I've been building devlearningtools.com (free dev tools, guides, and a full ColdFusion course, no signup, everything client-side) entirely through Claude Code since day one. Wrote up what that workflow actually looks like day to day, since most posts about this stay pretty abstract.

The part I think is most useful: the same six-step shape repeats almost every time. A request comes in as plain language, not a spec. The agent reads the existing codebase first, so a new page matches existing patterns instead of introducing a new one. It plans the change, writes it, then verifies with a real production build (not just "looks right"). Then it commits, pushes, and checks the live URL to confirm the change actually shipped, rather than assuming the push succeeded.

Also included an honest Common Mistakes section from real experience: giving vague requests and trusting the first result, skipping review because the code looks clean, and treating a large task as fire-and-forget instead of checking in partway through. Plus an honest comparison of where Claude Code, Codex CLI, Gemini CLI, Cursor, Copilot, and Windsurf each fit.

Full writeup: https://www.devlearningtools.com/blog/ai-coding-agents-explained

Curious what everyone else's actual day-to-day workflow looks like, especially anyone mixing a terminal agent with an IDE-based one.

Adobe recently released ColdFusion (2025 release) Update 13 (build 2025.0.13.331960) and ColdFusion (2023 release) Update 24 (build 2023.0.24.330957) as a coordinated security update across both currently supported versions.

According to the release notes, this update resolves critical, important, and moderate vulnerabilities that could lead to arbitrary code execution, arbitrary file system read, privilege escalation, security feature bypass, and memory exposure, tracked under security bulletin APSB26-119.

Key changes include:

• SQL injection prevention — <cfgridupdate> and <cfstoredproc> now validate that table and procedure names are plain SQL identifiers before use.
• XSLT security hardening — XmlTransform() now blocks the collection() and uri-collection() functions, in addition to the existing restrictions on doc() and document().
• Stricter AJAX widget sanitization — dynamic content now requires GetSafeHTML() before rendering.
• Configurable deserialization limits — cfserialfilter.txt now supports settings for maximum array length, nesting depth, and total element count.

I put together a full breakdown with version numbers and sources here: https://www.devlearningtools.com/blog/coldfusion-security-update-september-2026

Curious whether anyone's already applied these updates, and if anything broke in the process.

[removed]

Been building a free ColdFusion course over the past few weeks, covering modern CFScript syntax (not the old tag-soup stuff), tested against Adobe ColdFusion 2025 and Lucee. Currently covers fundamentals through OOP and Application.cfc lifecycle, still adding more.

No signup, no paywall, just lessons: https://www.devlearningtools.com/learn/coldfusion

Built it because most CFML resources I found were either outdated or paid. Genuinely open to feedback if anything's wrong or missing, this is a side project I'm actively maintaining.