DevHunt Daily
Saturday, November 7, 2026
- 1SecurityHacker News
Firecracker microVM escape achieves root code execution on host
Researchers demonstrated a VM escape from Firecracker by modifying saved CPU registers in the host process, allowing arbitrary code execution as root. The attack leverages host memory access from the guest to locate and hijack a vCPU thread, highlighting a critical vulnerability (CVE‑2026‑99999).
- 2Dev toolsHacker News
GitHub unveils new Git storage architecture for high‑scale agent development
GitHub announced a redesigned Git storage system that can handle thousands of writes per second and scale reads on demand. The architecture separates storage from compute and only requires coordination for reference updates, enabling support for many concurrent agents. Developers benefit from faster pushes and reliable scaling as AI‑driven tools increase repository activity.
- 3Dev toolsHacker News
Replit rewrites sandbox engine using microVMs for better isolation
Replit replaced its Docker‑based sandbox with a microVM architecture built on Cloud Hypervisor and KVM. The new engine improves security, portability across clouds, and supports high concurrency for AI agents. Developers benefit from stronger isolation and faster sandbox performance.
- 4Dev toolsGitHub Trending
Zed launches high-performance multiplayer code editor
Zed, a new code editor built by the creators of Atom and Tree-sitter, offers high performance and collaborative editing across macOS, Linux, and Windows. Developers can download it directly or install via package managers, and the project is open source under GPL‑3.0‑or‑later with Apache‑2.0 components.
github.com306 stars today - 5Open sourceHacker News
Unleash releases new commit improving Docker build and DigitalOcean support
The open-source feature flag server Unleash updated its repository with a commit that fixes the DigitalOcean template and adjusts the Dockerfile to build the frontend automatically. Developers using Unleash can now deploy via Docker without manual frontend builds, simplifying setup on DigitalOcean and other platforms.
- 6WebHacker News
Rune UI framework adds OpenCode-inspired tab strip and accessibility support
Rune, a Rust GPU‑rendered UI library, introduced a new tab‑strip component styled after OpenCode and added platform accessibility via AccessKit. The changes improve UI composition and make apps built with Rune more accessible on Windows, macOS, and Linux.
- 7Dev toolsHacker News
Devvm launches per‑project VMs with sandboxed toolchains and coding agents
Devvm creates an isolated VM for each project, automatically configuring toolchains and allowing agents like Claude Code to run inside. It aims to reduce attack surface by keeping code and credentials out of the host machine, with one‑command setup and VS Code remote support.
- 8SecurityLobsters
SourceHut registration bypass fixed after CVE-2026-121728
A logic flaw allowed registration on SourceHut instances that had registration disabled, bypassing CSRF checks by reusing the login token. The issue affected versions 0.56.11 through 0.88.9 and was patched after disclosure. Developers using SourceHut should update to the latest version to close the vulnerability.
- 9AIGitHub Changelog
Copilot impact dashboard now tracks Chat and VS Code Agent usage
The adoption chart in GitHub Copilot's impact dashboard has been updated to include Copilot Chat and the VS Code Agents window, expanding coverage to nine features. The change also renames the “Passive users” cohort to “Chat-first users” for clearer reporting, affecting enterprise and organization 28‑day usage metrics.
github.blog - 10AIVercel
Vercel AI Gateway adds DeepSeek Search and Fetch tools
Vercel AI Gateway now includes DeepSeek Search and DeepSeek Fetch, allowing models to retrieve page titles, URLs, summaries, and full markdown content. The tools work with any model that supports tool calling and are available via the AI SDK. Developers can add them with a single API key and no separate DeepSeek account.
vercel.com - 11AIGitHub Trending
Google releases Agent Skills collection for its cloud services
The google/skills repository provides a set of Agent Skills that automate tasks across Google Cloud and other Google products. Developers can install or update these skills via the npx skills command to streamline cloud authentication, AI/ML workflows, and infrastructure management. The collection targets both project‑level and global usage.
github.com534 stars today - 12Dev toolsGitHub Trending
Microsoft releases Visual Studio Code source on GitHub
The VS Code repository, known as Code - OSS, is open source under MIT and serves as the basis for the Visual Studio Code editor. Microsoft updates it monthly and provides guidance for contributors, including building from source and using Dev Containers or Codespaces.
github.com301 stars today
