Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-09-07 · source-backed
Merged as #2225, this closes the path-traversal class where a crafted .gitmodules writes outside the repository (GitHub). If you have an agent cloning untrusted repos to read them, and plenty of us do, this is directly on your path. The same release keeps worktrees created from a bare repository non-bare and fixes backslash line continuations truncating multi-line git config values.
Each link below shares sources, entities, or timing with this story.
A DeepSeek Harness plugin for booting simulators, building, and driving the UI by accessibility identity, OCR text, or list rows, against both simulator and physical device over USB. Created August 19, 152 stars. GitHub It renders a streaming sidebar panel the developer can ta...
Rust, created May 14, at 2,643 stars (GitHub). Every run produces checkpoints linking a commit to the session that made it, including prompts, tool calls and reasoning. It runs Claude Code, Codex, its own agent and anything from the ACP registry side by side against one codeba...
A Rust and SQLite coordination protocol sitting above Git for multiple agents on the same repo, aiming to surface conflicting intent before conflicting code exists (GitHub). 87 stars, created August 21, actively pushed. Effectively single-source and too young to evaluate, but...
440 stars, created August 11, covering 12 sections from model APIs through structured output, RAG, evals, agent loops, LoRA versus fine-tuning, security, LLMOps and serving, plus three case studies and a capstone (GitHub). The stance is that you write the agent loop, RAG and e...
Apache-2.0, rootless, single static binary, no daemon, claiming about 3.5ms container start against Docker's roughly 297ms and zero resident memory when idle (GitHub). It reads OCI images and docker-compose files but deliberately skips Docker's API, overlay networks and Swarm,...
It ranks products against a buyer's brief and structurally excludes affiliate and sponsorship data from ranking inputs, keeping labeled sponsored offers below every organic result. Checkout requires a separate signed, single-use mandate binding the exact offer, quantity and sp...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.