{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreifqnwyet6njwpkfkg77u2sz7bt3mrwi2h5ey7vz55kv47ftqylona",
"uri": "at://did:plc:5ruiu54speasfdsdp5ttwde6/app.bsky.feed.post/3mkowdkmsu4l2"
},
"coverImage": {
"$type": "blob",
"ref": {
"$link": "bafkreiccsboxwqr2owilqst72yhforzu6yqbm6lcsojkegv4rqppqlz6z4"
},
"mimeType": "image/jpeg",
"size": 79235
},
"path": "/news/185",
"publishedAt": "2026-04-29T15:00:00.000Z",
"site": "https://changelog.com",
"textContent": "Bitwarden's CLI got hit by the Checkmarx supply-chain campaign, TypeScript 7.0 beta lands with the Go-rewritten compiler running ~10x faster than 6.0, and pgBackRest lost its maintainer of thirteen years leaving anyone running production Postgres with a real dependency-trust task this week. We've also got Ubuntu 26.04 LTS shipping with TPM-backed full-disk encryption, and Matz dropping Spinel as an AOT path that takes Ruby to native binaries. This week was a good reminder that the tools we depend on are all moving at once. Security, performance, and maintenance aren't isolated threads.",
"title": "Bitwarden CLI compromised"
}