Today I passed my PPL checkride and will have my pilot certificate in a few days!

Workload Identity and staged publishing are now available on hex.pm. Publish from GitHub Actions without storing a key, and hold releases until a person approves them with 2FA. hex.pm/blog/announcin…

Hex v2.6 is out: policy overrides for a specific advisory, retirement reason or cooldown, mix hex.audit --policy to check mix.lock against your policy, 2FA requirements for organizations, reproducible package builds, and a faster mix deps.get.

hex.pm/blog/hex-v26-r…

ElixirConf-US video: Hex pentest, findings, the Ægis initiative securing our ecosystem.

com.erlef.org/wg/sec/2026/09…

Watch: Paraxial.io Founder Michael Lubas and EEF CISO Jonatan Männchen at ElixirConf US 2026 - Pentesting Hex: Real Findings from the Ægis Initiative @maennchen_ @ElixirConf

youtube.com/watch?v=_fER9b…

hex.pm is deprecating basic authentication on the API: hex.pm/blog/deprecati…

Hex v2.5 adds three layers of supply chain defense: security advisories in your terminal on mix deps.get, a release-age cooldown that withholds new versions until they’ve aged, and organization policies for filtered dependency fetching.

hex.pm/blog/hex-v25-r…

Wholeheartedly agree.

Also, after talking to people who have been "running loops", it is very clear that setting up the loop is a lot of work and takes tons of time, which almost no one is talking about.

If you automate the wrong things or in the wrong ways, they will crumble.

If we want to build software factories (still an if for me), how can we build good ones?

I think that’s the biggest gap in how people use LLMs right now. And I don’t know about you, but I think it all comes down to verification. 👇

germanvelasco.com/blog/draw-the-…

New HexDocs URLs: per-package subdomains
hex.pm/blog/hexdocs-p…

When I first posted jola.dev/posts/building… I got a lot of questions about whether I had tried mdex. Happy to say I've now switched over and it simplified my setup a bit! #ElixirLang #MyElixirStatus

Atom exhaustion is not just an old BEAM footgun.

As of today, 35% of CVEs published by the EEF CNA fall under uncontrolled resource consumption, with atom exhaustion being one of the recurring causes.

It’s well understood, documented, and preventable.

erlef.org/blog/security/…

🔒 The EEF, in collaboration with Alpha Omega, has completed the first comprehensive third-party security audit of the @hexpm.

This work is part of the ongoing efforts to strengthen security across the BEAM ecosystem under the Ægis initiative.

erlef.org/blog/eef/hex-s…

Securing @hexpm 🔐

Over the past months, a dedicated team conducted the first comprehensive third-party security audit of Hex.pm and its surrounding ecosystem.

This work was made possible by @AlphaOmegaOSS, an initiative under OpenSSF that funds security al open source projects, and was carried out as part of the Erlang Ecosystem Foundation’s Ægis initiative.

👉 hex.pm/blog/security-…

Woot! hex.pm will now serve llms.txt for Elixir/Erlang packages if the accept header is text/markdown. If you have a package and you use ExDoc, update to the latest version (which generates .md files by default) and republish your docs.

We just published the results of the Hex security audit hex.pm/blog/security-….

Thanks to @AlphaOmegaOSS for funding this work, and to @paraxialio and @zentrustsec for the thorough reviews.

Finally big thanks to @maennchen_ for managing this effort.

Hex v2.4 released with support for OAuth device flow and improved 2FA checks.

hex.pm/blog/hex-v24-r…

It is finally here: Tidewave now supports Claude Code and OpenAI Codex.

Tidewave unlocks the full-stack potential of your favorite coding agent by tightly integrating it with your web app and web framework at every layer, from UI to database. More info 👇

Soon™

Hexdocs now offers @typesense-powered documentation search across all packages and versions, link below.

TL;DR:

* Run `mix hexdocs.search` to open a search tailored to your project's dependencies
* Coding agents can use tidewave.ai's MCP to search across or Phoenix/Ecto/etc can provide cross-dependency search, improving onboarding

Sweden stands with Ukraine. You are not only fighting for your freedom but also for all of Europe’s. Slava Ukraini! 🇺🇦