Secret scanning now detects anthropic_service_api_key and anthropic_user_api_key, and push protection blocks commits containing them by default on any repo with secret scanning on, free public repos included. Salesforce also joined as a revocation partner and Cloudsmith API keys are now detected.
A new repository creation:write permission lets an app, agent, or fine grained PAT create repositories without repository administration:write (which also allows delete and transfer), and installation repositories:write lets automation add or remove repos from app installations without a classic PAT. GitHub Apps also gain offline access for refresh tokens, easing a move back to expiring user tokens…
Now in beta, Checks lets coding agents run CI mid session in credential free, egress restricted microVMs from warm dependency snapshots, with failure logs fed back into the agent's context. Each passing run emits a signed attestation that merge gates can verify instead of re running the test suite…
NinjaOne launched Katana AI (early access), an in console agentic technician that summarizes device health and recommends fixes technicians must approve, plus a NinjaOne MCP server so external AI agents can reach NinjaOne data and actions under existing RBAC and OAuth…
Cursor added Gemini 4 Argon with high/medium/low/minimal effort levels; at default medium it scores 52.8% on CursorBench, roughly matching Opus 5.5 Medium. Usage draws from the third party Other Models pool at $2/M input and $10/M output…
Claude Code 2.1.299 adds idle compaction for 200K+ token terminal sessions left idle about 54 minutes before the one hour prompt cache expires, plus CLAUDE CODE DISABLE FILE MENTIONS so @ mentions pass paths for Claude to read instead of file contents. MCP allow rules now reach only the server they name…
Spotted something we missed? Start a thread.