The Changelog: Software Development, Open Source
- Episodes
- 1,019
- Released
- every two weeks
- Latest episode
- Nov 13, 2026
About the podcast
Software's best weekly news brief, deep technical interviews & talk show.
Contributors
Episodes 1,019
All your packages are belong to us (Interview)
With Ahmad Nassri
AI agents can write the code, choose the packages, and run the install. Who’s checking what they just invited onto your machine? This week I’m joined by Ahmad Nassri, CTO of Socket and former CTO of npm. We get …
Show notes
AI agents can write the code, choose the packages, and run the install. Who’s checking what they just invited onto your machine? This week I’m joined by Ahmad Nassri, CTO of Socket and former CTO of npm. We get into the trust built into a package install, the new ways attackers are using agents, and what it takes to keep building without handing over the keys or your wallet.
Changelog++ members get a bonus 6 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- WorkOS – WorkOS is building the infrastructure for the AI era. Explore three new product previews: Airlock for secure AI agent permissions, Atlas for deploying AI-built internal apps, and Passport for seamless, passwordless access to work apps. See the announcements, demos, and highlights in the WorkOS init() 2026 recap.
- Parallel – Web infrastructure for AI to search, extract, monitor, and reason over the world’s information.
- Deepgram – Speech-to-text, text-to-speech, and voice agent APIs for developers building voice AI applications.
- Fly.io – The home of Changelog.com — Computers for agents, from sandboxes to production. Give your agent its own hardware-isolated Linux computer. Deploy what it builds without changing platforms.
Featuring:
Show Notes:
- The Hidden Blast Radius of the Axios Compromise
- Socket Firewall
- npm trusted publishing
- Shai-Hulud
- Zero Day Clock
Something missing or broken? PRs welcome!
We now have Kerr’s Law (Interview)
With Dave Kerr
Dave Kerr created hacker laws, and now he finds himself reviewing agent-written code for them. Back on the show after six years, Dave names what he sees limiting teams today: keeping everyone’s mental model in …
Show notes
Dave Kerr created hacker laws, and now he finds himself reviewing agent-written code for them. Back on the show after six years, Dave names what he sees limiting teams today: keeping everyone’s mental model in sync with what’s actually been built. Adam declares it Kerr’s Law on the spot. We get into why Dave’s team treats code review as a deliberate slowdown, how Shellwright lets agents bring evidence to a pull request, and what living with bipolar disorder has taught Dave about noticing when the excitement of these tools stops being healthy.
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- KubeCon + CloudNativeCon – Get a generous discount by using changelogpod (think Earlybird pricing!). Learn more and register.
- WorkOS – WorkOS is building the infrastructure for the AI era. Explore three new product previews: Airlock for secure AI agent permissions, Atlas for deploying AI-built internal apps, and Passport for seamless, passwordless access to work apps. See the announcements, demos, and highlights in the WorkOS init() 2026 recap.
- Fingerprint – Detect threats, AI agents, and bots with device intelligence.
Featuring:
Show Notes:
Kerr’s Law — A team’s ability to scale is limited by its ability to keep a shared mental model in sync with the system it builds.
- Dave Kerr’s website
- Hacker Laws
- Effective Shell
- Ark (Agents at Scale)
- Shellwright
- Tailscale
- Playwright
- asciinema
- k9s
Something missing or broken? PRs welcome!
The future is Postgres (Interview)
With Craig Kerstiens
Craig Kerstiens returns to talk about the ever-expanding world of Postgres: a deliberately boring core, a thriving extension ecosystem, and pg_lake bringing DuckDB and Iceberg into the mix. We dig into the pain …
Show notes
Craig Kerstiens returns to talk about the ever-expanding world of Postgres: a deliberately boring core, a thriving extension ecosystem, and pg_lake bringing DuckDB and Iceberg into the mix. We dig into the pain of ETL, what Craig is watching in Postgres 19, the impact of AI on open source maintainers, and why the database still has plenty of room to grow.
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- KubeCon + CloudNativeCon – Get a generous discount by using changelogpod (think Earlybird pricing!). Learn more and register.
- Fingerprint – Detect threats, AI agents, and bots with device intelligence.
- WorkOS – WorkOS is building the infrastructure for the AI era. Explore three new product previews: Airlock for secure AI agent permissions, Atlas for deploying AI-built internal apps, and Passport for seamless, passwordless access to work apps. See the announcements, demos, and highlights in the WorkOS init() 2026 recap.
Featuring:
Show Notes:
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Building what's next (Interview)
With Zeno Rocha
This week I’m talking with Zeno Rocha, CEO of Resend, about scaling “boring” email to 3 million users, the secret Go rewrite behind it, and building for agents. We cover pricing.md, MCP, spam gangs, and why …
Show notes
This week I’m talking with Zeno Rocha, CEO of Resend, about scaling “boring” email to 3 million users, the secret Go rewrite behind it, and building for agents. We cover pricing.md, MCP, spam gangs, and why Resend keeps what’s next for email.
Changelog++ members save 10 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
- Buildkite – You deserve better CI. Buildkite is engineered for frontier scale and trusted by the teams setting the pace.
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
From zero to NanoClaw (Interview)
With Gavriel Cohen
Gavriel Cohen, creator of NanoClaw and co-founder of NanoCo, joins Adam to explain how a 40-hour weekend project became a viral open source hit and the foundation of an enterprise AI company. Gavriel describes …
Show notes
Gavriel Cohen, creator of NanoClaw and co-founder of NanoCo, joins Adam to explain how a 40-hour weekend project became a viral open source hit and the foundation of an enterprise AI company. Gavriel describes the security concerns that led him to build a small, container-isolated alternative to OpenClaw, why he released it under the MIT license, and why the project’s community and credibility are more valuable than keeping its code private.
They explore the shift from writing code to architecting the environments in which agents work, NanoClaw’s “skills over features” approach, the approval and governance layers required inside large companies, and a future where every worker manages agents without surrendering human judgment. They close with the technical simplicity behind NanoClaw, containers, TypeScript, SQLite, and a two-database design, and Adam’s case for durable Agent Flow artifacts that keep organizational context from disappearing into chat.
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
- Buildkite – You deserve better CI. Buildkite is engineered for frontier scale and trusted by the teams setting the pace.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
NanoClaw and NanoCo
- NanoClaw
- NanoClaw on GitHub
- NanoClaw design philosophy and README
- NanoClaw customization with skills and recipes
- NanoClaw v2 two-database session design
- NanoCo
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Forking Cal.com to closed source (Interview)
With Peer Richelsen
This week I’m joined by Peer Richelsen, co-founder of Cal.com. What if the majority of open source repositories are already compromised and we just don’t know it yet? That’s the theory Peer brings to the table …
Show notes
This week I’m joined by Peer Richelsen, co-founder of Cal.com. What if the majority of open source repositories are already compromised and we just don’t know it yet? That’s the theory Peer brings to the table this week. We dig into how AI has flattened the knowledge graph to the point that a 16-year-old can vibe hack a power station just as easily as their mom can vibe code an iOS app, why the reporting culture that has kept open source safe all these years is collapsing under AI generated noise, Cal.com’s move to fork its own codebase and take the sensitive parts private, and the eye opening reality that shipping “$1 of AI tokens for pennies on the dollar” is now a common startup business model.
Changelog++ members save 10 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- Buildkite – You deserve better CI. Buildkite is engineered for frontier scale and trusted by the teams setting the pace.
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
- Peer Richelsen – Website, GitHub, LinkedIn, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Editorial disclosure: Adam states in the episode that he is a small seed investor in Cal.com.
Cal.com and Cal.diy- Cal.com is going closed source — here’s why
- Moving to closed-source: the technical changes
- Cal.diy on GitHub
- Cal.diy contributing guide
- Cal.com
- Swamp Club
- OpenClaw
- Mitchell Hashimoto: Vibing a Non-Trivial Ghostty Feature
- GitHub Agentic Workflows
- GitHub issue-intent, rationale, confidence, and approvals
- Mozilla: Hardening Firefox with Anthropic’s Red Team
- Mozilla: The zero-days are numbered
- Anthropic and Mozilla’s Firefox security collaboration
- Next.js security advisories
- LiteLLM issue: malicious package and credential stealer
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Postgres at PlanetScale (Interview)
With Sam Lambert
Sam Lambert is back after 4 years and he does not hold back! We cover $5 PlanetScale Postgres, the Neki “do-over” of Vitess, agents shipping schema changes through deploy requests, rolling back a 500TB table in …
Show notes
Sam Lambert is back after 4 years and he does not hold back! We cover $5 PlanetScale Postgres, the Neki “do-over” of Vitess, agents shipping schema changes through deploy requests, rolling back a 500TB table in seconds, and the very real question of whether to open source any of it. Plus: why he thinks the sleeping, lazy giants should be broken up.
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Buildkite – You deserve better CI. Buildkite is engineered for frontier scale and trusted by the teams setting the pace.
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
PlanetScale products and features
- PlanetScale Postgres
- PlanetScale Metal
- Neki
- Vitess
- Database branching
- Non-blocking schema changes
- Deploy requests
- Schema reverts
- Database Traffic Control
- Query Insights
- PlanetScale MCP server
- PlanetScale Skills
- Benchmarking Postgres
- PostgreSQL
- MySQL
- NVM Express (NVMe)
- Amazon Aurora PostgreSQL Limitless Database
- Amazon Web Services
- Google Cloud
- Sam Lambert: Agents and Infrastructure — Cursor Compile 2026
- Making the last database you’ll ever need — Founders Talk #85
- Bringing Vitess to Postgres — Changelog Interviews #651
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Canary tokens and digital tripwires (Interview)
With Haroon Meer
Haroon Meer is back! Haroon is the Founder of Thinkst, the ~50-person bootstrapped company behind Canary and Canarytokens — honeypots and tripwires you sprinkle inside your network and forget about until an …
Show notes
Haroon Meer is back! Haroon is the Founder of Thinkst, the ~50-person bootstrapped company behind Canary and Canarytokens — honeypots and tripwires you sprinkle inside your network and forget about until an attacker touches one. We talk about the AWS API key token attackers just can’t resist trying, the real credit card token backed by an actual bank partnership, Breadcrumbs (their brand-new feature that leads intruders straight to your canaries), a live demo where a hardware Canary becomes a Synology NAS in one click, and how a company with zero outbound sales and no price increase in ten years quietly passed $22.5 million in ARR.
Changelog++ members get a bonus 4 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Buildkite – You deserve better CI. Buildkite is engineered for frontier scale and trusted by the teams setting the pace.
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
Featuring:
Show Notes:
- Thinkst
- Thinkst Canary
- Thinkst Canary Security
- Canary Tokens
- Canary Tokens Docs
- Canary Tokens on GitHub
- OpenCanary on GitHub
- OpenCanary Docs
- TechCrunch: A decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC funding
- Grafana Labs: Canary Tokens, the unsung heroes of security
- Canary Love
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
From open source hits to OpenAI (Interview)
With Max Stoiber
This week I’m talking with Max Stoiber, currently working on ChatGPT’s plugin directory and app platform at OpenAI. We discuss the hundreds of open source projects nobody remembers alongside the big ones like …
Show notes
This week I’m talking with Max Stoiber, currently working on ChatGPT’s plugin directory and app platform at OpenAI. We discuss the hundreds of open source projects nobody remembers alongside the big ones like react-boilerplate and styled-components, how Spectrum became part of GitHub and eventually helped shape GitHub Discussions, the founder growth that came from building Stellate, the GraphQL cache that turned into a dual acquisition by Shopify and The Guild, and why ChatGPT apps feel like a new surface for software.
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
- Notion – Custom Agents that automate the busywork so your team can focus on real work. Try them free at notion.com/changelog
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
Featured
- Max Stoiber
- Max Stoiber on GitHub
- OpenAI
- ChatGPT
- Developers can now submit apps to ChatGPT
- ChatGPT Developer mode
- OpenAI Apps SDK examples
- OpenAI Apps SDK UI
- Model Context Protocol
- styled-components
- styled-components on GitHub
- react-boilerplate
- Max’s open source projects
- Spec.fm
- GitHub acquires Spectrum
- GitHub Discussions
- Slack
- Circle
- Stellate
- Announcing Stellate, the CDN for GraphQL APIs
- GraphCDN is now Stellate and we’ve raised $30M
- The Guild acquires Stellate
- GraphQL
- GraphQL Hive
- GraphQL Yoga
- GraphiQL
- Firebase
- Vercel
- RethinkDB
- Apollo Client
- urql
- DataLoader
- Shopify
- Shopify Liquid reference
- Shopify themes
- Horizon: 10 new free themes by Shopify
- Horizon documentation
- Shopify Agentic Storefronts
- Building MCP servers for ChatGPT and API integrations
- Build with the Apps SDK
- Apps in ChatGPT
- MCP Apps overview
- Zillow
- Expedia
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
MCP on Code Mode (Interview)
With Matt Carey
This week I’m talking with Matt Carey about Code Mode and how most of us have been thinking about MCP all wrong. Matt works on the Agents SDK and MCP at Cloudflare — we discuss how server-side Code Mode lets …
Show notes
This week I’m talking with Matt Carey about Code Mode and how most of us have been thinking about MCP all wrong. Matt works on the Agents SDK and MCP at Cloudflare — we discuss how server-side Code Mode lets one MCP server expose all ~2,500 Cloudflare API endpoints in about 1,000 tokens of context, the dynamic Worker loader that runs model-written code safely in a V8 isolate, Matt’s own workflow with Claude, where memory fits into the future of agents, and his Zaggy git wrapper that keeps agents from force-pushing his repos.
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- Tailscale – Adam loves Tailscale! Easy, secure, identity-based access to anything. Tailscale deploys quickly and enables Zero Trust access to any resource on your network. From CI/CD runners across multi-cloud environments, to SaaS tools and infrastructure, Tailscale connects it all, seamlessly.
- RWX – CI/CD platform for high velocity teams. When agents help developers write code in minutes, validation becomes your bottleneck. RWX gives agents programmatic control, sub-second cached builds, and semantic outputs they can act on. No commit required. Just iterate until CI passes, then push.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
Featured
- Matt Carey on the Cloudflare blog
- You’ve Been a Bad Agent
- Cloudflare
- Code Mode: give agents an entire API in 1,000 tokens
- Code Mode: the better way to use MCP
- Cloudflare MCP Server
- Cloudflare Agents SDK
- Cloudflare Agents SDK on GitHub
- Model Context Protocol
- Introducing the Model Context Protocol
- Code execution with MCP
- CodeAct paper
- GitHub MCP Server
- Datadog MCP Server
- Pydantic Monty
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Automation at the speed of Swamp (Friends)
With Adam Jacob
This week I’m talking with Adam Jacob, founder of System Initiative and creator of Swamp, about what happens when AI agents change the entire shape of software development. We discuss how he went from an …
Show notes
This week I’m talking with Adam Jacob, founder of System Initiative and creator of Swamp, about what happens when AI agents change the entire shape of software development. We discuss how he went from an 18-person team down to five and shipped Swamp 900 times in four weeks, why he brought User Acceptance Testing (UAT) testing back from the 90s, why software architecture (and domain-driven design) suddenly matters more than knowing how to write code, the live demo where I pointed Swamp at my Proxmox box and watched it write its own automation (blew my mind!!), and why he’ll never accept a pull request to Swamp, ever.
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
- Tailscale – Adam loves Tailscale! Easy, secure, identity-based access to anything. Tailscale deploys quickly and enables Zero Trust access to any resource on your network. From CI/CD runners across multi-cloud environments, to SaaS tools and infrastructure, Tailscale connects it all, seamlessly.
- RWX – CI/CD platform for high velocity teams. When agents help developers write code in minutes, validation becomes your bottleneck. RWX gives agents programmatic control, sub-second cached builds, and semantic outputs they can act on. No commit required. Just iterate until CI passes, then push.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
Featured
- Swamp Club
- Swamp manual
- Swamp extensions
- Swamp leaderboard
- Swamp on GitHub
- Swamp extensions on GitHub
- System Initiative
- System Initiative on GitHub
- Chef Infra
- Proxmox VE
- QEMU
- Grafana
- Honeycomb
- Better Auth
- TypeScript
- Talos Linux
- Ubiquiti
- DigitalOcean
- Hetzner Cloud
- Amazon S3
- Incus
- Kubernetes
- Rebuilding DevOps from the ground up
- From Chef to System Initiative
- From Chef to System Initiative (remastered)
- The war for the soul of open source
- OSCON
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Bitwarden CLI compromised (News)
Bitwarden’s CLI got hit by the Checkmarx supply-chain campaign, TypeScript 7.0 beta lands with the Go-rewritten compiler running ~10x faster than 6.0, and pgBackRest lost its maintainer of thirteen years …
Show notes
Bitwarden’s CLI got hit by the Checkmarx supply-chain campaign, TypeScript 7.0 beta lands with the Go-rewritten compiler running ~10x faster than 6.0, and pgBackRest lost its maintainer of thirteen years leaving anyone running production Postgres with a real dependency-trust task this week. We’ve also got Ubuntu 26.04 LTS shipping with TPM-backed full-disk encryption, and Matz dropping Spinel as an AOT path that takes Ruby to native binaries. This week was a good reminder that the tools we depend on are all moving at once. Security, performance, and maintenance aren’t isolated threads.
Changelog++ members save 2 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
Featuring:
Chapters
Loading chapters …
Exploring with agents (Interview)
With Amelia Wattenberger
Today on the show I’m talking with Amelia Wattenberger — designer, data-viz veteran, ex-GitHub Next, and now designing Intent at Augment Code. What if the last 30% of any software project is about to become the …
Show notes
Today on the show I’m talking with Amelia Wattenberger — designer, data-viz veteran, ex-GitHub Next, and now designing Intent at Augment Code. What if the last 30% of any software project is about to become the hardest part you’ve ever done? That’s the argument Amelia is making today. We discuss the identity crisis developers are having as agents take over the keyboard, the epic redesign of developer tooling in this agent-first world, the arc from autocomplete to chat to CLI back to UI, why Intent treats a workspace as their core primitive not a chat thread, the tradeoffs between one-worktree-per-agent vs. one-worktree-per-task, and why she thinks prototyping just got easier but finishing got harder.
Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
- NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog
- RWX – CI/CD platform for high velocity teams. When agents help developers write code in minutes, validation becomes your bottleneck. RWX gives agents programmatic control, sub-second cached builds, and semantic outputs they can act on. No commit required. Just iterate until CI passes, then push.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
- GitHub Copilot — the launch that kicked off this era (mentioned ~12×)
- GitHub Next — GitHub’s R&D team; where Amelia worked
- GitHub Actions
- Intent — Augment Code’s new workspace-first agent app that Amelia is building (the core product discussion)
- Augie — Augment’s agent
- Claude Code
- Codex
- Notion AI
- VS Code
- Incus — system-level containers/VMs; the Canonical LXD fork
- Proxmox — Adam’s hypervisor platform for the sandbox
- ZFS — storage layer Incus is built on
- Bun — JavaScript runtime
- Rust
- Go
- Ruby on Rails
- SvelteKit
- Svelte
- TypeScript
- TanStack Start
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Astral has been acquired by OpenAI (News)
Astral is joining OpenAI, which says a lot about where the center of gravity is moving for developer tools, LiteLLM got hit by a nasty supply-chain attack, and OpenCode blew up as the latest serious open source …
Show notes
Astral is joining OpenAI, which says a lot about where the center of gravity is moving for developer tools, LiteLLM got hit by a nasty supply-chain attack, and OpenCode blew up as the latest serious open source swing at the coding-agent stack. We’ve also got Rust doing a very public reality check on its own pain points, WorkOS pushing AuthKit into CLI auth, Ryan Lizza using AI to build an open source TurboTax alternative, and a fresh httpx fork that turns open source maintenance drama into a real dependency story. If nothing else, this week was a good reminder that tools, trust, and control all move together.
Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!
Sponsors:
- WorkOS – Auth for CLI with AuthKit from WorkOS — Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com
Featuring:
Chapters
Loading chapters …
From Tailnet to platform (Interview)
With David Carney
Adam talks with Tailscale co-founder and Chief Strategy Officer David Carney about where Tailscale is headed next: TSIDP, TSNet, multiple tailnets, and Aperture. They get into clickless auth (via TSIDP), TSNet …
Show notes
Adam talks with Tailscale co-founder and Chief Strategy Officer David Carney about where Tailscale is headed next: TSIDP, TSNet, multiple tailnets, and Aperture. They get into clickless auth (via TSIDP), TSNet apps, multiple tailnets for isolation and control, and Aperture, Tailscale’s private AI gateway for API key management, observability, and agent security.
Changelog++ members save 8 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow.
- NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog
- Squarespace – Turn your expertise into a business with the all-in-one platform for websites, services, and getting paid. Use code CHANGELOG to save 10% on your first website purchase.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
Show Notes:
Send an email to David ~> [email protected]
Mentioned in this episode- Tailscale
- Aperture by Tailscale
- TSIDP
- TSNet
- Multiple tailnets
- Tailnet policy file syntax
- Model Context Protocol (MCP)
- MCP specification
- Proxmox VE
- Incus
- OIDC / OpenID Connect
- OAuth 2.0
- Okta
- Microsoft Entra ID
- Google Workspace
- Keycloak
- Salesforce
- Anthropic
- Amazon Bedrock
- Oso
- Cerbos
- Go
- GopherCon
- Simon Willison
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Big change brings big change (News)
This week’s been wild — Iran bombed AWS data centers to take down Claude, OpenAI dropped GPT-5.4 (and it’s seriously good for coding), and living brain cells are literally playing DOOM. We’ve also got a …
Show notes
This week’s been wild — Iran bombed AWS data centers to take down Claude, OpenAI dropped GPT-5.4 (and it’s seriously good for coding), and living brain cells are literally playing DOOM. We’ve also got a heartfelt take on what it feels like to be a 10x engineer in the age of AI, plus some cool new tools like Handy for speech-to-text and web haptics. Oh, and new MacBook Pros with M5 Pro and M5 Max are up for pre-order. Try not to impulse buy (or do).
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
- Sonatype – Develop software fearlessly. Find out how at sonatype.com.
Featuring:
Chapters
Loading chapters …
Finale & Friends (Friends)
Adam and Jerod get into the news, Jerod officially retires from the pod (and Changelog), plus a bonus for our Changelog++ subs! Join the discussionChangelog++ members get a bonus 16 minutes at the end of this …
Show notes
Adam and Jerod get into the news, Jerod officially retires from the pod (and Changelog), plus a bonus for our Changelog++ subs!
Changelog++ members get a bonus 16 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow.
- Squarespace – Turn your expertise into a business with the all-in-one platform for websites, services, and getting paid. Use code CHANGELOG to save 10% on your first website purchase.
- Notion – Custom Agents that automate the busywork so your team can focus on real work. Try them free at notion.com/changelog
Featuring:
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
- Ladybird adopts Rust, with help from AI - Ladybird
- The JavaScript Oxidation Compiler
- Become an Oxc Sponsor | The JavaScript Oxidation Compiler
- Boshen (@boshen_c) / X
- Am I the only one who genuinely prefers on-prem? : r/devops
- The Software Development Lifecycle Is Dead | Boris Tane
- THE 2028 GLOBAL INTELLIGENCE CRISIS
- Anish Acharya on X: “a different way this could go down…”
- The Mythical Agent-Month – Wes McKinney
- NanoClaw - Secure AI Agent for WhatsApp, Telegram & More
- Zed — Agent Client Protocol
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Opus 4.5 changed everything (Interview)
With Burke Holland
Burke Holland works on GitHub Copilot by day and codes with his AI agents always. Early January, Burke posted about how Opus 4.5 changed everything. We were all still buzzing from the holiday-season 2x usage …
Show notes
Burke Holland works on GitHub Copilot by day and codes with his AI agents always. Early January, Burke posted about how Opus 4.5 changed everything. We were all still buzzing from the holiday-season 2x usage bump Claude gave us, and Opus 4.5 felt like a genuine step function in capability. Burke and I get into all the details. Opus 4.5 may have started the fire, but GPT-5.3 Codex is certainly living up to the hype.
Changelog++ members get a bonus 17 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow.
- Squarespace – Turn your expertise into a business with the all-in-one platform for websites, services, and getting paid. Use code CHANGELOG to save 10% on your first website purchase.
- Notion – Custom Agents that automate the busywork so your team can focus on real work. Try them free at notion.com/changelog
Featuring:
Show Notes:
- Opus 4.5 is going to change everything
- Jon Gjengset Explains Rust 2026
- How we rebuilt Next.js with AI in one week Rebuilding Next.js using AI in a single week
- The era of the Small Giant (Changelog #673)
- Layercode — Voice AI infrastructure for TypeScript developers
- Diffs — An open source diff and code rendering library
- Pierre Computer Company
- Code Storage
- Entire — Developer platform from former GitHub CEO Thomas Dohmke
- Tigris Data
- @traskjd tweet
- GitHub Copilot
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
The mythical agent-month (News)
Wes McKinney on the mythical agent-month, install Peon Ping to employ a Peon today, Andreas Kling explains why Ladybird is adopting Rust, Cloudflare has a new MCP server that’s quite efficient, and Elliot …
Show notes
Wes McKinney on the mythical agent-month, install Peon Ping to employ a Peon today, Andreas Kling explains why Ladybird is adopting Rust, Cloudflare has a new MCP server that’s quite efficient, and Elliot Bonneville thinks the only moat left is money.
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
- Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow.
Featuring:
Chapters
Loading chapters …
Selling SDKs in the era of many Claudes (Interview)
With Steve Ruiz
Steve Ruiz joins us for a deep-dive on tldraw (a very good free whiteboard) and the business he’s built selling SDKs that help others build very good whiteboards (and more) with tldraw’s high-performance web …
Show notes
Steve Ruiz joins us for a deep-dive on tldraw (a very good free whiteboard) and the business he’s built selling SDKs that help others build very good whiteboards (and more) with tldraw’s high-performance web canvas.
Along the way, we discuss the excitement/fear we share about keeping our agents busy, how SDK and infra companies are affected differently by agentic software than SaaS companies, how Steve is approaching the coming era of internal tooling, what will happen when we equip LLMs with an infinite canvas, and more.
Changelog++ members get a bonus 15 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Augment Code – Adam loves “Auggie” – Augment Code’s CLI that brings Augment’s context engine and powerful AI reasoning anywhere your code goes. From building alongside you in the terminal to any part of your development workflow.
- NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog
- Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase.
Featuring:
- Steve Ruiz – Website, LinkedIn, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
- tldraw.com
- tldraw.dev
- Remarkable: the paper tablets for focused work
- Agent starter kit • tldraw docs
- tldraw fairies
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
All the Claw things (News)
Peter Steinberger joins OpenAI, ZeroClaw is “claw done right”, MimiClaw runs on a $5 chip, Steve Yegge on managing the AI Vampire, and the day the telnet died. View the newsletterJoin the discussionChangelog++ …
Show notes
Peter Steinberger joins OpenAI, ZeroClaw is “claw done right”, MimiClaw runs on a $5 chip, Steve Yegge on managing the AI Vampire, and the day the telnet died.
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
Featuring:
Chapters
Loading chapters …
Han shot first (Friends)
With Brett Cannon
Our ol’ friend, Brett Cannon, is back to talk all things Python. But first! Star Wars, Machete Order, Lost, Babylon 5, Game of Thrones, Murderbot, Ted Lasso, Project Hail Mary, David Attenborough, perpetual …
Show notes
Our ol’ friend, Brett Cannon, is back to talk all things Python. But first! Star Wars, Machete Order, Lost, Babylon 5, Game of Thrones, Murderbot, Ted Lasso, Project Hail Mary, David Attenborough, perpetual voice rights, and the AI uncanny valley.
Changelog++ members save 4 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price.
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
- Brett Cannon – Website, GitHub, LinkedIn, Bluesky, Mastodon
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
- What is the Star Wars Machete Order?
- Pep 665 (lock file format)
- python-build-standalone
- Astral: high-performance Python tooling
- Pypi: Page Not Found
- Incus documentation
- Python/prebuilt-cpython
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Building the machine that builds the machine (Interview)
With Paul Dix
Paul Dix joins us to discuss the InfluxDB co-founder’s journey adapting to an agentic world. Paul sent his AI coding agents on various real-world side quests and shares all his findings: what’s going to prod …
Show notes
Paul Dix joins us to discuss the InfluxDB co-founder’s journey adapting to an agentic world. Paul sent his AI coding agents on various real-world side quests and shares all his findings: what’s going to prod, what’s not, and why he’s (at least for a bit) back to coding by hand.
Update: He’s back to letting the AIs write code, but with a lot more oversight. For now…
Changelog++ members save 4 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price.
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
- Paul Dix – GitHub, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
- Build the machine that builds the machine
- Paul dix on X: “2026: the great engineering divergence”
- InfluxData
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Vouch for an open source web of trust (News)
Mitchell Hashimoto’s trust management system for open source, Nicholas Carlini has a team of Claudes build a C compiler, Stephan Schwab recounts the history of attempted developer replacement, NanClaw is an …
Show notes
Mitchell Hashimoto’s trust management system for open source, Nicholas Carlini has a team of Claudes build a C compiler, Stephan Schwab recounts the history of attempted developer replacement, NanClaw is an alternative to OpenClaw, and Sophie Koonin can’t wrap her head around so many people going so hard on LLM-generated code.
Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!
Sponsors:
- Sonatype – Develop software fearlessly. Find out how at sonatype.com.
Featuring:
Chapters
Loading chapters …
It's a renaissance woman's world (Friends)
With Amal Hussein
Amal Hussein returns to tell us all about her new role at Istari, what life is like outside the web browser, how she’s helping ambitious orgs in aerospace, what the SDLC looks like in 2026, and a whole lot …
Show notes
Amal Hussein returns to tell us all about her new role at Istari, what life is like outside the web browser, how she’s helping ambitious orgs in aerospace, what the SDLC looks like in 2026, and a whole lot more. Wait, moon vacuums?!
Changelog++ members get a bonus 21 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
- Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price.
- NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog
Featuring:
- Amal Hussein – GitHub, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
- Istari: level the digital playing field
- AWS Re:invent keynote Blue Origin
- Frictionless book
- Jevons paradox
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Setting Docker Hardened Images free (Interview)
With Tushar Jain
In May of 2025, Docker launched Hardened Images, a secure, minimal, production-ready set of images. In December, they made DHI freely available and open source to everyone who builds software. On this episode …
Show notes
In May of 2025, Docker launched Hardened Images, a secure, minimal, production-ready set of images. In December, they made DHI freely available and open source to everyone who builds software. On this episode, we’re joined by Tushar Jain, EVP of Engineering at Docker to learn all about it.
Changelog++ members get a bonus 6 minutes at the end of this episode and zero ads. Join today!
Sponsors:
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
- Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price.
- NordLayer – Toggle-ready network security for modern businesses. Get an exclusive offer: up to 22% off NordLayer yearly plans plus 10% on top with the coupon code changelog-10-NORDLAYER. Try it risk-free with a 14-day money-back guarantee at nordlayer.com/thechangelog
- Fly.io – The home of Changelog.com — Deploy your apps close to your users — global Anycast load-balancing, zero-configuration private networking, hardware isolation, and instant WireGuard VPN connections. Push-button deployments that scale to thousands of instances. Check out the speedrun to get started in minutes.
Featuring:
- Tushar Jain – LinkedIn
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
The tech monoculture is finally breaking (News)
Jason Willems believes the tech monoculture is finally breaking, Don Ho shares some bad Notepad++ news, Tailscale’s Avery Pennarun pens a great downtime apology, Milan Milanović explains why you can only code 4 …
Show notes
Jason Willems believes the tech monoculture is finally breaking, Don Ho shares some bad Notepad++ news, Tailscale’s Avery Pennarun pens a great downtime apology, Milan Milanović explains why you can only code 4 hours per day, and Addy Osmani on managing comprehension debt when leaning on AI to code.
Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!
Sponsors:
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
Featuring:
Chapters
Loading chapters …
Natural born SaaS killers (Friends)
We discuss the buzz around Clawdbot / MoltBot / OpenClaw, how app subscriptions are turning into weekend hacking projects, why SaaS stocks are crashing on Wall Street, and what it all means. Join the …
Show notes
We discuss the buzz around Clawdbot / MoltBot / OpenClaw, how app subscriptions are turning into weekend hacking projects, why SaaS stocks are crashing on Wall Street, and what it all means.
Changelog++ members save 5 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
- Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price.
- Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase.
Featuring:
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
- OpenClaw — personal AI assistant
- Mintlify
- Macrumors Buyer’s Guide: Mac Mini
- Your app subscription is now my weekend project
- The future of software engineering is SRE
- Why SaaS stocks are crashing on Wall Street
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Securing npm is table stakes (Interview)
With Nicholas C. Zakas
As the creator and long-time maintainer of ESLint, Nicholas Zakas is well-positioned to criticize GitHub’s recent response to npm’s insecurity. He found the response insufficient, and has other ideas on how …
Show notes
As the creator and long-time maintainer of ESLint, Nicholas Zakas is well-positioned to criticize GitHub’s recent response to npm’s insecurity. He found the response insufficient, and has other ideas on how GitHub could secure npm better. On this episode, Nicholas details these ideas, paints a bleak picture of npm alternatives like JSR, and shares our frustration that such a critical piece of internet infrastructure feels neglected.
Changelog++ members save 6 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Namespace – Speed up your development and testing workflows using your existing tools. (Much) faster GitHub actions, Docker builds, and more. At an unbeatable price.
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
- Squarespace – A website makes it real! Use code CHANGELOG to save 10% on your first website purchase.
Featuring:
- Nicholas C. Zakas – Website, GitHub, LinkedIn, Bluesky, Mastodon, X
- Adam Stacoviak – Website, GitHub, LinkedIn, Mastodon, X
- Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X
Show Notes:
Something missing or broken? PRs welcome!
Chapters
Loading chapters …
Clawdbot triggers a run on Mac Minis (News)
Clawdbot drives Mac Mini sales, Swizec Teller on the future of software engineering being SRE, Daniel Stenberg decided to end curl’s bug bounty program, zerobrew takes some of the best ideas from uv and applies …
Show notes
Clawdbot drives Mac Mini sales, Swizec Teller on the future of software engineering being SRE, Daniel Stenberg decided to end curl’s bug bounty program, zerobrew takes some of the best ideas from uv and applies them to Homebrew, and Phil Eaton on LLMs and your career.
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
- Tiger Data – Postgres for Developers, devices, and agents The data platform trusted by hundreds of thousands from IoT to Web3 to AI and more.
Featuring:
Chapters
Loading chapters …
These are the latest 40 of 1,019 episodes. You’ll find older episodes in the podcast’s feed.
Similar podcasts
More Technology podcasts
Is this your podcast?
Confirm it with an entry in your feed: you get a code here, add it as podcast:txt to the channel of your feed, and we check it. Your podcast is then shown as “verified” on SoundNode.