Developer Tools

Cursor released two automated bots that watch code from pull request to production and scan every PR for security flaws, six weeks after acquiring startup Firetiger.

Vercel Labs' experimental scriptc compiler turns ordinary TypeScript into small native binaries with no embedded Node or JavaScript engine, now at version 0.1.4 with more than 5,000 GitHub stars.

Safari 27.0 folds its Safari MCP developer server into a stable release, adds CSS-styleable select dropdowns, and rewrites the module loader in native C++.

GitHub added an opt-in, OS-level sandbox to the Copilot desktop app that limits agent file, network, and credential access, failing closed if unsupported.

Claude Opus 5.5 becomes Claude Code's default model and lands in GitHub Copilot the same day, at roughly 40% lower cost than Opus 5.

Visual Studio Code 1.139 extends Dev Container agent sessions to remote hosts and speeds up large agent session lists by up to 12x, Microsoft says.

Homebrew 7.0.0 adds a brew vulns scanner and advisory database, swaps Linux Bubblewrap sandboxing for Landlock, and patches a cask sandbox-escape flaw.

Git 2.56.0-rc1 adds new git refs subcommands and, via an amended 2.55 release note, confirms Rust will become a mandatory build dependency in Git 3.0.

DoorDash built a two-phase Claude-based multi-agent system that produced usable pull requests for 45 of 50 stale feature flags, averaging $4.79 and 13.8 minutes each.

GitHub says it rewrote the Copilot agent runtime into more than 800,000 lines of Rust using its own Copilot coding agents, at a roughly $120,000 token cost.

Alibaba open-sourced OpenCodeReview, an AI code-review CLI it says outperforms Claude Code on precision using far fewer tokens, while independent reviewers warn of a low recall ceiling and weaker results outside Alibaba's own benchmark.

Cloudflare has moved Python Workers out of beta to general availability, adding native FastAPI, Django, and Flask support plus PostgreSQL and MySQL connectivity via Hyperdrive.