Development

Trigger.dev exposed environment variables for some organizations. Revoke affected credentials, audit downstream access, and reduce platform privileges.

MCP reference servers fix eight vulnerabilities, but date-versioned installs can miss the upgrade. Check package versions and the remaining Windows risk.

PHP2Shell exposes critical runtime RCE flaws. Update PHP, verify every serving worker, and distinguish patching from incident response.

DeepSeek V4.1 Flash-1017 promises better coding with shorter runs. Test checkpoint gains, tool-call fidelity, and regressions before upgrading.

Gemini 4 Argon extends long-running coding workflows—but continuation, independent checks, and human review matter more than token capacity.

Bun 1.4.3 adds native TypeScript checking. Learn how to gate tests and builds, compare diagnostics, and migrate CI without dropping declaration output.

Together Link connects coding agents to hosted open models. Learn how to trial it safely, check routing, and measure cost per accepted change.

Vinext 1.0 moves Next.js apps onto Vite with broader router support and cache warming—test compatibility before treating portability as a drop-in guarantee.

Tobias Lütke’s walgit puts a write-ahead log in object storage and makes every Git server a disposable cache — an open-source answer to Cursor’s Continuity.

GitHub’s stacked pull requests exit preview, splitting large changes into reviewable layers merged in one click.

MCP’s 2026-07-28 spec removes sessions and the initialize handshake, making the protocol stateless — here’s what changed and why it matters.

New quantization techniques enable running large language models locally with minimal quality loss, reshaping AI infrastructure and deployment economics.