From a 6.2GB baked toolchain image to boot-time installs from repo lockfiles
I removed the per-repo toolchain from my Gondolin dev VM image and made each repo install its own tools at boot from its mise.lock.
Development#gondolin#mise#sandboxing
How pnpm deploy --legacy left dangling workspace symlinks in our Docker image
Starting with pnpm 11.19 in our build, `pnpm deploy --legacy` left workspace dependencies linked to source directories that the runtime image did not contain.
Development#pnpm#docker#monorepoDagger in a GitLab CI pipeline: assessment
I evaluated Dagger against a monorepo running 2,000 CI jobs a month, separating pipeline changes from the runner, cache, and hardware constraints that remain.
Development#dagger#gitlab#ci-cdDesigning a GitLab CI cache strategy for a polyglot monorepo on a self-hosted runner
Five cache mechanisms layered on a single self-hosted GitLab runner to keep a Java + Node + Python + React Native monorepo fast without standing up an external cache service.
Development#gitlab#ci#cachingUpgrading Payload CMS 3.85.0: from 12 audit vulns to zero
A systematic approach to eliminate every known vulnerability and replace pnpm monkey-patches with proper supply-chain configuration.
Development#payload-cms#pnpm#supply-chain