devtake.dev — #dev-toolsArticles tagged dev-tools on devtake.dev.https://devtake.dev/en-usCloudflare bought VoidZero, the team behind Vite. The tools stay MIT and vendor-neutral.https://devtake.dev/article/voidzero-joins-cloudflare/https://devtake.dev/article/voidzero-joins-cloudflare/Cloudflare acquired VoidZero, Evan You's company behind Vite, Vitest, Rolldown and Oxc. The tools stay MIT-licensed, and there's a $1M ecosystem fund.Mon, 08 Jun 2026 09:45:00 GMTopen-sourceopen-sourcedev-toolsjavascriptvitecloudflaresoren-vanekLinear keeps its database in the browser. That's why the app feels instanthttps://devtake.dev/article/how-linear-stays-fast/https://devtake.dev/article/how-linear-stays-fast/A widely shared breakdown explains why Linear feels instant: a local-first sync engine, optimistic UI, and an in-browser object cache. Here's the architecture, in plain terms.Mon, 08 Jun 2026 08:30:00 GMTwebwebperformancelocal-firstdev-toolsjavascriptnaomi-parkBeyond the engine: six open-source tools that shape how games get madehttps://devtake.dev/article/open-source-game-dev-tools-digest/https://devtake.dev/article/open-source-game-dev-tools-digest/Godot, Unity and Unreal get the headlines, but six open-source tools quietly do the art, levels, and dialogue work that real games ship on.Mon, 08 Jun 2026 08:15:00 GMTgaminggamingopen-sourcegame-devdev-toolsgodothiro-tanakaGergely Orosz hands TechPays to Levels.fyi, and the European salary data stays freehttps://devtake.dev/article/techpays-levels-fyi-acquisition/https://devtake.dev/article/techpays-levels-fyi-acquisition/Levels.fyi has acquired TechPays, Gergely Orosz's European tech-salary project. Here's what's changing, what isn't, and what it means for engineers.Mon, 08 Jun 2026 08:00:00 GMTstartupstartupacquisitionscompensationdev-toolsdieter-morelliVS Code's webview sandbox leaks GitHub tokens that read and write every private repohttps://devtake.dev/article/vscode-zero-day-github-token-theft/https://devtake.dev/article/vscode-zero-day-github-token-theft/A disclosed VS Code zero-day lets one click on a malicious github.dev notebook steal a GitHub OAuth token with full read-write access to every private repo.Wed, 03 Jun 2026 13:15:00 GMTsecuritysecuritygithubcredential-theftdev-toolsrcesupply-chainoauthluca-reinhardtMicrosoft is shipping Linux's core commands on Windows, built in Rusthttps://devtake.dev/article/microsoft-coreutils-windows-rust/https://devtake.dev/article/microsoft-coreutils-windows-rust/Microsoft's Coreutils for Windows brings native ls, cp, and grep to Windows, built on the Rust uutils project. Here's what it is and why the Rust rewrite matters.Wed, 03 Jun 2026 12:45:00 GMTopen-sourceopen-sourcerustdev-toolsgithublinuxsoren-vanekHacker News is obsessed with durable Postgres workflows and a game about clicking yeshttps://devtake.dev/article/dev-tools-trending-digest-may-2026/https://devtake.dev/article/dev-tools-trending-digest-may-2026/Six dev-tooling and AI posts that climbed Hacker News in late May 2026: durable execution on plain Postgres, LLM code smells, a permission-fatigue game, Rust 1.96, and more.Fri, 29 May 2026 05:05:00 GMTaidev-toolshackernewsllmrustpostgresai-agentsopen-sourcedieter-morelliUber blew its entire 2026 AI coding budget in four months. Its COO can't prove it paid off.https://devtake.dev/article/uber-ai-budget-burn-claude-code/https://devtake.dev/article/uber-ai-budget-burn-claude-code/Uber exhausted its full-year Claude Code budget by April. Adoption hit 84%, heavy users burn $2,000 a month, and COO Andrew Macdonald can't connect the spend to shipped features.Wed, 27 May 2026 19:05:00 GMTaiaiclaude-codeanthropicai-codingdev-toolsuberai-agentsdieter-morelliMySQL just fixed a 20-year-old bug where cascade deletes silently skipped triggershttps://devtake.dev/article/mysql-bug-11472-fixed-20-years/https://devtake.dev/article/mysql-bug-11472-fixed-20-years/MySQL bug #11472 was filed in 2005: triggers never fired on foreign key cascade actions, silently breaking audit logs. MySQL 9.7 finally closes it via WL#17024.Wed, 27 May 2026 18:50:00 GMTopen-sourcemysqldatabasesopen-sourceoracledev-toolssqlmariadbsoren-vanekAMD walled off Linux Vivado behind a paid tier. The free FPGA tier is now Windows only.https://devtake.dev/article/vivado-2026-1-drops-linux-free-tier/https://devtake.dev/article/vivado-2026-1-drops-linux-free-tier/Vivado 2026.1 introduces a five-tier licensing model. The free BASIC tier supports Windows only; Linux requires the paid CORE tier. FPGA hobbyists are pushing back.Mon, 25 May 2026 12:15:00 GMThardwareamdxilinxvivadofpgalinuxdev-toolslicensinghardwarehiro-tanakaGoogle's bug tracker auto-published exploit code for an unpatched Chromium flaw. The bug is still live.https://devtake.dev/article/google-chromium-exploit-code-leak/https://devtake.dev/article/google-chromium-exploit-code-leak/Chromium Issue 1396278 went public on May 20 because Google's tracker auto-clears restrictions on stale closed bugs. The flaw, reported in 2022, was never fixed.Sun, 24 May 2026 10:00:00 GMTsecuritysecuritychromiumchromegoogleservice-workersdev-toolsedgebrowser-securityluca-reinhardtCloudflare rebuilt Browser Run on its own Containers. Concurrency went from 30 to 120.https://devtake.dev/article/cloudflare-browser-run-containers/https://devtake.dev/article/cloudflare-browser-run-containers/Cloudflare moved Browser Run off shared isolation infrastructure on May 13. The agentic-coding crowd gets four times the headless-Chrome ceiling and half the latency.Sun, 24 May 2026 09:45:00 GMTwebcloudflarebrowser-runai-agentsagentic-codingcontainersmcpwebgldev-toolsnaomi-parkC# is getting union types in version 15. The preview shipped in .NET 11 Preview 2.https://devtake.dev/article/csharp-15-union-types-preview/https://devtake.dev/article/csharp-15-union-types-preview/Mads Torgersen's union proposal landed in .NET 11 Preview 2 on April 2. C# 15 targets November 2026 and replaces the OneOf library hack the .NET community has been living with.Sun, 24 May 2026 09:30:00 GMTopen-sourcedotnetcsharplanguage-releasemicrosoftpattern-matchingdev-toolsfsharptypescriptsoren-vanekyt-dlp's maintainer says Bun is now 'fully vibe-coded'. Support is officially deprecated.https://devtake.dev/article/yt-dlp-bun-support-deprecated/https://devtake.dev/article/yt-dlp-bun-support-deprecated/yt-dlp's maintainer bashonly says Bun's Rust rewrite 'has taken a turn towards being fully vibe-coded.' The supported window narrowed to four versions.Sat, 23 May 2026 09:30:00 GMTopen-sourceyt-dlpbunjavascriptruntimevibe-codingopen-sourcedev-toolssoren-vanekKarpathy posted four notes about Claude Code. The CLAUDE.md they spawned has 110K GitHub stars.https://devtake.dev/article/karpathy-claude-md-github-trending/https://devtake.dev/article/karpathy-claude-md-github-trending/Forrest Chang turned Andrej Karpathy's January coding thread into a 70-line CLAUDE.md. It now has 110,000+ stars and has trended on GitHub for 28 weeks.Fri, 22 May 2026 10:30:00 GMTaiandrej-karpathyclaude-codeclaudeai-agentsagentic-codingai-assistantgithubdev-toolsdieter-morelliGitHub's internal repos were breached. The attacker came in through a poisoned VS Code extension.https://devtake.dev/article/github-internal-repos-breach-vscode-extension/https://devtake.dev/article/github-internal-repos-breach-vscode-extension/GitHub detected the intrusion on May 18 after a malicious VS Code extension compromised an employee's device. The attacker claims to have exfiltrated 3,800 internal repositories.Fri, 22 May 2026 10:15:00 GMTsecuritysecuritygithubvscodesupply-chaincredential-theftdev-toolsluca-reinhardtA bad command-line parser turned every claude-cli:// link into a remote shellhttps://devtake.dev/article/claude-code-rce-deeplink-cve/https://devtake.dev/article/claude-code-rce-deeplink-cve/Joernchen of 0day.click found a deeplink RCE in Claude Code. Anthropic shipped the fix in 2.1.118 the same week.Wed, 20 May 2026 09:15:00 GMTsecuritysecurityanthropicclaude-coderceai-securitysupply-chainai-agentsdev-toolsluca-reinhardtCloudflare taught wasm-bindgen to catch a Rust panic. Workers no longer poison the sandbox.https://devtake.dev/article/cloudflare-rust-workers-panic-recovery-wasm-bindgen/https://devtake.dev/article/cloudflare-rust-workers-panic-recovery-wasm-bindgen/Three Cloudflare engineers shipped panic and abort recovery into wasm-bindgen on April 22. A Rust Worker that panics now reinitialises on the next request.Wed, 20 May 2026 09:00:00 GMTopen-sourcerustcloudflarewasmwasm-bindgenwebassemblydev-toolsopen-sourcejavascriptsoren-vanekAtlassian laid off the engineer who built its edge. He published the blueprints.https://devtake.dev/article/atlassian-layoff-engineer-system-design-video/https://devtake.dev/article/atlassian-layoff-engineer-system-design-video/Vasilios Syrakis spent eight years building Atlassian's Envoy control plane. After the March cuts, he posted a 40-minute walkthrough that hit 1.1M views.Tue, 19 May 2026 10:30:00 GMTwebopen-sourcedev-toolsinfrastructureenvoyatlassianplatform-engineeringlayoffssystem-designnaomi-parkAnthropic bought Stainless, the startup that builds every official SDK for OpenAI and Google.https://devtake.dev/article/anthropic-acquires-stainless-sdk-toolchain/https://devtake.dev/article/anthropic-acquires-stainless-sdk-toolchain/Anthropic announced May 18 it acquired SDK generator Stainless, reportedly for over $300M. The same toolchain still powers OpenAI's, Google's, and Cloudflare's official clients.Tue, 19 May 2026 09:45:00 GMTaianthropicstainlesssdkmcpclaudeapiagentic-codingdev-toolsdieter-morelliOpenAI's Codex moved into the ChatGPT mobile app. You can approve a diff from the train now.https://devtake.dev/article/openai-codex-chatgpt-mobile/https://devtake.dev/article/openai-codex-chatgpt-mobile/OpenAI shipped Codex remote control inside the ChatGPT app for iPhone, iPad, and Android on May 14. Pair via QR; the agent runs on your laptop, the review moves to your phone.Fri, 15 May 2026 09:45:00 GMTaiopenaicodexchatgptai-agentsagentic-codingdev-toolsai-assistantclaude-codedieter-morelli120 million plugin downloads later, Obsidian moved off GitHub. Paid plugins are now allowed.https://devtake.dev/article/obsidian-plugin-marketplace-future/https://devtake.dev/article/obsidian-plugin-marketplace-future/Obsidian launched Obsidian Community on May 12. The new directory replaces the GitHub plugin queue with automated reviews, and paid plugins are in for the first time.Wed, 13 May 2026 09:30:00 GMTopen-sourceobsidianpluginsopen-sourcenote-takingkepanoautomated-reviewdev-toolspaid-pluginssoren-vanekAirbnb says AI writes 60% of its new code. Nobody has explained what that means.https://devtake.dev/article/airbnb-ai-writes-60-percent-code/https://devtake.dev/article/airbnb-ai-writes-60-percent-code/Brian Chesky dropped the 60% figure on an earnings call without defining how Airbnb measures it. Google claims 75%. The independent average is 27%.Tue, 12 May 2026 10:30:00 GMTaiai-codingairbnbclaude-codeai-agentsdev-toolsgoogleengineeringdieter-morelliTanStack published its npm supply-chain postmortem. The attack chained three GitHub Actions flaws.https://devtake.dev/article/tanstack-npm-supply-chain-postmortem/https://devtake.dev/article/tanstack-npm-supply-chain-postmortem/Attackers compromised 42 TanStack packages through a pull_request_target exploit, cache poisoning, and OIDC token theft. An external researcher caught it in 20 minutes.Tue, 12 May 2026 10:15:00 GMTsecuritysecuritysupply-chainnpmtanstackgithub-actionscredential-theftdev-toolsluca-reinhardtGitLab is cutting staff and killing its CREDIT values. The CEO calls it 'Act 2.'https://devtake.dev/article/gitlab-act-2-workforce-reduction/https://devtake.dev/article/gitlab-act-2-workforce-reduction/CEO Bill Staples announced a restructuring he frames around agentic AI, retiring GitLab's six core values for three new operating principles. Exact layoff numbers come June 2.Tue, 12 May 2026 10:00:00 GMTwebgitlablayoffsrestructuringai-agentsdev-toolsdevopsagentic-codingnaomi-parkJarred Sumner rewrote 960,000 lines of Bun from Zig to Rust in six days. He might throw it all away.https://devtake.dev/article/bun-rust-rewrite-zig-test-compatibility/https://devtake.dev/article/bun-rust-rewrite-zig-test-compatibility/Bun's creator used Claude to port the JavaScript runtime from Zig to Rust, hitting 99.8% test compatibility. He says there's a 'very high chance' it gets scrapped.Sun, 10 May 2026 09:45:00 GMTopen-sourcebunrustzigjavascriptruntimeanthropicopen-sourcedev-toolssoren-vanek380,000 vibe-coded apps are sitting on the open web. 5,000 of them are leaking real data.https://devtake.dev/article/vibe-coded-apps-expose-corporate-data/https://devtake.dev/article/vibe-coded-apps-expose-corporate-data/RedAccess found that AI coding tools like Lovable, Base44, and Replit default to public hosting, leaving medical records, bank internals, and corporate secrets indexed by Google.Sat, 09 May 2026 08:00:00 GMTsecuritysecurityai-securityai-agentsdev-toolssupply-chainprivacycredential-theftluca-reinhardtCloudflare cut 1,100 jobs on its best earnings day. Revenue grew 34% and the stock dropped 18%.https://devtake.dev/article/cloudflare-layoffs-1100-restructuring/https://devtake.dev/article/cloudflare-layoffs-1100-restructuring/Cloudflare laid off 20% of its workforce on May 7 while reporting record Q1 revenue of $639.8M. The stock dropped 18% after hours.Fri, 08 May 2026 09:45:00 GMTwebcloudflarelayoffsai-infrastructureworkers-aidev-toolsrestructuringwebai-agentsnaomi-parkVS Code shipped 'Co-Authored-by Copilot' on every commit by default. Microsoft is reverting it.https://devtake.dev/article/vscode-ai-coauthor-default-pr-310226/https://devtake.dev/article/vscode-ai-coauthor-default-pr-310226/A two-line PR flipped the AI co-author flag from off to all in April. Hand-typed commits started getting Copilot attribution. The maintainer apologized and promised a fix in 1.119.Tue, 05 May 2026 09:15:00 GMTwebgithub-copilotvscodemicrosoftdev-toolsai-coauthorgitjavascriptai-assistantluca-reinhardtGitHub Copilot's Claude Opus multiplier jumps to 27x on June 1. Monthly plans dodge the hike.https://devtake.dev/article/github-copilot-multiplier-hike-june-2026/https://devtake.dev/article/github-copilot-multiplier-hike-june-2026/GitHub's new model multiplier table for Copilot Pro and Pro+ annual plans lands June 1. Opus 4.6 goes 3 to 27. Sonnet 4.6 goes 1 to 9.Mon, 04 May 2026 10:45:00 GMTaigithub-copilotgithubai-agentspricingmicrosoftanthropicclaude-opusdev-toolsdieter-morelliPanic banned generative-AI art and audio from the Playdate Catalog. Code assistance still gets a pass.https://devtake.dev/article/panic-playdate-bans-gen-ai-games/https://devtake.dev/article/panic-playdate-bans-gen-ai-games/The Playdate Catalog will no longer accept titles that use ChatGPT, Stable Diffusion, or Suno output for art, audio, text, or dialog. Existing titles get a label.Sun, 03 May 2026 13:15:00 GMTgamingpanicplaydategenerative-aiindie-gamesai-policyai-disclosurecatalogdev-toolshiro-tanakaAn unofficial Notepad++ port finally landed on Mac. Don Ho didn't write it.https://devtake.dev/article/notepad-plus-plus-mac-port/https://devtake.dev/article/notepad-plus-plus-mac-port/Andrey Letov shipped a native macOS Notepad++ port as a universal binary with the original Scintilla engine and a new Cocoa UI. It's GPL, free, and unaffiliated with Don Ho.Fri, 01 May 2026 10:30:00 GMTopen-sourceopen-sourcenotepad-plus-plusmaccode-editorsscintillacocoagpldev-toolssoren-vanekZed 1.0 ships its agentic editor. The Atom team's Rust rewrite finally has a stable label.https://devtake.dev/article/zed-1-0-rust-editor-launch/https://devtake.dev/article/zed-1-0-rust-editor-launch/Zed Industries shipped 1.0 on April 29 after five years of Rust and GPU work. Free forever for humans, with $10/month hosted AI and an open Agent Client Protocol.Thu, 30 Apr 2026 09:30:00 GMTopen-sourcezedrustdev-toolsagentic-codingopen-sourcecursorcode-editorsai-assistantsoren-vanekMitchell Hashimoto is pulling Ghostty off GitHub. The reason is daily outages.https://devtake.dev/article/ghostty-leaving-github-mitchell-hashimoto/https://devtake.dev/article/ghostty-leaving-github-mitchell-hashimoto/Ghostty's creator has tracked GitHub outages every workday for months. After 18 years on the platform, he's moving the project. A read-only mirror stays.Wed, 29 Apr 2026 09:25:00 GMTopen-sourceghosttygithubopen-sourcedev-toolsmitchell-hashimototerminalhashicorpsoren-vanekWarp's terminal is now open source. The cloud agent platform Oz is the actual product.https://devtake.dev/article/warp-terminal-open-source-agpl/https://devtake.dev/article/warp-terminal-open-source-agpl/Warp released its 36k-star Rust client on GitHub under AGPLv3 on April 28. OpenAI is the founding sponsor and Oz keeps the bills paid.Wed, 29 Apr 2026 09:15:00 GMTopen-sourcewarpopen-sourceopen-source-licensingagplterminalai-agentsopenaidev-toolssoren-vanekWiz found an RCE in GitHub's git-push pipeline. The patch shipped in six hours.https://devtake.dev/article/github-rce-cve-2026-3854-wiz/https://devtake.dev/article/github-rce-cve-2026-3854-wiz/CVE-2026-3854 is a CVSS 8.7 RCE in GitHub's git-push pipeline. github.com fixed it within hours. 88% of Enterprise Server installs were still vulnerable at disclosure.Wed, 29 Apr 2026 09:05:00 GMTsecuritygithubsecuritycve-2026-3854rcesupply-chainwizgithub-actionsdev-toolsluca-reinhardtGitHub Copilot kills premium requests on June 1. Token billing arrives, fallback models do not.https://devtake.dev/article/github-copilot-usage-based-billing/https://devtake.dev/article/github-copilot-usage-based-billing/On June 1 every Copilot plan switches to GitHub AI Credits priced per token. Code completions stay free. Fallback models and credit rollover do not.Tue, 28 Apr 2026 11:00:00 GMTaigithub-copilotgithubai-agentspricingmicrosoftanthropicclaude-opusdev-toolsdieter-morelliGitHub Copilot paused new signups and kicked Opus out of Pro. Here's what actually changed.https://devtake.dev/article/github-copilot-pro-plan-changes/https://devtake.dev/article/github-copilot-pro-plan-changes/GitHub froze Copilot Pro/Pro+/Student signups on April 20 and moved Claude Opus 4.7 behind the $39 Pro+ tier. Agent workflows broke the old math.Wed, 22 Apr 2026 11:30:00 GMTaigithub-copilotanthropicmicrosoftclaude-opusai-agentspricingdev-toolsdieter-morelli