AI·
Airbnb says AI writes 60% of its new code. Nobody has explained what that means.
Brian Chesky dropped the 60% figure on an earnings call without defining how Airbnb measures it. Google claims 75%. The independent average is 27%.
#dev-tools
RSS
Security·
TanStack published its npm supply-chain postmortem. The attack chained three GitHub Actions flaws.
Attackers compromised 42 TanStack packages through a pull_request_target exploit, cache poisoning, and OIDC token theft. An external researcher caught it in 20 minutes.
Web·
GitLab is cutting staff and killing its CREDIT values. The CEO calls it 'Act 2.'
CEO Bill Staples announced a restructuring he frames around agentic AI, retiring GitLab's six core values for three new operating principles. Exact layoff numbers come June 2.
Open Source·
Jarred Sumner rewrote 960,000 lines of Bun from Zig to Rust in six days. He might throw it all away.
Bun's creator used Claude to port the JavaScript runtime from Zig to Rust, hitting 99.8% test compatibility. He says there's a 'very high chance' it gets scrapped.
Security·
380,000 vibe-coded apps are sitting on the open web. 5,000 of them are leaking real data.
RedAccess found that AI coding tools like Lovable, Base44, and Replit default to public hosting, leaving medical records, bank internals, and corporate secrets indexed by Google.
Web·
Cloudflare cut 1,100 jobs on its best earnings day. Revenue grew 34% and the stock dropped 18%.
Cloudflare laid off 20% of its workforce on May 7 while reporting record Q1 revenue of $639.8M. The stock dropped 18% after hours.
Web·
VS Code shipped 'Co-Authored-by Copilot' on every commit by default. Microsoft is reverting it.
A two-line PR flipped the AI co-author flag from off to all in April. Hand-typed commits started getting Copilot attribution. The maintainer apologized and promised a fix in 1.119.
AI·
GitHub Copilot's Claude Opus multiplier jumps to 27x on June 1. Monthly plans dodge the hike.
GitHub's new model multiplier table for Copilot Pro and Pro+ annual plans lands June 1. Opus 4.6 goes 3 to 27. Sonnet 4.6 goes 1 to 9.
Gaming·
Panic banned generative-AI art and audio from the Playdate Catalog. Code assistance still gets a pass.
The Playdate Catalog will no longer accept titles that use ChatGPT, Stable Diffusion, or Suno output for art, audio, text, or dialog. Existing titles get a label.
Open Source·
An unofficial Notepad++ port finally landed on Mac. Don Ho didn't write it.
Andrey Letov shipped a native macOS Notepad++ port as a universal binary with the original Scintilla engine and a new Cocoa UI. It's GPL, free, and unaffiliated with Don Ho.
Open Source·
Zed 1.0 ships its agentic editor. The Atom team's Rust rewrite finally has a stable label.
Zed Industries shipped 1.0 on April 29 after five years of Rust and GPU work. Free forever for humans, with $10/month hosted AI and an open Agent Client Protocol.
Open Source·
Mitchell Hashimoto is pulling Ghostty off GitHub. The reason is daily outages.
Ghostty's creator has tracked GitHub outages every workday for months. After 18 years on the platform, he's moving the project. A read-only mirror stays.
Open Source·
Warp's terminal is now open source. The cloud agent platform Oz is the actual product.
Warp released its 36k-star Rust client on GitHub under AGPLv3 on April 28. OpenAI is the founding sponsor and Oz keeps the bills paid.
Security·
Wiz found an RCE in GitHub's git-push pipeline. The patch shipped in six hours.
CVE-2026-3854 is a CVSS 8.7 RCE in GitHub's git-push pipeline. github.com fixed it within hours. 88% of Enterprise Server installs were still vulnerable at disclosure.
AI·
GitHub Copilot kills premium requests on June 1. Token billing arrives, fallback models do not.
On June 1 every Copilot plan switches to GitHub AI Credits priced per token. Code completions stay free. Fallback models and credit rollover do not.
AI·
GitHub Copilot paused new signups and kicked Opus out of Pro. Here's what actually changed.
GitHub froze Copilot Pro/Pro+/Student signups on April 20 and moved Claude Opus 4.7 behind the $39 Pro+ tier. Agent workflows broke the old math.