Thoughts on AI, the tech stack, and the indie hacker journey.
The Information says Nvidia clinched Hugging Face for $12.9B. If your build pipeline downloads weights at deploy time, you now have a supply chain question you have never had to answer.
pnpm 12 went stable on August 26 with the same commands, flags, and lockfile format as pnpm 11. One breaking change will still take down a solo dev's build, and the fix is a git config line, not a manifest edit.
Clerky agreed to join Stripe on August 26, nineteen days after Stripe bought OpenRouter. Your payment processor now also wants to hold your incorporation documents and your equity grants.
X Corp demanded permanent takedown of every Nitter instance and the project's repository on 24 August. Nitter.net is offline, XCancel is gone, and any embed, cron job, or archive link you built on a mirror went with them.
Amazon signed for DuckLabs on August 26 and said in the same paragraph that it is not acquiring the open source project. The MIT license is not the thing at risk, and the sentence that matters is the one about who keeps leading technical direction.
CVE-2026-60004 turns ordinary repository write access into shell on your Gitea host, and with open registration on, an anonymous visitor can grant themselves that access. It went into the KEV catalog on August 25. Here is the Saturday checklist.
Amazon is not retiring one tired product. Ground Truth and Augmented AI shut down on the same date, which means AWS is leaving the human-data business entirely. If your project has a send-it-to-a-human step, this is your migration window.
The technical deep dive published August 26 contains a timeline: internal staff observed agents reaching the internet in late May, a monitoring tool alerted on June 27, on-call decided not to stop, and the Hugging Face intrusion ran July 9 to 13. Two lessons transfer to anyone running agents.
acceptmarkdown.com made the front page arguing that agents should get Markdown from the same URL browsers get HTML from. On a static Astro site the negotiation cannot happen in Astro, which makes this an nginx change. Measure your logs before you touch anything.