# rotation Published articles for rotation. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Rotating Expiring X.509 Certificates in Percona Server for MongoDB with Minimal Service Interruption DevFeed: [Rotating Expiring X.509 Certificates in Percona Server for MongoDB with Minimal Service Interruption]() Original publisher: [Read original article]() Author: Ivan Groenewold Published: 2026-08-31T11:48:11Z Content type: tutorial Language: en Sources: [Blog - Percona]() Topics: [MongoDB](), [TLS (Transport Layer Security)](), [Authentication](), [configuration]() Tags: [authentication](), [certificates](), [insight-for-dbas](), [mongodb](), [private-key](), [rotation](), [security](), [tls](), [x509]() ### AI overview This tutorial explains how to renew same-CA X.509 certificates in Percona Server for MongoDB with minimal service interruption. It covers reloading TLS material with rotateCertificates, certificate and private-key configuration, limitations, validation, and cases where hot reload should not be used. ### Source excerpt Expired TLS certificates can prevent new client connections and, when X.509 is used for Percona Server for MongoDB internal authentication, also prevent members of a replica set or sharded cluster from authenticating to one another. In this post we will discuss performing a same-CA renewal: replacement certificates for server, member, and client leaf are issued ... Continued The post Rotating Expiring X.509 Certificates in Percona Server for MongoDB with Minimal Service Interruption appeared first on Percona. ## Refresh token behavior across fourteen providers DevFeed: [Refresh token behavior across fourteen providers]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-31T00:00:00Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [OAuth](), [API]() Tags: [providers](), [retry](), [rotation](), [token](), [tokens]() ### AI overview This article compares documented OAuth refresh-token behavior across fourteen providers, including token rotation, expiration reporting, grace periods, and revocation on reuse. It explains how rotation affects persistence and retry handling, with examples including Google, Box, Atlassian, Dropbox, Asana, GitHub, and Salesforce. ### Source excerpt Which providers rotate refresh tokens, which return expires_in, which give you a grace period, and which revoke on reuse. One row per provider, verified against provider documentation in August 2026. ## This custom motorized turntable makes welding easier DevFeed: [This custom motorized turntable makes welding easier]() Original publisher: [Read original article]() Author: Arduino Team Published: 2026-08-28T12:14:44Z Content type: article Language: en Sources: [Arduino Blog]() Topics: [Arduino]() Tags: [arduino](), [electronics](), [motor](), [motorized-turntable](), [rotary-table](), [rotation](), [speed](), [uno](), [welding](), [welding-table]() ### AI overview Greenhill Forge built an Arduino-controlled rotary welding table to rotate round workpieces at an adjustable, consistent speed. The design uses an Arduino UNO Rev3, a stepper motor with a gear reducer, a rotary encoder, and an OLED screen, while a ground strap provides a current path that keeps welding current away from the electronics. ### Source excerpt MIG welding isn't very difficult -- at least not until you need to weld something at a weird angle or over a long seam. Those situations will make your welds look like they were done by an inebriated amateur. The best way to handle that is by setting yourself up to maintain stability through the [...] The post This custom motorized turntable makes welding easier appeared first on Arduino Blog. ## Multi-tenant OAuth requires credential lifecycle management beyond token isolation DevFeed: [Multi-tenant OAuth requires credential lifecycle management beyond token isolation]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-27T00:00:00Z Content type: opinion Language: en Sources: [WorkOS Blog]() Topics: [OAuth](), [Encryption](), [Authorization]() Tags: [architecture](), [encryption](), [iam](), [lifecycle](), [oauth](), [rotation](), [storage](), [vault]() ### AI overview The article argues that token isolation and storage architecture are only the starting point for multi-tenant OAuth. The harder, ongoing problems include refresh races, key rotation, provider-wide revocations, token expiration, and external revocations without webhooks. It also explains how envelope encryption and per-tenant key contexts can support bridge-style isolation. ### Source excerpt Storage architecture is the half you can finish. The refresh loop, key rotation, and revocation are the half that never does. ## How to store and refresh session tokens correctly with the WorkOS iOS SDK DevFeed: [How to store and refresh session tokens correctly with the WorkOS iOS SDK]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-18T00:00:00Z Content type: tutorial Language: en Sources: [WorkOS Blog]() Topics: [iOS](), [SDK](), [Authentication](), [JSON Web Tokens]() Tags: [apple](), [auth](), [authentication](), [concurrent](), [guide](), [how-to](), [ios](), [jwt](), [native](), [plist](), [rotation](), [sdk](), [storage](), [tokens](), [tutorial]() ### AI overview This tutorial explains how to store and refresh session tokens with the WorkOS iOS SDK. It recommends storing access and refresh tokens in the Keychain, persisting each rotated refresh token, and distinguishing terminal refresh failures from transient network or concurrency-related failures. ### Source excerpt A practical guide to Keychain storage, refresh token rotation, and terminal vs. transient failures on iOS ## Give a scheduled agent access to a user's Google, Slack, and Jira with no signed-in session DevFeed: [Give a scheduled agent access to a user's Google, Slack, and Jira with no signed-in session]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-12T00:00:00Z Content type: tutorial Language: en Sources: [WorkOS Blog]() Topics: [Tutorial](), [API keys](), [Authorization](), [OAuth](), [Slack](), [Google]() Tags: [agent](), [api](), [audit](), [auth0](), [authorization](), [autonomous-agents](), [browser](), [google](), [jira](), [logging](), [rotation](), [scheduled](), [scopes](), [slack](), [token](), [tokens](), [tutorial]() ### AI overview A tutorial showing how to give scheduled workers access to a user's Google, Slack, and Jira through WorkOS Pipes without a signed-in session. It covers scoped credential retrieval, token relay, rotation, revocation, and audit logging. ### Source excerpt A runnable tutorial for pulling per-connection third-party credentials from WorkOS Pipes with nobody logged in, plus relay, rotation, revocation, and audit logging. ## Why stateless JWT logout is not immediate and how to revoke access DevFeed: [Why stateless JWT logout is not immediate and how to revoke access]() Original publisher: [Read original article]() Author: WorkOS Published: 2026-08-06T01:36:54Z Content type: article Language: en Sources: [WorkOS Blog]() Topics: [JSON Web Tokens](), [Security](), [Architecture & Design]() Tags: [jwt](), [public-key](), [rotation](), [security](), [stateless](), [token](), [verification]() ### AI overview The article explains that signed stateless JWTs remain valid until expiration, so logging out or deactivating a user cannot revoke an already-issued token immediately. It compares short-lived access tokens with refresh-token rotation against a server-side denylist as approaches to revocation. ### Source excerpt Stateless JWTs stay valid until they expire, so logout isn't instant. Here's why enterprise SCIM makes that a compliance problem -- and how to really fix it. ## Managing Environment Variables and Secrets in DevOps DevFeed: [Managing Environment Variables and Secrets in DevOps]() Original publisher: [Read original article]() Author: Pramodh Kumar M Published: 2026-08-01T13:00:47Z Content type: tutorial Language: en Sources: [Kubernetes - KodeKloud Blog | DevOps, Cloud, Kubernetes, AI Tutorials & More]() Topics: [DevOps](), [configuration](), [GitGuardian](), [GitHub](), [Terraform](), [Kubernetes]() Tags: [ci-cd-secrets-management](), [cloud](), [collaboration](), [collaboration-tools](), [configuration](), [container](), [crash](), [devops](), [devsecops](), [dynamic-secrets](), [env-file-security](), [environment-variables](), [gitguardian](), [github](), [hardcoded-credentials](), [hashicorp-vault](), [jira](), [kubernetes](), [kubernetes-secrets](), [leak](), [managing-environment-variables-and-secrets](), [rotation](), [safety](), [sealed-secrets](), [secret-rotation](), [secret-scanning](), [secrets](), [secrets-management-best-practices](), [security](), [storage](), [terraform](), [vault]() ### AI overview A guide to managing environment variables and secrets in DevOps. It explains how secrets escape through repositories, processes, crash reports, containers, collaboration tools, Kubernetes Secrets, and Terraform state, and discusses storage, access controls, lifecycles, and rotation. ### Source excerpt Nearly 29 million secrets were pushed to public GitHub in a single year, and most teams still discover their own leaks by accident. Here is how environment variables actually escape, and what to use instead at each stage. ## Enforce Access Token Expiry Policies in Pulumi Cloud DevFeed: [Enforce Access Token Expiry Policies in Pulumi Cloud]() Original publisher: [Read original article]() Author: Devon Grove Published: 2026-07-27T00:00:00Z Content type: release Language: en Sources: [Pulumi]() Topics: [Cloud](), [API]() Tags: [api](), [cloud](), [compliance](), [features](), [organization](), [policy](), [product](), [rotation](), [security](), [tokens]() ### AI overview Pulumi Cloud organizations can enforce maximum expiry periods for access tokens. Administrators set a cap, and tokens without an expiration or with too much remaining lifetime are rejected when used against the organization. ### Source excerpt Pulumi Cloud organizations can now enforce a maximum expiry on the access tokens used against them. Organization admins can set a cap in days, and from that point on, personal, organization, and team tokens operating on resources in the org must carry an expiration within the cap for requests to succeed. Tokens that never expire, or that have too much lifetime remaining, get rejected with an error that tells the user exactly how to regain access. Why cap token lifetimes Many organizations already have a credential rotation policy that says tokens must expire, but until now, Pulumi Cloud could only recommend an expiry at creation time. Nothing stopped a member from creating a never-expiring personal token, and nothing aged out the long-lived tokens created before your policy existed. That gap matters because a leaked token is only as dangerous as its remaining lifetime. A token that never expires is a standing liability. By adding support for access token expiry policies, Pulumi Cloud now closes the gap at the platform level. Once you've set the cap, Pulumi Cloud enforces it immediately for your organization, including for tokens that already exist. How it works In your organization's settings, navigate to Settings > Access Management > Other and scroll to Access token expiry policy: You can also get there from the Access Tokens tab, where a banner shows whether a policy is in effect -- select Edit policy: The policy is a single number: the maximum expiry, in days, for tokens used against your organization. Compliance is checked on every request, and a token complies when both of these are true: It has an expiration date. Never-expiring tokens violate any policy. Its remaining lifetime -- the time between now and its expiration -- is within the cap. Because compliance is based on remaining lifetime rather than the expiry chosen at creation, the policy is pragmatic about existing credentials: a token created a year ago with a two-year expiry becomes compliant once it has ## The Aboulafia Graph Has Dihedral Symmetry DevFeed: [The Aboulafia Graph Has Dihedral Symmetry]() Original publisher: [Read original article]() Author: Yehonathan Sharvit Published: 2026-07-06T10:00:00Z Content type: article Language: en Sources: [Klipse]() Topics: [Graphs]() Tags: [aboulafia](), [graph](), [math](), [mirror](), [rotation](), [series](), [symmetry]() ### AI overview The final article in a four-part series explains the dihedral symmetry of the Aboulafia graph. It connects the graph's recursive construction to a rotation and a reflection, and describes a proof that these are its only symmetries. ### Source excerpt Aboulafia's Tserouf - Part 4 of 4 <- Previous: Too big to draw, but yet drawable ## Introducing ESC Secret Rotation Webhooks DevFeed: [Introducing ESC Secret Rotation Webhooks]() Original publisher: [Read original article]() Author: Sean Yeh Published: 2026-06-26T00:00:00Z Content type: release Language: en Sources: [Pulumi]() Topics: [pulumi-esc](), [secret rotation](), [notifications](), [pulumi-cloud](), [pulumi-cli](), [TypeScript](), [GitHub]() Tags: [cli](), [esc](), [github](), [notifications](), [product](), [pulumi](), [pulumi-cli](), [pulumi-cloud](), [rotation](), [secret-rotation](), [secrets](), [slack](), [typescript](), [webhooks]() ### AI overview Pulumi introduces ESC secret rotation webhooks, which trigger on successful or failed environment secret rotations. They can notify teams in Slack, refresh services using old credentials, and help detect failed rotations before outages. ### Source excerpt Pulumi ESC centralizes your secrets and configuration, and it can automatically rotate secrets on a schedule so credentials never go stale. But a rotation is only useful if the systems that depend on it know it happened. ESC secret rotation webhooks close that gap by notifying you the moment a secret rotates. Introducing secret rotation webhooks With ESC webhooks, you can react to rotations automatically. When ESC rotates an environment's secrets, a webhook can be configured to trigger on either success or failure. Use it to notify your team in Slack, refresh services that hold the old credential, or catch a failed rotation before it causes an outage. How to configure Pulumi Cloud Console Using the Pulumi Cloud Console, you can now configure webhooks for "Environment rotation succeeded" and "Environment rotation failed" in your ESC Environment's Settings page (under Settings -> Notifications). Pulumi Service Provider You can use the Pulumi Service Provider in your Pulumi program to configure webhooks. Here is an example in TypeScript: const environmentWebhook = new service.Webhook("env-webhook", { active: true, displayName: "env-webhook", organizationName: "my-org", projectName: environment.project, environmentName: environment.name, payloadUrl: "https://example.com", filters: [WebhookFilters.EnvironmentRotationSucceeded, WebhookFilters.EnvironmentRotationFailed], }) Pulumi CLI You can also use the Pulumi CLI to configure the webhook: pulumi env webhook new my-org/project/env env-webhook \ --url https://example.com \ --event environment_rotation_succeeded \ --event environment_rotation_failed Get started Secret rotation webhooks are available now for all Pulumi ESC environments. See the webhooks documentation to get started, and share your feedback on our GitHub repository. ## Seasons time-lapse - the video DevFeed: [Seasons time-lapse - the video]() Original publisher: [Read original article]() Author: Nicolas Fränkel Published: 2026-06-07T00:00:00Z Content type: tutorial Language: en Sources: [Nicolas Fränkel]() Topics: [Image](), [Code](), [DateTime]() Tags: [art](), [cameras](), [code](), [development](), [images](), [information](), [location](), [metrics](), [model](), [pipeline](), [pixel](), [project](), [python](), [rotation](), [screen](), [speed](), [time-lapse](), [video]() ### AI overview The third and final post in a series explains how the author creates a time-lapse video from photographs taken from the same position over multiple years. It discusses ordering images by day of year and time of day, using EXIF metadata, and practical observations about video generation. ### Source excerpt In the first post of this series, I focused on the project foundations: what should I do to create a video from photos taken from the same position year after year? I dedicated the second part to aligning images. It wasn't as easy as I expected. I stumbled upon new concepts, such as ORB and RANSAC. In this third and final post, I want to tackle the video creation itself, explain some 'artistic' decisions, and leave the door open to future work. ## Made in Compose: Airbnb Month Picker Dial DevFeed: [Made in Compose: Airbnb Month Picker Dial]() Original publisher: [Read original article]() Author: sinasamaki Published: 2026-04-17T12:55:42Z Content type: tutorial Language: en Sources: [sinasamaki]() Topics: [Compose](), [Jetpack Compose](), [Canvas](), [Library]() Tags: [article](), [canvas](), [compose](), [customization](), [how-to](), [jetpack-compose](), [render](), [rotation]() ### AI overview A tutorial on recreating Airbnb's month-duration dial picker in Jetpack Compose using the ChromaDial library. It covers configuring a 12-month range, mapping values around a 330-degree sweep, styling the thumb, rendering the inactive track with Canvas, and creating a rounded active arc track. ### Source excerpt How to create a gorgeous Dial in Jetpack Compose ## Weak AVL Tree DevFeed: [Weak AVL Tree]() Original publisher: [Read original article]() Published: 2025-12-14T08:00:00Z Content type: tutorial Language: en Sources: [MaskRay]() Topics: [Data structures](), [implementation]() Tags: [algorithm](), [data-structure](), [implementation](), [root](), [rotation](), [rules]() ### AI overview This article introduces weak AVL trees as a rank-based balanced binary search tree and compares their balancing behavior with AVL and red-black trees. It describes rank differences, insertion cases, rotation bounds, and an implementation detail for encoding ranks, while noting that deletion is not yet described. ### Source excerpt tl;dr: Weak AVL trees are replacements for AVL trees and red-black trees. The 2014 paper ## Blog: GPG Key Rotation for Falco Packages (2026) DevFeed: [Blog: GPG Key Rotation for Falco Packages (2026)]() Original publisher: [Read original article]() Published: 2025-12-12T00:00:00Z Content type: release Language: en Sources: [Falco - Falco](), [Falco - The Falco blog]() Topics: [Falco](), [Security](), [Package manager](), [releases](), [apt]() Tags: [announcements](), [apt](), [falco](), [import](), [installation](), [releases](), [rotation](), [rsa](), [security]() ### AI overview Falco maintainers are rotating the 4096-bit RSA GPG key used to sign official RPM and DEB packages because the existing key expires on January 17, 2026. The transition uses a soft launch followed by a hard cut-over, and existing users should update their keyrings before January 12, 2026. ### Source excerpt The GPG key used to sign official Falco packages (RPM and DEB) is set to expire on January 17, 2026. To ensure the security and continuity of our software distribution, the Falco maintainers will be rotating to a new 4096-bit RSA key. We have designed a two-phase "Soft Launch" strategy to make this transition as smooth as possible, providing a one-month transition window before the old key is retired. The Rotation Plan To avoid immediate disruption, we are rolling out the new key in two distinct phases. You can follow the detailed progress in our tracking issue #3750. Phase 1: Soft Launch (Dec 12, 2025) What happens: The new GPG key has been published and added to our repository configuration. Dev Builds: Will begin using the New Key immediately. Stable Builds: No stable releases are planned for this phase. If any hotfixes are released, they will be signed with New Key as well. Key Bundle: The official key URL has been updated to serve a bundle containing both the Old (valid) and New (valid) keys. Phase 2: Hard Cut-Over (Jan 12-17, 2026) What happens: This is the maintenance window where we fully switch to the new key. Mass Resign: All existing stable packages on download.falco.org will be resigned with the New Key. Revocation: The Old Key will be officially revoked and removed from the active bundle. Impact: If you have not updated your keyring by this date, your package manager (apt or yum) will reject updates with a signature verification error. Action Items for Users We strongly recommend all users update their GPG keyring before January 12, 2026 to avoid interruption. New Users If you are installing Falco for the first time following our Install on a host (DEB,RPM) instructions, no action is required. The installation process will guide you to fetch the new key bundle, ensuring you are ready for both phases. Existing Users If you have an existing Falco installation, you must manually import the new key. We have updated the key file at our standard URL to includ ## Create animated stripes in Jetpack Compose DevFeed: [Create animated stripes in Jetpack Compose]() Original publisher: [Read original article]() Author: sinasamaki Published: 2025-12-05T18:11:39Z Content type: tutorial Language: en Sources: [sinasamaki]() Topics: [Jetpack Compose](), [Compose](), [Code]() Tags: [app](), [article](), [building](), [code](), [compose](), [design](), [how-to](), [jetpack-compose](), [learn](), [list](), [parameter](), [patterns](), [repeat](), [rotation]() ### AI overview A tutorial on creating and animating repeating stripe patterns in Jetpack Compose using gradients, color stops, tiling, offsets, and a helper function based on weighted colors, repetition width, and angle. ### Source excerpt Use default gradients to create mesmerizing patterns in your app ## Zero Standing Privileges vs Credential Vaulting DevFeed: [Zero Standing Privileges vs Credential Vaulting]() Original publisher: [Read original article]() Author: jpitts@goteleport.com (Jack Pitts) Published: 2025-10-28T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Zero Trust](), [Security](), [legacy](), [passwords](), [ssh](), [API]() Tags: [api](), [legacy](), [password](), [rotation](), [secrets](), [security](), [ssh](), [vault](), [vulnerability](), [zero-trust]() ### AI overview This article compares credential vaulting with vault-free, just-in-time and identity-based approaches to privileged access management. It examines how stored and reusable credentials may preserve standing privileges and create operational and security challenges when organizations pursue Zero Standing Privileges. ### Source excerpt Discover how Zero Standing Privileges (ZSP) compares to credential vaulting in privileged access management and why vault-free PAM is key to true ZSP. ## Introducing ESP\_NEW\_JPEG: An Efficient JPEG Encoder and Decoder DevFeed: [Introducing ESP\_NEW\_JPEG: An Efficient JPEG Encoder and Decoder]() Original publisher: [Read original article]() Author: John Lee Published: 2025-09-17T00:00:00Z Content type: article Language: en Sources: [Blog on Developer Portal]() Topics: [Library](), [Compression](), [Image processing](), [Espressif](), [coding](), [Hardware]() Tags: [article](), [blog](), [camera](), [compression](), [decoding](), [developers](), [embedded-devices](), [encoding](), [esp32-s3](), [espressif](), [image-processing](), [jpeg](), [multimedia](), [rotation]() ### AI overview Espressif's ESP_NEW_JPEG component provides an optimized software JPEG encoder and decoder for resource-constrained embedded devices. The article explains JPEG compression fundamentals, introduces features such as image rotation, clipping, scaling, and block mode, and offers usage guidance. ### Source excerpt The ESP_NEW_JPEG library from Espressif enables efficient JPEG encoding and decoding on embedded devices. This article introduces the main features of ESP_NEW_JPEG - including image rotation, clipping, scaling, and block mode - and shares key usage tips for developers. ## ESP\_IMAGE\_EFFECTS v1.0.0 Release: Image Processing for Embedded Devices DevFeed: [ESP\_IMAGE\_EFFECTS v1.0.0 Release: Image Processing for Embedded Devices]() Original publisher: [Read original article]() Author: John Lee Published: 2025-08-29T00:00:00Z Content type: release Language: en Sources: [Blog on Developer Portal]() Topics: [Image processing](), [Library](), [Embedded Software Dev](), [Microcontroller]() Tags: [blog](), [embedded-systems](), [image-color-space](), [image-crop](), [image-effects](), [image-processing](), [image-rotate](), [image-scale](), [library](), [multimedia](), [release](), [rotation](), [zero-copy]() ### AI overview Espressif announces ESP_IMAGE_EFFECTS v1.0.0, an image processing library for embedded devices. The article describes its unified APIs, SIMD optimization, zero-copy memory design, and support for rotation, color space conversion, and image scaling. ### Source excerpt Espressif's ESP_IMAGE_EFFECTS component is a powerful image processing library that can do common image processing operations such as scaling, rotation, cropping, and color space conversion. This article introduces the library, shows how to use it in processing images, and provides usage examples. ## Introducing JWT Signing Keys DevFeed: [Introducing JWT Signing Keys]() Original publisher: [Read original article]() Author: Stojan Dimitrovski Published: 2025-07-14T07:00:00Z Content type: release Language: en Sources: [Supabase Blog]() Topics: [JSON Web Tokens](), [Security](), [Cryptography](), [Supabase](), [API keys]() Tags: [api-keys](), [compliance](), [cryptography](), [jwt](), [latency](), [public-key](), [rotation](), [rsa](), [security](), [soc2]() ### AI overview Supabase introduces asymmetric JWT signing keys for Supabase Auth, along with new API keys to support migration and improve application security. The system uses a private key for signing and a public key for local token verification, reducing dependence on the Auth server, network latency, and shared-secret management. It supports RSA and elliptic-curve signing algorithms and safer key rotation. ### Source excerpt A new JWT signing keys system based on public key cryptography to improve your project's security and performance. ## Brushed Metal UI in Jetpack Compose DevFeed: [Brushed Metal UI in Jetpack Compose]() Original publisher: [Read original article]() Author: sinasamaki Published: 2025-02-14T11:52:40Z Content type: tutorial Language: en Sources: [sinasamaki]() Topics: [Jetpack Compose](), [Compose](), [ui](), [Canvas](), [render]() Tags: [article](), [canvas](), [compose](), [jetpack-compose](), [render](), [rotation](), [ui]() ### AI overview A tutorial on recreating and animating a brushed-metal skeuomorphic UI effect in Jetpack Compose. It explains how to layer radial gradients for circular ridges and sweep gradients for rotating highlights, with colors derived from a base color. ### Source excerpt How to create this skeuomorphic metallic effect using gradients ## Android Dynamic Animated SVGs (with Lottie Dynamic Properties) DevFeed: [Android Dynamic Animated SVGs (with Lottie Dynamic Properties)]() Original publisher: [Read original article]() Author: blundell Published: 2025-01-04T20:24:47Z Content type: tutorial Language: en Sources: [Blundell]() Topics: [Android](), [Tutorial](), [SVG](), [Code]() Tags: [android](), [androiddev](), [animation](), [compose](), [demo](), [dependencies](), [experimental](), [how-to](), [intermediate](), [intermediate-tutorial-android-androiddev-animation-compose-lottie-svg](), [lottie](), [project](), [reference](), [rotation](), [scale](), [svg](), [tutorial]() ### AI overview A tutorial on using Lottie Dynamic Properties in Android to control animation properties such as color, opacity, scale, and rotation at runtime. It explains how to identify Lottie KeyPaths from resolved in-memory code and apply dynamic property changes to Lottie images. ### Source excerpt Learn how to have runtime control of all parts of an animation or image, the color, opacity, scale, rotation .. any property within your SVG animation using Lottie Dynamic Properties. This tutorial is going to explain Lottie Dynamic Properties. Dynamic Properties are a way of controlling at runtime, the different parts of your animation. You [...] The post Android Dynamic Animated SVGs (with Lottie Dynamic Properties) first appeared on Blundell. ## Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS DevFeed: [Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS]() Original publisher: [Read original article]() Published: 2024-04-11T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [GitHub](), [Security](), [octo sts](), [GitHub Actions](), [Authorization]() Tags: [ephemerality](), [github](), [github-actions](), [github-credentials](), [github-pat](), [github-personal-access-token](), [least-privilege](), [minimalism](), [octo-sts](), [personal-access-token](), [principle-of-ephemerality](), [pull-requests](), [rotation](), [secrets](), [security](), [security-token-service]() ### AI overview This article explains how Chainguard replaced long-lived GitHub Personal Access Tokens and other credentials with short-lived credentials across several GitHub organizations. It introduces Octo STS as a Security Token Service for GitHub credentials and describes the automation use cases that built-in GitHub Actions tokens could not support. ### Source excerpt Ditch GitHub PATs for better security. Learn how to replace long-lived tokens and reduce your risk of leaked credentials. ## MELON: Reconstructing 3D objects from images with unknown poses DevFeed: [MELON: Reconstructing 3D objects from images with unknown poses]() Original publisher: [Read original article]() Author: Google AI (noreply@blogger.com) Published: 2024-03-18T18:41:00Z Content type: article Language: en Sources: [Google Research]() Topics: [3D](), [Computer vision](), [Inference](), [Google]() Tags: [3d](), [computer-vision](), [gans](), [gaussian-splatting](), [generative](), [google](), [images](), [inference](), [machine-learning](), [models](), [neural](), [research](), [rgb](), [rotation](), [techniques](), [vision]() ### AI overview This Google Research article explains the challenge of reconstructing 3D objects from a small number of images when the camera poses are unknown. It covers pose inference, pseudo-symmetries, local-minimum failures, and prior approaches including NeRF, 3D Gaussian Splatting, GAN-based methods, BARF, SAMURAI, GNeRF, VMRF, SparsePose, and RUST. ### Source excerpt Posted by Mark Matthews, Senior Software Engineer, and Dmitry Lagun, Research Scientist, Google Research A person's prior experience and understanding of the world generally enables them to easily infer what an object looks like in whole, even if only looking at a few 2D pictures of it. Yet the capacity for a computer to reconstruct the shape of an object in 3D given only a few images has remained a difficult algorithmic problem for years. This fundamental computer vision task has applications ranging from the creation of e-commerce 3D models to autonomous vehicle navigation. A key part of the problem is how to determine the exact positions from which images were taken, known as pose inference. If camera poses are known, a range of successful techniques -- such as neural radiance fields (NeRF) or 3D Gaussian Splatting -- can reconstruct an object in 3D. But if these poses are not available, then we face a difficult "chicken and egg" problem where we could determine the poses if we knew the 3D object, but we can't reconstruct the 3D object until we know the camera poses. The problem is made harder by pseudo-symmetries -- i.e., many objects look similar when viewed from different angles. For example, square objects like a chair tend to look similar every 90° rotation. Pseudo-symmetries of an object can be revealed by rendering it on a turntable from various angles and plotting its photometric self-similarity map. Self-Similarity map of a toy truck model. Left: The model is rendered on a turntable from various azimuthal angles, θ. Right: The average L2 RGB similarity of a rendering from θ with that of θ*. The pseudo-similarities are indicated by the dashed red lines. The diagram above only visualizes one dimension of rotation. It becomes even more complex (and difficult to visualize) when introducing more degrees of freedom. Pseudo-symmetries make the problem ill-posed, with naïve approaches often converging to local minima. In practice, such an approach might mistake the [Next page]()