in this episode Tailscale Aperture by Tailscale TSIDP TSNet Multiple tailnets Tailnet policy file syntax Model Context Protocol (MCP) MCP specification Proxmox VE Incus OIDC / OpenID Connect OAuth 2.0 Okta Microsoft Entra ID Google Workspace Keycloak Salesforce Anthropic Amazon Bedrock Oso Cerbos Go GopherCon Simon Willison Something missing or broken? PRs welcome!

David Carney

Co-founder and Chief Strategy Officer

Tailscale

This week’s been wild — Iran bombed AWS data centers to take down Claude, OpenAI dropped GPT-5.4 (and it’s seriously good for coding), and living brain cells are literally playing DOOM. We’ve also got a heartfelt take on what it feels like to be a 10x engineer in the age of AI, plus some cool new tools like Handy for speech-to-text and web haptics. Oh, and new MacBook Pros with M5 Pro and M5 Max are up for pre-order. Try not to impulse buy (or do). View the newsletter Join the discussion Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today! Sponsors: Sonatype – Develop software fearlessly. Find out how at sonatype.com. Featuring: Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X

Adam and Jerod get into the news, Jerod officially retires from the pod (and Changelog), plus a bonus for our Changelog++ subs! Join the discussion Changelog++ members get a bonus 16 minutes at the end of this episode and zero ads. Join today! Sponsors: Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow. Squarespace – Turn your expertise into a business with the all-in-one platform for websites, services, and getting paid. Use code CHANGELOG to save 10% on your first website purchase. Notion – Custom Agents that automate the busywork so your team can focus on real work. Try them free at notion.com/changelog Featuring: Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Ladybird adopts Rust, with help from AI - Ladybird The JavaScript Oxidation Compiler Become an Oxc Sponsor | The JavaScript Oxidation Compiler Boshen (@boshen_c) / X Am I the only one who genuinely prefers on-prem? : r/devops The Software Development Lifecycle Is Dead | Boris Tane THE 2028 GLOBAL INTELLIGENCE CRISIS Anish Acharya on X: “a different way this could go down…” The Mythical Agent-Month – Wes McKinney NanoClaw - Secure AI Agent for WhatsApp, Telegram & More Zed — Agent Client Protocol Something missing or broken? PRs welcome!

Burke Holland works on GitHub Copilot by day and codes with his AI agents always. Early January, Burke posted about how Opus 4.5 changed everything. We were all still buzzing from the holiday-season 2x usage bump Claude gave us, and Opus 4.5 felt like a genuine step function in capability. Burke and I get into all the details. Opus 4.5 may have started the fire, but GPT-5.3 Codex is certainly living up to the hype. Join the discussion Changelog++ members get a bonus 17 minutes at the end of this episode and zero ads. Join today! Sponsors: Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow. Squarespace – Turn your expertise into a business with the all-in-one platform for websites, services, and getting paid. Use code CHANGELOG to save 10% on your first website purchase. Notion – Custom Agents that automate the busywork so your team can focus on real work. Try them free at notion.com/changelog Featuring: Burke Holland – Website, GitHub, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Opus 4.5 is going to change everything Jon Gjengset Explains Rust 2026 How we rebuilt Next.js with AI in one week Rebuilding Next.js using AI in a single week The era of the Small Giant (Changelog #673) Layercode — Voice AI infrastructure for TypeScript developers Diffs — An open source diff and code rendering library Pierre Computer Company Code Storage Entire — Developer platform from former GitHub CEO Thomas Dohmke Tigris Data @traskjd tweet GitHub Copilot Something missing or broken? PRs welcome!

Burke Holland

Developer Advocate

GitHub

Wes McKinney on the mythical agent-month, install Peon Ping to employ a Peon today, Andreas Kling explains why Ladybird is adopting Rust, Cloudflare has a new MCP server that’s quite efficient, and Elliot Bonneville thinks the only moat left is money. View the newsletter Join the discussion Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today! Sponsors: Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow. Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Steve Ruiz joins us for a deep-dive on tldraw (a very good free whiteboard) and the business he’s built selling SDKs that help others build very good whiteboards (and more) with tldraw’s high-performance web canvas. Along the way, we discuss the excitement/fear we share about keeping our agents busy, how SDK and infra companies are affected differently by agentic software than SaaS companies, how Steve is approaching the coming era of internal tooling, what will happen when we equip LLMs with an infinite canvas, and more. Join the discussion Changelog++ members get a bonus 15 minutes at the end of this episode and zero ads. Join today! Sponsors: Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow. NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase. Featuring: Steve Ruiz – Website, LinkedIn, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Show Notes: tldraw.com tldraw.dev Remarkable: the paper tablets for focused work Agent starter kit • tldraw docs tldraw fairies Something missing or broken? PRs welcome!

Steve Ruiz

Founder & CEO

tldraw

Peter Steinberger joins OpenAI, ZeroClaw is “claw done right”, MimiClaw runs on a $5 chip, Steve Yegge on managing the AI Vampire, and the day the telnet died. View the newsletter Join the discussion Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today! Sponsors: Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Our ol’ friend, Brett Cannon, is back to talk all things Python. But first! Star Wars, Machete Order, Lost, Babylon 5, Game of Thrones, Murderbot, Ted Lasso, Project Hail Mary, David Attenborough, perpetual voice rights, and the AI uncanny valley. Join the discussion Changelog++ members save 4 minutes on this episode because they made the ads disappear. Join today! Sponsors: Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Brett Cannon – Website, GitHub, LinkedIn, Bluesky, Mastodon Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: What is the Star Wars Machete Order? Pep 665 (lock file format) python-build-standalone Astral: high-performance Python tooling Pypi: Page Not Found Incus documentation Python/prebuilt-cpython Something missing or broken? PRs welcome!

Brett Cannon

Software Engineer

MicrosoftPythonPython Software Foundation

Paul Dix joins us to discuss the InfluxDB co-founder’s journey adapting to an agentic world. Paul sent his AI coding agents on various real-world side quests and shares all his findings: what’s going to prod, what’s not, and why he’s (at least for a bit) back to coding by hand. Update: He’s back to letting the AIs write code, but with a lot more oversight. For now… Join the discussion Changelog++ members save 4 minutes on this episode because they made the ads disappear. Join today! Sponsors: Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Paul Dix – GitHub, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Build the machine that builds the machine Paul dix on X: “2026: the great engineering divergence” InfluxData Something missing or broken? PRs welcome!

Paul Dix

Co-founder

InfluxData

Mitchell Hashimoto’s trust management system for open source, Nicholas Carlini has a team of Claudes build a C compiler, Stephan Schwab recounts the history of attempted developer replacement, NanClaw is an alternative to OpenClaw, and Sophie Koonin can’t wrap her head around so many people going so hard on LLM-generated code. View the newsletter Join the discussion Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today! Sponsors: Sonatype – Develop software fearlessly. Find out how at sonatype.com. Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Amal Hussein returns to tell us all about her new role at Istari, what life is like outside the web browser, how she’s helping ambitious orgs in aerospace, what the SDLC looks like in 2026, and a whole lot more. Wait, moon vacuums?! Join the discussion Changelog++ members get a bonus 21 minutes at the end of this episode and zero ads. Join today! Sponsors: Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog Featuring: Amal Hussein – GitHub, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Istari: level the digital playing field AWS Re:invent keynote Blue Origin Frictionless book Jevons paradox Something missing or broken? PRs welcome!

Amal Hussein

Engineer

IstarinpmBocoup

In May of 2025, Docker launched Hardened Images, a secure, minimal, production-ready set of images. In December, they made DHI freely available and open source to everyone who builds software. On this episode, we’re joined by Tushar Jain, EVP of Engineering at Docker to learn all about it. Join the discussion Changelog++ members get a bonus 6 minutes at the end of this episode and zero ads. Join today! Sponsors: Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Tushar Jain – LinkedIn Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Hardened images for everyone Hardened images catalog Something missing or broken? PRs welcome!

Tushar Jain

EVP of Engineering

DockerMulticoin Capital

Jason Willems believes the tech monoculture is finally breaking, Don Ho shares some bad Notepad++ news, Tailscale’s Avery Pennarun pens a great downtime apology, Milan Milanović explains why you can only code 4 hours per day, and Addy Osmani on managing comprehension debt when leaning on AI to code. View the newsletter Join the discussion Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today! Sponsors: Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

We discuss the buzz around Clawdbot / MoltBot / OpenClaw, how app subscriptions are turning into weekend hacking projects, why SaaS stocks are crashing on Wall Street, and what it all means. Join the discussion Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today! Sponsors: Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase. Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: OpenClaw — personal AI assistant Mintlify Macrumors Buyer’s Guide: Mac Mini Your app subscription is now my weekend project The future of software engineering is SRE Why SaaS stocks are crashing on Wall Street Something missing or broken? PRs welcome!

As the creator and long-time maintainer of ESLint, Nicholas Zakas is well-positioned to criticize GitHub’s recent response to npm’s insecurity. He found the response insufficient, and has other ideas on how GitHub could secure npm better. On this episode, Nicholas details these ideas, paints a bleak picture of npm alternatives like JSR, and shares our frustration that such a critical piece of internet infrastructure feels neglected. Join the discussion Changelog++ members save 6 minutes on this episode because they made the ads disappear. Join today! Sponsors: Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase. Featuring: Nicholas C. Zakas – Website, GitHub, LinkedIn, Bluesky, Mastodon, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Show Notes: How GitHub could secure npm JSR: the javascript registry vlt /vōlt/ Something missing or broken? PRs welcome!

Nicholas Zakas

Creator of ESLint / Author

Human Who CodesESLint

Clawdbot drives Mac Mini sales, Swizec Teller on the future of software engineering being SRE, Daniel Stenberg decided to end curl’s bug bounty program, zerobrew takes some of the best ideas from uv and applies them to Homebrew, and Phil Eaton on LLMs and your career. View the newsletter Join the discussion Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today! Sponsors: Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Techno Tim joins Adam to dive deep into the state of homelab’ing in 2026. Hardware is scarce and expensive due to the AI gold rush, but software has never been better. From unleashing Claude on your UDM Pro to building custom Proxmox CLIs, they explores how AI is transforming what’s possible in the homelab. Tim declares 2026 the “Year of Self-Hosted Software” while Adam reveals his homelab’s secret weapons: DNSHole (a Pi-hole replacement written in Rust) and PXM (a Proxmox automation CLI). Join the discussion Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today! Sponsors: Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image builds, and GitHub Actions workflows. Easily integrate with your existing CI provider and dev workflows to save hours of build time. Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Techno Tim – Website, GitHub, LinkedIn, Mastodon, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: People Techno Tim - Tim Stewart’s website, YouTube channel, and documentation hub Crosstalk Solutions - Chris’s channel, mentioned for building custom Ubiquiti API tools Virtualization & Infrastructure Proxmox VE - Open-source virtualization platform for VMs and containers TrueNAS - Enterprise-grade open-source storage operating system built on ZFS HexOS - Consumer-friendly NAS OS built on TrueNAS (in development) Proxmox VE Helper Scripts - Community-maintained scripts for easy LXC and VM deployment Self-Hosted Software Paperless-NGX - Self-hosted document management system with OCR Paperless-GPT - AI-powered enhancement for Paperless-NGX using LLMs Ollama - Run large language models locally on your own hardware Open WebUI - Self-hosted web interface for interacting with local LLMs Plex - Media server for organizing and streaming your personal media library Home Assistant - Open-source home automation platform Pi-hole - Network-wide ad blocking via DNS filtering Document Intelligence & RAG Dockling - IBM’s open-source document parsing library for AI/RAG pipelines PaddleOCR - Multi-language OCR toolkit for document recognition AI & Agents Claude - Anthropic’s AI assistant, used for homelab automation in this episode OpenCode - Open-source AI coding agent (mentioned as potential homelab tool) Model Context Protocol (MCP) - Protocol for connecting AI models to external tools and data Networking Ubiquiti - Enterprise networking gear popular with homelabbers (UDM Pro, UniFi) Tailscale - Zero-config VPN for secure networking between devices Container & Orchestration Docker - Container platform for packaging and running applications Kubernetes - Container orchestration for managing containerized workloads Fly.io - Platform for running containers close to users globally Monitoring & Observability Grafana - Open-source analytics and visualization platform Prometheus - Open-source monitoring and alerting toolkit Security & Authentication Bitwarden - Open-source password manager (self-hostable) Authelia - Open-source authentication and authorization server Databases MariaDB - Community-developed fork of MySQL Redis - In-memory data store for caching and messaging PostgreSQL - Advanced open-source relational database Hardware Mentioned Intel Optane - Ultra-low latency storage drives (discontinued but prized for ZFS special vdevs) NVIDIA GeForce RTX 3090 - GPU used for Plex transcoding and local AI inference Concepts & Techniques ZFS Special Vdevs - ZFS feature for accelerating metadata and small file operations PCIe Bifurcation - Splitting a PCIe slot to support multiple NVMe drives Medallion Architecture - Bronze/Silver/Gold data lake pattern discussed for document ETL Something missing or broken? PRs welcome!

Techno Tim

Content Creator

Techno Tim

Damien Tanner (founder of Pusher, now building Layercode) is back for a reunion 17 years in the making. Damien officially returns to The Changelog to discuss the seismic shift happening in software development. From the first sponsor of the podcast to frontline builder in the AI agent era, Damien shares his insights on why SaaS is dying, why code review is a bottleneck (and non-existent for some), and how small teams can now build giant things. Join the discussion Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today! Sponsors: Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image builds, and GitHub Actions workflows. Easily integrate with your existing CI provider and dev workflows to save hours of build time. Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes. Featuring: Damien Tanner – Website, GitHub, LinkedIn, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Layercode Pusher AI Engineer London Meetup How Claude Code Works (Jared Zoneraich, PromptLayer) Something missing or broken? PRs welcome!

Damien Tanner

Founder

Layercode

Armin Ronacher thinks AI agent psychosis might be driving us insane, Dan Abramov explains how AT Protocol is a social filesystem, RepoBar keeps your GitHub work in view without opening a browser, Ethan McCue shares some life altering Postgres patterns, and Lea Verou says web dependencies are broken and we need to fix them. View the newsletter Join the discussion Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today! Sponsors: Sonatype – Develop software fearlessly. Find out how at sonatype.com. Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Gerhard is back for Kaizen 22! We’re diving deep into those pesky out-of-memory errors, analyzing our new Pipedream instance status checker, and trying to figure out why someone in Asia downloads a single episode so much. Join the discussion Changelog++ members save 6 minutes on this episode because they made the ads disappear. Join today! Sponsors: Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image builds, and GitHub Actions workflows. Easily integrate with your existing CI provider and dev workflows to save hours of build time. Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase. Featuring: Gerhard Lazu – Website, GitHub, LinkedIn, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Kaizen 22 discussion #554 Tw93/mole: 🐹 deep clean and optimize your mac. Stuff Goes Bad: Erlang in Anger Abacus.ai - the world’s first super assistant for professionals and enterprises Something missing or broken? PRs welcome!

Mat Ryer is back and he brought his impromptu musical abilities with him! We discuss Rob Pike vs thankful AI, Microsoft’s GitHub monopoly (and what it means for open source), and Tom Tunguz’ 12 predictions for 2026: agent-first design, the rise of vector databases, and are we about to pay more for AI than people?! Join the discussion Changelog++ members get a bonus 3 minutes at the end of this episode and zero ads. Join today! Sponsors: Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price. Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase. Featuring: Mat Ryer – GitHub, LinkedIn, Bluesky, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Show Notes: How Rob Pike got spammed with an AI slop “act of kindness” How GitHub monopoly is destroying the open source ecosystem 12 predictions for 2026 Something missing or broken? PRs welcome!

Mat Ryer

Co-Founder

MachineBoxGrafana LabsxbarChangelog MediaPace.dev

Linus Torvalds pushes AI generated code, Jordan Fulghum thinks this is the year of self-hosting, FracturedJson formats for compact / human readability, Scott Werner believes a flood of adequate software is coming, and Sean Goedecke explains why generic software design advice is useless. View the newsletter Join the discussion Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today! Featuring: Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

We’re joined by Sid Sijbrandij, founder of GitLab who led the all-in-one coding platform all the way to IPO. In late 2022, Sid discovered that he had bone cancer. That started a journey he’s been on ever since… a journey that he shares with us in great detail. Along the way, Sid continued founding companies including Kilo Code, an all-in-one agentic engineering platform, which he also tells us all about. Join the discussion Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today! Sponsors: Depot – 10x faster builds? Yes please. Build faster. Waste less time. Accelerate Docker image builds, and GitHub Actions workflows. Easily integrate with your existing CI provider and dev workflows to save hours of build time. Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more. Notion – Notion is a place where any team can write, plan, organize, and rediscover the joy of play. It’s a workspace designed not just for making progress, but getting inspired. Notion is for everyone — whether you’re a Fortune 500 company or freelance designer, starting a new startup or a student juggling classes and clubs. Featuring: Sid Sijbrandij – Website, LinkedIn, X Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X Show Notes: Sid’s cancer journey Kilo.ai Something missing or broken? PRs welcome!

Sid Sijbrandij

Co-Founder and CEO

GitLabKilo Code