Aaron Goldenthal

A summary of the year 2025 for this blog and my various software projects, with some predictions for 2026. https://aarongoldenthal.com/posts/the-year-in-review-2025/

Recent account takeovers and attacks on package registries are a wake-up call: it's time to raise the bar on authentication and secure publishing practices. Find out what npm is doing—and what steps you can take—to help secure the open source supply chain: github.blog/security/sup...

Google has officially stopped maintaining Kaniko, but Chainguard has taken over with a new fork, and this post details an available container image. https://aarongoldenthal.com/posts/google-kaniko-is-dead-long-live-chainguard-kaniko/

An overview of a GitLab-based system to allow Renovate to respond to repository actions using a Cloudflare Worker to trigger of a CI pipeline. https://aarongoldenthal.com/posts/configure-renovate-to-respond-to-gitlab-repository-actions/

Glad to see #kaniko is not dead yet... www.chainguard.dev/unchained/fo...

We have some news to share with you. 🥄 Today we took legal action to challenge our termination, filing an appeal with the U.S. Merit Systems Protection Board. We did this because we believe the elimination of 18F violated safeguards that exist to protect a nonpartisan civil service.

Playwright MCP: A way for AI agents to control browsers without screenshots or vision models. See a live demo of an AI agent navigating GitHub and starring a repo! youtu.be/2716IUeCIQo?... #PlaywrightMCP #AI #DevTools

Most of what we call "tech" is about getting the right information into a database and trying to prevent the wrong person from reading or updating it.

Yet more proof that Elon's claims of modernizing tech in the Federal government are just lies. www.nextgov.com/people/2025/...

I got laid off today, with the rest of 18F. 18F was an elite federal software shop. We made gov't websites work better, more efficiently for the American people. We saved taxpayers from getting screwed over by contractors. And were fired for it. We made this website to tell our story: 18f.org

A summary of the year 2024 for this blog and my software projects, with some predictions for 2025. https://aarongoldenthal.com/posts/the-year-in-review-2024/

Eleventy 3.0.0 is now available! github.com/11ty/elevent... Over a year of work, 22 pre-releases, so many contributors. Thank you to our entire community—y’all make this project possible. ❤️

GitLab deprecates CodeClimate-based Code Quality analysis due to security concerns, slow performance, and limited analysis engines. https://aarongoldenthal.com/posts/a-better-gitlab-code-quality---part-1--goodbye-codeclimate/

An implementation for identifying new posts in an Eleventy site built on GitLab pages and sending post-specific notifications (part 2 of 2). https://aarongoldenthal.com/posts/notifications-for-new-eleventy-posts-in-gitlab-part-2/

An implementation for identifying new posts in an Eleventy site built on GitLab pages and sending post-specific notifications (part 1 of 2). https://aarongoldenthal.com/posts/notifications-for-new-eleventy-posts-in-gitlab-part-1/

This post details an alternative to GitLab Code Quality's duplicate or similar code analysis, which uses PMD Copy/Paste Detector (CPD) instead of Code Climate. https://aarongoldenthal.com/posts/gitlab-code-quality-duplication-analysis-with-pmd-cpd/

Thanks NPM for finally making this possible...