Benjamin Lannon

Wanted to do a post about still valuing paying for journalism: lannonbr.com/blog/pay-for...

I personally haven't used Buildkite or any of the various new alternatives for GitHub Actions, but the small incremental changes to Actions over the past few years have lead me to have a belief that it is not being well maintained and sheparded by GitHub and Microsoft

I can definitely agree with the sentiment that for being the most popular CI system provided by one of the worlds largest companies, there should not be so many large holes that have existed for years. I definitely agree with Ian's take on using custom actions via the Actions Marketplace

Good post commenting on the cruft that is the state of GitHub Actions: www.iankduncan.com/engineering/...

Octobox Untangle your GitHub Notifications

Came back to use octobox.io again after using it years ago and I want to see if it can fit the mold of tracking both issues I follow in OSS as well as watching dependabot PRs for all of my apps I currenly maintain. Happy it is still up and running

How I use Generative AI going into 2026 a time capsule on how I used and feel about AI in January 2026

I wrote a piece on how I am using Generative AI going into 2026: lannonbr.com/blog/ai-use-...

It will be interesting to see how this changes as the year goes on.

Also how do we keep a focus to protect our environments and if we do prompt Claude Code, Cursor, etc, how do we still make sure the agents don't run malicious commands or how to do a critical review after code is generated. Is Docker going to be a good solution or do we need even more security?

Something that I've been thinking about and likely will to a lot through the rest of this year is how to continue using AI for coding, but still be in the loop and not go to the extreme of just prompting my way to the finish line. I still personally enjoy writing code.

Eleventy Core Dependency Watch (2025 Edition) An Eleventy blog post published on December 2025.

Eleventy Core Dependency Watch (2025 Edition)

www.11ty.dev/blog/depende...

v4.0.0.alpha.6 (compared with v3) reduces:

1️⃣ dependencies 21.6%
2️⃣ 3rd-party dependencies 27.6%
3️⃣ node_modules weight 33.3%

So it looks like there actually is a preview now: github.com/features/pre...

but gating it behind a "fill out this custom form with your work credentials" and not the default GitHub previews UI feels icky to me personally. Not every dev on github is using GitHub for their work

Semgrep | 🚨 Popular GitHub Action tj-actions/changed-files is compromised Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.

A GitHub Action was compromised this past week. semgrep.dev/blog/2025/po...

I hope this is another indicator that @github.com should really prioritize immutable action releases. They do have it on their roadmap here: github.com/github/roadm... but it has been that way since late 2022.

Thanks to @ellie.wtf for this resource on an update to the ingress nginx controller. Bit my team today and was able to quickly resolve it: ellie.wtf/notes/ingres...

I appreciate this trend spreading of smaller form written content / sharing links across the internet

They squandered the holy grail

https://xeiaso.net/blog/2025/squandered-holy-grail/

I find it weird 2 years ago a feature request was added to GitHub to allow fine-grained access tokens to read / write to GitHub Packages, and yet it seems to not actually be prioritized to the point that it is still not implemented: github.com/github/roadm...

Two stages of writing:

1) This shouldn't take too long
2) Oh no

Fighting open source spam with interaction limits You can limit how people interact with your repositories to fight spam!

I'm starting my 2024 #blogvent series where I post a blog a day in December!

Blogvent day 1 is about fighting spam in your open source repos:
cassidoo.co/post/oss-int...

Creation of buckets, accounts, and policies as custom resources · Issue #1100 · minio/operator Is your feature request related to a problem? Please describe. I use minio as a backend for a highly multi-tenant SaaS app. We rely on fine-grained policies to make sure each service only accesses ...

This brought me back to the GitHub issue of the community wanting CRDs for Minio resources github.com/minio/operat...

where they added a MinioJob CRD, but about a month ago they yanked it saying they didn't want to maintain it github.com/minio/operat...

Intentional Consumption and why I am using RSS in 2024 and beyond Why I am both distributing and consuming content again via RSS

I wrote today about intentional consumption of news / articles via RSS. Also set up an RSS feed on my site as of a week ago or so:

lannonbr.com/blog/rss-int...

I've been thinking about this for awhile that I want to make more content and just post more often without needing to stress about the act of writing:

micro.webology.dev/2024/11/02/p...