Feed

GitHub Copilot app for Beginners: How to build custom workflows with canvases

Describe the interface you need in plain English, then let the agent build a live surface you can both use and update—so you spend less time adapting to tools and more time getting work done. The post GitHub Copilot app for Beginners: How to build custom workflows with canvases appeared first on The GitHub Blog .

Announcing Kong Operator 2.3

We have full Kubernetes CRD support for Kong AI Gateway. You can now declare an entire AI Gateway deployment; control plane, providers, models, policies, authentication, and consumers as Kubernetes resources, and manage it with the same GitOps workflows…

From API Keys to Access Control: Rethinking Secrets Management

For as long as software has called APIs, we’ve solved the same problem the same way. The code needs a secret (a... The post From API Keys to Access Control: Rethinking Secrets Management appeared first on Postman Blog .

Putting business analysis in everyone’s hands

Today, we’re announcing that Replit has acquired Atta, bringing its approach to business analysis and high-quality, purpose-built charting into Replit. Our mission is to make useful intelligence accessible to everyone. For businesses, that means giving the people closest to a problem the ability to investigate it, explain what they find, and act on their expertise. Product leaders understand…

Improving site performance by shipping more CSS

How we fully migrated github.com away from CSS-in-JS. The post Improving site performance by shipping more CSS appeared first on The GitHub Blog .

Push images to Vercel Container Registry from GitHub Actions

State of agent skills

How to handle real-time interruptions in your AI voice agent

Callers interrupt agents and call from noisy rooms. That's real life. Here's how to tune barge-in, turn detection, and context so your AI voice agent keeps up.

Vercel Sandbox now supports memory observability

The #1 AI behavior hurting your customers’ experiences

40% of businesses say that lost context between channels is the AI behavior hurting their brand the most. Here's why it breaks (and how to fix it).

How to Build an RCS Business Messaging Campaign with Twilio in C#

How to Build an RCS Business Messaging Campaign with Twilio in C#

What is AI agent orchestration? How it works in 2026

AI agent orchestration coordinates multiple AI agents across a workflow. Learn how routing, shared memory, and human handoff work in 2026.

Pixel Canary is now available in stealth for free on AI Gateway

When chat is the wrong UI

What is a developer to do when they need something more tangible than a chat box? Enter canvases. The post When chat is the wrong UI appeared first on The GitHub Blog .

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework. The post AI-powered fuzzing with the GitHub Security Lab Taskflow Agent appeared first on The GitHub Blog .

AI Token Cost Management: Why AI Spend Gets Out of Control (and How To Fix It)

This post is based on Kong's webinar on token cost management. Watch it below, or keep reading for the breakdown. Token cost management is how a business tracks, controls, and governs what it spends on AI model usage, the same way it already tracks…

What Passport Found in 3 Weeks of AI Agent Traffic

I ran Postman Passport over an AI harness build for three weeks. It caught 33 credential-bearing requests to 18 hosts. Here's what static scanning missed. The post What Passport Found in 3 Weeks of AI Agent Traffic appeared first on Postman Blog .

Best test management tools for Jira

Test libraries that once felt instant can become harder to manage as they grow: test cases take longer to open, reports take longer to build, and every sprint adds more data to an already bloated Jira environment. That’s usually the moment when a testing leader starts evaluating whether the test management tool installed years ago

Kong Introduces the Portal MCP Server for Developer Portal

Your developer portal was built for a developer scanning docs in a browser: reading a page, copying a curl command, moving on. Increasingly, the thing reading those docs isn't a person. It's an agent, working through an API integration on someone's…

I gave Jev a paddle. Can you beat it?

Play JevPong and beat TypeSafe's decision-making AI at Pong while watching every choice it makes. See how Postman Fabric Gateway routes the calls. Play now. The post I gave Jev a paddle. Can you beat it? appeared first on Postman Blog .

Continuing to Move PHP Open Source Forward

A year ago, we introduced the first wave of PhpStorm’s open-source sponsorships. We truly believe in the power of open source and the importance of it to the PHP community, and so we want to do our bit, too. Each year, we pick five open-source projects to sponsor for a whole year. Our goal is […]

Designing the Kotlin Multiplatform and TeamCity Integration

In this post, I’ll share how we designed and built the new TeamCity integration for Kotlin Multiplatform. Our guided onboarding helps KMP developers building for iOS go from their first Git push to a tested build, a TestFlight release, and a fully automated pipeline, all within their IDE. Making iOS publishing approachable Publishing an iOS […]

The Vercel Bug Bounty Program is now publicly available

Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface

A growing vulnerability backlog is more than technical debt: it is an attack surface. Learn why outdated risk assumptions, automated attackers, and chained findings demand a new approach.

Measuring the back/forward cache with Application Metrics

A bfcache hit leaves no trace in ordinary metrics. Here's how Sentry's bfcacheMetricsIntegration makes back/forward cache health measurable.

How to Test and Fix Voice AI Agent Prompts with Twilio Conversation Relay and Cekura

Build and test an AI voice agent using Twilio Conversation Relay and Cekura. Write metrics, run evaluations, and fix prompt bugs.

New project activity feed

As part of our ongoing work to simplify the Netlify dashboard, we’ve added an activity feed to the project overview page. It’s available on all plans and adapts to how your project is set up. Now when you open a project, the activity feed gives you a snapshot of your project's latest updates, with quick access to: Production versions of your project, including the version last published Preview…

Rendering huge pull requests in the GitHub Copilot app

How we rebuilt the diff surface in the GitHub Copilot app to open a million-line pull request with hundreds of inline review comments. The post Rendering huge pull requests in the GitHub Copilot app appeared first on The GitHub Blog .

Insomnia 13.2 and 13.3: Easier than Ever

There are two key concepts when a developer works with an API. Previously, Insomnia made you work with both Documents and Collections, and it wasn’t always clear why there was a difference. In 13.3, we’ve replaced both with API Collections. Now the spec…

Small Talk With Prasun Kumar, CEO and Founder of Oppex AI

What is Small Talk? Small Talk is our short Q&A with founders from the JetBrains Startup Program. They answer a handful of questions in their own words about what they’re building, why they started, and what they’ve figured out along the way. No pitch, no polish – just a two-minute read to meet the person […]

Autonomous doesn’t mean unsupervised: Trusting agentic QA without losing oversight

AI agents review code, triage incidents, summarize tickets, and draft documentation, and the industry has largely decided the help is worth having. Leadership is often pushing teams for AI productivity gains and many teams accept the mandate. The obstacle is what happens next: the agent works on the wrong thing, the time and money spent

100 Exercises to Learn Rust, Updated

100 Exercises to Learn Rust is our adaptation of Mainmatter’s course of the same name, written by Luca Palmieri, Principal Engineering Consultant at Mainmatter, and it has just received its biggest update since we released it a year ago. Palmieri has been writing Rust since 2018, first at TrueLayer and then at AWS, and he […]

Introducing the Context Graph API: One Map of Your API Ecosystem

The Context Graph API gives your agent a machine-readable map of your API ecosystem, so it knows what a change breaks before it writes the code. The post Introducing the Context Graph API: One Map of Your API Ecosystem appeared first on Postman Blog .

Code Quality Q&A With the JetBrains Qodana Team

Code quality is shaped by countless decisions, from how developers manage complexity to how quickly they detect regressions. But common concepts such as technical debt, cognitive complexity and unit testing are not always clearly understood. In a new code quality Q&A session, we asked members of the Qodana team to answer some frequently searched questions […]

Kong is Great Place To Work Certified™ in the US

Great Place To Work runs a survey called the Trust Index™. It includes 60 statements and two open-ended questions, answered directly by employees. The survey measures five things: credibility and honesty from leadership, respect, fairness, pride in the…

So I asked my agent instead…

Ask your Evo tenant about models, MCP servers, and skills across your AI estate, from the client you already work in.

GPT-6 Sol and GPT-6 Luna now available in AI Gateway and Agent Runners

OpenAI’s GPT-6 Sol and GPT-6 Luna models are now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. AI Gateway handles everything automatically. Here’s an example using GPT-6 Sol with the Responses API: import OpenAI from 'openai'; export default async () => {…

Security Update: Critical Next.js vulnerability in ImageResponse

The Next.js team has disclosed a critical severity vulnerability in an upstream dependency that can lead to remote code execution when ImageResponse renders untrusted input. It is patched in 15.5.26 and 16.3.6. Applications that do not pass untrusted input into ImageResponse are not expected to be affected. Here’s what Netlify customers need to know. Vulnerabilities GHSA-vcvr-r3jv-pc5j /…

Claude Opus 5.5 now available in AI Gateway and Agent Runners

Anthropic’s Claude Opus 5.5 model is now available through Netlify’s AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. AI Gateway handles everything automatically. Here’s an example using Claude Opus 5.5: import Anthropic from '@anthropic-ai/sdk'; export default async () => { const…

Building Sentry's Laravel AI Integration

How we built zero-config Agent Tracing for Laravel AI, from AI code review to matching LLM calls with HTTP requests.

The autonomous codebase

What's left for us to build?

SDK vs CLI vs MCP, a dev story

SDK, CLI, or MCP server for your agent? I measured the token cost and auth tradeoffs of all three against one real API. See which to pick. The post SDK vs CLI vs MCP, a dev story appeared first on Postman Blog .

TypeSafe Jev now available in AI Gateway

TypeSafe’s Jev model is now available through Netlify’s AI Gateway with zero configuration required. Install @typesafe-ai/sdk and use it directly in your Netlify Functions — no API keys to create, no provider config, no base URLs to wire up. AI Gateway handles credentials automatically, and usage is billed to your Netlify credits like every other model in the gateway. Jev is TypeSafe’s first…

Coding agents usually can't price on outcomes. Ours can.

Agentic Batch Changes is now available, and we price it on outcomes: you only pay for changesets that merge.

The AI Hurricane Is Here

AI is accelerating software creation and cyberattacks alike. Leaders must secure agents and code at inception, enforce controls at runtime, and validate defenses independently.

Introducing Agentic Batch Changes: the frontier agent for code change at scale

Codebase-wide changes across hundreds or thousands of repositories can now be run by one engineer.

Debugging our AI search assistant with agent tracing

See how Sentry engineers used AI Conversations to debug a natural language search assistant and fix a tricky query generation bug.

Replit | Databricks Integration is Now Generally Available with Native Lakebase Support

The Replit | Databricks integration gives enterprise teams a faster path to utilizing governed data for production-ready applications. Today, we’re excited to announce the integration is generally available alongside a new capability: native Databricks Lakebase support. This builds on the foundation introduced from our public preview announcement this past June. The result is one seamless path…

Is prevention essentially a solved problem?

Prevention in agent-generated code is architecturally solved—but choosing controls that protect security without slowing development remains the challenge.

Best test management tools for enterprises

Enterprise testing tools often fail at the same point: the testing setup that worked for one team starts straining under ten teams, multiple pipelines, and an audit request tied to the same release. The core question becomes where testing should live as complexity grows. For some organizations, testing belongs inside Jira, where developers, product, and

Supabase is now available in Gemini Enterprise

Connect Supabase to Gemini Enterprise and query your Supabase projects with natural language, right inside the platform.

Testing at AI speed: We built a drift detection capability, then used it on ourselves

Our development outpaced our ability to test it, as generative AI sped up how quickly we could ship code. Releases were shipping faster than our existing test suite could keep it honest. So, we looked in-house first. That’s how we landed on the drift detection capability inside SmartBear Swagger Contract Testing, and once we saw

Introducing coverage gap detection: How the Zephyr Agent for Rovo ends duplicate test cases

AI has changed how fast testing teams can move, yet sorting through duplicate test cases still trips teams up. Ask the SmartBear Zephyr Agent for Rovo to generate test cases for a requirement, and coverage that used to take an afternoon comes back in a single conversation. That speed is a genuine win for teams building faster than ever, but as AI generates more test coverage,

Application Metrics caught my broken size estimator

The numbers your app lives on don't belong in logs or on sampled spans. Here's how a browser video converter's KPIs made the case for Application Metrics.

Enterprise-managed auth for the Supabase MCP server

Enterprise IT admins can now manage access to Supabase in Claude centrally through Okta, scoped to each person's existing permissions.

From one switch to a control panel: meet `dataCollection`

Sentry SDKs replace the `sendDefaultPii` boolean with `dataCollection`, granular options for user data, headers, bodies, GenAI data, and more.

A smarter way to run code migrations with less LLM context

Deep Search runs scripts in a sandbox around Sourcegraph search APIs, so a migration audit returns a CSV checklist instead of thousands of files worth of tokens.

Why Your AI Application Is Exposed (Even When Your Scans Come Back Clean)

AI applications can pass security scans yet remain exploitable through chained attacks across models, tools, data, and business workflows. Learn how DAST, AI pentesting, and red teaming work together to expose end-to-end risk.

Connect client traces to your logs

supabase-js now propagates W3C Trace Context to Supabase, so a client trace and the matching Supabase log share one trace_id.

Supabase is now a connector on Perplexity Computer

Supabase is now a connector on Perplexity Computer. Query your Postgres data, look up users, and invoke Edge Functions from a Perplexity chat.

Postgres Changes gets AND filters, new operators, and column selection

Postgres Changes subscriptions can now combine filters with AND, match on more operators, and select only the columns you need in the payload.

How to evaluate Sourcegraph on your own codebase

Better code retrieval does not automatically mean better task completion. Here is how to measure retrieval, agent performance, and cost without confusing one for another.

Replit Pro Is Here — and Core Now Offers Even Better Value

We’ve heard from builders that it hasn’t always been obvious which plan is right for them. The truth is, we’re seeing more distinct kinds of builders on Replit than ever before — from people just getting started, to teams shipping serious production projects. That’s why we’re making our plans clearer and more purpose-built. Replit Pro is our most powerful plan yet, built for serious builders who…