René Cotton

CoFondateur & CTO de @WiziShop & @Evolup_Off, Podcasteur, Râleur, PseudoChanteur, Végétarien, Rôliste, MJ, Nissart. #Dev #IA

[René Cotton @_Re_]

Kimi K3.1 Pro sort : 2,8T de paramètres (104B actifs), 1M de contexte, poids ouverts le 4 novembre. 👀

Terminal-Bench 4.0 : 65,7 %

Opus 5.5 est à 66,4 %
GPT-6 Astra à 58,2 %

[René Cotton @_Re_]

@jessyseonoob Autant leur parler directement ! 😅

[René Cotton @_Re_]

📢 Une barrière est tombée : je parle à mes IA au lieu de taper.

Win+H ou le micro de Claude et ChatGPT.
Les réponses restent écrites, pour les survoler et y revenir.

Avant, je structurais tout avant de prompter.
Maintenant je balance en vrac, l’IA remet de l’ordre.

Et toi ?

[René Cotton @_Re_]

@timothe Il ne faut pas confier à un LLM, il faut s'en servir aussi.

[René Cotton @_Re_]

Claude Security re-scanne le code à chaque changement, la semaine où PHP, Gitlab, Nodejs et eMudhra s'enchaînent.

Bon timing… 😏

[Claude @claudeai]

Claude Security now keeps up with your code as it changes.

Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code.

In public beta on Claude Enterprise.

[René Cotton @_Re_]

📊 Approche intéressante de Blade (Shadow) : un prix d'inférence qui fluctue.

Quand il baisse, c'est très intéressant : jusqu'à −87% face au moins cher du marché.
Quand il monte, attention : jusqu'à près de 5 fois plus cher.

J'ai fait deux graphs pour comparer tout ça 👇

[Octave Klaba @olesovhcom]

https://t.co/KGRpaaD60c new service for you !

[René Cotton @_Re_]

@dsampaolo

[René Cotton @_Re_]

Vous avez fait la mise à jour PHP ?

Maintenant il faut faire la mise à jour Gitlab !

[The Hacker News @TheHackersNews]

🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases.

CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers.

Read - https://t.co/frrfCwYlgp

[René Cotton @_Re_]

@jessyseonoob Tu as vu cela où ?

[Grégory Pairin @Greg0ry]

Le moteur de recherche @Ibou_com passe au .com !
Et pour l'occasion, toute notre DA vient de changer.
Vous pouvez découvrir le nouveau design d'Actualités et Découverte.
Le moteur lui-même ? Tic-tac...
Ça ne devrait plus être très long :)

[René Cotton @_Re_]

🤡 36 modèles testés sur l'humour, et c'est Gemini 4 Argon qui gagne.

Je demande à voir une blague… 😏

[Wizishop France @WiziShop_fr]

Changer la bannière de sa boutique depuis le sommet d'une falaise : 1 min 52 au chrono.

Émilie demande à son IA, WiziShop prépare la bannière, elle valide. C'est fait.

[René Cotton @_Re_]

Une petite analogie pour comprendre :

Un LLM autorégressif (Luna ou Haiku) écrit au stylo : un mot après l’autre, sans retour arrière.

Un LLM de diffusion (Mercury) remplit une grille de mots croisés : les cases évidentes d’abord, partout en même temps, puis il comble les trous.

Résultat, ils sont beaucoup plus rapides mais ils doivent déterminer à l'avance la taille de la réponse (la grille de mots croisés) alors que les autorégressifs s'arrêtent quand ils pensent avoir écrit le dernier mot.

[René Cotton @_Re_]

⚡ Mercury 3, un LLM à diffusion :
plus de 1 000 tokens/s

Meilleur que GPT-6 Luna et Haiku 5.5 sur la qualité… 👀

[René Cotton @_Re_]

@Greg0ry @bdm @WiziShop_fr J'allais te le dire 😂

[René Cotton @_Re_]

@bdm @WiziShop_fr Merci Bertrand, je transmet aux équipes !

[René Cotton @_Re_]

@timothe Non pas encore

[René Cotton @_Re_]

📞 WhatsApp Voice sur Hermes : l'agent peut maintenant vous appeler quand il a besoin de votre attention.

Le monde à l'envers… 😅

[Luke The Dev @iamlukethedev]

Hermes merged 55 PRs on October 18

The ones worth knowing:

• /usage in Desktop and the TUI now shows your provider account limits before you send the first message
• Docker sandboxes are tighter: files can no longer carry setuid/setgid bits or file caps back to the host, and files written as root are handed back to your user at teardown
• Plugins can now post to the current conversation and edit that message in place with https://t.co/vJUWQFh3cw_message
• Two new plugin hooks: post_compaction fires on every compaction path, and on_session_delete tells plugins about every session delete and archive
• Plugin slash commands now receive the calling session on every surface
• Clients that fall behind, reconnect or sit waiting now recover from the gateway instead of failing the turn
• Unattended gateways no longer freeze and exit on a shell-hook consent prompt, and recorded consent registers the hook without a restart
• Chat input stays in FIFO order, and session identity plus full history now survive compression, rewind and orphan reaping
• Desktop session lists, resume and Bots groups stay stable across restarts
• Stale dirty worktrees are archived before removal, and idle scratch clones are pruned again (one host had 100 GB held)
• A wave of new catalog plugins, including WhatsApp voice, an Italian Desktop language pack, Hermes Gadget hardware, the Tsubasa model provider and Scalekit

Here is the full list:

DESKTOP IMPROVEMENTS (5 PRs)

• Desktop/TUI /usage shows provider account limits before the first message
• fix(desktop): New Bot's Capabilities tab loads when the name is typed later, and has room to use
• fix(desktop): keep Desktop session lists, resume and Bots groups stable across restarts
• fix(desktop): align main model settings controls
• feat(plugin-catalog): add hermes-lang-it-full, an Italian Desktop language pack

VOICE & REAL-TIME (3 PRs)

• Clients that fall behind, reconnect or wait recover from the gateway instead of failing the turn
• feat(plugin-catalog): add hermes-whatsapp-voice plugin
• plugin-catalog: fish-audio v1.7.7

DEVELOPER TOOLS & PLUGINS (28 PRs)

• Plugins get a post_compaction hook on every compaction path
• feat(plugins): https://t.co/vJUWQFh3cw_message: post to the current conversation and edit in place
• Plugin slash commands receive the calling session on every surface
• Plugins hear about every session delete and archive: on_session_delete hook
• feat(plugins): public names for the skills tool's discovery and lookup helpers
• feat(plugin-catalog): add scalekit
• plugin-catalog: add completion-sound
• catalog: codex-account-switch 1.2.3 (Hermes 0.22 support)
• chore(plugin-catalog): re-pin hermes-windows-ops to a reachable commit
• catalog: update Hermes Fleet Connector to 0.3.0
• feat(plugin-catalog): add edit-ledger
• feat(plugin-catalog): add interim-ledger
• catalog: add hermes-jetstream
• feat(plugin-catalog): add gadget (Hermes Gadget hardware platform)
• feat(catalog): add Tsubasa model-provider plugin
• plugin-catalog: add hermes-seo
• plugin-catalog: add offpeak-bekci (Ollama Cloud off-peak window + approval-gated work queue)
• plugin-catalog: hermes-teammates 1.0.0
• plugin-catalog: bump hermes-vcc-engine to 0.4.1
• Update catalog entry: deepseek-search-fetch 1.0.6 (title, theme-safe banner, one known-issue note)
• plugin-catalog: bump hermes-cron to 1.4.2
• chore(plugins): bump prompt-queue to latest commit
• plugin-catalog: bump hermes-dreaming to 2.9.4 (the holographic provider's secret screen, a fact's origin)
• chore(plugin-catalog): update Magi to v1.7.8
• plugin-catalog: openinvest re-pin to 0b9268b (0.25.0)
• chore(plugins): pin birkin-mnemosyne to core 0.7.2
• docs(plugin-catalog): make Ace media discoverable by service name
• docs(catalog): add Antenna banner image

SECURITY & SECRETS (6 PRs)

• Docker sandbox files can no longer carry setuid/setgid or file caps back to the host, persistent sandboxes included
• Docker sandbox files written as root are handed back to your user at teardown
• fix(secret-scope): the .env memo notices a same-size edit inside one timestamp tick
• fix: profile-registry grants, hosted plugin route auth, and per-session Docker workspaces
• fix(gateway): keep per-session settings and launch secrets that didn't stick
• A gateway registers a shell hook once its consent is recorded, no restart

INTEGRATIONS & CHAT (3 PRs)

• fix(gateway): keep chat input in FIFO order and land Bot Chat deliveries whoever created the chat
• fix(gateway): keep session identity and full history across compression, rewind and orphan reap
• fix(gateway): serve goal-card criteria, subagent kill and steer, agent reactions and the connection card on the shared gateway

STABILITY & FIXES (10 PRs)

• Unattended gateway no longer freezes and exits 75 on a shell-hook consent prompt
• fix(gateway): parked-profile ingress, downgrade relaunch, side-agent drain, idle exit, worker birth, Kanban ACK wait, log lock order
• fix(gateway): a prune is not a permanent tombstone, and retirement is keyed by profile
• fix(gateway): name an elevated gateway from its control pipe instead of OpenProcess
• fix(update): a system-scope dashboard unit without root gets one exact restart command, not a polkit dump
• fix(logging): the profile routing handler never builds a child handler under its own lock
• Archive stale dirty worktrees before removing them, sweep every repo, ask on dirty exit
• Idle scratch clones that share packs with a live repo are pruned again (100 GB held on one host)
• Scratch prune logs one removal hint for root-owned entries instead of re-walking them hourly
• test: the home-I/O guard exempts the PM generation dir around the running venv

55 new features and fixes

https://t.co/NdItIVyrfi

[René Cotton @_Re_]

📩 Ma newsletter IA a un jour de retard cette semaine. Bonne nouvelle : il vous reste donc le temps de vous inscrire avant qu’elle parte.

👉 https://t.co/qmuYSwzCwV

En attendant, voici son illustration. 😉

[René Cotton @_Re_]

Anthropic a donné 30 000 $ de crédits Claude à @miriamgonp pour étudier sa propre tumeur.

Elle cherche maintenant quelqu'un pour fabriquer un vaccin personnalisé et un hôpital pour l'administrer. 😲

[Míriam González @miriamgonp]

Anthropic gave me $30,000 in Claude credits to research my own tumor I wrote what I built since March. I’m looking for someone who can manufacture a personalized vaccine, and a hospital that can give it https://t.co/bkJ1AI4m9g