Urgent.News

What's breaking now, across thousands of outlets.

Tech

RAG Pipeline Utils v3.8: Testing RAG Answers in TypeScript

v3.8.0 is about testing RAG in TypeScript. The answer matchers now compile with types, and a new guide walks through the whole setup with Vitest, from a unit test to a test set that fails CI when answers get worse. Nothing breaks for existing code. npm install @devilsdev/rag-pipeline-utils@^3.8.0 The matchers, with types @devilsdev/rag-pipeline-utils/testing has had three matchers for a while:…

RAG Pipeline Utils 3.8 brings TypeScript support for testing Retrieval-Augmented Generation (RAG) answers. The new matchers, toBeGroundedIn, toCite, and toContainNoPII, now compile with TypeScript types, enabling developers to catch errors early in the development process. A new guide provides a step-by-step setup process using Vitest, covering unit tests, answer checks, and evaluation tests.

By implementing these tests, developers can ensure that RAG answers are accurate and adhere to specified constraints. The guide also highlights a shift towards fewer development dependencies and updated packages, all of which have undergone rigorous testing and validation.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

The hardest websites to scrape in 2026: what the benchmarks show

Disclosure: I'm a co-founder of ScrapeUnblocker, one of the APIs measured below. Every number here has a public source you can check. A lot of websites are still simple to scrape.

  • Shein, G2, and Hyatt identified as hardest websites to scrape in 2026
  • Success rates of 21.88%, 36.63%, and 43.75% for these sites
  • Established scraping API providers face challenges with protected targets

The Chainalysis Breach: From "No Credentials Accessed" to "All Users Exposed" in Five Days

On October 30, 2026, Chainalysis told its customers it had been the target of a cybersecurity incident - and that it had "found no evidence of unauthorized access to investigation content…

  • Chainalysis notified customers of potential cybersecurity incident on October 30, 2026
  • No evidence of unauthorized access to credentials or tokens found initially
  • All user data, including names, usernames, password hashes, and live tokens, exposed on November 4

How I ship a private Android app through Google Play to testers' phones

Some apps have no business being searchable. A tool built for one company, a client demo, a closed beta you want a dozen people to poke at — none of these belong in public Play search.

  • Private Android app shipped via Google Play without public search results
  • App record created on Google Play Console with AAB file upload
  • Testers granted access via opt-in URL with account verification

Testing Broken Access Control Without Guessing

Broken access control has been at or near the top of the OWASP Top 10 for a decade, and it is still the category most automated tools handle worst.

  • Create two accounts, A and B, each owning one object
  • Record stable fingerprint of B's object with B's token
  • Compare fingerprint against response to validate test

More from Friday 6 November →