惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Application and Cybersecurity Blog
Application and Cybersecurity Blog
S
Securelist
K
Kaspersky official blog
Scott Helme
Scott Helme
C
CXSECURITY Database RSS Feed - CXSecurity.com
GbyAI
GbyAI
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
C
Cisco Blogs
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
博客园 - Franky
Security Latest
Security Latest
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Y
Y Combinator Blog
T
Threat Research - Cisco Blogs
L
LINUX DO - 热门话题
C
Cyber Attacks, Cyber Crime and Cyber Security
Project Zero
Project Zero
Cisco Talos Blog
Cisco Talos Blog
月光博客
月光博客
I
Intezer
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
人人都是产品经理
人人都是产品经理
L
Lohrmann on Cybersecurity
Recorded Future
Recorded Future
Latest news
Latest news
V2EX - 技术
V2EX - 技术
T
The Exploit Database - CXSecurity.com
H
Heimdal Security Blog
F
Fortinet All Blogs
Cloudbric
Cloudbric
IT之家
IT之家
博客园 - 叶小钗
Microsoft Security Blog
Microsoft Security Blog
P
Proofpoint News Feed
博客园 - 司徒正美
Apple Machine Learning Research
Apple Machine Learning Research
PCI Perspectives
PCI Perspectives
AWS News Blog
AWS News Blog
H
Help Net Security
S
Security @ Cisco Blogs
酷 壳 – CoolShell
酷 壳 – CoolShell
Recent Announcements
Recent Announcements
Hacker News - Newest:
Hacker News - Newest: "LLM"
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
F
Full Disclosure
S
Schneier on Security
S
Security Affairs
T
Tenable Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Automating the Localization Pipeline: Extraction to TMS to CI
beefed.ai · 2026-06-05 · via DEV Community
  • Designing a resilient end-to-end localization workflow
  • Automating string extraction and reliable TMS integration
  • CI/CD localization: keep translations in the delivery loop
  • Quality gates, metadata, and screenshot-driven reviews
  • Scaling releases: branching, releases, and safe rollbacks
  • Practical Application: checklists, scripts, and example CI jobs

Localization is not a feature you ship once — it’s a continuous engineering pipeline that must be designed, instrumented, and automated with the same rigor you apply to CI/CD. When you treat translations as a manual, after-the-fact task, releases slow down, context is lost, and UX breaks in languages you thought you covered.

Manual copy handoffs create the obvious symptoms: late translations, PR noise, mismatched placeholders, and translators working blind. You likely see long review cycles, translators asking for context, and last-minute reverts when translated copy causes layout breakage. These are not people problems — they’re pipeline problems.

Designing a resilient end-to-end localization workflow

An engineering-grade localization pipeline treats language assets as first-class artifacts. The minimal architecture I use on large products looks like this:

  • Source-of-truth: code repo contains only keys + default (base) language (or message descriptors). No hardcoded UI strings in templates or components. Make every user-facing string a key that maps to a translation unit.
  • Extraction stage: code → canonical resource file(s) (JSON/XLIFF) via extraction tooling. Extraction preserves id, defaultMessage, description and source location metadata. Use the ICU Message Format for complex plural/gender logic so translators can handle language rules predictably.
  • TMS (authoring) stage: extracted messages are pushed to the TMS (Crowdin / Lokalise). Translators and reviewers work in the TMS with context (screenshots, in‑context editor) and TM/glossary support. Crowdin and Lokalise both surface screenshots and in‑context editing to translators.
  • Pull and deliver stage: translations are pulled from the TMS, validated, and introduced as commits/PRs (or delivered OTA/CDN) back into the app. PRs provide the usual review, QA and can be gated by automated checks. Crowdin and Lokalise both provide CLI/Actions to automate push/pull workflows and create PRs.
  • Runtime: dynamic loading (lazy-load per locale or per route) so only required translation bundles are shipped to users, keeping bundle sizes healthy.

Design decisions that matter

  • Keep the base language as canonical text, not code comments. That enables automatic diffing and consistent TM suggestions.
  • Use description and extract-source-location in your message descriptors; they become context metadata your translators will actually use. formatjs extraction supports this metadata in the output.
  • Treat translations as deployable artifacts: versioned, testable, and revertible.

Important: Treat the TMS as the translator’s workbench, not the engineering system of record. The code repo + tagging/filenames remain the ultimate source for runtime assets; the TMS should sync with it reliably.

Automating string extraction and reliable TMS integration

The single biggest win is reliable, repeatable extraction that produces the exact file layout your TMS expects. Two practical patterns:

  • Framework-aligned extraction: use the tool that matches your i18n stack. For React + FormatJS/React‑Intl, use @formatjs/cli to extract messages. It understands description, defaultMessage, and offers --extract-source-location to record source file + line metadata for each message. Use --format to produce a TMS-friendly JSON or XLIFF shape.
  • Key-based extraction (i18next/Lingui): use i18next-scanner or i18next-cli to scan and generate resource files; these tools can be extended to detect custom patterns or Trans components.

Example: a small package.json script and formatjs invocation

{
  "scripts": {
    "extract:i18n": "formatjs extract \"src/**/*.{ts,tsx}\" --out-file lang/en.json --extract-source-location --id-interpolation-pattern '[sha512:contenthash:base64:6]'"
  }
}

Enter fullscreen mode Exit fullscreen mode

Why you must include descriptions and source locations

  • description gives translators function-level intent (button label vs. page title). source lets you link to screenshots or code lines in reviews. FormatJS extraction supports both.

TMS integration patterns

  • Push-only: a CI job runs extraction and upload to the TMS via CLI. Crowdin has crowdin upload sources and crowdin download translations commands; these are configuration-driven and support --branch for string-based branching.
  • GitHub App / Actions: let the TMS create PRs for you on translation downloads; Lokalise offers push/pull GitHub Actions that will create PRs and tag branches for you. Use the TMS app when you want less custom scripting and predictable PR behaviour.

File formats and interchange

  • Prefer TMS-native JSON for web stacks, but maintain an XLIFF or TMX export path for offline tooling or vendor handoffs; XLIFF is the standard interchange format maintained by OASIS. Use XLIFF where tool interoperability or CAT-tool workflows are required.

CI/CD localization: keep translations in the delivery loop

Design your CI so localization jobs run like other checks — triggered by changes to translatable code paths, not by every push.

A typical flow

  1. Developer merges UI copy or changes default copy on main/release/*.
  2. CI job extract-and-push runs only when paths match your UI sources (src/**) and executes extraction script + crowdin upload sources (or lokalise-push-action). This uploads new/changed strings to the TMS.
  3. Translators work in the TMS. Use TM, glossary, QA checks and screenshots.
  4. TMS triggers an export (webhook or scheduled task). On export, a CI job pull-and-open-pr downloads translations and opens a PR with only translation file changes (or the TMS GitHub app creates it for you). Lokalise and Crowdin support creating PRs automatically.
  5. The PR runs localized smoke tests, visual regression or pseudo-localization checks before merge.

Sample GitHub Actions pattern (extract & push)

name: i18n: extract-and-push

on:
  push:
    paths:
      - 'src/**'
      - 'package.json'

jobs:
  extract-and-upload:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 20
      - run: npm ci
      - run: npm run extract:i18n
      - name: Upload sources to Crowdin
        env:
          CROWDIN_TOKEN: ${{ secrets.CROWDIN_TOKEN }}
        run: |
          npx @crowdin/cli upload sources

Enter fullscreen mode Exit fullscreen mode

Security notes: store TMS API tokens in secrets and grant minimal repo permissions to any action that creates PRs. Use the TMS-provided GitHub App or documented Actions where possible — they handle edge cases like branch tagging and PR creation.

Automation triggers and pull cadence

  • Use a TMS webhook to trigger a pull-and-commit workflow when translations reach your quality threshold. Alternatively, schedule nightly pulls for low-latency teams. Crowdins’ and Lokalise’s APIs and marketplace apps allow automated distribution or scheduled releases.

Quality gates, metadata, and screenshot-driven reviews

Automated translation delivery without quality enforcement is useless. Build quality gates at multiple layers:

  • TMS-level QA checks: configure QA checks in your TMS to catch ICU syntax errors, placeholder mismatches, length problems, and tag/HTML mismatches. Crowdin and Lokalise provide built-in QA checks and allow custom or AI checks for organization-specific rules. Enforce those checks as Errors for critical languages.
  • Source metadata: include description, max_length and context on each message so translators and QA tools can make correct decisions. FormatJS descriptors include description; --extract-source-location produces a linkable file/line reference.
  • Screenshots & in-context: upload screenshots or use in-context editors so translators see copy in the UI. Crowdin and Lokalise allow automatic tagging of strings from screenshots and in-context editors that tag strings automatically.
  • Local/CI compile checks: run a build-time formatjs compile (or equivalent) step to verify ICU strings compile for each target locale before the PR is mergeable. Catch runtime formatting exceptions early.
  • Pseudo-localization and visual snapshots: run pseudo-localization in CI and a lightweight visual regression pass on critical screens so you detect overflow or LTR/RTL layout issues before shipping.

Block merging with automation

  • Add a CI check that validates translation PRs: run crowdin status or TMS API call to assert translation coverage or progress >= X% for required locales. Crowdin and Lokalise provide status APIs/CLI to query project progress.

Callout: Annotate every extracted message with context metadata and a screenshot link. The upfront developer effort reduces translator queries and rework more than any other single measure.

Scaling releases: branching, releases, and safe rollbacks

As translation volume grows, you need predictable scoping and rollback capabilities.

Branching and scoping

  • Tag strings with branch or release identifiers in your TMS so translators only see the content for the release they should work on. Lokalise and Crowdin both support branch/tag scoping on uploads and downloads (use --branch or Action parameters). This prevents translators from translating unrelated future work.
  • Use temporary translation branches: the TMS creates a tms-sync/<timestamp> branch or PR for translation bundles. Merge only after QA and localized smoke tests complete.

Release strategies

  • Per-release PRs: let the TMS create a single PR containing all translation updates for the release branch. Run the same merge pipeline as code changes. This reduces surprises at release time.
  • Over-the-Air (OTA) delivery: for web and mobile, consider OTA/CDN-based translation delivery. Crowdin’s Content Delivery (OTA) lets you push translation bundles to a CDN that your app fetches at runtime; that allows instant language fixes without a code deploy.

Rollback techniques

  • Repo-based rollback: since pull requests contain translations, revert the PR to roll back a bad translation. This is fast and explicit.
  • Distribution rollback: when using OTA/CDN, revert the distribution or re-release the previous bundle to revert translations instantly. Crowdin supports distribution release management for OTA.
  • Feature-flag locales: expose new locales behind a launch flag that you can disable, limiting blast radius while translators finish QA.

Operational notes

  • Keep translation commits small and labeled: i18n: update fr translations (release-2025-11-01). That improves auditability and makes rollbacks obvious.
  • Version your OTA bundles: use semantic or timestamped distribution hashes so you can point clients at a known-good bundle.
Feature Crowdin Lokalise
CLI push/pull Yes (crowdin upload/download) Yes (CLI + GitHub Actions)
Screenshots / In-context Yes (Screenshots & In-context) Yes (Screenshots & In-context)
Translation Memory & Pre-translate Yes (TM + MT + AI) Yes (TM, TMX support)
QA checks / custom checks Built-in + custom + AI checks Built-in QA checks + AI features in workspace
OTA content delivery Yes (Distributions / OTA SDK) OTA-like features (in-context & integrations)

Practical Application: checklists, scripts, and example CI jobs

Checklist — what to implement first (minimal viable pipeline)

  1. Make all UI strings translatable (no hardcoded strings). Use message descriptors: id, defaultMessage, description. Always.
  2. Add npm run extract:i18n using formatjs or i18next-cli. Output a canonical lang/en.json (or locales/en.json).
  3. Add a CI job to run extraction on pushes that touch src/** and upload to TMS via CLI or TMS Action. Store API tokens in secrets.
  4. Configure TMS project: screenshots, TM/glossary, QA checks, branch/tagging policy. Upload sample screenshots for the top 20 strings.
  5. Wire TMS -> repo delivery: either TMS GitHub App or a pull workflow that downloads translations and opens a PR. Validate via formatjs compile + smoke tests.

Practical shell script (sync to Crowdin)

#!/usr/bin/env bash
set -euo pipefail

# 1. Extract messages
npm run extract:i18n

# 2. Convert / format if needed (optional custom formatter)
# node scripts/format-to-crowdin.js lang/en.json lang/crowdin/en.json

# 3. Push to Crowdin
npx @crowdin/cli upload sources --token "${CROWDIN_TOKEN}"

Enter fullscreen mode Exit fullscreen mode

Example crowdin.yml minimal config (used by CLI)

project_id: 123456
api_token: ${CROWDIN_TOKEN}
base_path: .
files:
  - source: "locales/en/*.json"
    translation: "locales/%two_letters_code%/%original_file_name%"

Enter fullscreen mode Exit fullscreen mode

Example GitHub Actions job to pull translations and open a PR (Crowdin pattern)

name: i18n: pull-translations

on:
  workflow_dispatch:
  schedule: # or trigger via TMS webhook
    - cron: '0 3 * * *'

jobs:
  download-and-pr:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: actions/setup-node@v4
      - run: npm ci
      - name: Download translations
        env:
          CROWDIN_TOKEN: ${{ secrets.CROWDIN_TOKEN }}
        run: npx @crowdin/cli download translations
      - name: Commit & create PR
        run: |
          git config user.name "i18n-bot"
          git config user.email "i18n-bot@example.com"
          git checkout -b i18n-sync/$(date +%Y%m%d_%H%M%S)
          git add locales || true
          git commit -m "i18n: update translations" || echo "no changes"
          git push --set-upstream origin HEAD
          # Create PR: use gh cli or rely on TMS app to create PR

Enter fullscreen mode Exit fullscreen mode

Validation checklist for CI PRs

  • formatjs compile succeeds for all locales (ICU syntax valid).
  • QA checks report zero Errors for required locales (TMS QA + local QA).
  • Basic E2E or visual smoke tests for critical screens pass (pseudo-localization enabled for one run).
  • Character-length check for critical UI slots (buttons, titles). Use TMS QA checks or custom CI script.

Instrumentation and observability

  • Log every push/pull event with a correlation id (timestamp + branch + job id).
  • Track translation latency (time from extraction to merge) and coverage per locale; record these metrics in the release dashboard.

Closing

Automating the localization pipeline is an engineering lift up front that pays back by removing manual choke points, reducing translator churn, and letting you ship language parity predictably. Build your extraction as code, sync it with a TMS via CLI or Actions, gate merges with QA and compile checks, and deliver translations as versioned artifacts (PRs or OTA bundles) so rollbacks and audits remain simple.

Sources:
Message Extraction | Format.JS - formatjs extract usage, --extract-source-location, and message descriptor fields (description, defaultMessage).

Screenshots | Crowdin Docs - Crowdin screenshot management and in-context tagging for translators.

Screenshots | Lokalise Help Center - Lokalise screenshot features, automatic key detection, and screenshot editor.

Crowdin CLI Documentation - crowdin upload/download commands, configuration file usage, branch options and CI integration hints.

Lokalise GitHub Actions & CLI docs - Lokalise push/pull GitHub Actions, PR creation behavior, and configuration for branch tagging.

i18next-scanner (GitHub) - Scanner for i18next-based projects to extract keys and generate resource files.

XLIFF v2.0 (OASIS) - XLIFF specification and rationale for using XLIFF as an interchange format.

Triggering a workflow | GitHub Actions - Events, paths filters and workflow_dispatch usage in GitHub Actions.

Translation memory | Lokalise - Lokalise Translation Memory features, TMX import/export and inline suggestions.

Pre-Translation | Crowdin Docs - Crowdin pre-translation options (TM, MT, AI) and configuration.

Content Delivery (OTA) | Crowdin Docs - Over-the-air content delivery, distributions and CDN release workflow.

QA Check Settings | Crowdin Docs - Built-in QA checks, configuration and error/warning escalation.

QA checks | Lokalise Help Center - Lokalise QA checks, supported checks and escalation levels.