The Boot.dev Beat. September 2026

We just launched one of our biggest courses of the year... twice. Learn Web Security is now live in both Go and TypeScript, and we shipped both versions at the same time so you can learn the same practical security skills in your language of choice. This course has the most code in it of any course on Boot.dev. Hope you enjoy.

Securely,
Lane

Patch notes

1. Learn Web Security in Go and TypeScript

Our new Learn Web Security in Go and Learn Web Security in TypeScript courses are live!

They're two versions of the same 30-hour expert-level course, released simultaneously. In the Go version, you'll harden a vulnerable net/http and SQLite app. In the TypeScript version, you'll do the same with Express and SQLite. The language and frameworks vary language to language, but the security concepts don't.

You'll secure authentication and authorization, stop injection and browser attacks, protect sensitive data, improve infrastructure defenses, prepare for denial-of-service attacks, and work through incident response. In other words, this isn't a course where you just memorize the OWASP Top 10 and take a quiz. You'll patch a real, vulnerable application until it isn't so vulnerable anymore.

Both courses were built in partnership with Kevin Cunningham, who did a fantastic job making sure we cover all the important bits across these 100+ lesson courses.

2. Python Tests Now Run on Pytest

We migrated hundreds of Python lessons and challenges from our old homegrown test runner to pytest, the same testing framework you'll encounter in real Python projects.

This was a huge under-the-hood change: nearly 500 files across the Python curriculum, Training Grounds challenges, browser runtime, and backend compiler were updated. The result is cleaner test output, less custom Boot.dev weirdness, and test suites that are easier for our course authors to write and maintain.

3. Customize the Code Editor

The in-browser code editor finally has its own settings menu. You can change the font size, toggle word wrapping, enable Vim mode, and turn relative line numbers on or off.

We also made more editor tools available on mobile. Code formatting, code history, and the SQL table viewer are no longer hidden just because you're coding on a smaller screen. Code history is easier to spot on desktop, too, especially after a lesson update clears the editor and you want your previous work back.

4. Dictate Messages to Boots

Typing a long explanation during a Boots interview is very painful, especially on mobile. You can now tap the microphone button, say your answer out loud, and have it transcribed into the message box before sending it.

Dictation works in both Boots chats and interview lessons. It's not a live audio call: you still get a chance to read and edit the transcription before Boots sees it, and you are still interacting with the more powerful (non-live) models.

We highly recommend using it for Boots' interviews, it leads to much more in-depth conversations.

5. Better Chest Loot

We reworked chest loot tables so higher-tier chests have higher-tier reward floors. Most importantly, every Mythic chest now guarantees at least one high-value item: a Seer Stone, Frozen Flame, or Greater XP Potion.

Rare and Mythic chests should now feel meaningfully better... no more mythics that only have a couple salmon and some gems. Chests also have a new shake animation!

6. Miscellaneous Improvements

• Boot.dev's Go courses, projects, playground, and challenge generation have been updated to Go 1.27
• The binary search tree deletion lesson has a new step-by-step widget for visualizing how a node with two children is removed
• The notoriously difficult C string library lesson got clearer instructions and a little more hand-holding

What Is Yet to Come

• AI Coding Course (OpenCode)
• Bash scripting course
• Lua course
• Terraform course
• Redis course
• Excel course