Build. Understand. Test. Improve.
Independent blog

Dev Layer

Programming, WordPress, AI, no-code, and security explained for people who want to build digital products and understand what happens behind the tools.

Explore articles

Main featured article

The most important content to start with.

Ilustração de um painel do WordPress exibindo atualização para a versão 7.1.2, escudo de segurança e etapas de verificação, backup e atualização.
WordPress28/09/20265 min read

WordPress 7.1.2 fixes a critical flaw: what to update now and how to check the installed version

WordPress 7.1.2 fixes a critical vulnerability disclosed on September 22, 2026. Learn who should update, how to check the installed version, back up the site, and confirm the secur...

Read article

Featured articles

Other selected strategic content.

Diagrama isométrico de autenticação com login em notebook, tokens JWT, relógio de expiração, ciclo de refresh e revogação junto a servidores.
Fundamentals & Learning28/09/20269 min read

JWT is not a session: expiration, refresh tokens, and revocation in architecture

Understand why JWT is a token format rather than a complete session, and how expiration, refresh tokens, logout, and revocation fit into the authentication lifecycle.

Read article
Desenvolvedor diante de um monitor de código com três painéis superiores identificados como CORS, CSRF e CSP, cada um com ícones que representam comunicação entre navegadores, requisição maliciosa e proteção de recursos web.
Security for Developers28/09/20269 min read

CORS, CSRF, and CSP: how to tell three different web security problems apart

CORS, CSRF, and CSP often appear together during debugging, but they address different problems. Learn the difference between origin policy, request forgery, and content policy wit...

Read article
Notebook em mesa de trabalho com interface de código e assistente de IA, conectado visualmente a painéis de gráficos e telemetria.
Tools & Workflow27/09/20266 min read

OpenTelemetry in the Copilot App: what to check before enabling telemetry

The GitHub Copilot app now supports OpenTelemetry through managed settings. Learn how traces, metrics, events, content capture, and configuration choices affect a safe enterprise r...

Read article

Categories

Browse the blog main topics.

Programming in Practice7 articles

Code explained through projects, real-world problems, debugging, APIs, databases, frontend and backend development.

Fundamentals & Learning2 articles

Logic, concepts, learning paths and explanations for building a technical foundation that remains useful as tools change.

AI in Development11 articles

Assistants, agents, models, context, prompts, MCP, code generation, testing and engineering workflows supported by artificial intelligence.

WordPress10 articles

WordPress development, technical administration, plugins, themes, blocks, APIs, performance, updates and maintenance.

Security for Developers13 articles

Secure development, authentication, permissions, dependencies, secrets, OWASP, vulnerabilities and application protection.

Tools & Workflow16 articles

Git, GitHub, terminal, IDEs, environments, debugging, testing, deployment and development workflow organization.

Latest articles

Recent posts and new content.

View all
Notebook em uma mesa de desenvolvimento com editor de código, caixas luminosas representando projetos isolados e painel lateral de permissões de sandbox.
Security for Developers27/09/20267 min read

Copilot App gets local sandboxing: how to enable it and review permissions per project

GitHub Copilot app local sandboxing limits file, network, and credential access per project. Learn how to enable, test, and review a least-privilege policy.

Read article
Ilustração futurista de um assistente de IA conectando conversas de equipe, código, documentos e controles de permissões em painéis digitais.
AI in Development27/09/20268 min read

Copilot in Slack and Teams: how to use conversation context without losing the source

GitHub Copilot integrations with Slack and Microsoft Teams now accept more conversation context and strengthen links between discussions, issues, and pull requests. Learn how to us...

Read article
Capa tecnológica em tons azuis com painéis de análise de código exibindo CodeQL 2.27.1, C/C++, C# e Kotlin, gráficos e um escudo digital.
Security for Developers27/09/20267 min read

CodeQL 2.27.1: what changes in C/C++, C#, and Kotlin analysis

Version 2.27.1 adds a C/C++ query, a C# code-quality recommendation, new flow models, and Kotlin 2.4.20 support. See which changes can affect results depending on the active query ...

Read article
Notebook em mesa de trabalho exibindo comparação visual entre git revert e git reset, com gráficos de commits e comandos na tela.
Tools & Workflow26/09/20265 min read

Git revert or reset: how to undo a commit without deleting other people's work

Learn when to use git revert or git reset, how each reset mode affects HEAD, the index, and files, and why shared history requires extra care.

Read article
Pessoa estudando inteligência artificial em um notebook com referências visuais a nuvem, cérebro digital e Google Cloud em um ambiente de estudo.
Fundamentals & Learning26/09/20266 min read

Google Cloud Capacita+: how to access AI learning materials after the September event

The September 25, 2026 Capacita+ event is over, but learning can continue through Google Skills, GEAR, and official resources. See what is confirmed and what still requires specifi...

Read article
Notebook em mesa de desenvolvimento com IDE JetBrains aberto, interface de código, assistente robótico de IA e ícones de produtos JetBrains ao lado.
AI in Development26/09/20265 min read

GitHub Copilot for JetBrains 1.18.0: where to check compatibility and features

GitHub Copilot for JetBrains 1.18.0 adds assisted approvals, message re-editing, organization skills, Codex planning, and new MCP controls. Learn how to separate plugin compatibili...

Read article
Notebook exibindo um workflow do GitHub Actions ao lado do logotipo do Ubuntu e de uma ilustração de servidores com a versão 26.04.
Tools & Workflow26/09/20264 min read

Ubuntu 26.04 on GitHub Actions: how to check runner migration and dependencies

Ubuntu 26.04 is generally available on GitHub Actions. Learn how to identify the image used, test before the ubuntu-latest migration, and review dependencies.

Read article
Notebook com interface escura inspirada no GitHub Actions mostrando a área de artefatos e ícones visuais de expiração e ocultação.
Security for Developers26/09/20265 min read

GitHub Actions hides expired artifacts: what changes in the UI and API

As of September 24, 2026, expired artifacts no longer appear in the run summary and in REST endpoints named by GitHub. See the impact on integrations, history, retention, and billi...

Read article
Desenvolvedor usa notebook com tela de revisão de código enquanto um assistente robótico de IA se conecta a gráficos de métricas e indicadores de pull request.
AI in Development26/09/20265 min read

Copilot metrics API adds pull request review stages: what to measure

The GitHub Copilot usage metrics API now splits pull request review into three stages with median and p90 values. Learn how to interpret the fields, volumes, and limits without con...

Read article

Most read

Content with the most views.

  1. 01macOS 27 is Apple silicon only: how to adapt Intel apps, Rosetta, and arm64 builds in Xcode 27Programming in Practice
  2. 02GitHub Actions removes Node 20 on Sept. 23: how to audit workflows and actions before the cutoffTools & Workflow
  3. 03GitHub Copilot changes in September: billing, retention, and code review checklist before Sep 28Tools & Workflow
  4. 04GitHub Copilot retires four models on October 2: what to migrate and what admins must enableTools & Workflow
  5. 05GitHub Actions: how to use vulnerability-alerts to read Dependabot alerts with least privilegeSecurity for Developers

Programming in Practice

Code explained through projects, real-world problems, debugging, APIs, databases, frontend and backend development.

View all
Ilustração em fundo escuro mostra fluxo de webhooks do GitHub com verificação de assinatura, proteção contra replay, fila, cache e descarte de evento duplicado.
Programming in Practice22/09/20266 min read

GitHub webhooks: how to validate HMAC, prevent replay, and handle duplicate events

A practical guide to authenticating GitHub webhooks with HMAC-SHA256, using X-GitHub-Delivery against replay, deduplicating events, and processing redeliveries idempotently.

Read article
MacBook com ambiente de desenvolvimento aberto ao lado de um iPhone dobrável, ambos mostrando uma interface em duas telas sobre uma mesa de trabalho.
Programming in Practice17/09/20268 min read

iPhone Duo in Xcode 27.1: how to test foldable layouts before launch

See what you can adapt in your app now and which tests to run in the iPhone Duo simulator once Xcode 27.1 support becomes available.

Read article
Estação de desenvolvimento com símbolo do Python ao centro, erros em vermelho à esquerda e verificações de compatibilidade em verde à direita.
Programming in Practice09/09/20269 min read

Python 3.15: removed APIs that can break extensions and a portability checklist before October 1

See which Python and C APIs were removed in 3.15, what to use instead, and how to test extensions and code before the final release scheduled for October 1.

Read article
Notebook exibindo interface do Chrome com solicitação de acesso à câmera e ao microfone, ao lado de webcam e microfone sobre uma mesa.
Programming in Practice08/09/20267 min read

Chrome 153: when to use <camera> and <microphone> — and when to keep getUserMedia()

The new declarative elements simplify single camera or microphone requests, but production use still needs feature detection, fallback, and care around constraints and track lifecy...

Read article

Fundamentals & Learning

Logic, concepts, learning paths and explanations for building a technical foundation that remains useful as tools change.

View all
Diagrama isométrico de autenticação com login em notebook, tokens JWT, relógio de expiração, ciclo de refresh e revogação junto a servidores.
Fundamentals & Learning28/09/20269 min read

JWT is not a session: expiration, refresh tokens, and revocation in architecture

Understand why JWT is a token format rather than a complete session, and how expiration, refresh tokens, logout, and revocation fit into the authentication lifecycle.

Read article
Pessoa estudando inteligência artificial em um notebook com referências visuais a nuvem, cérebro digital e Google Cloud em um ambiente de estudo.
Fundamentals & Learning26/09/20266 min read

Google Cloud Capacita+: how to access AI learning materials after the September event

The September 25, 2026 Capacita+ event is over, but learning can continue through Google Skills, GEAR, and official resources. See what is confirmed and what still requires specifi...

Read article

AI in Development

Assistants, agents, models, context, prompts, MCP, code generation, testing and engineering workflows supported by artificial intelligence.

View all
Notebook com interface do GitHub Copilot e elementos visuais de validação, segurança, equipe e documentos de configuração.
AI in Development26/09/20263 min read

GitHub Copilot adds an enterprise settings validator: where to check policies

GitHub added an in-product validator for Copilot enterprise-managed settings. See where to find the check, which files it covers, what errors it reports, and how to confirm fixes.

Read article
Notebook em mesa de trabalho com painel escuro de configurações administrativas, controles de ativação e mascote robótico azul e roxo ao lado.
AI in Development25/09/20263 min read

GitHub Copilot: how to adjust the default policy before October 22

Copilot Business and Enterprise administrators should review the default for unconfigured features before October 22, 2026.

Read article
Estação de desenvolvimento com notebook, ondas de áudio bidirecionais, diagrama de agente de voz e smartphone conectado ao fluxo de telefonia.
AI in Development16/09/20267 min read

GPT-Live-1 API: what full duplex, new voices, and telephony change

Learn how GPT-Live-1 changes voice-agent architecture, where full duplex reduces complexity, and what still belongs in the backend.

Read article
Ilustração futurista dividida entre um núcleo azul de orquestração de agentes e uma estação de trabalho, com cartões que separam funções do harness e responsabilidades da aplicação.
AI in Development13/09/20268 min read

OpenAI Agents API: what the managed harness owns and what stays with your app

Understand the Agents API responsibility split: sessions, context, subagents, and hosted sandbox support in the harness; product logic, tools, permissions, and infrastructure still...

Read article

WordPress

WordPress development, technical administration, plugins, themes, blocks, APIs, performance, updates and maintenance.

View all
Notebook com painel de agendamento do WordPress ao lado de ícones de calendário, relógio e engrenagem conectados a servidores.
WordPress24/09/20266 min read

Scheduled post did not publish in WordPress: how to diagnose WP-Cron and server cron

A safe workflow to separate timezone errors, missing events, loopback failures, disabled WP-Cron, broken external cron, and execution errors.

Read article
Mesa de desenvolvimento com um fluxo visual da REST API do WordPress, mostrando uma etapa de nonce e outra de controle de permissão antes do endpoint.
WordPress22/09/20267 min read

WordPress REST API: nonce authenticates, permission_callback authorizes, and current_user_can protects the route

Learn how authentication and authorization differ in the WordPress REST API, with nonce, permission_callback, current_user_can, and regression tests.

Read article
Notebook aberto com interface de editor de blocos, livros com referências a Gutenberg 24.0 e WordPress 7.2, planta e caneca sobre mesa de trabalho.
WordPress16/09/20266 min read

Gutenberg 24.0: what changed in the editor and what points toward WordPress 7.2

Version 24.0 expands visual revisions, improves Gallery and Site Title, and updates APIs and tooling. See what is ready to test and what still depends on WordPress 7.2 Core integra...

Read article
Robô diante de um notebook ligado por setas azuis a um servidor-proxy, uma tela do WordPress e ícones de ferramentas.
WordPress16/09/20266 min read

WordPress Playground + WebMCP: why registering an Ability is not enough to expose a tool to agents

Learn the difference between an Ability and a WebMCP tool, how Playground’s proxy crosses the iframe boundary, and when to use the Abilities REST API.

Read article

Development without a black box

Dev Layer is a blog for people who learn, code, and build digital products in a world where code, artificial intelligence, WordPress, automation, and no-code tools often coexist in the same project.

The goal is to show both the fast path and what exists behind it. Tutorials explain what each step does, which decisions are being made, where problems may arise, and how to test the result.

AI tools and vibe coding are treated as development resources, not as automatic substitutes for knowledge, review, testing, or security.

Responsible: Redação de Tecnologia e Desenvolvimento