From Mexico: GitHub made agentic autofix for code scanning alerts GA today. Copilot explores the code, proposes a fix, reruns CodeQL to confirm it, then opens a draft PR. Here’s how it works, what it costs, and where it stops.
From Mexico: Anthropic says its agents now merge over 30,000 changes a day, and git couldn’t keep up. So a seven-person team built Scion, a server-first version control system, in five months. Here’s what changed and what the rest of us can borrow.
From Mexico: LightOn’s ColGrep-Agent-2B runs on your machine and does code search for Claude Code. In their test it cut API tokens by 34% and cost by 40%. The catch: slower answers and an accuracy gap they can’t rule out. Here’s how it works.
From Mexico: Spotify says AI pushed its monthly merged changes from about 8,100 to 17,000, and it didn’t find AI-written code driving its incidents. What did break was verification, which couldn’t keep up with the pace. Here’s what they changed.
From Mexico: ByteDance just merged TraeWork and TraeCode into one TRAE app with two modes, one to run agents across projects and one to edit code by hand. Here’s what changed, and why I think agent apps and IDEs are becoming one tool.
From Mexico: Anthropic’s models found 29,000+ possible bugs in open source, but people could only review about 6,000. Its new OSS Scanner lets maintainers skip that line and get raw AI reports fast. Here’s what that trade really means.
From Mexico: GitHub’s new data says leaked secrets aren’t rising per push. There’s just way more pushing, a lot of it by agents. Here’s what that means for my repos, and the tiny model GitHub put right at the push to catch passwords.
From Mexico: JetBrains Research and Lund University say reviewing what a coding agent wrote isn’t about seeing what changed. It’s about knowing where to look hard. Here’s their three-level review idea and what I’d steal from it today.
From Mexico: GitHub’s Oct 6 engineering post says agent fleets are breaking the old trade-off in its Git storage, so it’s splitting durable storage from compute and coordinating only the ref update. Here’s what the numbers mean for small teams.
From Mexico: GitLab published its Security Standard v1.0 on Oct 6, a five-stage ladder that coding agents climb before they can merge on their own, on the same day Transcend pushed /goal flows that stop waiting for a human.
