Signal
79 articles covering "developer-tools"
GitHub's Octoverse data and a new academic study show AI coding tools are creating self-reinforcing adoption cycles that favor typed languages, with TypeScript adding over a million contributors in a single year.
JetBrains previews Air, a new environment that manages multiple AI coding agents concurrently, alongside a standalone Junie CLI agent in beta.
Microsoft's Visual Studio Code moves to weekly stable releases starting with version 1.111, adding an Autopilot mode that lets AI agents operate autonomously, while Google simultaneously launches a similar auto-approve feature in Gemini Code Assist with stark security warnings.
Apple is reportedly planning to retire Core ML at WWDC 2026 and introduce Core AI, a modernized framework intended to help developers integrate outside AI models into iOS apps, according to Bloomberg's Mark Gurman.
Check Point Research disclosed two CVEs in Anthropic's Claude Code that turned project configuration files into attack vectors, enabling remote code execution and API key exfiltration before users could approve a trust dialog.
The Linux Foundation established AAIF on December 9, 2025, placing MCP, goose, and AGENTS.md under neutral open-source governance with eight platinum members including AWS, Google, and Microsoft.
SQLite 3.52.0, expected to release around March 11, 2026, will add ALTER TABLE support for NOT NULL and CHECK constraints, a new Query Result Formatter for the CLI, two new JSON array functions, and query planner improvements.
Deno 2.7 ships stable Temporal date/time API, official Windows ARM builds, npm overrides, and over 40 Node.js compatibility fixes in its February 25 release.
Git 2.53 defaults Rust support in both build systems and unlocks geometric repacking for partial clones, setting the stage for a Git 3.0 release by late 2026.
A new 501(c)(3) nonprofit modeled on university endowments aims to generate sustainable returns for critical open source projects, backed by the founders of HashiCorp, cURL, and Vue.js.
A security researcher's disclosure of a prompt injection flaw in Cline's AI-powered GitHub issue bot was weaponized eight days later to steal npm publish tokens and install unauthorized software on developer machines.
From cURL killing its bug bounty to Godot maintainers burning out, the flood of low-quality AI-generated pull requests and security reports is forcing open source communities to fundamentally rethink how contributions are accepted.