What SELECT FOR UPDATE, FOR SHARE, and a foreign key check actually write into the tuple header. t_xmax as a locker, the infomask bits that say so, MultiXactIds when two sessions lock the same row, and the pg_multixact files that grow behind them.

GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

DuckDB-Wasm can open a persistent database file in the browser's Origin Private File System (OPFS). This post shows how, and when data reaches disk.

We cut PR wait time and running costs by rethinking CI as a system, from the infrastructure underneath it to how work gets scheduled and tests get parallelized.

Applying diffs to disk breaks more agent workflows than reasoning errors. Here is how Aider, Claude Code, Cursor, OMP, DeepSeek Harness, OpenCode, and Morph modify code.

WalShadow replicates Postgres data directly from physical WAL into ClickHouse, delivering around 200 ms latency and 289,000 rows per second in benchmarks.

Find the code you can delete, merge, or refactor in a TypeScript or JavaScript project. Fallow analyzes code and styles statically for free, and optional runtime intelligence shows what ran in production.

If you

An agent-first linter for Tailwind design systems. Write design system rules that agents can verify. - shadcn-ui/lint

There is a conversation that happens in every PostgreSQL shop eventually. A query that has been fine for a year gets slow overnight. Nothing was deployed. The …

Zod 4.6 is now available, with .validate() for boolean validation, .properties() on z.instanceof(), and six more JSON Schema keywords.

On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident.

An open-source AI agent that designs, documents and validates real PCBs from a prompt.

The WebGPU library, designed for agents.

Vitest 5.0 Release Announcement

GitLab

Every query locks every index on a table, even ones it doesn't use.

… from the 90s.

$12,431 in fake invoices, 2,797 spam emails, $0 revenue.

As I continue my journey into the abyss of the compiler, one idea has finally started to settle in for me, a compiler is not just a translator that takes...

Most of what an AI coding agent does for me isn't thinking. It's I/O.

Review the exact npm, PyPI, or VS Code artifact before publication. Drydock diffs built package bytes and pins supply-chain risks to changed lines.

Write repository automation workflows in natural language using markdown files and run them as GitHub Actions. Use AI agents with strong guardrails to automate your development workflow.

We measured the tool-definition token cost of ten popular MCP servers, and when that cost hits in current Claude Code. Per-server table, keep-or-cut verdicts.

WAIT FOR in PostgreSQL 19 lets a reader block until the replica has replayed a specific LSN. Measured against sticky routing, sleeps, and synchronous commit, on a replica that misses the write 99% of the time.

In this post, we explore how a simple website summary request hijacks Claude Code Opus 5 in Auto Mode and achieves code execution with 60-80% attack success …

A bare z.string() retained 7.5kb of heap in Zod 4.4. In Zod 4.5 it retains 784 bytes. One change to where a schema's methods live accounts for nearly all of it.

Why I stopped trying to give LLM agents a better memory and instead built Lemmalog, a Datalog engine that maintains an agent's knowledge as analysis state, with provenance, retractions and incremental evaluation, plus what happened when I benchmarked it on LongMemEval and LoCoMo.

Let AI agents use your real, logged-in browser without interrupting your work. CLI + extension for browser automation across any shell-capable AI agent. - Tencent/BrowserSkill

A major OAuth and OpenID Connect expansion, updated MCP authorization, SCIM Groups and role projections, unified identity, device authorization, and more.

Execute untrusted JavaScript and TypeScript without giving it access to your application, and pause mid-run for human approval.

A fast coding-agent harness in Go. Tool-use loop, bubbletea TUI, provider-routable models with live catalog discovery, MCP support, background subagents. One binary, no runtime, built for open-sour...

The August 2026 security release for Next.js is now available

I have been probably obsessed with two things in the last few years: Nix as a tool to explore innovative ideas that require the capability to rebuild the world and replacing ELF with SQLite as an executable format. You might have noticed that these two ideas are well suited to each other.

Fission trades atomicity to conserve reasoning.

An update on the Model Context Protocol roadmap and focus areas for upcoming specification releases.

A native Mac terminal that keeps projects, sessions, and attention organized. Saggar tracks what is working, waiting, finished, and failed, then brings the sessions that need you to the front.

wal3, Chroma's write-ahead log, combining a 30-year-old lock-free algorithm with S3's newest conditional writes feature.