Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-08-31 · source-backed
PR #2205 adds the Z private label on bind mounts referenced by RUN in the fetch, git and time Dockerfiles. Without it SELinux blocks access to the bind-mounted pyproject.toml and uv.lock and the build fails outright. Fifteen lines, citing Red Hat's labeling guidance and the OWASP Docker cheat sheet, and it unblocks an entire platform.
Each link below shares sources, entities, or timing with this story.
Block released it August 27 with a security section dominated by defaults that previously failed open: fail closed on malformed tool visibility, permission denies now take precedence, fail closed on invalid default GCP credentials and invalid Codex ACP mode, honor plugin enabl...
3,364 stars since its August 17 creation. Every action against a computer, file, MCP server or UI component routes through a single gateway that resolves the target, decides it against policy, writes an audit row, then acts or refuses while naming the rule. Each bot gets its o...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
Triple-stream retrieval (BM25 keyword, vector embeddings, knowledge-graph traversal) fused via Reciprocal Rank Fusion on the iii engine, with SQLite for state and an in-memory vector index, no external database. The economic claim: ~170K tokens/year (~$10) versus ~650K tokens...
There's been a fundamental gap in AI coding workflows that's been driving me crazy: your agent writes React components, generates CSS, builds entire UIs, but can't see the result. It's coding blind. The Chrome DevTools MCP server from Google's ChromeDevTools team fixes this, a...
A GitHub repo cataloging Claude Code tips doesn't normally warrant a top story. But shanraisshan/claude-code-best-practice at 53.4K stars isn't a tips list anymore. It's the de facto reference for how an entire generation of developers is learning to work with AI coding agents...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.