developer-tools

Expedia's mockql-rs uses an LLM to fill in GraphQL schema fields marked with @mock, joining Airbnb's build-time directive and an early-stage GraphQL Foundation RFC.

HEIR compiles pre-trained AI models to run inference on fully homomorphic encrypted data, letting servers process private data without decrypting it.

DeepSeek released its Harness agent runtime as MIT-licensed open source and rolled out DeepSeek-V4-Pro with native OpenAI Responses API support.

Six companies agreed on a shared packaging format for AI agent skills and MCP servers; Anthropic, which created the underlying protocols, is not part of the effort.

OpenAI released the command-line tool and SDK for Codex Security, formerly Aardvark, under Apache-2.0, while the underlying scanner stays limited-beta.

Blacksmith's valuation jumped nearly tenfold in under a year as demand for validating AI-generated code accelerates CI workloads.

GitHub made Moonshot AI's Kimi K3 generally available in Copilot on August 6, briefly pausing the rollout to mitigate a GitHub Actions incident before resuming it the same day.

GitHub shipped enterprise-wide allow/deny lists for MCP servers reachable through Copilot, enforced with fail-closed policy across the Copilot app, CLI, and VS Code.

Zed's 1.14.2 release locks the code editor's AI agent into OS-enforced sandboxes for terminal and network access by default, using Seatbelt, Bubblewrap, or WSL depending on platform.

Yeeth Security found 'Solidity Pro' VS Code extensions that evolved from a delayed Cloudflare-Worker dropper into a Telegram-based wallet and credential stealer targeting web3 developers.

Visual Studio Code 1.132 advances its multi-window Agent Host, lets developers annotate browser elements for agents, and switches dictation to an on-device multilingual model.

Five Rust teams adopted a policy on Aug. 5 letting contributors use LLMs to analyze and review code but barring LLM-authored PRs, comments, and docs, with a circuit breaker if AI PRs exceed 50% of merges.