GitHub The Download, 22 Apr 2022

Previous Meeting

⏯

youtube image

►

From YouTube: The Download: New Job, New Channel, DALL-E 2, Framework Laptop and more

Description

On this episode of The Download, Christina is back with a new job and a new channel - but the same great content, including:

0:00 Intro
0:15 New Job, New Channel https://youtube.com/github -- Like and subscribe our new home!
1:20 Git 2.36 https://github.blog/2022-04-18-highlights-from-git-2-36/
2:57 Dependabot Updates https://github.blog/2022-04-14-dependabot-alerts-now-surface-if-code-is-calling-vulnerability/
3:46 DALL-E 2 https://openai.com/dall-e-2/ and DALL-E's Instagram https://www.instagram.com/openaidalle
5:00 Framework Laptop Mainboard https://frame.work/blog/mainboard-availability-and-open-source-release and GitHub Repo https://github.com/FrameworkComputer/Mainboard
6:15 Christina's Pick of the Wee Vectrex Mini DIY Build https://gizmodo.com/3d-printed-raspberry-pi-mini-vectrex-1848799178 and Brendon's video log https://www.youtube.com/watch?v=NwqCw-uSZJ0

Presented by: @ChristinaWarren

As always, feel free to leave us a comment below and don't forget to subscribe: http://bit.ly/subgithub

Thanks!

Connect with us.
Facebook: http://fb.com/github
Twitter: http://twitter.com/github
LinkedIn: http://linkedin.com/company/github

About GitHub
GitHub is the best place to share code with friends, co-workers, classmates, and complete strangers. Millions of people use GitHub to build amazing things together. For more info, go to http://github.com

A

I got a new job, we'll also talk about ai generated art, miniaturized, retro consoles and more coming up on this episode of the.

A

Download welcome back to another episode of the download, I'm your host, christina warren senior developer, advocate at github. Yes, that's right. I got a new job and, although I'm no longer at microsoft, we still wanted to continue this show which, for the newcomers, is a weekly roundup of the latest developer news alongside some pop culture, some nerdy tech and world clones, because 2022 has been very, very big.

A

It's been a very big year for wordle, so anyway, along with a new job, the download now has a new home, which is right here on the github youtube channel. So please like and subscribe turn on the notification bell. You know the drill.

A

um The plan is for the show to remain pretty similar to what it was like before, uh but please let me know what type of content or news you would like to see more of in the comments down below, and I'm super excited about my new job, but I'm equally as excited to keep this show going and as for my hoodie this week, it is fast r.I.p pour one out for the startup. It truly lived up to its name.

A

um You know went fast, died fast, lived fast, all right, let's get into the news, so first things uh first, since I am now at github, it makes sense to share that git 2.36 is now available, and one of the biggest features in this release is the new dash dash remerge diff option and, as taylor explains in the blog post, that I've uh got linked below announcing this release.

A

This adds some nuance to the git, show command and makes showing diffs in commits with merge conflicts more understandable and in addition to that feature, f sync configuration is now more flexible, which should be really useful for server operators and there's now some new, stricter repository ownership checks. um This was a feature that was um also released as a security patch last week for git 2.35 and earlier, and basically starting with git, 2.35.2 and obviously continuing with this release.

A

Git has changed the default behavior to prevent users from executing git commands in a repository, that's owned by a different user than the current one, and this is important from a security perspective, and I think that as a default, this makes sense. But although there was a way to bypass the check using the new, safe dot directory configuration to include trusted, repos owned by other users, there's now an option to set a value to consider all git repos safe regardless of owner.

A

So it effectively turns that new feature off, and I know that some users and organizations had some of their ci and cd workflow stuff break or just found the new behavior onerous. So I think it's great that it's now easier to configure for your needs and uh one less thing to put someone off from upgrading. There are a bunch of new smaller updates.

A

uh Two more details are linked down below uh in the shown in the description, all right, moving on uh the topic of github dependabot, which is a tool that automates and checks for out-of-date or insecure libraries in your dependencies and then basically generates a pull request so that you can update them. It has a new feature that will offer even more insight into how your code might be impacted by vulnerability. So now, dependable alerts will also surface whether your code is calling a vulnerable code path.

A

So you can more effectively deal with those types of alerts and it's using github's precise code navigation engine to figure out. Basically, if a repo is directly calling a vulnerable function, I've got a blog post linked below that goes into the details of how this feature works. It's actually pretty cool um and it's starting uh with support for 79 vulnerable python advisories from pip right now, but the plan is to expand it to more things and more ecosystems in the future.

A

All right now I want to talk about one of the coolest use cases for ai that I've ever seen. Ai generated art. That's right!

A

I'm talking about dali 2, which is from open ai, and it is an ai system that can create realistic images of art, using descriptions in natural language, and the name is a port renault of wall-e and salvador dali, because the use of ai creates these, like surrealist images and as the name suggests, this is the second version of the system and it um it isn't open to more than just a select group of researchers right now, but there's a wait list which I'm definitely on, but the image examples that the team has shown off are just incredible and also incredibly bizarre.

A

For instance, teddy bears working on a new ai research underwater with 1990s technology produces the image which is just unbelievable, or what about this one? A bowl of soup that looks like a monster knitted out of wool.

A

It can even be used to edit existing images or create stylistic variations, and I know that this kind of seems sort of dystopic, but as a lover of art and cereal art at that. I think this is incredible blows my mind. So I've got a link to the dali webpage, their instagram. If you want to learn more and see more examples, okay, moving on from the surreal to just the plain cool I want to give a shout out to the team over at framework now framework is a startup that makes x86 laptops.

A

But the idea is that the laptop is easy to repair upgrade or tinker with, and I actually bought one of these last year, and it's really amazing, especially as a first product from a new company and the whole idea framework is that you can easily replace the screen or the wi-fi module or the keyboard or any of the other components, including the main board yourself without having to deal with glue or weird screws or onerous right repair processes, and they actually designed it.

A

So that you, if you wanted to take the main board out of the laptop which is like an 11th gen, intel laptop ship, um and you wanted to put in some ram and an ssd and connect an external power supply. You could just use it as an in as an independent computer from the rest of the laptop shell. You know kind of like an intel nook.

A

Well, now framework is actually selling the main board on its own, but what I like even better, is that they've open sourced the cad file and all the electrical documentation and they've put it up on github and they even have 3d. um You know, I guess designs for cases you can print out to. You know, store it yourself. If you wanted to anyway, I've got a link in the show notes down below to framework their blog post and their github repo, it's great and now it's time for my pick of the week.

A

So I discovered this through my old pa, my old pal andrew liszewski, over at gizmodo andrew, thank you as always for finding the best stuff. um Okay. So over the past five years, or so, we've seen a ton of miniaturized video game consoles, but this is one for a system that I've never even heard of, and I consider myself something of a video game historian.

A

So in the early 1980s there was a system called the vectrex which had its own special crt display, and it could draw scan lines in any direction to simulate the appearance of 3d.

A

um Now, unfortunately, vectrex was the victim of the 1983 video game crash, damn you et, um but it still has a pretty robust community and so brynden over at retro game on basically created a log of building his own mini vectrex, using a raspberry, pi, 2 and some other stuff, and I gotta say I've got a link to to brennan's, write it below it's just so cool to see what he's done, and um it got me thinking about like what kind of miniaturized video game consoles.

A

I would like to see in the future, I think for me. I want to see the n64 most of all, but I'd love to hear your thoughts in the comments down below and also. Let me know about what comments you have on any of our other stories and and thoughts on what kind of news you want to see more of all right. Well, that does it for me.

A

If you liked this episode go ahead, and you know like it and also please subscribe to the github youtube channel, because you'll be getting even more great dev content, and we will see you next time.