Devtools
5 articles
-
EngineeringCopilot Closes Its Own Review Comments. Your Merge Rule Passes.
GitHub's Copilot code review now resolves its own comments when a later commit addresses them, ten days after it gained the ability to approve pull requests. The require-conversation-resolution rule only counts open threads, so on Copilot's comments a clean list no longer means a person decided anything. Audit how threads close, keep Copilot approvals to narrow path globs, and pick a review effort level before the default moves to Balanced on 28 September.
-
SecurityTwo Labs Distilling Claude Were Also Serving It
Anthropic's September threat report names seven China-based labs distilling Claude at industrial scale, 151 million exchanges in the largest campaign. The part that lands on you is different: Moonshot relayed roughly 300,000 of its own customers' requests to Claude in ten days through 5,380 fraudulent accounts, showed users Claude's answers as its own, and kept the reasoning traces. DeepSeek did the same. The model behind an endpoint is an assumption, not a contract term.
-
EngineeringSWE-2 Scores 92.8 or 27.3, Depending on the Version
Cognition's SWE-2 scores 92.8% on Terminal-Bench 2.1 and 27.3% on Terminal-Bench 4. Same model, same benchmark, two versions. Version 4.0 dropped the saturated tasks and the ones with public solutions, then recalibrated the compute and time budget, which makes a score a function of the model, the task-set version, the harness and the resource allowance. Vendors publish the first one.
-
EngineeringNvidia Bought Hugging Face. Your Pipeline Pins a Branch.
Nvidia's $12.93 billion acquisition of Hugging Face closed as a definitive agreement on 3 September. Take the neutrality pledge at face value and the real exposure is unchanged: from_pretrained resolves a mutable branch name at call time, tags move too, and only the full commit hash is a pin.
-
AgentsAnthropic's Agent Lockfile Has a Rename Problem
Anthropic's ant CLI 1.30.0 adds ant apply, which reconciles agents, environments, skills, memory stores and scheduled deployments from files in your repo and writes a claude-lock.json keyed on file paths. Rename a file and you declare a second agent, delete one and the resource keeps running, and nothing you built in the Console can be adopted.