24 au 26 février, 2027
Montréal, Canada
Sessions
La liste des présentations est sujette à changement sans préavis.
Top 20
Mes favoris
.NETTests et Qualité
Testing is hard. Testing the right things, the right way, is harder. In this talk, I’ll share practical techniques for writing fewer, more effective tests. We’ll explore mutation testing to see if your tests really catch bugs, property-based testing for exposing edge cases you wouldn’t have thought of, and snapshot testing to spot unexpected changes in complex or legacy code. Plus, a few extra ideas to level up your testing along the way.
.NET
AI can generate .NET code in seconds, but generating code isn’t the same as understanding it. This session goes back to the fundamentals every .NET developer needs: C#, the .NET platform, project structure, dependencies, tooling, debugging, and more. Learn the foundations that help you move beyond vibe coding and build software you actually understand.
DocumentationIntelligence Humain
Think you can spot AI-written text? Think again! Studies show that humans are no better than random chance at detecting it. So if you want your words to stand out in a sea of slop, it's time to hone your skills and develop a unique voice. Good writing cultivates mental clarity and demands reader engagement. This counts, even in tech! Join us as we learn to express our thoughts in ways that are conspicuously and unmistakably human.
Architecture & Design PatternsPHP
PHP properties are having a golden age. Since PHP 7.4, they've become steadily more powerful, and recent features like interface properties, hooks, and asymmetric visibility open up vast new potential.
So now that we have all this power, what shall we do with it? It allows us to fully rethink what it means to model data.
In this session, we'll look at PHP properties, and OOP in general, with fresh eyes to see all that they can do for us.
So now that we have all this power, what shall we do with it? It allows us to fully rethink what it means to model data.
In this session, we'll look at PHP properties, and OOP in general, with fresh eyes to see all that they can do for us.
Intelligence Artificielle Python
Working with natural language has always been complex. LLMs have made it more accessible, but production applications still face significant challenges, especially when dealing with multiple languages. This talk covers common pitfalls in multilingual audio and text workflows, along with practical approaches for selecting, evaluating, and combining speech-to-text and language models.
.NETUX & UI
Rich text is not a control; it is a small platform hiding in a rectangle. Drawing on my Uno Platform RichEditBox work and writing app, Storylines, I'll follow a keystroke through input, document model, layout and rendering. We'll examine IME composition, selection, touch handles, undo, scrolling and accessibility. Attendees will leave with a practical model for what to share, what to make native and where text bugs hide.
Intelligence Artificielle Python
In June 2026, OpenCV released version 5.0, its first major release since 2018. This talk uses live demos to explore its core features and newest additions. From Hough transforms and image stitching to object detection and facial recognition, attendees will see what OpenCV can do and how to apply it in their own projects.
AccessibilitéDevOps
Accessibility work too often gets framed as a compliance checklist handed down after the fact something bolted on, resented, and rushed. This talk makes the case for a different model: accessibility as an ongoing partnership between developers, designers, and the disabled users who actually rely on the result. Drawing on nearly two decades as a daily screen reader user working alongside dev and design teams, I'll walk through what that partnershi
PHPTests et Qualité
Hopefully by now, you know that testing is important, and you've integrated PHPUnit into your workflow. So now what?
In this "testing 202" course, we'll explore some features of PHPUnit you may not be using (but should), some techniques you may not have thought of, and answer the question "so what are traits actually good for?"
In this "testing 202" course, we'll explore some features of PHPUnit you may not be using (but should), some techniques you may not have thought of, and answer the question "so what are traits actually good for?"
Python
In Python 3.14, there are two ways to do single-process concurrency without being slowed down by the Global Interpreter Lock: Free threading and subinterpreters.
Now it's easier to do concurrent processing that's actually fast. We'll look at the models available to you, how to pick and choose between them, and why you might still want to have the GIL get in your way.
Now it's easier to do concurrent processing that's actually fast. We'll look at the models available to you, how to pick and choose between them, and why you might still want to have the GIL get in your way.
Intelligence Artificielle Ecommerce
As autonomous agents replace manual web browsing, e-commerce requires standardized, machine-readable interfaces. We will go over an end-to-end framework implementing the Universal Commerce Protocol (UCP) for agentic commerce. Using the Model Context Protocol (MCP), our system connects LLM agents directly to Shopify’s global catalog, enabling structured product discovery, live cart management, and autonomous checkout orchestration.
JavaScript
Running AI in the browser brings several advantages like privacy where the user’s data never leaves the device, lower server costs, lower AI costs, less latency, and the ability to run offline. In this talk, we’ll look at several options for running AI locally from browser built-in models to libraries that leverage Wasm, WebGPU, or WebNN. While local AI brings advantages, we’ll also discuss when this might not be the best solution.
SecuritéIntelligence Artificielle
AI-enabled in vivo systems can sense physiology, infer state, and trigger physical action. I examine poisoned inputs, compromised updates, sensor/model drift, and unsafe autonomous decisions. I show how independent monitors detect loss of trust, how bounded actuation and external override contain it, and how known-good recovery and re-attestation restore control. Attendees leave with a reusable fail-safe pattern for safety-critical edge AI.
Architecture & Design PatternsBases de données
Covers sharding functions beyond simple modulo and hashing, vertical (split) and horizontal sharding, rebalancing and resharding, and post-sharding reliability considerations. Lessons are drawn from 12 years of working with MySQL at scale and are broadly applicable to other databases. Will discuss considerations for Vitess and TiDB, many of which are likely also applicable to PostgreSQL Neki and other distributed solutions.
Java et languages JVM
Java 29, the next LTS version of Java, is arriving in September. Java 28 is just a few weeks away, but the shape of our future LTS is already becoming clear. In any case, you need to learn the new features introduced since Java 25. Be there!
Architecture & Design PatternsPHPIntelligence Artificielle
How much code do you still truly read? Do you check what green tests actually prove? Everything passed review without a problem, but the outage it caused is still yours. I will teach you my hard-won principles for getting this process back under control: verifying without asking, checking assumptions before building on them, ranking changes by irreversibility, actually enforcing rules. You wanted to make things predictable. Let's reclaim that.
InfonuagiqueBases de données
I present an introduction to Aspire and why it is the default foundation for all my new projects. I will cover real-world issues encountered while running it across Windows, macOS, and Linux distros, alongside practical uses for the Community Toolkit. Attendees will learn how Aspire handles local orchestration, how to navigate cross-platform gotchas, and how it impacts deployment pipelines when moving workloads into production.
JavaScript
Admit it: your code sometimes (often?) juggles promises and async/await kinda randomly. Mixing async/await and .then(), useless return await's, async functions that don't await, incorrect mapping…
Promises and async/await are one of those things everybody uses but hardly anyone actually learns seriously, and the result is often a glorious mess.
Christophe provides a solid mental model for all this, so you can push top-notch async code.
Promises and async/await are one of those things everybody uses but hardly anyone actually learns seriously, and the result is often a glorious mess.
Christophe provides a solid mental model for all this, so you can push top-notch async code.
PerformancePHP
In today's fast-paced digital world, no one likes to wait. Yet, PHP scripts often find themselves waiting on databases, email servers, HTTP servers, file systems, and even RAM. The result? Your customers are left waiting too.
In this talk, we'll dive into the power of RabbitMQ and ReactPHP to significantly reduce waiting times and optimise performance. Get ready for live coding, real-world examples, and expert insights!
In this talk, we'll dive into the power of RabbitMQ and ReactPHP to significantly reduce waiting times and optimise performance. Get ready for live coding, real-world examples, and expert insights!
PHPSecurité
You asked for an ID before you opened the door. Who checks which rooms they open next? Authentication alone gets you almost nothing. Once a request is trusted, whole classes of failures open up: unauthorised reads, privilege grants, wrong balances, forgotten endpoints still answering, control panels wide open. I will walk you through the vulnerability and teach you the defence. Let's look at both halves and get authorisation right.
Bases de donnéesDevOps
Once upon a time, a query triggered a crashing bug. After automated failure handling, the application re-sent the query, and MySQL crashed again. This triggered a cascading failure, which resulted in datastore unavailability. Unfortunately, mistakes made during incident response led to avoidable data loss. This talk covers what happened, how we handled the incident, what we learned, and the infrastructure changes we made to prevent recurrence.
Architecture & Design PatternsIntelligence Artificielle
I built a self-driving SDLC that specs, codes, tests, reviews and ships - and battle-tested Temporal, Restate, Inngest, LangGraph and DAG schedulers to get there. Durable execution wants a world that never changes; an LLM invents a new answer every call. Keep them apart - a thin controller picking the next step, model calls and file writes outside it - or a crash re-runs your expensive calls and pays twice. Here's the scorecard and the scars.
Intelligence Humain
Technical expertise matters, but being right does not guarantee understanding, alignment or action. This session explores how technical professionals can communicate complex ideas more effectively, adapt their message to different audiences and move conversations from explanation to shared understanding. Attendees will leave with practical behaviours they can use immediately.
Architecture & Design Patterns.NET
Pub/sub is a great start - but production systems need more. Explore the Outbox, sagas, scatter-gather, competing consumers, retries, back pressure and idempotency. Through practical scenarios, you’ll learn which pattern addresses which distributed-systems problem and leave able to recognise failure and scaling challenges in your own systems and choose an appropriate messaging pattern to address them.
Architecture & Design PatternsIntelligence Artificielle
Diffusion models excel at short clips but suffer severe drift across extended sequences. We examine agentic video frameworks that solve this orchestration bottleneck. By decoupling production into hierarchical agents for narrative planning, identity-locked keyframing, audio-driven pacing, and code-based assembly, these systems preserve continuity, offering a scalable blueprint for autonomous, long-format video generation.
Intelligence Artificielle Python
From ChatGPT text boxes to Claude Code and Codex, LLMs evolved from basic chat to tab completion to active digital workers. The secret isn't bigger models: it's the harness. We will build a complete harness live from scratch in Python, demonstrating how it bridges next-token prediction with managed state, action execution, and error handling. Plus, we'll peek at how these execution loops generate training data for future models.
Intelligence Artificielle UX & UI
As coding agents become integral to daily software development, whether you're a seasoned engineer or a new builder looking to launch your first app, how you build and what you build is fundamentally changing. Learn how to work through the people-pleasing bias of agents, ensure they can verify their work correctly, and how to use modern web APIs and patterns to reduce technical debt!
AccessibilitéUX & UI
Passing a WCAG audit does not guarantee a usable experience. This session explores the gap between technical compliance and real usability, using examples from screen reader testing, keyboard navigation, cognitive accessibility, and user research. Attendees will learn how to move beyond checkbox compliance toward truly inclusive design.
JavaScriptIntelligence Artificielle
Remote Model Context Protocol (MCP) servers expose tools, but did you know they can return UI, not just text? Using the MCP Apps extension, an MCP app delivers interactive experiences inside hosts like Claude.ai and ChatGPT.
We'll live code one from scratch, tunnel it to a public URL, register it in both hosts, then lock down tool calling with Pomerium (open core, Apache 2.0) so you control who gets to use your app and its tools.
We'll live code one from scratch, tunnel it to a public URL, register it in both hosts, then lock down tool calling with Pomerium (open core, Apache 2.0) so you control who gets to use your app and its tools.
Intelligence Artificielle
Rolling out an AI coding agent takes more than installing a CLI. I'll show how far OpenCode's remote config, plugins, and skills go in an enterprise setup: one-command onboarding, layered configs, and a shared plugin monorepo. I'll explain how we set agent permission defaults, manage model access, and track cost and usage through telemetry. You'll leave knowing exactly what OpenCode provides and what your team needs to build.
.NETTests et Qualité
Unit tests meant mocking everything, until one refactor broke a slew of tests. Integration tests are a better safety net but harder to build. This session covers .NET integration testing tools, handling shared state with TestContainers, uncontrollable dependencies, and patterns for maintainable tests across web apps, APIs, and messaging endpoints.
AccessibilitéIntelligence Artificielle
AI-powered tools can detect accessibility issues faster than ever, but they cannot replace human judgment. This presentation examines the strengths and limitations of AI for WCAG testing, highlights common pitfalls, and demonstrates how AI can support accessibility professionals, QA teams, and developers in delivering more inclusive digital experiences.
JavaScriptUX & UI
SVG charts have a lot to love, but with enough data the browser gives up. In this session, we'll climb the performance ladder step by step: canvas rendering, smart downsampling, workers with OffscreenCanvas, and finally the GPU with WebGL and WebGPU, all while keeping interactivity working. With practical examples in React, you'll learn to scale the D3 skills you already have to dense datasets rendering at 60fps.
Tests et QualitéIntelligence Artificielle
An AI Agent that immediately fixes the tests can hide a real product defect. In this session, I'll show you a Playwright suite where an Agent reads a failed GHA run, classifies locator drift versus a real regression, and refuses to soften assertions. You will see a deterministic hook reject a weakened expect, and how the Agent decides to fill a Jira bug instead of healing the test.
SecuritéIntelligence Artificielle
Running an autonomous agent like OpenClaw without hardening access to it is a bad idea. This talk covers securing OpenClaw ingress: OIDC login, short-lived SSH certificates, per-connection policy, and live session revocation, using Pomerium, an open core (Apache 2.0) identity-aware proxy built on Envoy, a CNCF project. Includes a PR I contributed upstream (trusted-proxy auth mode) and a live demo killing an active session mid-task.
Intelligence Artificielle
LLM agents often feel random, forgetful, or fragile, but in most cases the problem is the context, not the model. Prompts, tool output, memories, and failed hypotheses all compete for attention. This talk shows how clean context makes agents more reliable, cheaper, and easier to trust, with practical patterns like forking, filtered CLI output, and careful MCP usage to keep agents focused and out of the token landfill.
InfonuagiqueJava et languages JVM
Buildpacks just reached CNCF Graduation!
We'll explore how they continue to replace Dockerfiles with smarter builds.
We’ll dive into the new distroless builders, Spring Boot 4.2’s switch to Ubuntu Resolute by default, the jvm-vendors buildpack to easily swap JVMs via variables, and upcoming security stack warnings and more!
Join me to learn how to build smaller, faster, and more secure container images!
We'll explore how they continue to replace Dockerfiles with smarter builds.
We’ll dive into the new distroless builders, Spring Boot 4.2’s switch to Ubuntu Resolute by default, the jvm-vendors buildpack to easily swap JVMs via variables, and upcoming security stack warnings and more!
Join me to learn how to build smaller, faster, and more secure container images!
Java et languages JVMIntelligence Artificielle
Building AI agents on top of REST APIs sounds straightforward: turn each endpoint into an MCP tool. But as APIs grow, tool definitions and responses crowd the model's context. MCP as Code offers another way: let agents discover APIs, write code to call them, and filter results before they reach the model. This case study explores how semantic search and sandboxed execution make that work, and where the approach helps or adds complexity.
Tests et QualitéIntelligence Artificielle
Modern AI coding assistants like GitHub Copilot and Cursor promise easy test automation; just prompt the assistant to write a test, and watch it work. I found the day-to-day experience much different. In this talk, I will show which tasks AI is suitable for, how to collect relevant context for each prompt, and how to guide the AI to code better end-to-end tests.
PHPTests et Qualité
Time- and IO-bound tests are a common reason PHPUnit suites get slow: every test that sleeps, waits on a database, or calls an external service runs sequentially. This talk introduces Counit, an open-source library that runs those tests concurrently in one PHP process using Swoole coroutines. We'll show a suite drop from over 9 minutes to 19 seconds, and cover the tradeoffs: benefits, risks, and how to adopt it incrementally.
Java et languages JVM
Prompt engineering was only the beginning. Reliable AI applications depend on the context around the prompt: system instructions, memory, retrieved knowledge, tools, and structured output. In this live-coding session, we’ll use Spring AI to build that context deliberately, load the right information at the right time, and avoid overwhelming the model. You’ll leave with a practical mental model for building AI applications Java can trust.
Java et languages JVMPerformance
Java apps start slow — JIT warmup, framework init, connection pools. What if your app could resume from a running snapshot in milliseconds? This talk shows CRaC (Coordinated Restore at Checkpoint): checkpoint a live JVM to disk, restore it near-instantly. We start from CRIU, see why it fails on Java, then CRaC it for real — plain Java and Spring Boot, in Docker. Live demos, real caveats, and how to handle app state across a checkpoint.
DevOpsJava et languages JVM
Your Spring Boot app is 1 MB, but its image is 713 MB, and 590 MB of that changes on every build. Live, we will shrink it step by step: multi-stage builds, layered jars, buildpacks, jlink and distroless. Then we move from size to speed and use AppCDS, AOT and CRaC to take startup from seconds to milliseconds. Each step comes with measured numbers and an honest price tag, so you can choose which kind of ultimate your image needs.
HTML et CSSJavaScript
CSS is getting a random() function, opening up a very wide range of new applications that can be done performantly in CSS, from adding randomness to animations big and small to setting discrete values.
This talk takes a look at both the creative visuals and practical applications that random in CSS enables you, as well as how it compares to its JS counterpart.
This talk takes a look at both the creative visuals and practical applications that random in CSS enables you, as well as how it compares to its JS counterpart.
Intelligence Artificielle CTO
Almost everything has changed since the mainstream adoption of generative AI. Every decision-making process must now factor in AI, from costs, usage, and standardization to risks and hiring. If you hold a technical leadership role, you inevitably had to adapt. I will share my observations and recommendations, but I am open to discussion.
Architecture & Design PatternsUX & UI
Architectural choices like messaging, CQRS, and Event Sourcing often introduce eventual consistency. But users don’t want 'eventually'. They expect feedback now. In this session, we’ll explore what eventual consistency really means and look at UI and back-end patterns that provide immediate feedback without sacrificing decomposability, maintainability, or performance.
Intelligence Humain
You debug your work daily, but how often do you apply that same attention to yourself? Do you avoid difficult conversations, react poorly when challenged, agree to things you later resent, or procrastinate on key decisions? This session explores how self-awareness can help you recognize these patterns, interrupt automatic reactions, and make better decisions at work and in business, including decisions that can improve your earning potential.
HTML et CSSJavaScript
Many of us are building modern web apps with an outdated idea of what a browser can do.
Modern web APIs can replace libraries, backend services and even native apps. Through practical examples, we'll explore native UI, screen capture and processing, local file access, cross-tab communication, Bluetooth hardware and browser-local AI.
Learn what's ready today, where progressive enhancement fits, and when a dependency is still the right choice!
Modern web APIs can replace libraries, backend services and even native apps. Through practical examples, we'll explore native UI, screen capture and processing, local file access, cross-tab communication, Bluetooth hardware and browser-local AI.
Learn what's ready today, where progressive enhancement fits, and when a dependency is still the right choice!
DevOpsIntelligence Artificielle
LLMs coupled with coding agents can be very effective and are designed to be goal seeking. One of the ways to unlock this capability is to provide a computing environment to LLMs. There are many commercial products that offer sandboxes like E2B, Daytona, Docker Sandboxes etc. In this talk we will peel back the covers of how these work. We will see how to stage files for the sandbox, how to securely hoist secrets and limit network access.
Tests et QualitéIntelligence Artificielle
LLM assistant running inside your app breaks a core assumption of e2e testing: the same input can produce different tool calls. I'll show you how I tested an in-app AI assistant using one Gherkin contract and three runners: direct handler calls, deterministic tests using Playwright, and agent-driven browser testing.
Java et languages JVM
Command line applications are essential tools for developers and system administrators, providing a fast and efficient way to automate tasks and perform complex operations. GraalVM Native Image and JReleaser have made the task of creating and deploying command line applications written in Java much easier. In this presentation I will cover the fundamentals of developing and distributing command line applications to different platforms.
InfonuagiqueDevOps
Development environments should not take longer to configure than the code takes to write. This session explores Dev Containers and GitHub Codespaces for creating consistent, repeatable environments. Learn how devcontainer.json works, how local containers compare with cloud Codespaces, how teams can standardize setup, and where these tools do and do not fit.
Architecture & Design PatternsBases de données
Event Sourcing is a powerful architectural pattern, but many avoid adopting it due to misconceptions about its complexity.
In this session, we will build the concepts step by step and see how they come together in a working application.
I will cover:
- Events
- Streams
- Reconstructing State
- Building Your First Application
- Common Pitfalls
In this session, we will build the concepts step by step and see how they come together in a working application.
I will cover:
- Events
- Streams
- Reconstructing State
- Building Your First Application
- Common Pitfalls
InfonuagiqueBases de données
Distributed databases promise horizontal scale, but they also introduce operational complexity, consistency trade-offs, and cost. Can replicated single-node systems such as MySQL or PostgreSQL handle most workloads? This talk compares distributed and non-distributed architectures, explains their practical limits, and gives developers a framework for deciding when distribution is essential—and when it is unnecessary.
Architecture & Design Patterns.NET
Books and workshops describe domain-driven design for greenfield code. But what about existing code? This session covers spotting code smells in anemic, procedural code, applying standard design patterns for complex behaviors and knowing when not to, and safely refactoring toward a more cohesive, domain-driven model.
InfonuagiqueDevOps
Chaque application produit ses logs à sa façon, et rarement comme on en a besoin. Le Collector OpenTelemetry sait transformer presque n'importe quel format en télémétrie cohérente et exploitable, à condition d'en maîtriser les opérateurs. Vous apprendrez à construire et tester un pipeline de parsing, à appliquer les conventions sémantiques et à éviter les erreurs qui font silencieusement disparaître vos données.
MobileUX & UI
L'écart entre une bonne app mobile et une excellente se joue dans les détails. Cette année, les détails sont nouveaux : écrans pliables, génération dynamique d'interfaces, ainsi que de l'IA locale qui permettent d'ajouter de l'intelligence sans imposer un chatbot. Avec des exemples réels, on les combine aux détails fondamentaux tels que les animations et connexion sans friction, pour une app soignée, fluide et engageante.
L'écart entre une bonne app mobile et une excellente se joue dans les détails. Cette année, les détails sont nouveaux : écrans pliables, génération dynamique d'interfaces, ainsi que de l'IA locale qui permettent d'ajouter de l'intelligence sans imposer un chatbot. Avec des exemples réels, on les combine aux détails fondamentaux tels que les animations et connexion sans friction, pour une app soignée, fluide et engageante.
Architecture & Design Patterns.NET
Dual-writes create intermittent data inconsistencies that can be difficult to find and correct. How do you spot this anti-pattern, and how can you avoid it? This talk covers four patterns for maintaining data consistency in modern systems, prioritizing reliability and protecting developers' nights and weekends. We'll see examples in C# of each pattern, including demonstrations using SQL Server, Cosmos DB and Redis.
JavaScriptIntelligence Artificielle
Modern web development provides an alternative to cloud-based round trips for AI usage and enables user to co-browse your site with Agents. Learn how you can take advantage of in-browser, on-device models for prompting and on-the-fly language translation and build out agentic experiences with WebMCP to enhance an e-commerce site, culminating in creating an on-site agent that works entirely offline!
JavaScript
Proxies let us do metaprogramming in JavaScript, which is a really cool thing. There are well-established, useful patterns for it to be sure, and we’ll see a few of these. But they can also be used for less obvious results, or plain fun with mischievous tricks and quirky behavior!
Architecture & Design PatternsJavaScript
Le conseil dominant en frontend : décomposez tout en compound components. Chez nous, l'API publique reste volontairement simple, pensée pour des devs fullstack/backend. Cette conférence montre, à travers trois components réels (une Card neutre, un FieldBase partagé, un Combobox forké), comment décider où placer la complexité : ne rien abstraire, composer en interne, ou forker selon la nature de la divergence.
Java et languages JVMIntelligence Artificielle
As AI adoption grows, it increasingly encounters Java-based business logic and data. Java is everywhere AI needs to be. This session presents an end-to-end overview of AI and the Java Platform from source-code generation, tooling, inferencing, native GPU compute from Java, and everything in between. We will explore Java innovation projects like Panama, Babylon, and Valhalla, and how they benefit the Java ecosystem and AI workloads.
Architecture & Design PatternsBases de données
Avez-vous déjà poussé une migration BD qui a brisé la prod? Réalisé qu’un autre service brise parce qu’il utilisait votre table? Ou attendu 30 secondes qu’une BD démarre pour rouler vos tests?
Voyons une architecture de pipelines CI qui (1) teste chaque migration avant qu’elle n’arrive en prod, (2) vérifie que tous les services sont compatibles, et (3) accélère les tests d’intégration en fournissant des BD pré-migrées avec Testcontainers.
Voyons une architecture de pipelines CI qui (1) teste chaque migration avant qu’elle n’arrive en prod, (2) vérifie que tous les services sont compatibles, et (3) accélère les tests d’intégration en fournissant des BD pré-migrées avec Testcontainers.
HTML et CSSJavaScript
Most sites ship piles of JavaScript to render what is mostly text, and visitors pay for it in load time. Astro flips that: fast HTML first, interactivity only where it earns its place. Real apps still need searches, carts, and forms. Let's grow one site live, using server islands, type-safe Actions, and content that updates without a redeploy. No Astro experience required. You'll leave knowing why you'd choose it, and when you shouldn't.
Intelligence Artificielle Science des Données
Foundation models did not stop at text. Pretrained on billions of points, time series models now forecast series they have never seen, with no training at all. We put one in production and retired the models we trained per metric. You will learn how zero-shot forecasting works, when it beats training on your own data, and what it costs you.
InfonuagiqueIntelligence Artificielle
Agent harnesses are easy to run on your machine. Giving them a secure place to work on their own is harder. Using Modal Sandboxes, this talk walks through the move from local agents to isolated, sandboxes with controlled access to code, tools, secrets, and networks. You will learn the building blocks for running harnesses as persistent engineering collaborators instead of as personal assistants.
SecuritéIntelligence Artificielle
This session explores how AI agents move from demos into real-world environments. Drawing on technology first used for holographic communication with the ISS and later deployed in airports, healthcare, and training, I’ll share lessons on AI Presence, context-aware systems, edge vs. cloud decisions, unreliable networks, privacy, and post-quantum security. Attendees will learn practical approaches for building resilient, aware, secure AI.
Tests et QualitéIntelligence Artificielle
Building applications with AI and large language models (LLMs) adds a new layer of variability that makes testing difficult. Since interactions can be subtly different each time but still correct, traditional testing tools often fail. In this talk, we'll share our journey using the open-source tools DeepEval and MLflow to evaluate multi-turn conversations, tune prompts, and ensure our AI applications are reliable so that we can sleep at night.
DevOps.NET
Are you looking to rapidly deploy your content? Are you looking to understand the full DevOps process? Come for this demo-only presentation where we start from scratch, template a React website and API with Aspire, live-code both Dockerfiles, live-code Kubernetes YAML resources, build up a DevOps pipeline in GitHub Actions, and deploy to Kubernetes. Then we commit, and watch the magic flow into place. You too can automate your full-stack DevOps.
Java et languages JVMIntelligence Artificielle
Want to add AI capabilities to your Java applications but don’t know where to start? This beginner-friendly session introduces LangChain4j, a framework for integrating large language models into Java applications. Learn how to connect to a model, build a conversational assistant, and use your own documents to ground its responses with retrieval-augmented generation (RAG).
Everyone knows git commit, push, pull, add, and checkout. These cover most daily operations. But what happens when you accidentally delete your branch? Or when you have two stacked PRs and the first gets squash-merged and now there's conflicts everywhere?
This is when you need more power. Let's go off the beaten path and explore more advanced features such as git reflog, rerere, amend, fixup and autosquash, and rebase --onto and --update-refs.
This is when you need more power. Let's go off the beaten path and explore more advanced features such as git reflog, rerere, amend, fixup and autosquash, and rebase --onto and --update-refs.
SecuritéIntelligence Artificielle
Developers already ship code with agentic AI and MCP servers without governance. Blocking them kills velocity; ignoring them creates risk. This session shows how to build a centralized MCP broker with Amazon Bedrock AgentCore Gateway and Runtime, enforce identity-based permissions on agent requests, distribute a curated skills catalog with reusable blueprints, and embed security agents into the AI SDLC so you can govern AI without slowing it down
Intelligence Artificielle
You've likely heard how rising AI bills have made teams start thinking about running their own open-weight models. The good news? You can achieve near-frontier capabilities, but the hard part is figuring out the optimizations that are right for your hardware, from Mac's to NVIDIA GPU's. I'll walk you through what works best, from quantization to speculative decording, through live demos that balance throughput, latency, and accuracy.
Intelligence HumainCTO
How do you grow a continuously learning organization? If certifications and wikis were enough, organizations would be crushing it. In this session we look at how we learn in complex domains - focusing on tacit vs explicit knowledge; context learning; and growing coaches and teachers.
RéseauxSecurité
Container security depends on several layers working together. The Guardians connect image and supply chain security, Kubernetes policies, runtime detection, network isolation, and observability. Practical examples with Trivy, Kyverno, and Falco show where each layer helps and where it falls short. Learn to harden images, limit workload privileges, spot suspicious behavior, and use network policies to contain an incident.
PerformanceIntelligence Artificielle
The largest, smartest models are also the most expensive to run; quantization is one of the most accessible ways to cut that cost. This talk introduces model quantization technically, with a live pipeline demo: LLM Compressor handles quantization and sparsity, GuideLLM benchmarks latency and throughput against baseline, and lm-eval scores accuracy. Attendees leave with open source tools to compress their own models without losing performance.
DevOpsSecurité
The massive increase in supply chain attacks for trusted packages causes serious risks to many organizations. Packages get infected, versions get bumped and malicious code gets rapidly distributed at enormous scale.
In this presentation we’ll take a closer look at how an artifact firewall prevents you from pulling in infected packages by enforcing OSV.dev rules at request time, introducing quarantine windows, and offering an audit trail.
In this presentation we’ll take a closer look at how an artifact firewall prevents you from pulling in infected packages by enforcing OSV.dev rules at request time, introducing quarantine windows, and offering an audit trail.
Securité
FAPI is a security profile that protects APIs in high-value scenarios where heightened security is needed.
To be considered a FAPI 2.0 compliant implementation, your implementation must use the right set of OAuth's best current practices.
In this session you'll learn the concepts of each part and see a practical example on how it is implemented on both identity provider and client.
To be considered a FAPI 2.0 compliant implementation, your implementation must use the right set of OAuth's best current practices.
In this session you'll learn the concepts of each part and see a practical example on how it is implemented on both identity provider and client.
Architecture & Design PatternsInternet des objets
We often talk about "the cloud" as an abstract concept, but it lives in massive, physical structures. This session strips away the jargon to show how modern data centers—the engines of the AI revolution—are actually built. We will track the journey from a vacant lot to a modern high-density compute facility. This talk will go deep into the fundamentals of creating a modern data center including how they are sized from small to hyperscale.
JavaScriptPerformance
Most React developers use it daily without knowing what happens after they call setState. This talk explains how React works inside: the virtual DOM, Fiber and reconciliation, why components re-render, how concurrent rendering and Suspense schedule work, and what the React Compiler changes. Attendees leave able to reason about performance problems instead of guessing, based on my O'Reilly book Fluent React.
JavaScriptSecurité
NPM is the largest registry of public JavaScript source code, but lately it has been an attack vector for malicious code. To prevent the distribution of hacked code, the publishing process has been hardened against stolen credentials. In this presentation, I will explain the new trusted publishing process and how to follow safe code practices.
UX & UI
When your boss signed the expense form for this conference, they thought you’d bring back BETTER ways to do stuff – but isn’t that boring? What if instead, we learned how to make things WORSE? From dark patterns to bad designs, there are so many ways to make your software difficult or painful to use. In this session, we’ll talk through some of the most common, so that you can avoid them in the future…or intentionally include them, if you're evil.
DevOpsIntelligence Artificielle
Human-in-the-loop might be the easy answer, but a better model is where people set direction, agents execute, and review at key checkpoints. The real skill is deciding where a human has to own the call. This session works through that using a personal night-sky viewing planner application and weighing where AI should or shouldn't take the wheel. Attendees will leave with skills to decide where AI should drive and where it should ride along.
.NETMobile
I used to give framework-comparison talks with feature tables and winners. Then I started working on .NET MAUI and Uno Platform, and the questions changed. Using real bugs and public pull requests, I'll compare native and drawn UI, control ownership and accessibility-tree mismatches. Attendees will leave with practical questions for choosing or maintaining a cross-platform stack after the demo stops being impressive.
PerformancePHP
The purpose of this talk would be to introduce a number of PHP extension designed to speed up applications by moving logic from PHP to C extensions that can be used from PHP. More specifically the talk will cover fast UUID generation, Markdown parsing, Excel reading/writing, JSON parsing and data Serialization.
Architecture & Design PatternsIntelligence Artificielle
Open Mercato is an MIT-licensed CRM/ERP framework whose code is largely written by AI agents. As a contributor to it we can together do a tour from the outside in: specs committed beside the code, shared agent skills for pull requests, review and CI stabilization, conventions agents cannot drift from, and where humans stay in the loop. Everything is public, so we look at what holds, what breaks, and what transfers to any stack.
DevOpsSecurité
Containers run from images, and images are created by Dockerfiles. But what is a layer? And what ends up inside the image? What files and executables are added? And how does the base image affect all of this? What if I use a different base image? Container Images aren't a black box. Lets open them up, and create a few from scratch. We'll also discuss how image internals help us our manage supply-chain security for SBOMs.
InfonuagiqueCTO
Modern development can look deceptively simple: push code, run tests and deploy. Beneath that workflow sits networking, Kubernetes, IAM, DNS, observability and security. This talk explores what happens when that complexity is concentrated in a platform capability: what developers should own, what they shouldn't, and the trade-offs of hiding infrastructure behind a simple developer experience.
JavaScriptIntelligence Artificielle
Step into JARVIS voice-first mission control for Gemini’s multi-agent systems. Explore Gemini Live, ADK 2.0, A2A, and MCP powering real-time agent teams: heartbeat loops, voice intents spawning long-horizon tasks (tickets, research). Unlock the control-panel pattern for steering agent swarms, with production tactics for bidirectional voice, tool use, and governance. AI orchestration as it was meant to be.
InfonuagiqueJava et languages JVM
Ship your Java application, not an entire OS. Inspired by WebAssembly and KWasm, Brewlet.sh runs Java services on Kubernetes without building container images. Explore the containerd shims, RuntimeClasses, and node provisioning that make it possible. Through live coding, we'll push a Spring Boot JAR with `brewlet push` and deploy it with `kubectl apply`, showing how to build a Kubernetes platform tailored to Java.
Java et languages JVMSecurité
Java is dominant in enterprises because of its trust, predictability, and security. This session overviews the latest Java security advancements and their impact on developers. It covers Post Quantum Cryptography (PQC) readiness, transitioning Java to have more frequent security updates, and Java's alignment with industry standards, including FIPS 140-3 compliance.
CTO
La souveraineté des données n'est plus une simple préoccupation théorique. Entre réglementations, enjeux géopolitiques et dépendance aux fournisseurs, la maîtrise des données est devenue une nécessité stratégique. Les participants repartiront avec des mesures concrètes pour les préoccupations de: dépendance aux fournisseurs, exigences de conformité, maîtrise de leurs données organisationnelles au sein de leur propre juridiction et productivité.
PerformanceIntelligence Artificielle
Tired of cloud API latency and rate limits? Learn how to run, quantize, and serve open-weight models directly on your workstation using modern runtimes, optimal precision formats, and practical hardware sizing. We'll cover:
* How to choose the right quantization method for your target memory budget
* How to select and configure the right inference engine
* Practical rules of thumb for memory bandwidth, VRAM sizing, and context window
* How to choose the right quantization method for your target memory budget
* How to select and configure the right inference engine
* Practical rules of thumb for memory bandwidth, VRAM sizing, and context window
Bases de donnéesJavaScript
In this talk, you'll learn what Local-First is and why you may want to choose it instead of the traditional web development model. We'll create a simple web application to showcase how this can be implemented using either SQLite or PGLite and PowerSync or ElectricSQL respectively for the sync with the server.
Architecture & Design PatternsPHP
We have more observability tools than ever, yet every incident leaves the same question unanswered: Why? Noisy logs, SaaS tools that only react to exceptions, and sampling that drops the one request that mattered.
The problem isn't tooling, it's treating observability as logging and error reporting. This talk shows how separating data collection from relevance decisions preserves the context to also answer questions you couldn't anticipate.
The problem isn't tooling, it's treating observability as logging and error reporting. This talk shows how separating data collection from relevance decisions preserves the context to also answer questions you couldn't anticipate.
DevOpsTests et Qualité
In a server side app, it's easy to find out what went wrong from logs. But what about the client side? The W3C's Reporting API for Content-Security-Policy, Network Error Logging, Document and permission policies, and reporting endpoint HTTP headers can let you know about all kinds of client-side issues that you'd otherwise never see. Find out how to use them, and solve all the problems that only your customers have been seeing!
PHPTests et Qualité
Mago réunit analyse statique, linting et formatage de code dans un seul binaire Rust, nettement plus rapide que l'outillage actuel. Au programme : configuration, compatibilité avec les annotations PHPStan et Psalm, generics et types conditionnels, intégration pre-commit, CI et éditeur, le tout démontré sur une vraie base de code. De quoi préparer une migration progressive et accélérer vos intégrations continues !
PerformanceUX & UI
Your app works fine, but there's a loading spinner behind every click. In this session, we'll hunt spinners down at every stage: a first load time trimmed by modern bundling, an app shell and a service worker, interactions made instant by optimistic mutations and a local-first store in IndexedDB, and animations engineered to feel snappy rather than sluggish. We'll also cover how sync engines and CRDTs can keep everything consistent.
.NETIntelligence Artificielle
Microsoft Agent Framework has plenty of “hello world” demos, but the real leverage often comes from the features that don’t show up in most talks. In this session, we’ll skip the basics and focus on the less common topics that make these kinds of solutions more usable, maintainable, and production-ready.
By the end of the session, you'll have a short list of techniques you can apply immediately to level up your MAF game.
By the end of the session, you'll have a short list of techniques you can apply immediately to level up your MAF game.
.NET
ASP.NET Core's middleware pipeline is one of the most elegant parts of the framework, yet most of us only use the defaults. Thing is, there's a bunch of built-in middleware that ships with ASP.NET Core but isn't wired up by default.
In this session, we'll explore these overlooked middlewares, understand when to use (and when to avoid) each one, and build a few custom middleware components live on stage.
In this session, we'll explore these overlooked middlewares, understand when to use (and when to avoid) each one, and build a few custom middleware components live on stage.
PHP
When inheriting an unmaintained legacy Symfony application, the real question is not “how to migrate”, but rather “where to start without breaking everything”.
In this talk, I share an honest retrospective of a Symfony migration carried out in production, on an aging application with limited documentation, few tests, and dependencies on components that are now obsolete.
In this talk, I share an honest retrospective of a Symfony migration carried out in production, on an aging application with limited documentation, few tests, and dependencies on components that are now obsolete.
Architecture & Design PatternsInfonuagique
Imagine you have some legacy code. How do you actually go through and modernize the application when multiple teams are involved...and not bring down production?
In this session, you will learn real world techniques to help you with modernization. Including
Realigning product, architecture
Finding seams in your existing product
Questioning product assumptions
Making boring changes to get quick learning
Natural code expansion
In this session, you will learn real world techniques to help you with modernization. Including
Realigning product, architecture
Finding seams in your existing product
Questioning product assumptions
Making boring changes to get quick learning
Natural code expansion
.NET
It starts with one HTTP trigger. Then come queues, timers, retries… and a workflow that has to wait three days for a human. Watch a C# app grow from simple Functions into a Durable orchestration, live on .NET 10 and Flex Consumption,
and learn where each one fits.
and learn where each one fits.
Bases de données
Explore how MySQL JSON Duality Views enable developers to work with normalized relational data as flexible JSON documents, combining the precision of SQL with the agility of document-style development.
This session introduces the core concepts, practical use cases and benefits of duality views, demonstrating how they can simplify modern application development without sacrificing data consistency or relational integrity.
This session introduces the core concepts, practical use cases and benefits of duality views, demonstrating how they can simplify modern application development without sacrificing data consistency or relational integrity.
Bases de données
Developers don’t need another theoretical performance talk. They need to see how real MySQL problems get fixed. In this live-coding session, we’ll transform a slow, poorly tuned application into something fast and production-ready using practical techniques you can apply to your own code.
We’ll cover query rewrites, indexing strategies, EXPLAIN plans, schema tweaks, and modern MySQL features that improve performance.
We’ll cover query rewrites, indexing strategies, EXPLAIN plans, schema tweaks, and modern MySQL features that improve performance.
Intelligence Humain
Technical experts often need to influence without formal authority. This session explores how developers, project leads, and specialists can build trust, create clarity and strengthen shared ownership without relying on hierarchy. Attendees will leave with practical leadership behaviours they can use immediately to increase influence and improve team performance.
Internet des objets
Matter promises smart home users that any certified device just works, whether you're on Apple, Google, Amazon, or Home Assistant. We'll cover where the standard came from, how devices interact with any ecosystem, and where the line is between local control and the vendor's cloud. Finally, we'll build a Matter device from scratch and add it to multiple platforms to test whether it lives up to its promise.
Securité
OAuth has been around for a long time now, and has become the standard protocol for token-based security.
Like every popular technology that has been growing with its requirements, there are some things which work really well, and some that did not quite stand the test of time. This talk looks at the essentials you should know about, if you would enter the OAuth ecosystem today. Which protocol flows and extensions should you study, which
Like every popular technology that has been growing with its requirements, there are some things which work really well, and some that did not quite stand the test of time. This talk looks at the essentials you should know about, if you would enter the OAuth ecosystem today. Which protocol flows and extensions should you study, which
Intelligence Artificielle Python
When an AI agents goes wrong, it doesn't fail in one log line. It's across a chain of model decisions, retrieval, retries, and tool calls that jump between services. So, how do we tell what happened with each request, and perhaps why the response wasn't what we wanted? This session is a demo of tracing AI agents using OpenTelemetry and MLflow to understand requests from user -> agent -> tools -> and back, to better understand agent behavior.
JavaScript
Every new app seems to start the same way: wire up a frontend, stand up a backend API, pick a state library, fight the build. SvelteKit folds ceremony into one framework. Starting from an empty folder, we'll build a working app on stage, with logins, forms, and a database, powered by Svelte 5 runes and type-safe remote functions.
Java et languages JVMIntelligence Artificielle
Everyone seems to be building agentic AI systems with multi-step workflows, autonomous decision-making, and agentic processes. So what does that actually look like in practice? In this session, we will build a real agentic Java application, walking through how it works and when agents need external help. Come see what it actually takes to move from a single tool call to a genuine agentic workflow for your own Java projects.
DevOpsSecurité
Package ecosystems like npm, PyPI, Maven, NuGet and Composer each have controls against software supply chain attacks. We'll compare their capabilities, expose the limits of client-side controls, and show how centralized policies can be enforced at the gate, before they reach the CI/CD pipeline.
We'll cover topics like centralized policy as code, dependency cooldowns, audit trails, OSV rules, and the need for a vendor-neutral artifact firewall.
We'll cover topics like centralized policy as code, dependency cooldowns, audit trails, OSV rules, and the need for a vendor-neutral artifact firewall.
PHP
Join PHP core developer and veteran release manager Daniel Scherzer for a deep dive into the new features, syntax updates, deprecations, and surprises coming in PHP 8.6. Whether you're maintaining legacy apps or building bleeding-edge libraries, this talk will help you upgrade to the newest version of PHP 8.5 with confidence. Features include improvements to the URL handling extension, partial function application, a new Duration class, and more.
PerformancePHP
In this talk we are going to dive deep into PHP's inner workings.
We will start by looking at how the language parser and scanner work, which convert scripts into an Abstract Syntax Tree. When then look at how PHP internal byte code is generated from this AST, and how the engine runs byte code.
We will start by looking at how the language parser and scanner work, which convert scripts into an Abstract Syntax Tree. When then look at how PHP internal byte code is generated from this AST, and how the engine runs byte code.
PerformancePHP
Every generation of PHP gets a compiler. HipHop gave Facebook 6x throughput, then died within three years. Hack forked the syntax onto its own runtime, and adoption never came. In August 2026, Swoole shipped TypePHP, an AOT compiler that lowers PHP to C++17 and compiles itself, with opt-in types still valid PHP. This is an early adopter's evaluation: every claim checked against what killed earlier attempts, with real output and benchmarks.
PHPSecurité
In October 2026, a pair of critical vulnerabilities in PHP, termed "PHP2Shell," were disclosed. As a PHP 8.5 Release Manager, Daniel Scherzer had a front-row seat to the announcement of the PHP2Shell vulnerabilities and the distribution of their fixes. Join him for an in-depth account of what PHP2Shell is, the discovery and remediation process, how the fixes were built and disseminated, and much much more.
PHPTests et Qualité
Chromium, Firefox and WebKit driven from PHP through a synchronous, typed API: locators by role and label, assertions that retry until the expected state appears, replayable traces holding DOM, network, console and Symfony container access! On the menu: PHPUnit integration, a Symfony bundle that routes requests through the test kernel, migrating Mink or Behat tests, installing browsers in CI. You will write your end-to-end tests in pure PHP!
Architecture & Design PatternsDevOps
A mixed-stack repository rarely feels like one application. Python, Node.js, Go, Java, and .NET services each bring their own setup and logs. Aspire gives them one place to run, connect, and report telemetry. Working examples cover service discovery, connection strings, health-aware startup, and OpenTelemetry. Learn to manage a mixed stack without replacing its tools and carry the same application model into deployment.
DevOpsSecurité
Quantum computing poses a looming threat to current encryption algorithms, so we need a new approach: post-quantum cryptography. This talk explores why we need PQC, how it works, why it's important to use it now, new standardised PQC algorithms like ML-KEM, industry adoption of these approaches, and practical migration steps for developers and ops people to protect our data, systems, and applications now and in the rapidly-approaching future.
DevOpsSecurité
Docker was created as a containerization system, but nowadays it also serves as a security mechanism for build isolation and sandboxing AI agents.
This talk covers various security features, the limitations you need to know, and the most effective ways to properly secure your Docker containers.
This talk covers various security features, the limitations you need to know, and the most effective ways to properly secure your Docker containers.
DevOpsTests et Qualité
I have never shipped software on a release train. Eight apps, multiple services, a deploy every few commits. I will show the structural choices continuous deployment forces on you: a version per app, forward-only fixes, schema changes split across two deploys, env flags instead of rollbacks. Also where it truly costs more, like migrations and device firmware. You will leave knowing what to change first, and what it will not fix.
Architecture & Design PatternsDevOps
Recovering cloud workloads after a regional event or ransomware attack requires more than runbooks. This session covers the technical requirements for full-scale recovery and the DevOps practices that make them work under pressure: clear communication, team empowerment, and frequent experimentation. You'll learn how to build a culture of resilience that turns individual craft into repeatable, reliable recovery when disaster strikes.
PHP
Rector is best known for upgrades, but it goes much further. And no, AI coding agents haven't made it redundant.
Ask an agent to change 500 files and it might miss a few. Ask it to write a Rector rule and the change is made the same way everywhere, every time.
We'll look at automating repetitive tasks, enforcing standards and creating custom rules, by hand or with AI. You get the flexibility of AI with results you can trust.
Ask an agent to change 500 files and it might miss a few. Ask it to write a Rector rule and the change is made the same way everywhere, every time.
We'll look at automating repetitive tasks, enforcing standards and creating custom rules, by hand or with AI. You get the flexibility of AI with results you can trust.
MobileIntelligence Artificielle
Le téléphone de vos utilisateurs embarque déjà un modèle performant. Regardons ensemble ce qu'on peut bâtir aujourd'hui avec les Foundation Models sur iOS et Gemini Nano sur Android : résumés, données structurées et tool calls, le tout hors ligne, privé et surtout, sans aucun coût de token.
Architecture & Design PatternsDevOps
What can a small Proxmox home lab teach us about disaster recovery? Using a two-node environment as a case study, this session explores how concepts such as RPO, RTO, service prioritization and recovery planning can improve resilience without clusters, shared storage or enterprise budgets. Attendees will leave with a better understanding of recovery trade-offs and practical disaster recovery thinking.
InfonuagiqueDevOps
Coding agents are changing the way we build software. While it has not replaced our need for understanding code, abstractions and designs, it has profoundly changed the way we engage with our editors and our environment. This talk we explore some of the experiments with coding environments and experiments around sandboxing, ephemeral cloud development environments, treating traces as an artifact alongside code and the team dynamics around those.
SecuritéIntelligence Artificielle
Tanné des faux positifs et des failles manquées par vos outils de sécurité? Vous avez essayé les LLM, mais sans la magie promise?
Cette présentation propose un pipeline complet, pas juste des invites (prompts), pour exploiter efficacement les LLM en sécurité applicative. Réduisez vos faux positifs et repérez les failles ayant un réel impact.
Cette présentation propose un pipeline complet, pas juste des invites (prompts), pour exploiter efficacement les LLM en sécurité applicative. Réduisez vos faux positifs et repérez les failles ayant un réel impact.
InfonuagiqueIntelligence Artificielle
We will show what options exist to run thousands of agents, focusing on Open Source and Kubernetes options. We will cover their full lifecycle (provision, execute, observe, and tear down), while keeping workloads isolated from the rest of the platform. Agent sandboxes enforce resource limits, reduce blast radius, and give operators a consistent place to apply policy.
JavaScriptRust
Vite, Next.js, Biome, oxlint... chances are Rust already runs somewhere in your toolchain. The next step is writing some yourself. Through a real case, a validator shipped natively on the server and as WebAssembly in the browser, we'll explore how to share one codebase across two worlds, which boundary-crossing patterns actually work, and how to generate TypeScript types straight from Rust code. Honest benchmarks included!
HTML et CSSJavaScript
Before Spotify and npm, two creative scenes figured out the same trick independently: take what exists, flip it, make something new. In the 80s, hip hop producers were chopping breaks and layering drum machines into entirely new art forms. A decade later, a generation of web developers was hitting Cmd+U and learning by stealing. This talk uses the Web Audio API to recreate the Amen Break, the most sampled drum loop in history, live in the browser
Accessibilité
Most accessibility talks describe screen reader problems in the abstract. This one doesn't. I've navigated the web exclusively with JAWS and VoiceOver for almost two decades, and in this session I'll pull up real, common patterns a modal dialog, an infinite-scroll feed, a form throwing inline validation errors, a single-page app route change and navigate them live, out loud, in front of the room. You'll hear exactly what breaks, why it breaks, an
Architecture & Design PatternsHTML et CSS
Dropping a working form or app into someone else's website is a lot more than a one-line iframe. This is a case study of how we stripped down the theme in an open source app builder to just the content, and then put back just enough so the conditional elements, form submissions and other features still worked. We'll look at origin management, session management, SameSite=None cookies, and negotiating scroll position and width with the host page.
Java et languages JVMSecurité
Cette session explore le cycle de vie des vulnérabilités du point de vue d'un mainteneur open source.
Suivez le triage d'une faille trouvée par l'IA, sa reproduction avec la CI, puis l'utilisation de l'IA pour créer et valider un correctif.
Nous publierons le fix et suivrons sa divulgation dans GHSA, CVE et OSV.
Découvrez comment ces données alimentent les scanners (Snyk, Dependabot) et comment automatiser la protection de vos dépendances.
Suivez le triage d'une faille trouvée par l'IA, sa reproduction avec la CI, puis l'utilisation de l'IA pour créer et valider un correctif.
Nous publierons le fix et suivrons sa divulgation dans GHSA, CVE et OSV.
Découvrez comment ces données alimentent les scanners (Snyk, Dependabot) et comment automatiser la protection de vos dépendances.
PHPSecurité
Security reviews of PHP applications still depend on code review, static analysis, dependency audits, and expert judgment. AI can speed up that work. You can use it to scan large codebases, explain suspicious code, draft patches, and surface issues traditional tools may miss, while keeping the tools you already trust.
PHPTests et QualitéIntelligence Artificielle
AI enables us to generate code faster than ever – but delivery pipelines often struggle to keep up. LLMs can produce brilliant solutions as much as spectacular noise, flooding teams with more changes than they can reasonably absorb. The result: CI pipelines become the bottleneck, wasting cycles on redundant and often pointless work, returning feedback long after it’s useful.
This talk explores how to reshape CI/CD for AI-accelerated development.
This talk explores how to reshape CI/CD for AI-accelerated development.
Bases de donnéesPython
Data engineering involves repeating patterns: ingesting, transforming, storing, and serving data all follow the same recipe. Many teams have opted to create an in-house framework, with mixed results. Now, with AI coding assistants, some may see these as obsolete, since ETLs can now be built in minutes. Or should we instead write better, more robust, and agile frameworks? This talk will explore the "why" and the "how" of building your own.
Architecture & Design PatternsBases de données
Choosing a database is one of the most important architectural decisions we need to make as software developers, and the options have never been more plentiful. From relational to key-value, from row-based to columnar, from SQL to NoSQL, we will examine some of the database technologies currently offered through the lens of the design choices and tradeoffs they make.
Intelligence HumainCTO
Great architects need more than technical expertise. This session explores the soft skills that distinguish architects from developers and managers, including simplifying complex ideas, building consensus, navigating trade-offs, and leading through ambiguity. Learn practical techniques for listening, decision-making, and bridging business and technology.
Architecture & Design PatternsHTML et CSS
Browsers give you exactly one chance to ask a user for permission to do something. If the user declines, the only way to give access to the camera, microphone or geolocation again is hidden deep in the browser's settings (i.e. it's not gonna happen).
Once again, HTML comes to the rescue of JS. A new set of HTML elements let users give explicit permission, right from the page. We'll explore their features, their restrictions and how to use them
Once again, HTML comes to the rescue of JS. A new set of HTML elements let users give explicit permission, right from the page. We'll explore their features, their restrictions and how to use them
Tests et QualitéIntelligence Artificielle
AI coding agents fail on ambiguity, not syntax. BDD solved that years ago with executable specifications in business language. This talk maps a decade of BDD practice onto spec-driven development with agents: scenarios an agent implements against, used as the acceptance gate, and how to catch false green when the agent writes its own tests. Examples come from real projects and from building an open-source ERP. The workflow fits any language.
Intelligence Artificielle
IT tickets pile up because rule-based automation can't gather missing info or use judgment. This talk shows how AI agents embedded in a ticketing system triage requests, ask questions, and resolve common cases end-to-end, cutting response time and backlog. We'll cover specialist vs. general agents, knowledge-base grounding, guardrails against prompt injection, evaluating non-deterministic agents, and tracing conversations for full observability.
Java et languages JVM
Spring Boot 4 can help you delete more than old dependencies. Built-in resilience may replace Spring Retry. HTTP interfaces can replace Feign. API versioning can replace custom filters. RestTestClient can simplify test setup. We’ll also cover JSpecify, Jackson 3, modular auto-configuration, and the smaller changes worth knowing. You’ll leave with less code to maintain and a clear upgrade path.
Architecture & Design PatternsIntelligence Artificielle
AI coding assistants have evolved quickly, and they are not slowing down. New models, tools, MCP servers, and techniques appear constantly, making it easy to feel like you are always behind.
Instead of chasing every new update, this session focuses on how to build one that can evolve.
I will cover:
- Understanding the context window
- Skills and MCP servers
- My agentic workflow
- Managing costs
- Systematic approach to evolving yours
Instead of chasing every new update, this session focuses on how to build one that can evolve.
I will cover:
- Understanding the context window
- Skills and MCP servers
- My agentic workflow
- Managing costs
- Systematic approach to evolving yours
SecuritéScience des Données
Removing the first infected device does not establish that an attack is contained. I apply epidemiological methods to trace spread through identities, shared services and network connections. Using a simulated outbreak, we compare isolation, credential revocation and segmentation. Attendees learn to map transmission paths, account for undetected compromises and judge containment by secondary infections rather than declining alert counts.
InfonuagiqueIntelligence Artificielle
Hugging Face is far more than a model hub—it’s a complete cloud solution for all your AI needs. Discover how Buckets and Datasets manage data, Jobs power compute and training, and Inference Providers deliver instant production serving. Tied together with Spaces for UI deployment, see how these services work seamlessly as a unified platform to build, train, and scale end-to-end AI workflows.
Architecture & Design PatternsUX & UIDocumentation
This talk will review how to talk real world use cases of network architecture and transpose it on a illustration that will diagram all the important steps for lossless conceptual communication in any project. Learn to make great documents quickly with automation and developer tools to help illustrate your codebase and system architecture.
SecuritéIntelligence Artificielle
Your agent finally remembers things. Congratulations, it is now a data leak with a personality. The whole room gets a link to one agent and your job is to ruin it: feed it lies, leak someone else's context, make it hold a grudge. We watch its memory fill up, then fix each failure with boring, fast tools: streams, structured records, vector search and expiry. You leave knowing what an agent must forget, and why that is where production breaks.
PHPEcommerce
Learn how our applications can charge AI agents via an HTTP request using the Machine Payments Protocol (MPP). We'll explain 402 payment challenges, compare payment rails, and in a live demo, turn a Laravel API route into a paid endpoint, with just one line of middleware.
We'll cover charging credit cards and stablecoins, avoiding double charges, and explore how production-ready this protocol is today in different parts of the world.
We'll cover charging credit cards and stablecoins, avoiding double charges, and explore how production-ready this protocol is today in different parts of the world.
Securité
Knowing the OWASP Top 10 does not tell you where to start on a codebase with no security headers, unvalidated input and CORS set to *. This is the prioritised checklist I wish I had: ten steps from preventing common vulnerabilities and hardening authentication to CI/CD security and DDoS defence, with live demos of the attacks and the fixes in real code, ordered by impact for effort, so you leave with a plan for Monday morning.
JavaScriptTests et Qualité
Unit tests? Integration tests? Mocks? Stubs? Fakes? How does this apply to the web? Let's look at all the ways you can test a web app and demo all the tools you'd use. We'll live-code most tests to show you exactly what makes a good testing strategy. You'll leave with a GitHub repo you can use to keep learning or fork and use in your own PWAs.
DevOpsIntelligence Artificielle
Even with robust CI/CD, production rollouts can hit unexpected snags. While in Kubernetes, Argo Rollouts excels at Progressive Delivery, what if we could go a step further?
This session explores how to elevate your release process by integrating Agentic AI with Argo Rollouts canary deployments. We'll demonstrate how an intelligent agent can automatically analyze and propose a fix for a rollout failure, pinpointing the root cause.
This session explores how to elevate your release process by integrating Agentic AI with Argo Rollouts canary deployments. We'll demonstrate how an intelligent agent can automatically analyze and propose a fix for a rollout failure, pinpointing the root cause.
JavaScriptIntelligence Artificielle
Your website already has an API for AI agents. It's called the DOM, and agents are awful at using it. Right now an agent on your site screenshots the page, guesses which button means "checkout", and hopes. In this talk I take a real site and, live, expose its search, forms and checkout as tools with WebMCP, the browser standard Google and Microsoft are pushing through Chrome. You leave able to make your own site agent-ready in an afternoon.
Intelligence Artificielle CTO
Most AI tools make one developer faster in a private session. This talk explores what changes when AI becomes a teammate in Slack. Drawing on our experience building Luma at Lightspeed, I’ll cover shared context, tools, memory, safety and auditability. Beyond the technical implementation, we will explore how public AI collaboration helps teams reuse investigations, learn from each other, discover new workflows, and adopt AI organically.
UX & UI
Toasts, popups, confirmation dialogs, and live regions are part of every app and most websites. But toasts disappear too fast, dialogs steal focus at the wrong moment, and live regions might be talking your users' ears off. So how do you decide which interruption, is the right one?
This talk is a practical walk-through for every kind of user notification, when (not) to use which pattern and how to implement them properly.
This talk is a practical walk-through for every kind of user notification, when (not) to use which pattern and how to implement them properly.
HTML et CSSJavaScript
The (satire) dev news site globalGlob.dev was over-engineered to be fast, quick, performant, speedy, and to get a 100 Lighthouse score on most pages. That's at least 60 points higher than most of the internet. Engineering tradeoffs were made, like caching, compression, more caching, and compressed bundling.
We'll talk tradeoffs for performance, cost, and maximum Lighthouse. And why they were a horrible idea you should never do in a real project.
We'll talk tradeoffs for performance, cost, and maximum Lighthouse. And why they were a horrible idea you should never do in a real project.
Architecture & Design PatternsIntelligence Artificielle
Your API was designed for a caller that reads the docs. An LLM does not. It sees an empty array and invents a reason for it. This is a talk about designing responses for a non-human caller: errors that carry a recovery plan, empty results that say whether nothing exists or you simply cannot see it, why 404 can be the wrong status code, and why one polymorphic mega-tool loses to several narrow ones. We'll look at real code from a live MCP server.
PerformancePHP
Achieving optimal performance and reliability requires more than monitoring, it demands observability. Discover how metrics, logging, tracing, and continuous profiling empower you to understand, debug, and optimize your application. We'll explore each pillar and demonstrate how to instrument your PHP application for actionable insights. Examples will leave you equipped to make your PHP applications observable, resilient, and performant.
JavaScript
TypeScript’s type system is uniquely powerful, but most developers only scratch the surface of what it can do.
In this code-driven session, you’ll explore some of the weirdest and coolest features of TypeScript: from the infer keyword and recursive types to using types for arithmetic and even Wordle recreated with Typescript types.
You’ll leave with a deeper understanding of TypeScript and a few new ways to bend its type system to your will.
In this code-driven session, you’ll explore some of the weirdest and coolest features of TypeScript: from the infer keyword and recursive types to using types for arithmetic and even Wordle recreated with Typescript types.
You’ll leave with a deeper understanding of TypeScript and a few new ways to bend its type system to your will.
SecuritéIntelligence Artificielle
AI is powerful and eager to please. It will go anywhere to answer your question, including places it's not supposed to. Your job is to control what it can see, and what it can't. Join us and learn about the complicated world of authentication and authorization for AI. We'll dig deep into auth types, roles, grants and audit trails. From the high-level to annoying details, learn to build agents that are powerful, but respectful of their boundaries.
Bases de donnéesIntelligence Artificielle
Your job is simple: make the ultimate AI oracle that can answer any question by querying every data source in your org. But your users don't even want it - they want to connect their own AI. Enter ontologies: detailed maps of your data and what it means. Join us and learn to shed light on dark schemas, surface better insights and make a truly great AI oracle. You'll make something that's not only useful, but something they'll pay for as well.
Architecture & Design Patterns.NET
Message brokers promise scalability and reliability - but ordering complicates both. Partitions, retries, competing consumers and redelivery can all disrupt message order. We’ll explore how popular brokers handle ordering, why strict ordering conflicts with scalability, and patterns for handling out-of-order messages. You’ll leave able to decide when ordering is necessary and design systems that remain correct when it breaks.
Intelligence Artificielle Intelligence Humain
AI-native engineering changes more than how developers write code. This talk explores the operating model behind it: shared intelligence, context as code, reusable skills, model routing, evals, traceability, and earned autonomy. We will look at how planning, governance, and human judgment fit together as agents take on more of the SDLC. You will leave with a framework for designing the transition.
Architecture & Design Patterns.NET
Everyone says finding the right service boundaries is important. But how do you actually find them, what data should they own, and what do vertical slices look like in practice?
In this session, we’ll use a large retailer’s checkout process to go from identifying service boundaries to implementing them, showing how services collaborate while remaining maintainable, decoupled, and independently owned.
In this session, we’ll use a large retailer’s checkout process to go from identifying service boundaries to implementing them, showing how services collaborate while remaining maintainable, decoupled, and independently owned.
Tests et QualitéIntelligence Humain
Teams ship code more slowly than they think, and the real slowdown isn't CI, deploys, or automation. It's the days your pull requests sit waiting for review. This talk breaks down what research shows about review latency, why humans struggle to review large PRs, and how AI might make this bottleneck better, or much worse. You'll leave with concrete changes to make to your review cycle.
Java et languages JVMSecurité
In our wallet, third-party services received digitally signed requests, so it was easy to assume that a valid signature meant the request was safe. It wasn’t. A signed request could still be replayed, retried after a timeout, arrive with clock skew, or leave important fields outside the signature. This talk looks at those failure cases and the practical use of nonces, idempotency, key rotation, and replay protection to handle them safely.
PythonRust
Python is loved for its developer ergonomics but often struggles with CPU-bound performance. Enter PyO3: the bridge between Python and Rust. In this session, we will explore how to build blazing-fast, memory-safe Python extensions without the pain of C or Cython. We will walk through compiling Rust modules with PyO3 and Maturin to help you crush bottlenecks and unlock native performance while keeping your Python code clean.
InfonuagiqueDevOps
Want to learn DevOps, cloud and infrastructure engineering without running up an enormous cloud bill? Build your own cloud playground. Starting with inexpensive hardware, I’ll build a complete environment using Proxmox, Packer, Terraform and Kubernetes, adding identity and security along the way. We’ll see how the same infrastructure-as-code, automation and security principles apply from a homelab to production cloud environments.
Intelligence Humain
Tech often celebrates the strengths associated with autism and ADHD while ignoring the invisible work required to sustain them. Drawing on my own experience, I explore masking, regulation, burnout, and the life I unknowingly engineered around my needs. This talk asks how self-awareness and greater agency can help neurodivergent people build healthier, more sustainable ways of working, especially as AI reshapes our jobs.
RéseauxInternet des objets
A mesh network has no towers and no carrier. Each device relays for the ones around it. A group of people can build a working network out of cheap radios, with nobody's permission. We start with how mesh networks actually work: flooding, deduplication, hop limits and routing, all demonstrated live with real hardware. Then Meshtastic, and how communities worldwide use it to stay connected for hiking, disasters and mutual aid.
Bases de donnéesPHP
In this presentation we will look at how to deal with time zones. This will particularly be relevant due to the changes in Canada with Daylight Saving Time.
We will see how it is hard to make assumptions on how they work, and explain how they came into existence. We'll focus mostly on how to handle them from within PHP, as well as how we (should) store them in databases. We'll also have a quick look at date manipulation when querying data.
We will see how it is hard to make assumptions on how they work, and explain how they came into existence. We'll focus mostly on how to handle them from within PHP, as well as how we (should) store them in databases. We'll also have a quick look at date manipulation when querying data.
UX & UI
User research, user testing, user feedback: users are at the heart of everything we build. However, for many companies, making conversations with users happen is a real challenge – especially without a UX specialist! If this all sounds familiar, I have a recommendation: take it into your own hands. We'll talk through setting up a basic program and growing it, so you – the developer – feel empowered to start usability testing for your own product!
Bases de donnéesIntelligence Artificielle
Vector search is moving from specialized systems into mainstream databases such as PostgreSQL, MySQL, MongoDB, and Elasticsearch. This talk explains how embeddings are created, stored, and indexed; when to combine vector and traditional search; and how to measure speed and result quality. Attendees will gain practical guidance for choosing an architecture and building effective AI-powered search applications.
Architecture & Design PatternsJava et languages JVM
Java enums are usually introduced as a way to represent fixed sets of constants, but Effective Java also recommends a single-element enum as a safe way to implement a singleton. In this talk, I look at what happens when that pattern is used for small Java services, how it differs from classic singletons and DI-managed components, and where it starts to become a bad fit once state, dependencies, lifecycle, or testing requirements grow.
Architecture & Design PatternsIntelligence Humain
Design systems are sold as technical projects (tokens, components, doc). My conviction as React design systems dev, is different: a design system is a structure combined with a history of decisions. Through a real-life story, this talk identifies three symptoms and two root causes of failure. The conclusion highlights the need for an explicit decision-making mandate, more urgent by the rise of AI, which can sometimes lose context.
Intelligence Humain
Your manager's expectations are rarely written down, so people guess, and often guess wrong. As an engineering manager, I'll show you how to set those expectations together: what to ask for in a 1:1, how to agree on what good looks like, and how to make your work visible without it feeling like self-promotion. We'll go through real cases and what actually worked in each.
.NETSecurité
What's inside that (sometimes chunky) authentication cookie in an ASP.NET Core application? Why is your JWT 4KB and growing? And why does login break the moment you add one more claim?
We'll decode JWTs by hand, inspect the ASP.NET Core authentication cookie byte by byte, watch token negotiation happen in real-time with browser DevTools, and debug the kind of auth issues that make you clear all cookies in frustration.
We'll decode JWTs by hand, inspect the ASP.NET Core authentication cookie byte by byte, watch token negotiation happen in real-time with browser DevTools, and debug the kind of auth issues that make you clear all cookies in frustration.
Python
Let's look at what things are new in Python. We get a new release every year now, so let's take a look at what's come out in 3.14, as well as some features that you might have missed in the last few years.
DevOpsIntelligence Artificielle
AI agents aren't just writing code anymore. They're executing it. I gave agents access to real cloud infrastructure and turned off the guardrails. This talk shares five war stories of what went wrong, a framework for thinking about when agents are safe to use, and the benchmark we're still missing. You'll leave with concrete safeguards for your own agent setup.
Intelligence Artificielle Intelligence Humain
AI is becoming capable of using more than words. This session explores how multimodal systems can combine voice, visual, behavioral, and environmental cues to understand context and adapt their responses. I’ll discuss affect-aware AI, privacy boundaries, bias, human trust, and lessons from building Aexa Aware. Attendees will learn how to design AI that is more context-sensitive and human-centered without pretending machines actually feel emotion.
HTML et CSSJavaScript
In that talk I would go through all the amazing things that HTML and CSS can now do that replaces their JavaScript counterparts.
Bases de donnéesIntelligence Artificielle
Imagine anyone in the business asking questions of the database like they're talking to a person. No SQL. No ticket. No waiting for a developer.
We built it: an MCP with read only DB access that hid PII. Every client who has tried it is hooked.
But AI also finds fool's gold. I'll show how to build one, how to stop confident wrong answers (well, most of them), and how to turn the best questions into trusted reports.
We built it: an MCP with read only DB access that hid PII. Every client who has tried it is hooked.
But AI also finds fool's gold. I'll show how to build one, how to stop confident wrong answers (well, most of them), and how to turn the best questions into trusted reports.
Tests et QualitéIntelligence Artificielle
Passing evals and rising velocity feel like proof that an AI feature works, but both can mislead. This talk explains 4 ways offline evals deceive teams, including an LLM judge that rewards confident wrong answers, then fixes one live with a small rubric change. Attendees learn what to measure instead: traces, production observability, probe-based evaluation, error budgets and quality indicators beside every velocity number.
Architecture & Design PatternsDevOps
Every kill-switch you ship becomes another system to own: ownership, stale entitlements, and combinatorial tests nobody runs. I’ll walk production flag debt - rollbacks that lied, “temporary” flags that outlived the product - and leave you with a lifecycle checklist: when to flag, when to delete, and how to test without exploding the matrix.
Architecture & Design PatternsCTO
Modern software depends on hundreds of libraries, frameworks, and services. Every dependency comes with a maintenance cost. How do you keep your software maintainable, plan a realistic maintenance budget, and decide which dependency updates and technical debt to tackle first? This talk presents practical strategies for managing dependencies and prioritizing maintenance work before it becomes a crisis.
© 2010-2026 ConFoo. Tous droits réservés. Code de conduite
Gestion des Cookies
Pour offrir une bonne expérience, l'utilisation de cookies est nécessaire. Certains sont essentiels au bon fonctionnement du site, tandis que d'autres nous aident à mieux répondre à vos intérêts.