Windows just shipped a developer edition. project zenith, announced september 4, puts preinstalled…
windows just shipped a developer edition. project zenith, announced september 4, puts preinstalled dev tools and settings on developer-class hardware, starting with amd's ryzen ai halo. the os stopped pretending you will install everything.
read the note →The whole kubernetes node just learned to run as a regular user. v1.37, announced september 4,…
the whole kubernetes node just learned to run as a regular user. v1.37, announced september 4, promotes rootless kubelet to beta so the kubelet, cri and oci runtimes, cni and kube-proxy all run without root. container breakout gets a smaller blast radius.
read the note →Cross-platform builds just became the default, not a setup project. swift 6.4, out september 15,…
cross-platform builds just became the default, not a setup project. swift 6.4, out september 15, makes swift build the default in the package manager so the same project builds identically on linux, macOS and windows. the config file got smaller by omission.
read the note →The serverless runtime now issues identities to agents. google cloud run, updated september 8, lets…
the serverless runtime now issues identities to agents. google cloud run, updated september 8, lets services authenticate ai agents and mcp servers through system-managed agent identities that auto-register in an agent registry. the deployment is the trust boundary.
read the note →The ai productivity story just got an audit. a study of 137,592 commits from public repos, out…
the ai productivity story just got an audit. a study of 137,592 commits from public repos, out september 10, says google, microsoft and meta improved 150% per developer over 18 months. read the commit history before believing the blog post.
read the note →The scanner just learned to chain attacks. cycode's agentic code scanning, out september 1, links…
the scanner just learned to chain attacks. cycode's agentic code scanning, out september 1, links related findings into multi-step exploit paths instead of scoring each flaw alone. severity got a story.
read the note →Benchmarks finally stopped grading diffs. backendforge, out since july, runs 56 backend tasks where…
benchmarks finally stopped grading diffs. backendforge, out since july, runs 56 backend tasks where an llm must ship a dockerized service that passes http tests against an openapi contract. agents pass or fail on shipped behavior.
read the note →Open source just started winning by copying the incumbent. mariadb 13.0, ga september 15, adds ref…
open source just started winning by copying the incumbent. mariadb 13.0, ga september 15, adds ref cursors, record types and update returning to go deeper on oracle pl/sql compatibility. migration got cheaper than rewrite.
read the note →Physical ai just became an add-on card. ambarella's x7, out september 15, adds an ai accelerator to…
physical ai just became an add-on card. ambarella's x7, out september 15, adds an ai accelerator to any host processor, giving old industrial hardware vision and robotics smarts without a new board. the retrofit is the market.
read the note →Meta's internal design system just went open with agent hooks. astryx, beta since september 13,…
meta's internal design system just went open with agent hooks. astryx, beta since september 13, ships 150+ react components on stylex plus cli and mcp tooling so agents can drive the ui without guessing class names. the design token is now a prompt.
read the note →Delivery agents now ask before they write. gitlab 19.4, out september 19, adds mcp tools under its…
delivery agents now ask before they write. gitlab 19.4, out september 19, adds mcp tools under its duo agent platform with read-only actions on allow and write or delete actions defaulting to human approval. the pipeline learned to say may i.
read the note →The agent's answer order just became configurable. the i-have-adhd skill, trending on github since…
the agent's answer order just became configurable. the i-have-adhd skill, trending on github since september 17, rewrites claude code's replies to lead with the answer, number the steps and end with one concrete next action. the fix is a plain-text rule file.
read the note →Open source just shipped the training data, not only the weights. ifm's k2 horizon, out september…
open source just shipped the training data, not only the weights. ifm's k2 horizon, out september 3, releases six models up to 375b under apache 2.0 with code, recipes and methodology attached. the reproducible model is the new frontier claim.
read the note →The monitoring product just became a prompt. supabase's observability autopilot, out september 13,…
the monitoring product just became a prompt. supabase's observability autopilot, out september 13, hands you agent prompts instead of running the agents for you. the company ships the question, not the answer.
read the note →The 15-minute function wall just fell. aws lambda, updated september 9, now runs asynchronous jobs…
the 15-minute function wall just fell. aws lambda, updated september 9, now runs asynchronous jobs up to 90 minutes on managed instances, a 6x jump for batch and media workloads. the serverless pitch is quietly absorbing the batch box.
read the note →Security scanning just moved inside the agent session. stackhawk's wingman, out september 15,…
security scanning just moved inside the agent session. stackhawk's wingman, out september 15, installs into claude code, cursor and copilot and fixes the vulnerability while the agent is still writing code. the fix lands before the commit does.
read the note →Agents finally got a security exam. duma-bench, out september 21, tests llm agents under dual…
agents finally got a security exam. duma-bench, out september 21, tests llm agents under dual control with eight attack classes from rag poisoning to cross-agent manipulation across 14 models. your prompt injection surface is now a scored leaderboard.
read the note →Pull requests are about to become optional. zed's delta, in public beta since september 16,…
pull requests are about to become optional. zed's delta, in public beta since september 16, replaces prs with a multiplayer environment where agents and humans work the same branch. the review round-trip just became a shared session.
read the note →The pinned message just became an api. google's chat api, generally available september 18, added…
the pinned message just became an api. google's chat api, generally available september 18, added message pins so developers can pin, unpin and list pins in any space. curation is now a script instead of a human scrolling.
read the note →Video generation just turned into a place you can walk around. runway's gwm worlds 2, a research…
video generation just turned into a place you can walk around. runway's gwm worlds 2, a research preview from september 3, renders real-time interactive worlds at 720p and 24 fps with text-driven control and multiplayer roles. the prompt became an environment.
read the note →Mcp servers just got an access list. workato's tool-level rbac, out september 5, lets you share one…
mcp servers just got an access list. workato's tool-level rbac, out september 5, lets you share one mcp server across the org and grant each user group only the tools they may call. the agent tool economy now has a permissions layer.
read the note →Robots are about to get a capability ladder. arm's total design for physical ai, out september 8,…
robots are about to get a capability ladder. arm's total design for physical ai, out september 8, brings 80+ partners under a shared reference stack and a robotics capability framework that grades robots by latency, compute and safety. the hardware baseline just became a spec.
read the note →Game dev just got a dedicated agent. ramen's aura 1.0, out september 9, automates unity and unreal…
game dev just got a dedicated agent. ramen's aura 1.0, out september 9, automates unity and unreal playtesting with a multi-agent assistant in unlimited auto mode. the qa room is now a prompt.
read the note →Cross-database joins just became a client feature. dbeaver 26.2, out september 9, ships a…
cross-database joins just became a client feature. dbeaver 26.2, out september 9, ships a multi-source driver built on apache calcite that queries several databases through one interface. the join your db admin called impossible is now a menu item.
read the note →Agent deployment just went from two weeks to one hour. grab's llm-kit standardizes 500+ internal…
agent deployment just went from two weeks to one hour. grab's llm-kit standardizes 500+ internal agent services with shared eval, secret handling and runtime tool discovery, per infoq september 17. the bottleneck stopped being the model.
read the note →The browser just opened itself to agents. safari 27, out september 18, ships a native mcp server…
the browser just opened itself to agents. safari 27, out september 18, ships a native mcp server that lets coding agents inspect the dom, network requests and screenshots, fully on-device. the last walled garden just grew a door for your ai.
read the note →The terminal just became an agent cockpit. microsoft's intelligent terminal 0.2.2572, out september…
the terminal just became an agent cockpit. microsoft's intelligent terminal 0.2.2572, out september 14, ships native slash commands and keeps agent sessions attached to your shell. the command line is where the ai now lives.
read the note →Package installs just stopped trusting your scripts. npm 12, out august 14, turns install-script…
package installs just stopped trusting your scripts. npm 12, out august 14, turns install-script execution off by default and restricts non-registry sources, so every build script needs explicit approval. supply chain safety finally became the default.
read the note →Plugins now get graded before they ship. claude code added claude plugin eval in the week of…
plugins now get graded before they ship. claude code added claude plugin eval in the week of september 7 — run a plugin against a test suite, score it, compare with a no-plugin baseline, and init drafts the cases and graders for you. the plugin economy just grew a test harness.
read the note →The digital garden finally has a build system. quartz 5, out september 20, turns obsidian vaults…
the digital garden finally has a build system. quartz 5, out september 20, turns obsidian vaults into sites with full-text search, graph view and wikilinks out of the box. your notes folder is now a website you can ship.
read the note →The boring viz library is quietly winning. plotly's 12-month review, out september 15, counts 415…
the boring viz library is quietly winning. plotly's 12-month review, out september 15, counts 415 merged pull requests across dash, plotly.js and plotly.py, plus a 4.0 release with a typescript api — and dash crossed 7 million downloads in a month. the steady stack outlasts every hype cycle.
read the note →Your scraper just got a control plane. scrapy 2.19.0, out september 10, adds a remotecontrol…
your scraper just got a control plane. scrapy 2.19.0, out september 10, adds a remotecontrol extension that inspects a running crawl over http — the same hook its mcp server uses — and makes an aiohttp download handler the default. the web crawler became something you drive from outside.
read the note →Ai safety just became a gateway plugin. apache apisix 3.18.0, released august 20, buffers streaming…
ai safety just became a gateway plugin. apache apisix 3.18.0, released august 20, buffers streaming llm output and swaps flagged tokens for a provider-compatible refusal before the client sees them. moderation moved from the model to the proxy.
read the note →The open model release just went weights-first. shanghai ai lab put atria dawn preview out on…
the open model release just went weights-first. shanghai ai lab put atria dawn preview out on september 11 under the mit license, checkpoint and code on github before any wrapper or api. the release channel is the repo now.
read the note →E2e test speed just moved to the protocol layer. cypress 16, out september 1, runs tests over…
e2e test speed just moved to the protocol layer. cypress 16, out september 1, runs tests over http/2 and adds timeouts on chained assertions. the browser you already trust got faster at the network stack.
read the note →Local ai is becoming a home network problem. nvidia pair, shown at ifa 2026, routes inference…
local ai is becoming a home network problem. nvidia pair, shown at ifa 2026, routes inference across the pcs on your local network, and the rtx spark mini desktop arrives in october. your agents now have a router and a box to run on.
read the note →The framework is the supply chain now. next.js 16.3.6 and 15.5.26 ship september 22 as a critical…
the framework is the supply chain now. next.js 16.3.6 and 15.5.26 ship september 22 as a critical out-of-band security update for an upstream issue. a dependency of your dependency just became your security incident.
read the note →The design handoff just became a model conversation. claude design, out september 15, reads your…
the design handoff just became a model conversation. claude design, out september 15, reads your codebase and design files to build a design system, then syncs the result into claude code. the designer-to-dev boundary is now a transfer between models.
read the note →Your org's secret inventory just became an exportable dataset. github enterprise added credential…
your org's secret inventory just became an exportable dataset. github enterprise added credential inventory exports on september 21, with a csv download and rest api for everything found in your authentication security settings. leaked credentials are now a report, not a rumor.
read the note →The 2010s framework is quietly shipping the modern build stack. meteor 3.6-beta.0, out september…
the 2010s framework is quietly shipping the modern build stack. meteor 3.6-beta.0, out september 11, moves to rspack 2.x and pnpm monorepos with installable pwas. the tool everyone wrote off kept evolving anyway.
read the note →Your incident call is now part of the record, transcript and all. rootly's scribe agent joined…
your incident call is now part of the record, transcript and all. rootly's scribe agent joined incident calls in the september 9 release, transcribing live with speaker labels into every incident timeline. the postmortem just stopped depending on who took notes.
read the note →Feature flags just moved inside the pipeline. harness fme steps hit beta on september 17, letting…
feature flags just moved inside the pipeline. harness fme steps hit beta on september 17, letting teams toggle flags from within ci/cd runs instead of a separate dashboard. progressive delivery is becoming just another orchestration step.
read the note →The php debugger you already run just became a coverage tool. xdebug 3.6, out september 8, adds…
the php debugger you already run just became a coverage tool. xdebug 3.6, out september 8, adds path and branch information to its coverage output and supports php 8.6. one extension now does stack traces and coverage reports.
read the note →Your openapi mock just learned to remember. specmatic 1.27.0, released september 7, seeds an…
your openapi mock just learned to remember. specmatic 1.27.0, released september 7, seeds an in-memory resource store so create, update, and delete calls keep their state across requests. contract tests just got closer to the real thing.
read the note →The ethereum dev stack just got a rust engine under the hood. hardhat 3, out this week with…
the ethereum dev stack just got a rust engine under the hood. hardhat 3, out this week with v3.17.0, runs solidity tests on a rust-powered runtime and fixes gas estimation when internal calls run out of gas. the evm toolchain keeps getting faster at the lowest layer.
read the note →The hours ai frees are now spent answering for the code. the q3 dev barometer, fielded across 705…
the hours ai frees are now spent answering for the code. the q3 dev barometer, fielded across 705 developers, finds nearly 80 percent spend less than half their week writing code, saving about 13 hours that mostly go to review. the bottleneck just moved downstream.
read the note →The antidote to ai slop is now a pip install. no-ai-slop, a python repo at 10.5k stars, strips 20+…
the antidote to ai slop is now a pip install. no-ai-slop, a python repo at 10.5k stars, strips 20+ telltale ai patterns from any text, down to the predictable closing paragraph. the thing that reads like a machine just became detectable by machine.
read the note →Reproducibility is coming for ai-assisted work. pipulate, a free open-source context compiler,…
reproducibility is coming for ai-assisted work. pipulate, a free open-source context compiler, stacks every file the model read and every command it ran into one reviewable file. the ai's working memory becomes an audit trail.
read the note →