AI-Assisted Software Development
Every finding this slice selected, newest first. Filter by topic, open any card's source, share any page: the URL is the state.
Following opens with early access — sign up for early access to register your interest; it does not switch following on today. Everything you follow will land on one page, in your account menu.
All coverage
Everything Intel has read, newest first. Each title opens at its original publisher.
- Dev Tooling & Infra
VS Code 1.129 ships a dedicated agent host and an editor panel inside the Agents window
The editor most developers use keeps reorganizing itself around agents — worth ten minutes to learn the new agent host before your team asks about it.
- Dev Tooling & Infra✓ verified
Dependabot now waits 3 days by default before proposing dependency updates
A default-on cooldown is a supply-chain defense that reaches every repo using Dependabot — worth knowing whether you keep it or opt out.
- Dev Tooling & Infra
Vercel now redacts Sensitive Environment Variable values from build logs
If you deploy on Vercel, one of the easiest ways to leak a key — echoing it in a build step — is now masked by default.
- Dev Tooling & Infra✓ verified
Meta ships Muse Spark 1.1 — its first coding model with an API
Another credible coding-agent with open API access — more competition and portability for teams picking an AI coding tool.
- Dev Tooling & Infra
VS Code 1.128 ships multi-chat agent sessions, Copilot Vision (GA), and BYOK agent models
The most widely used code editor just made parallel agent sessions and vision-attached chat mainstream defaults — a direct read on where day-to-day developer AI workflows are heading.
- Dev Tooling & Infra✓ verified
JetBrains publishes a 105-task Kotlin benchmark for coding agents
Nearly every public agent benchmark is Python. A language-specific, test-verified suite is the only honest way to know whether a headline score transfers to the stack you actually ship.
- Dev Tooling & Infra
Claude Code: subagents run in background by default + auto-open draft PRs; permission default now "Manual"
If you drive Claude Code day to day, the defaults just changed: parallel subagents run in the background and can push branches + open PRs on their own, and the safer "Manual" permission default means you approve more actions explicitly — re-check any hooks or automation that assumed the old behavior.
- Dev Tooling & Infra✓ verified
Claude Code has been quietly running on Bun's Rust rewrite since mid-June — and almost nobody noticed
The runtime under one of the most-used AI coding tools was swapped out in production across millions of devices without incident — 'boring is good' is what a successful large-scale rewrite looks like.
- Dev Tooling & Infra
Vercel ships Agent Runs into its MCP + CLI
Surfacing agent-run traces through MCP + the CLI is the "agents observable inside your own dev tooling" pattern — directly relevant to AIU agent-orchestration + the observability lens.
- Dev Tooling & Infra✓ verified
GitHub secret scanning adds a Supabase-credential detector that blocks the commit
One of the most common AI-built-app failures is the database key shipped to the browser; free push protection on a public repo catches a class of that at commit time — but know which tier you're on.
- Dev Tooling & Infra✓ verified
Anthropic Claude Security / codebase scanning (Project Glasswing)
Security tooling from the platform AI Uni builds on — relevant to the three-skill security-review discipline and to the Anthropic Security Plugin install this session.
- Dev Tooling & Infra✓ verified
Researcher shows one malicious GitHub issue could hijack repos running Claude Code's GitHub Action
CI/CD-embedded coding agents inherit the write access of the workflow they run in — treat any agent-triggering input (issue titles, PR bodies, comments) from an untrusted user as untrusted, patched or not.
- Dev Tooling & Infra✓ verified
GitHub lets you assign a dependency alert straight to an AI agent to fix
Dependency triage is fatigue-heavy toil an agent can genuinely take off your plate — as long as the merge stays a human decision.
- Dev Tooling & Infra✓ verified
A poisoned npm package quietly rewrote a coding agent's memory — and it reloaded every session
Treat any automatic edit to an agent's memory or instruction files as a reviewable event, not a silent auto-load — a single poisoned dependency can otherwise steer every future run.
- Dev Tooling & Infra✓ verified
Agent observability field: LangSmith vs Braintrust vs Langfuse vs Arize
Informs deterministic-vs-LLM-judge layering. Braintrust's merge-blocking eval-action is a pattern to study — but LLM-judge stays post-hoc, never replacing deterministic CI gates.
- Dev Tooling & Infra✓ verified
'ClawHavoc': 900+ malicious agent 'skills' pushed through a third-party marketplace
Any skill, tool, or config you didn't write deserves the same scrutiny as a code dependency — and 'delete the skill' is not the same as 'undo what it did.'