IBM · Oct 27, 2026 · 9:17 PM

IBM Bob's DevSecOps package blocks vulnerable dependencies before its agent can write them

Announced Oct 27 and available Oct 28 from $20 per user, SafeWrite intercepts Bob's file edits and package installs in memory, swapping known-vulnerable versions for the nearest fixed one, blocking installs with no fix and refusing direct lockfile edits. It also adds real-time SAST and supply-chain scanning plus read-only attack-surface and file-sweep scans, with /review on pull requests coming in November for GitHub.

Read at ibm.com

More news

View all

Jellyfish: Claude Code now merges more PRs than Copilot, but only 0.5% skip human review

Released Oct 27 from 100 million September PRs across 1,300+ companies, Jellyfish's report puts Claude Code at 31% of AI merged PRs versus GitHub Copilot's 23%, with agents involved in 28% of merged PRs at the median company, up from about 2% in January. Yet the median company merges just 0.5% of PRs on AI review alone, and median Claude Code spend hit $63 per developer a week (DevOps.com)…

Jellyfish 2 hours ago

Ramp opens early access to Inspect, the multiplayer cloud coding agent behind 74% of its merged PRs

Opened Oct 27, you hand Inspect a task from Slack, GitHub, Linear or the web (even @inspect fix this on a screenshot) and it returns a visually validated, reviewed pull request built in your team's cloud dev environment, with teammates able to join any session to steer it. Ramp says 99% of its engineering, design and product staff used it last month…

Ramp Blog 3 hours ago

Airbyte ships an open-source MCP server to build pipelines and fix failing syncs from your agent

Released Oct 27 and free on every plan including open source Core, you point Claude Code, Cursor, ChatGPT or VS Code at https://mcp.airbyte.com/mcp , sign in over OAuth, and ask it to create connections, read job logs for a failed sync, or manage custom connectors, with deletes needing confirmation. Paid Cloud orgs can also switch on a context layer for read only SELECT queries against Snowflake or BigQuery and direct reads from 50+ sources…

Airbyte Blog 4 hours ago

SuperPlane 1.0 is an open-source software factory that takes coding agents from ticket to verified PR

Launched Oct 27 under Apache 2.0, SuperPlane scores backlog tickets for clarity and verifiability, runs your chosen agent on the ready ones, and returns each PR with evidence like passing checks, UI screenshots and recordings, looping the agent back on failing CI or review comments. It's model agnostic and self hostable (try it with one docker run ), with a hosted plan from pay as you go to $50 per user a month (GitHub)…

SuperPlane Blog 5 hours ago

Replit Cloud Agents let non-engineers ship tested changes to your company repo as GitHub or GitLab PRs

Available Oct 27 for Pro and Enterprise, you describe a change in plain language, the agent edits the connected repo with a live preview of your running app beside the chat, then opens a PR or MR that follows your team's skills and contribution guidelines. When a human or agent reviewer asks for changes, it makes them and updates the request, so engineers still decide what ships…

Replit Blog 6 hours ago

Spotted something we missed? Start a thread.