Dev · Top stories
Expedia Open-Sources mockql-rs for LLM-Generated GraphQL Mocks; Airbnb and GraphQL Foundation Also Pursue Solutions
Expedia Group open-sourced mockql-rs, a Rust CLI that generates GraphQL mock responses using a large language model (LLM) at request time. This tool, along with similar efforts from Airbnb and the GraphQL Foundation, addresses the challenge of rapidly creating mock data for GraphQL development, allowing developers to work with incomplete backend services.
npm 12 Released with Install Scripts Off by Default for Enhanced Security
npm 12 has been released, making several security-related changes to `npm install` defaults, including disabling automatic execution of install scripts. These changes require developers to explicitly opt-in to script execution, aiming to mitigate supply chain attacks and improve package security.
Microsoft.Extensions.AI introduces new primitives for AI model routing and failover
Microsoft.Extensions.AI has released new experimental primitives for routing and failover in AI applications, addressing cost, uptime, and latency concerns. These primitives allow developers to route requests based on content or implement failover strategies for AI models and providers.
systemd-journald causes excessive disk writes, up to 110KB+ per log line
A bug report details that systemd-journald, version 257.9, on Debian 13 with Linux kernel 6.12.57+, is causing excessive disk I/O, writing tens of kilobytes for each log line. This issue significantly increases disk activity, impacting VM performance and potentially reducing hardware lifespan.
Vercel Releases v0 API for Programmatic AI-Powered Application Building
Vercel has made its v0 API generally available, allowing developers programmatic access to an AI agent that generates and modifies application files based on prompts. This release enables developers to integrate AI-powered application generation directly into their products, scripts, and CI pipelines, offering a new approach to app development infrastructure.
Developer reports "obvious" App Store ratings fraud going undetected by Apple
Jeff Johnson, developer of the StopTheMadness Safari extension, states that Apple is failing to detect clear instances of App Store ratings fraud, despite the company's claims of rigorous review processes. This raises concerns about the effectiveness of Apple's content moderation and its impact on user trust and developer fairness within the App Store ecosystem.
Tailscale Outages Traced to 16-Year-Old SQLite WAL-Reset Bug, Now Fixed
Tailscale experienced multiple outages due to database corruption, which was traced to a 16-year-old bug in SQLite's write-ahead logging (WAL) reset mechanism. The bug, a data race with tight timing constraints, existed since 2010 and was fixed in SQLite version 3.51.3. Tailscale has implemented a fix and shared details to aid the broader SQLite community.
Delta Launches Multiplayer Coding Environment with Integrated AI Agents and DeltaDB Version Control
Delta has launched a private beta for its new multiplayer coding environment, which integrates AI agents and human developers within a shared context. The platform includes DeltaDB, a version control system that records every operation between commits, links code changes to conversations, and works with existing Git repositories. This aims to improve collaboration by connecting code and conversations, allowing developers and agents to work together with full historical context.
GitHub resolves incident affecting Pull Requests, Issues, and Search functionality
GitHub experienced an incident causing errors and degraded performance for Pull Requests, Issues, and Search on GitHub.com. The issue was traced to a database index reference problem following a recent migration and has since been resolved.
Netflix Redesigns Service Topology Pipeline for Scalability
Netflix redesigned the streaming pipeline for its Service Topology, a real-time map of service dependencies, to support production scale. The new design separates intermediary resolution from enrichment and persistence, propagates backpressure to Kafka, and uses server-sent events for internal transfers, addressing previous bottlenecks with popular destinations.
Heroic Launcher Developers Launch 'Xodus' Project to Bring Xbox PC Games to Linux
Developers of the Heroic Launcher have started a new open-source project called "Xodus" to enable Xbox PC and Game Pass titles to run on Linux. Xodus aims to reverse-engineer and emulate Microsoft's proprietary GDK runtime environment, Xbox identity services, and encrypted MSIXVC packages, which currently prevent these games from running on Linux.
JEP 401 Introduces Value Objects and Redefines '==' for Them in JDK 28 Preview
JEP 401, "Value Objects (Preview)", has been integrated into JDK 28, introducing identity-free class instances with final fields and altering the behavior of the '==' operator for these new value objects. This change allows for flatter, allocation-free JVM representations and requires developers to use a new 'value' modifier and adhere to stricter construction rules.
GitHub Code Quality, combining CodeQL and AI, is now generally available
GitHub Code Quality, a service integrating CodeQL analysis with AI-assisted detection of maintainability and reliability issues, is now generally available on GitHub Enterprise Cloud and GitHub Team. This release provides tools for engineering teams to manage code quality and maintainability, which is increasingly important with the rise of AI-generated code.
Docker Introduces Sandboxes for Isolated AI Agent Execution
Docker has released Sandboxes, a new feature providing isolated microVM environments for running AI coding agents locally. This allows developers to grant AI agents more autonomy while protecting the host system's filesystem and network.
Klepton Enables Running Android ARM64 VR APKs on Apple Vision Pro Without JIT
Klepton, a new tool, allows Android ARM64 VR APKs to run on Apple Vision Pro by translating Android libraries into Apple-compatible formats. This development provides a method for developers to port existing Android VR applications to Apple's new platform, potentially expanding the available content for Vision Pro users.
Stripe Automates Database Remediation Using Graph Search and State Machines
Stripe's engineering team implemented a system that models its global infrastructure as a graph and uses graph search algorithms with state machines to automate database incident recovery. This new approach has reduced database-related pager alerts by 30%, eliminating 200 pages and 12 days of unhealthy shard states annually.
Triton Driver Enables Full DirectX 11 Support for Windows Guests in QEMU
A new Windows driver named Triton, combined with the existing Neptune Direct3D protocol forwarding layer, now provides full DirectX 11 support for Windows virtual machines running on QEMU. This development allows for modern graphics acceleration in Windows guests, addressing limitations of previous approaches that relied on replacing core Windows DLLs.
New DNS `_for-sale` record type signals domain availability for purchase
A new reserved DNS leaf node name, `_for-sale`, defined by RFC 10023, allows domain owners to signal that a domain is available for purchase while remaining active. This mechanism provides a standardized way for brokers and automated services to identify domains for sale without disrupting live websites or relying on often-redacted WHOIS data.
Nixpkgs Core Team Disbands Citing Unsustainable Workload and Governance Issues
The Nixpkgs core team has disbanded due to an unsustainable workload and issues with the project's Steering Committee. This dissolution highlights challenges in open-source project governance and volunteer burnout, which could impact the future development and stability of the Nixpkgs ecosystem.
Oracle Bans AI-Generated Code from OpenJDK Contributions
Oracle has prohibited the submission of AI-generated code to OpenJDK, citing concerns over safety, security, and intellectual property risks. This policy applies to repositories and pull requests, though developers can use large language models privately for debugging and code review. The decision is notable given Oracle's internal use of AI for code generation.
Rootly Alters Code Review Process, Drops Small PR Rule Due to AI-Generated Code
Incident management platform Rootly has discontinued its small pull request (PR) rule, citing changes in code generation economics due to AI agents. The company now focuses on assessing "blast radius" and uses feature flags and rollback capabilities for safety, rather than limiting PR size. This shift reflects how AI agents produce complete feature implementations, making traditional small, stacked PRs inefficient for review.
npm Introduces Staged Publishing for Node.js Packages with Human Approval Step
npm has made staged publishing generally available, adding a mandatory human approval step with two-factor authentication before a package version goes live. This feature aims to enhance supply chain security by preventing direct, unreviewed publication of potentially malicious code.
Celld Enables Self-Hosted, Distributed Cloudflare Workers and Durable Objects
Celld is an open-source daemon that allows users to run Cloudflare Workers and Durable Objects on their own infrastructure. It uses individual SQLite databases for each object, replicated to an S3-compatible bucket, eliminating the need for a control plane or consensus mechanism.
HyperProbe Launches Read-Only Debugging Agents for Production Environments
HyperProbe, a Y Combinator S26 startup, has launched a tool that allows developers to deploy read-only probes to production codebases to capture live variable states without redeploying or restarting services. This aims to reduce incident resolution times by providing immediate access to data not available in logs, addressing issues like silent data mismatches or race conditions during peak traffic.
yk Technology Automatically Adds JIT Compilers to Existing Language Implementations
A new technology called yk has been developed to automatically integrate just-in-time (JIT) compilers into existing language implementations, particularly for dynamically typed languages. This technology demonstrates significant speed improvements, with a Lua benchmark showing a 4x speedup and MicroPython showing a 2x speedup.
City of Munich Funds libexpat Maintainer for Six Months to Address Vulnerabilities
The City of Munich is funding the lead maintainer of libexpat, a widely used XML parser, for up to six months starting August 1, 2026. This funding will allow dedicated work on fixing five known vulnerabilities, adding XML 1.0r5 support, and improving project robustness, which is significant for the many projects relying on libexpat.
Warp Agent CLI Released for Multi-Model AI Agent Integration Across Terminals
Warp has launched the Warp Agent CLI, a standalone command-line interface that allows developers to use its multi-model AI agent in various terminals like iTerm 2, VS Code, and Windows Terminal. This release provides advanced agent workflows and integrates deeply with the shell, offering capabilities beyond other agentic CLIs.
Cloudflare introduces new tools for Agent Development Lifecycle, expanding AI agent capabilities
Cloudflare launched new tools to support an "Agent Development Lifecycle" (ADL), enabling AI agents to manage more stages of software development beyond just code generation. This initiative aims to address the increased workload on human engineers caused by the rapid code output from AI, by allowing agents to handle tasks like CI/CD, testing, and observability.
Cloudflare Open-Sources AI Tool Used by Astro to Clear GitHub Issue Backlog
Cloudflare has open-sourced "triagebot-action," an AI-powered GitHub Action that helped the Astro JavaScript framework reduce its open issues from over 200 to around 20. This tool automates the reproduction, diagnosis, and verification of bugs, offering a solution for open-source projects struggling with growing issue backlogs.
Andy Pavlo Joins ClickHouse to Lead New Research Team, ClickHouse Labs
Andy Pavlo, a professor from Carnegie Mellon University, has joined ClickHouse to establish and lead ClickHouse Labs, a new research organization. This initiative aims to advance database technology and integrate research directly with ClickHouse's engineering efforts and PostgreSQL team.
Workers RPC now supports cross-language communication between Python and JavaScript
Workers RPC, built on Cap'n Proto RPC, now enables direct communication between Python and JavaScript Workers, allowing methods to be called across languages without custom APIs or serialization formats. This update simplifies the development of multi-language systems within the Workers environment.
Octane introduces a compiled React programming model without virtual DOM or dependency arrays
Octane is a new framework that compiles React's programming model, including hooks and Suspense, ahead of time, eliminating the need for a virtual DOM and manual dependency arrays. It aims to improve performance and developer experience by inferring dependencies and allowing conditional hooks, while maintaining compatibility with existing React components.
Rust proposes new traits for immobile types and guaranteed destructors
The Rust project proposes introducing new `Move`, `Destruct`, and `Forget` traits to explicitly define type capabilities, allowing types to opt out of default assumptions about movability and destructor execution. This change addresses complexities with self-referential types and ensures critical cleanup operations, impacting how certain advanced programming patterns are handled in Rust.
New App Launches Increase 60% Globally, 80% on iOS in Q1 2026, Driven by AI Coding
New app launches across the Apple App Store and Google Play increased by 60% year-over-year globally in Q1 2026, with iOS alone seeing an 80% rise. This growth is attributed to the rise of AI coding, which has made app development more accessible and faster for developers.
Lean Kernel Soundness Bug #14576 Fixed After AI-Assisted "Disproof" of Collatz Conjecture
A soundness bug in the Lean theorem prover's kernel was reported and fixed on July 28, after an AI-assisted "disproof" of the Collatz conjecture exploited it. The bug allowed the kernel to accept a proof of False due to incorrect handling of nested inductive types, but was only reachable through metaprogramming. This fix ensures the reliability of proofs generated within the Lean ecosystem, particularly for users relying on external checkers.
OpenAI Contributes Git Improvements for Large Repository Performance and Stability
OpenAI engineers contributed several patches to Git, addressing issues related to static analysis timeouts, bitmap selection for large repositories, parallel checkout diagnostics, and filesystem monitoring. These contributions aim to improve Git's performance and reliability when handling extensive codebases.
Google to exempt sanctioned nations from Android developer verification checks
Google will exempt devices in sanctioned countries from its upcoming Android developer verification checks, allowing unverified developers to distribute apps in those regions. This policy means users in sanctioned areas will not benefit from the enhanced security features of the verification program.
Go proposes generic collection types for standard library in Go 1.28
The Go Collections working group has proposed adding generic collection types, including hash-based maps and sets, to the standard library for Go 1.28. This initiative aims to provide more common data structures and establish API conventions, building on the introduction of generics in Go 1.18 and iterators in Go 1.23.
Ramp Router Launches for Efficient AI Model Routing
Ramp has launched its Router, an API that routes requests to the most cost-effective AI models while optimizing for performance. It aims to reduce operational costs by approximately 30% and offers a reliable infrastructure for AI use cases across various providers.
GitHub open-sources Rust crate for high-speed case folding in code search
GitHub has open-sourced a Rust crate named `casefold` that optimizes case folding for text comparison, particularly for its Blackbird code search engine. This development improves the speed and accuracy of case-insensitive matching in large codebases by implementing a branchless approach for ASCII text and distinguishing case folding from lowercasing.