Developer Tools

Which preview should I run: plan, change set, template or diff?

A decision table for Terraform plan, CloudFormation change sets, helm template and kubectl diff: what each shows, what it skips, and when to use it.

Which PHP version should I run? Support dates for 8.1 to 8.5

PHP 8.1 is end of life and 8.2 security support ends 31 December 2026. Use this table of support dates to pick a supported PHP version and plan the move.

Which permission mode should an AI coding agent run in?

Use manual mode for sensitive work, accept-edits for code you review, a locked-down mode for CI, and skip-all-checks inside isolated containers or VMs.

Which nuget.config file wins, and what does the clear element do?

NuGet merges settings from machine, user and every folder up the tree, and the closest file wins. The clear element resets a list. Learn why that matters.

Which Node.js version should I run in production in October 2026?

Pick an LTS line with the longest runway you can test against: line 24 today, line 26 once it reaches Active LTS on 28 October. Here is how to decide.

Which NEXT_PUBLIC variables are safe to use in a headless store?

Variables with the NEXT_PUBLIC prefix are copied into the browser bundle at build time. Which store settings belong there and which must never.

Which languages does CodeQL support, and what about the rest?

CodeQL covers a defined list of languages and does not scan PHP or Scala. See the list, what to do about gaps, and how to check your own repositories.

Which host folders are safe to bind mount into a dev container?

Mount only the project folder, use read only where you can, and keep your home directory and Docker socket out. Learn how bind mounts expose the host.

Which file defines your JavaScript workspace members?

Workspace detection depends on the package manager: a workspaces array in package.json or pnpm-workspace.yaml. Know which one your scan must read.

Which .NET analyzer settings help find security bugs at build time?

The .NET SDK includes analyzers. Raise AnalysisMode, lock AnalysisLevel and promote security warnings to errors to catch issues before code review.

Which developer surfaces should a security tool cover? Vendor questions

Security tools reach developers through CLI, editor, browser and mobile surfaces. Ask each vendor which are generally available and what each does.

Which copy of a library does Lambda load: package, layer or runtime?

When the same package exists in your deployment package, a layer and the runtime, one wins. Python search order explained, and why scanners need to know.