VS Code’s Agent Host can now run inside Dev Containers and carry Codex sessions across clients
The Agent Host is becoming less like a background chat process and more like durable development infrastructure.
Search
Search results for “pull_request_target”
Find published research by company, product, platform or technology.
Showing 21–40 of 184 dossiers
Omarchy turns $1.95M in pledged AI credits into an open-source development budget
The interesting part is not another sponsorship total. DHH says Omarchy Quattro is already being built heavily with coding agents, and the token pledges are intended for debugging, security work and a 1,600-plus pull-request backlog. The dollar values are foundation-reported pledged credits, not audited cash spend.
Artificial IntelligenceWeb DevelopmentCloud & InfrastructureAI AgentsDeployment & DevOpsDeveloper ToolsObservabilityActive dossier
Vercel Agent is bringing production investigations and approved actions into Slack
Vercel Agent now works in Slack as well as the Vercel dashboard, combining logs, metrics, deployments and repository context with team conversation before proposing approved actions such as pull requests, rollbacks, configuration changes and cache purges.
GitHub Copilot turns Slack and Teams conversations into shared coding-agent sessions
GitHub Copilot can now turn Slack or Teams threads into collaborative cloud-agent sessions. Teammates can add context and steer the work in public, while repository permissions, agent budgets and optional extra PR approvals remain the main control boundaries.
Artificial IntelligenceCloud & InfrastructureAI AgentsCloud PlatformsCompute & AI InfrastructureActive dossier
Cloud Run sandboxes now work inside jobs and worker pools
Cloud Run sandboxes now cover all resource types. The August 5 expansion matters for builders whose agents or automation run in batch jobs or continuously pulling workers rather than HTTP services, while the feature remains pre-GA and shares CPU and memory with the host container.
Microsoft Advertising is removing Max CPC from new standalone automated campaigns
Microsoft Advertising is taking Max CPC out of new standalone automated campaigns from October 1. Existing capped campaigns and portfolio strategies retain the control for now, but advertisers creating new campaigns will need to rely more heavily on conversion targets, budgets and portfolio bidding.
LinkedIn is sunsetting the Profile API `location` field in favor of `geoLocation`
This is separate from LinkedIn’s Ads Legacy Geo cutoff already tracked by BTN. Profile and compliance integrations can fail more quietly: the request may still succeed while a field the application expects simply disappears or becomes null.
Reddit is moving third-party apps off its Public Data API and onto Developer Platform
Reddit has made the direction of its API platform explicit: existing API apps should register now, with an August 30 cutoff for possible $1,000 porting-bounty eligibility and a broader September 30 registration request. The actual migration is later, but builders need to inventory dependencies and missing Devvit capabilities now.
bunny.net lets Edge Scripts run before the CDN cache without giving up caching
Edge Scripts no longer have to sit behind bunny.net’s automatic cache. New pre-cache hooks can execute before cache lookup, while a separate Cache API lets scripts read, write and delete regional cache entries under application control.
GitHub has switched off SHA-1 HTTPS support — old Git and API clients can now fail
The deadline is no longer theoretical: browsers, Git HTTPS backends and API clients that still depend on SHA-1-era TLS algorithms can now lose connectivity to GitHub.com.
Keycloak patches a critical password-reset flaw that can let unauthenticated attackers take over any account
This is an identity-system failure rather than an application bug: a vulnerable Keycloak deployment can let an attacker turn the legitimate “forgot password” flow into full account takeover without credentials or victim interaction. Upgrade is the proper fix; disabling Forgot Password in every realm is Red Hat’s temporary mitigation.
GitHub Copilot Auto now lets developers choose whether routing optimizes for cost or intelligence
The material change is that model routing is no longer a single opaque optimization target. Developers can now tell Copilot whether to bias Auto toward lower cost, a middle ground or higher quality while GitHub still chooses a model prompt by prompt.
Cloud SQL connectors can now follow SQL Server primary failover through one write endpoint
Cloud SQL’s SQL Server HA path is becoming more transparent to applications: supported proxies and connectors can target one write endpoint and be redirected when the primary changes. Teams still need retry-safe connection handling around the failover itself.
Muse Spark 1.3 improves agent efficiency without raising Meta’s API price
Muse Spark 1.3 is more than a routine model refresh: Meta is pairing stronger agent behavior with lower vendor-reported tool/token use at the same published unit price. Independent testing supports a capability gain, but max reasoning can consume substantially more reasoning tokens.
Microsoft Project Zenith turns 64GB-class Windows PCs into a standardized local-AI developer tier
Project Zenith is not a new model or another Copilot feature. It standardizes a developer-focused Windows experience and hardware floor for local AI work, with preconfigured tooling and OS settings intended to reduce setup friction and dependence on metered cloud inference.
NVIDIA formally agrees to acquire Hugging Face for $12.93 billion — and promises to keep it open across rival hardware
The previously reported NVIDIA–Hugging Face deal is now a definitive agreement rather than an unconfirmed report. The most important new detail for builders is not only the price: NVIDIA has put multi-model and multi-silicon openness into its public and regulatory framing, while the acquisition still faces closing conditions and regulatory approval.
Honeycomb is moving adaptive tail sampling into the OpenTelemetry Collector
The new processor can vary sample rates by trace fingerprint and target either a traffic percentage or throughput budget. It is usable now in Honeycomb’s Collector distribution, while the upstream OpenTelemetry component is still working toward alpha.
DuckDB 2.0 enters feature freeze with alpha builds ahead of an October release
The architecture is unchanged—Quack/CONNECT, a stable extension ABI, new storage and parser foundations—but the migration window is now concrete. Builders can test real 2.0 alpha clients before the projected October release.
Cloud CDN adds standards-based CDN-Cache-Control support
Cloud CDN can now honor CDN-Cache-Control separately from browser-facing Cache-Control. That gives builders a standards-based way to set shared-cache behavior at the edge while preserving different client-side caching rules.
LinkedIn Ads API adds a 1,000-segment audience cap as Legacy Geo shuts down August 31
Audience-management systems can now fail with `SEGMENT_LIMIT_EXCEEDED`, while old geography identifiers begin returning invalid-field errors after August 31. LinkedIn also opened the Matched Audiences API to applications from qualified developers, increasing the importance of handling these limits correctly.