Stop trusting mutable references: how Eclipse Foundation projects should harden GitHub Actions after the Trivy compromise
On March 19, 2026, an attacker used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77...
Join us in Brussels: Meet the OCX 2026 keynote speakers
As we approach Open Community Experience (OCX) 2026, taking place 21–23 April in Brussels, I’ve been reflecting on this year’s...
Hashtag Jakarta EE #325
Welcome to issue number three hundred and twenty-five of Hashtag Jakarta EE! I am on my way home from JavaOne...
JavaOne 2026
If I should pick one conference that has been instrumental in defining my career, it would be JavaOne. I have...
From the pit wall to open collaboration: Welcoming Formula 1 strategist Ruth Buscombe to OCX 2026
Open Community Experience (OCX) brings together developers, industry leaders, researchers, and open source communities to explore how open technologies are...
Hashtag Jakarta EE #324
Welcome to issue number three hundred and twenty-four of Hashtag Jakarta EE! Last week, I was at JavaLand 2026. It...
JavaLand 2026
JavaLand 2026 was finally back in the theme park after the last two year’s disaster at a car racing track...
Retiring Inactive Committers
Project leads have the ability to retire committers: this is a power that must be used responsibly. The most common...
Devnexus 2026
I can’t believe this was the ninth time I was a speaker at Devnexus. The last couple of years, we...
Hashtag Jakarta EE #323
Welcome to issue number three hundred and twenty-three of Hashtag Jakarta EE! Right now, I am on my way home...
Why promising open source projects need support beyond academia
Many of the most influential open source projects begin in academic environments. Universities and higher education institutions are well suited...
What production-ready AI agent systems look like
Many discussions about open source AI agents start with the same image: a single assistant responding to prompts. That model...