Pro Coder Show

Greg L. Turnquist

Actionable advice to accelerate your career! If you want to learn even more about the overall life of being a software developer, then join at https://procoder.io/join and get a FREE e-book!

  1. 5h ago

    EP 68: Give me more, Scotty!

    GitHub's new EVP stood up at Universe this week and said the output that matters isn't code, it's completed work. Then the Octoverse report landed: merged pull requests tripled in under a year, to 220 million a month. Commits more than tripled. Two weeks ago I covered a Harvard study that found more AI code and no matching rise in finished work. So which is it? On this episode of The Pro Coder Show, everything is up for grabs. Current readings on new code is off the charts. At the same time, our metrics for making estimates are flat out unreliable. How are we to make sense of it? Tune in and find out! ====Don't forget to grab your copy of 12 Rules For Pro Coders today!==== Join this channel to get access to perks STORIES IN THIS EPISODE: 📰- GitHub Blog: Universe keynote- GitHub Blog: Octoverse 2026- Bleeping Computer: critical Linux kernel flaw- Bleeping Computer: Northflank breach and AI API key abuse- Bleeping Computer: Railway warns devs to rotate secrets- InfoQ: The Ladder Is Missing Rungs GET MORE: 🎉- HOW do I interview for a job?- A FREE tech ebook: procoder.io/join- Listen on Spotify, Apple Podcasts, and more- BE PROFESSIONAL: store.procoder.io DISCLOSURE: All opinions stated here are mine and do not necessarily reflect those of any team or employer. Any usage of "Spring", "Spring Boot", "VMware", "Pivotal", or anything else is completely unaffiliated with its owners. From time to time, I may post affiliate links for products I enjoy using; they cost you nothing extra and I may get a small commission. #procoder © 2026 Greg L. Turnquist, All Rights Reserved

  2. Oct 24

    EP 67: Patch the Runtime, Not Just the App

    This week, the fix for two critical PHP flaws wasn't in WordPress, a plugin, or your framework. It was in the PHP runtime itself. Plenty of teams patch their apps religiously and never look at the layer underneath. On this episode of the Pro Coder Show, I walk through PHP2Shell: what the two CVEs fix, why the underlying problem sat since a 2024 audit, and how word got out before the patch. Then a LiteLLM release that shipped a credential stealer through Python startup hooks, and why a key you deleted in the next commit is still in your git history. A Harvard study finds AI tools raise code volume without a matching rise in completed work, and I dig into whether the average hides who's actually speeding up. Plus Cloudflare's TSRS, a Rust port of the TypeScript compiler that isn't a fork. I wrap up with some Pro Coder commentary on patching, process, and constant change. ====Don't forget to grab your copy of 12 Rules For Pro Coders today at https://www.procoder.io/books/12-rules-for-pro-coders/?video=[VIDEO ID]!==== Join this channel to get access to perks: https://www.youtube.com/@ProCoderIO/join STORIES IN THIS EPISODE: 📰- PHP Foundation postmortem, via Simon Willison- Socket: PHP patches two critical RCE flaws- Cloudflare Blog: WAF protections for the PHP vulnerabilities- Socket: LiteLLM 1.107.0 compromise- InfoQ: Harvard/Jellyfish study on AI coding productivity- Cloudflare Blog: tsrs, a Rust port of TypeScript CORRECTIONS: 📝- I said 70% of the internet runs on Apache. The ~70% figure is PHP's share of websites whose server-side language W3Techs can identify.- I described LiteLLM as "doing Docker stuff." LiteLLM is a Python library and proxy for calling many LLM providers through one API. ALSO SEE: 👀✅ HOW do I interview for a job? https://youtu.be/oN_B22doViY RESOURCES: 👇- Order your copy of 12 Rules for Pro Coders at https://www.procoder.io/books/12-rules-for-pro-coders/?video=[VIDEO ID] today! GET MORE: 🎉- Get a FREE tech ebook at https://procoder.io/join- Listen on Spotify, Apple Podcasts, and more: https://podcast.procoder.io Do YOU uphold the Pro Coder motto, BE PROFESSIONAL? https://store.procoder.io DISCLOSURE: All opinions stated here are mine and do not necessarily reflect those of any team or employer. Any usage of "Spring", "Spring Boot", "Spring Framework", "VMware", "Pivotal", or anything else is completely unaffiliated with its owners. From time to time, I may post affiliate links for products I enjoy using. They don't cost you anything extra, and I may get a small commission. #procoder © 2026 Greg L. Turnquist, All Rights Reserved

  3. Oct 12

    EP 66: It's 10:00 PM at Night. Do You Know What You're Dependent Upon?

    Oracle's free window for Java 21 just closed. The Deno team is joining Cloudflare, and the Deno runtime now has a one-year clock on it. And an npm SDK for running AI-generated code in a sandbox shipped with a credential-stealing worm in its install hook. Three different stories, one question: do you know what your systems depend on? On this episode of the Pro Coder Show, I walk through what changed with Oracle JDK 21's license and why "just upgrade to Java 25" is harder to pitch than it sounds, what Cloudflare picking up Deno, Astro, and Vite means for the JavaScript ecosystem, and how the TensorLake compromise ran without anyone importing a thing. Then I dig into the fine print on cheap AI models, from Claude Haiku 5.5's new tokenizer to why spending caps should be on by default, and why open source maintainers like Sindre Sorhus are shutting off outside pull requests. I wrap up with some Pro Coder commentary on staying on top of constant change. ====Don't forget to grab your copy of 12 Rules For Pro Coders today at https://www.procoder.io/books/12-rules-for-pro-coders/?video=P3iUNy6mOIQ!==== Join this channel to get access to perks: https://www.youtube.com/@ProCoderIO/join STORIES IN THIS EPISODE: 📰- Foojay.io: The Java 21 doomsday clock countdown- Deno blog (Ryan Dahl): Deno is joining Cloudflare- Cloudflare Blog: Deno joins Cloudflare- Socket: TensorLake SDK compromise- Simon Willison on Claude Haiku 5.5- Anthropic: Claude Sonnet 5.5- Simon Willison: default hard budget caps- JavaScript Weekly #805 (Sindre Sorhus disables outside PRs)- JEP 540: Simple JSON API (Incubator) ALSO SEE: 👀✅ HOW do I interview for a job? https://youtu.be/oN_B22doViY RESOURCES: 👇- Order your copy of 12 Rules for Pro Coders at https://www.procoder.io/books/12-rules-for-pro-coders/?video=P3iUNy6mOIQ today! GET MORE: 🎉- Get a FREE tech ebook at https://procoder.io/join- Listen on Spotify, Apple Podcasts, and more: https://podcast.procoder.io- Follow me on Twitter: https://twitter.com/procodershow Do YOU uphold the Pro Coder motto, BE PROFESSIONAL? https://store.procoder.io DISCLOSURE: All opinions stated here are mine and do not necessarily reflect those of any team or employer. Any usage of "Spring", "Spring Boot", "Spring Framework", "VMware", "Pivotal", or anything else is completely unaffiliated with its owners. From time to time, I may post affiliate links for products I enjoy using. They don't cost you anything extra, and I may get a small commission. #procoder © 2026 Greg L. Turnquist, All Rights Reserved

  4. Oct 2

    EP 65: When An AI Agent Hits a Locked Door

    Every developer has hit a 403 and moved on. This week we found out what happens when an AI agent hits one: it keeps trying. According to Bleeping Computer, OpenAI research agents blocked while gathering public health statistics went looking for side doors, and one got into an Australian Medicare statistics portal. No patient data was involved, but there's a practical lesson for anyone building agents. I also cover new frontier model pricing from Anthropic and OpenAI, Spring's single-day "Patch Thursday," JDK 27 and Valhalla's value classes, a placeholder domain in dev docs that now serves malware, and why Zig is saying no to AI contributions. Then some Pro Coder commentary on what AI means for the craft. ====Grab your copy of 12 Rules For Pro Coders today!==== STORIES IN THIS EPISODE: 📰- Bleeping Computer: OpenAI agents probe an Australian Medicare site- The New Stack: AI agents probe vulnerabilities- Transluce findings- Simon Willison on Opus 5.5 and GPT-6- Spring Blog: Releasing Spring for modern challenges- Baeldung Java Weekly #664- JEP 401: Value Classes and Objects- Bleeping Computer: placeholder domain now serves ClickFix attacks- InfoQ: Andrew Kelley on Zig's no-AI policy GET MORE: 🎉- Get a FREE tech ebook- Join the YouTube channel for perks- HOW do I interview for a job?- BE PROFESSIONAL merch DISCLOSURE: All opinions are mine and do not necessarily reflect those of any team or employer. Any usage of "Spring", "Spring Boot", "Spring Framework", "VMware", "Pivotal", or anything else is unaffiliated with its owners. I may post affiliate links for products I enjoy; they cost you nothing extra, and I may get a small commission. #procoder · © 2026 Greg L. Turnquist, All Rights Reserved

  5. Apr 20

    EP 64: Do you really NEED software engineering anymore? // DevNexus 2026

    The word on the street amidst vibe coding and agents building whole systems and shutting down SaaS products is that software engineering as a profession is dead. Or at least, something you don't need bone up and study for 4 years anymore. But is that really true? On this episode of the Pro Coder Show, I sat down with Java Champion and Spring Advocate @DanVega and we were able to talk about what software fundamentals really mean in this day and age. ====Don't forget to grab your copy of 12 Rules For Pro Coders today at https://www.procoder.io/12-rules/offer?sourceId=G86HirIAh9k!==== Join this channel to get access to perks: https://www.youtube.com/@ProCoderIO/join ALSO SEE: 👀✅ HOW do I interview for a job? https://youtu.be/oN_B22doViY RESOURCES: 👇- Order your copy of 12 Rules for Pro Coders at https://12rules.io today! GET MORE: 🎉- Get a FREE tech ebook at https://procoder.io/join- Follow me on Twitter: https://twitter.com/procodershow Do YOU uphold the Pro Coder motto, BE PROFESSIONAL? https://store.procoder.io DISCLOSURE: All opinions stated here are mine and do not necessarily reflect those of any team or employer. Any usage of "Spring", "Spring Boot", "Spring Framework", "VMware", "Pivotal", or anything else is completely unaffiliated with its owners. From time to time, I may post affiliate links for products I enjoy using. They don't cost you anything extra, and I may get a small commission. #procoder © 2026 Greg L. Turnquist, All Rights Reserved

About

Actionable advice to accelerate your career! If you want to learn even more about the overall life of being a software developer, then join at https://procoder.io/join and get a FREE e-book!