https://johnnyhuy.com/devlog Short, self-contained, actionable write-ups. Each entry is something a reader could act on, or would otherwise have to rediscover. en (Johnny Huynh) (Johnny Huynh) Wed, 14 Oct 2026 23:50:00 GMT https://johnnyhuy.com/devlog/openclaw-2026-10-3-clears-update-blockers https://johnnyhuy.com/devlog/openclaw-2026-10-3-clears-update-blockers Mostly an update and repair release, and the trap it removes is nasty - an interrupted update could leave a record behind that blocked every later upgrade, with the stuck updater unable to clear it. Recovery comes first now, Doctor repairs keep saved sign-ins and memory files, and conversations no longer die at a compaction boundary. Wed, 14 Oct 2026 23:50:00 GMT (Johnny Huynh) OpenClawRelease NotesUpdates https://johnnyhuy.com/devlog/openchamber-2-3-2-project-knowledge-for-agents https://johnnyhuy.com/devlog/openchamber-2-3-2-project-knowledge-for-agents A patch release that hands agents a tool for the project's notes, todos and plans, adds .deb and .rpm Linux packages, and quietly fixes config writes that could leave a file truncated mid-save. If project notes have been living outside the chat because agents could not see them, this is the release that moves them into the session. Wed, 14 Oct 2026 23:45:00 GMT (Johnny Huynh) OpenChamberRelease NotesAgents https://johnnyhuy.com/devlog/ipv6-only-services-fail-behind-ipv4-proxies https://johnnyhuy.com/devlog/ipv6-only-services-fail-behind-ipv4-proxies A dev service that binds only to ::1 works on localhost but returns 502 through a reverse proxy or workspace URL, because the proxy forces 127.0.0.1 as the upstream address. Try both loopback literals instead of resolving localhost or hardcoding one family. Wed, 14 Oct 2026 23:40:00 GMT (Johnny Huynh) NetworkingProxyGotcha https://johnnyhuy.com/devlog/diagnostic-paths-must-resolve-secrets https://johnnyhuy.com/devlog/diagnostic-paths-must-resolve-secrets A health check that reports "Invalid API key" while the running service authenticates fine is usually a code path that skips secret resolution. The runtime resolves SecretRefs before handing credentials to a provider; the diagnostic and status commands often do not, so they pass the raw reference and get a misleading failure. Wed, 14 Oct 2026 23:35:00 GMT (Johnny Huynh) SecretsDiagnosticsGotcha https://johnnyhuy.com/devlog/cmd-shims-warn-dep0190-with-args-and-shell https://johnnyhuy.com/devlog/cmd-shims-warn-dep0190-with-args-and-shell Every spawn of a .cmd or .bat shim on Windows prints Node's DEP0190 deprecation warning if you pass an args array alongside shell: true. The warning is about a future behaviour change, not a bug in your code, but it pollutes every log line. Join the args into a single command string and pass an empty array instead. Wed, 14 Oct 2026 23:30:00 GMT (Johnny Huynh) Node.jsWindowsGotcha https://johnnyhuy.com/devlog/terraform-plan-is-not-drift-detection https://johnnyhuy.com/devlog/terraform-plan-is-not-drift-detection A plan on a schedule detects pending configuration changes. It does not detect drift, because drift is unrecorded change to live infrastructure and a plan has no way to see it unless you ask for a refresh-only run. It also exits 0 with real differences present. Two facts, and most homegrown drift detection is wrong because it missed one of them. Fri, 11 Sep 2026 22:05:00 GMT (Johnny Huynh) TerraformInfrastructure as CodeDrift Detection https://johnnyhuy.com/devlog/github-token-suppresses-pull-request-ci https://johnnyhuy.com/devlog/github-token-suppresses-pull-request-ci GitHub does not run pull_request workflows for pull requests that GITHUB_TOKEN opened. Any release tool that opens its own PR (release-please, semantic-release, changesets, Mergify) will therefore never see its own release PR pass CI. Nothing errors, nothing is annotated, the checks just do not exist. Here is the rule, how to prove you have hit it, and the three ways out. Sat, 29 Aug 2026 23:20:00 GMT (Johnny Huynh) CI/CDGitHub ActionsRelease Automation https://johnnyhuy.com/devlog/helm-does-not-install-crds-on-upgrade https://johnnyhuy.com/devlog/helm-does-not-install-crds-on-upgrade CRDs in a chart's crds/ directory are only applied by helm install. helm upgrade skips them entirely, with no warning. If your External Secrets Operator ClusterSecretStore or your cert-manager Issuer disappears, this is why, and the fix is not in your values file because the values file is never read. Wed, 22 Jul 2026 04:10:00 GMT (Johnny Huynh) KubernetesHelmExternal Secrets Operator https://johnnyhuy.com/devlog/cold-coresimulator-hangs-on-fresh-runners https://johnnyhuy.com/devlog/cold-coresimulator-hangs-on-fresh-runners On a fresh GitHub Actions macOS runner, the first iOS simulator boot can hang indefinitely with no output. The job does not fail, it just stops making progress until timeout-minutes kills it. Shutting down and erasing the prewarmed simulators before the first boot is the fix, and bootstatus instead of sleep is what turns an invisible hang into a readable failure. Sun, 14 Jun 2026 01:45:00 GMT (Johnny Huynh) CI/CDiOSTesting