Coding Tools
npm introduces stage-only tokens for safer automation
GitHub Changeloghigh confidence
Why it matters
- →Reduces risk of unauthorized or accidental package publishing in CI/CD pipelines.
- →Provides a concrete migration path away from insecure bypass-2FA tokens.
- →Enforces human-in-the-loop approval for production releases via 2FA.
npm has launched stage-only granular access tokens, allowing automated workflows to submit package versions for review without direct publish permissions. This change enforces a two-step release process where a maintainer must approve the staged version using two-factor authentication (2FA). The feature is designed as a migration path away from bypass-2FA tokens, which npm plans to disable entirely by January 2027. Implementation requires npm CLI 11.15.0 or later and Node.js 22.14.0 or later.
Read originalMore from GitHub Changelog
More in Coding Tools
Coding Toolscoding
llama.cpp b11036 adds CUDA 13 and ROCm 10.0
This release quietly closes the hardware gap for local inference by adding default builds for CUDA 13 and ROCm 10.0. NVIDIA users on newer driver stacks can finally run without workarounds, while AMD GPU owners get parity with the latest ROCm version. Apple Silicon support is explicitly disabled in this build, a notable regression for Mac users who need to wait for the next patch. The inclusion of OpenVINO and SYCL builds further cements llama.cpp as the universal runtime for diverse hardware, ensuring no major accelerator is left behind.
llama.cpp Releases
Coding Toolscoding
llama.cpp b11037 fixes GPU inference bugs
This release prioritizes stability over new features, addressing critical correctness issues in vector handling for GET_ROWS operations. By fixing vec4 alignment checks and updating CUDA libraries to versions 12.8 and 13.3, it ensures reliable performance across NVIDIA hardware on both Linux and Windows. The inclusion of ROCm 10.0 builds further solidifies AMD GPU support without requiring complex configuration. While no new model architectures are added, these fixes prevent silent corruption in local inference tasks that could otherwise go unnoticed.
