Devour today's dev news
Curated stories you swipe through in minutes. AI-summarized, free and open source.
Devoured - May 14, 2026
Apple's new AI agents on the App Store and Amazon's AI shopping assistant powered by Alexa signal major shifts in AI integration.
2026, May 14Devoured - May 13, 2026
Modal slashed GPU inference cold starts from 33 minutes to under a minute using CUDA memory snapshotting, DuckDB broke out of its in-process model with the Quack client-server protocol, and Cloudflare traced a QUIC death spiral to a 3-line bug where a TCP idle optimization was measuring from sends instead of ACKs. Meanwhile, Martin Fowler published a case that code's real value is shifting from machine instructions to conceptual models as LLMs commoditize syntax generation.
2026, May 13Devoured - May 12, 2026
84 TanStack npm packages (12M+ weekly downloads) were compromised in a supply-chain attack, requiring developers to check affected versions and update immediately. Meanwhile, Google reported the first known case of criminal hackers using AI to discover and weaponize a zero-day vulnerability, signaling that AI-powered offensive security is no longer theoretical.
2026, May 12Devoured - May 08, 2026
OpenAI's Codex now integrates with Chrome on macOS and Windows, automating browser tasks by writing code, while Meta is developing the Hatch AI agent for social platforms, and GitHub is optimizing its AI workflows to manage rising costs.
2026, May 08Devoured - May 07, 2026
Anthropic doubled Claude Code's rate limits and raised API limits for Opus after securing access to SpaceX's 220,000-GPU Colossus supercomputer, while Redis creator Salvatore Sanfilippo submitted a PR adding Arrays as a new native data type for index-first use cases. Claude also launched managed agents with self-improving capabilities including dreaming, outcomes tracking, and multiagent orchestration.
2026, May 07Devoured - May 06, 2026
OpenAI shipped GPT-5.5 Instant as the new ChatGPT default with better accuracy and fewer hallucinations, while Subquadratic debuted a 12-million-token context window that outperforms GPT-5.5 on retrieval benchmarks. Apple announced that iOS 27 will let users swap in third-party AI models across system features, and Figma's MCP server now lets AI agents read codebases and write editable frames directly on the canvas.
2026, May 06Devoured - May 05, 2026
GPT-5.5 doubled API prices with real cost increases of 49-92% depending on prompt length, Vercel open sourced deepsec for AI-powered security scanning, and research shows that matching AI models to the right tool harness matters as much as model selection itself. Stripe quietly assembled a full stablecoin payments stack through acquisitions and a new blockchain, while Ethereum developers finalized parameters for the Glamsterdam upgrade and Brazil banned stablecoins from regulated cross-border payment rails.
2026, May 05Devoured - May 01, 2026
A critical Linux kernel vulnerability (Copy Fail) lets unprivileged users gain root on every major distribution since 2017 with a 732-byte script, so patch immediately. On the AI tooling front, Anthropic launched Claude Security for automated code vulnerability scanning, Cursor sold to xAI for $60B after model providers undercut its margins, and Cloudflare partnered with Stripe to let AI agents autonomously provision infrastructure and deploy applications.
2026, May 01Devoured - April 30, 2026
Cursor released an SDK that lets developers programmatically deploy coding agents into CI/CD pipelines and products, while Cloudflare and Stripe launched a protocol enabling AI agents to autonomously create accounts, buy domains, and deploy applications without manual setup. On the infrastructure side, Linux 7.0's scheduling change cut PostgreSQL performance in half (fixed by enabling huge pages), and an AI-powered reverse engineering tool discovered a critical GitHub remote code execution vulnerability in under 48 hours.
2026, Apr 30Devoured - April 29, 2026
GitHub Actions has become the primary vector for open source supply chain attacks, with almost every major incident in the past 18 months exploiting features working exactly as designed, while GitHub's own reliability problems (attributed to AI-driven development overwhelming infrastructure) are pushing high-profile projects like Ghostty to leave the platform entirely. Meanwhile, long-running AI agents that persist across sessions are rapidly maturing, with major labs converging on similar architectures for autonomous coding workflows that can sustain hours of work.
2026, Apr 29Devoured - April 28, 2026
Open-weight models from DeepSeek and Xiaomi are rapidly closing the gap with US frontier labs at a fraction of the cost, with DeepSeek cutting V4-Pro prices 75% and Xiaomi open-sourcing a 1T-parameter model competitive with Claude Opus, while OpenAI's revised Microsoft deal opens its models to all cloud providers. GPU spot prices surged 114% in six weeks, and OpenAI released Symphony to orchestrate fleets of coding agents from issue trackers.
2026, Apr 28Devoured - April 27, 2026
Google is investing up to $40B in Anthropic while coding agents drive unprecedented compute demand, with Cursor exploring a $60B SpaceX deal to solve negative margins from AI model costs. On the practical side, Anthropic shipped Memory for Claude Managed Agents and is testing Bugcrawl for codebase bug detection, Spotify's Honk agent automated 1,800 pipeline migrations saving 10 engineering weeks, and Airflow 2 reached end of life with no more security patches.
2026, Apr 27Devoured - April 24, 2026
OpenAI released GPT-5.5 with stronger coding and agentic capabilities, DeepSeek launched V4 models at a fraction of US lab pricing, and Anthropic published a detailed postmortem on three bugs that degraded Claude Code quality between March and April. Kubernetes v1.36 shipped with 70 enhancements including GA user namespaces and volume group snapshots, browsers now support sizes=auto to eliminate manual responsive image calculations, and a critical SSRF in the LMDeploy inference toolkit was weaponized just 12 hours after disclosure.
2026, Apr 24Devoured - April 23, 2026
Microsoft is moving all GitHub Copilot subscribers to token-based billing in June, while Anthropic detailed production patterns for MCP-based agents surpassing 300M SDK downloads monthly. On the model side, Qwen3.6-27B delivers flagship-level coding performance in a 16.8GB quantized package, and a critical Firefox vulnerability linking Tor identities via IndexedDB ordering has been patched in Firefox 150.
2026, Apr 23Devoured - April 22, 2026
TypeScript 7.0 Beta landed with a full Go rewrite delivering 10x faster performance, while Anthropic's Mythos AI found 271 security vulnerabilities in Firefox 150 before release, matching elite human researchers and signaling that AI-powered code auditing is now production-ready for critical software.
2026, Apr 22Devoured - April 21, 2026
GitHub Copilot is pausing new signups and shifting to token-based billing as costs double, while new open-source models like Kimi K2.6 and Qwen3.6-Max claim to surpass GPT-5.4 and Claude Opus 4.6 on coding benchmarks. Meanwhile, a $292M DeFi bridge exploit triggered $13B in withdrawals, and Cloudflare reported that building its AI engineering stack on its own platform nearly doubled weekly merge requests to over 10,000.
2026, Apr 21