5 min read
Run TypeScript 7 Without Breaking typescript-eslint
Fix TypeScript 7 ESLint peer conflicts and Cjs crashes by running TypeScript 7 beside the TypeScript 6 compatibility API, with a verified npm setup.
Read article
Topic
Package management and CI
Practical guidance for reliable dependency management, package-manager upgrades, lockfiles, and CI safeguards.
5 min readUpdated
Next.js npm Audit Flags sharp: Test the Override on Vercel
Triage the sharp advisory in Next.js 16.2, apply a package-manager override carefully, and test the real image path before deploying on Vercel.
Read article
5 min read
Node 20 Is EOL: Find Every Runtime Pin Before a Failed Deploy
Node 20 is EOL. Audit package metadata, CI, Docker, and host settings, choose a supported target, then verify every runtime pin before a deploy fails.
Read article
3 min readUpdated
Lint wrangler.jsonc in GitHub Actions Before You Deploy
Run Cloudflare Workers config checks in GitHub Actions, annotate exact Wrangler lines, scan monorepos, and upload SARIF when you need it.
Read article
4 min readUpdated
Compare Preview and Production Before You Merge
Catch preview deployment drift in status codes, redirects, headers, cookie attributes, canonical URLs, and robots metadata before production.
Read article
5 min read
Upgrade Vite 7 to Vite 8 Without a Surprise
Use a safe Vite 7 to Vite 8 migration path: check Node support, isolate Rolldown, update optimizer config, and test HMR and production output.
Read article
8 min readUpdated
1Password for Docker Compose: Protect Secret Zero
Use 1Password with Docker Compose without hiding the hard part: protect the service-account token, prefer file secrets, and test revocation and recovery.
Read article
11 min readUpdated
1Password in GitHub Actions: Protect the Bootstrap Token
Use 1Password load-secrets-action with a scoped service account, then isolate fork pull requests, job outputs, environments, logs, and token rotation.
Read article
11 min readUpdated
1Password vs Bitwarden for Developers: Choose by Workflow
Compare 1Password and Bitwarden for developer workflows: SSH agents, CLIs, local and CI secrets, self-hosting, EU regions, pricing, and recovery.
Read article
6 min read
Is GitKraken Worth It? Measure the Time Before You Pay
Run a two-week GitKraken trial using conflict work, routine Git time, worktrees, team requirements, and a transparent subscription break-even calculation.
Read article
4 min readUpdated
pnpm 11 Ignored Your Overrides: Move Config Before CI Rewrites It
pnpm 11 moved project settings out of package.json. Migrate overrides and build policy to pnpm-workspace.yaml before CI rewrites your lockfile.
Read article
1 min read
Fix Rollup’s “npm Has a Bug Related to Optional Dependencies” Error
Diagnose Rollup’s optional-dependency error, repair a suspect npm lockfile safely, and verify the fix in CI without assuming every npm version is affected.
Read article