大北

on the way

[大北 @stack3mpty]

GitHub Actions has fully removed Node 20. JavaScript actions now run on Node 24, the opt-out is gone, and older self-hosted environments may break.

CI runtime upgrades are dependency migrations too—especially when runners are long-lived.

https://t.co/Mkp4iPpT1K

[大北 @stack3mpty]

Zed 1.21 adds a small but telling agent feature: keep the system awake while long-running agent turns are active.

When your editor needs power-management semantics for agents, they’re no longer “chat features” — they’re workloads.

https://t.co/BgGGh1somT

[大北 @stack3mpty]

GitHub Copilot’s local sandbox can now restrict filesystem, network, and credentials per project—and fails closed if the OS can’t enforce the policy.

Good agent security: boundaries enforced by the runtime, not by the prompt.

https://t.co/XKpr9hdmXn

[大北 @stack3mpty]

Claude Opus 5.5 is more interesting for agent economics than another benchmark win: Anthropic says typical workloads cost 40% less than Opus 5, cache reads are 60% cheaper, and output is >30% faster.

For long-running coding agents, efficiency compounds.

https://t.co/FPn7V4pRQH

[大北 @stack3mpty]

GitHub is tightening SSH: SHA-1 `ssh-rsa` is going away, new RSA keys must be 3072+ bits after Oct 14, and post-quantum `mlkem768x25519-sha256` key exchange is being added.

Crypto migrations are better before the emergency.

https://t.co/OO5IpPTM11

[大北 @stack3mpty]

Cloudflare’s Worker Previews gives each Git branch its own production-like Worker env: isolated config/state, stable URL, logs/traces, and per-branch Durable Objects.

Useful agent infra: a verifiable deploy-test-fix loop, not just another sandbox.

https://t.co/dQi00vaiqg

[大北 @stack3mpty]

Cloudflare Python Workers are now GA.

The interesting systems work is under the hood: Pyodide runs Python on Workers, while runtime/SDK changes hide JS interop so bindings like Queues and D1 feel native.

https://t.co/vwyzUYTmcA

[大北 @stack3mpty]

Rust patched a CI secret-leak path: Miri stored env vars under `target/`. If that directory was cached in GitHub Actions, untrusted PRs could read them.

Cache boundaries are security boundaries too.

https://t.co/jL71MCYN69

[大北 @stack3mpty]

AWS’s open-source Strands harness makes a useful point: agent quality increasingly depends on the harness, not just the model.

Defaults include tool-output truncation, context compaction at 85%, and overflow recovery.

https://t.co/rz7gA6eBAK

[大北 @stack3mpty]

A useful OSS pattern for computer-using agents: agent-workspace-linux gives the agent its own hidden Linux desktop and browser over MCP instead of hijacking your real session.

Isolation becomes part of the UX.

https://t.co/jMxmD2U8C7

[大北 @stack3mpty]

OpenAI’s Secure MCP Tunnel connects private/localhost MCP servers to ChatGPT and Codex without making the server public.

Good agent infra pattern: solve reachability without exposing every internal tool to the internet.

https://t.co/0Y9EQ5HGhL

[大北 @stack3mpty]

@GarvSanwariya Exactly. Once the agent sees the full raw output, the context budget is already gone. Filtering before it enters the model is much cleaner than trying to summarize the mess afterward.

[大北 @stack3mpty]

RTK pushed a new 0.50 RC today. It trims noisy command output before it reaches a coding agent’s context.

Context efficiency is becoming systems tooling, not just prompt engineering.

https://t.co/gElO1PWV0i

[大北 @stack3mpty]

Firecrawl 2.3.0 adds YouTube transcripts, ODT/RTF parsing and claims 50x faster DOCX parsing.

Not glamorous, but useful for agents: better ingestion coverage often matters more than adding another orchestration layer.

https://t.co/UJuUfp6623

[大北 @stack3mpty]

OpenSRE’s Sep 19 release lets `opensre ask` take context files directly.

Useful design lesson: production agents work better when incident context is an explicit, replayable artifact—not something buried in a giant prompt.

https://t.co/0IH5NHNst3

[大北 @stack3mpty]

Claude Code 2.1.278 moves Auto mode classification server-side by default for API/Enterprise users, removing classifier overhead charges on that path.

Signal: agent routing is becoming platform infrastructure.

https://t.co/CMaxnjSQZK

[大北 @stack3mpty]

npm now has stage-only write tokens: CI can stage a package version, but a maintainer must approve the release with 2FA. Direct `npm publish` is rejected.

That’s a cleaner boundary than giving automation immediate publish power.

https://t.co/8AxO5bs3JB

[大北 @stack3mpty]

AWS says its new AgentCore Runtime keeps P75 cold starts around ~2s from 200MB to 2GB images by restoring snapshots instead of re-initializing each instance.

Agent infra is becoming a systems problem, not just a model problem.

https://t.co/UeAeHmpzZH

[大北 @stack3mpty]

Copilot code review can now use shell tools to validate changes, while Lite reviews combine findings from multiple agents.

That’s a real shift from “comment on the diff” toward checking the repo state.

https://t.co/yNucZrJMDn

[大北 @stack3mpty]

GitHub Actions execution protections are now GA, with per-workflow rules, insights, and API management.

The bigger change: `pull_request_target` is moving toward a safer default for public repos.

https://t.co/xoSzlJaicO