DevHunt Daily
Sunday, November 8, 2026
- 1SecurityHacker News
Claude Code can store secrets in .claude/settings.local.json and expose them on GitHub
Research shows Claude Code saves commands containing secrets to a local settings file when users select “don’t ask again.” The file is often committed to public repositories, exposing thousands of passwords and keys. Developers should audit their repos for these files and rotate any leaked credentials.
- 2Dev toolsHacker News
GitHub launches public preview of new pull request overview page
GitHub introduced an Overview page for pull requests in public preview, placing merge status, checks, comments and next actions at the top. The redesign aims to reduce scrolling and help developers quickly see what blocks a PR and what steps to take next.
- 3AIVercel
Vercel AI Gateway adds DeepSeek V4.1 Flash 1017 Ultrafast model
Vercel’s AI Gateway now offers the DeepSeek V4.1 Flash 1017 Ultrafast model, capable of generating over 1,000 tokens per second and supporting a 1 M‑token context window. Developers can access it via the AI SDK or supported agents without wait‑rooms or session limits, useful for fast interactive coding and agentic workflows.
vercel.com - 4AIGitHub Changelog
GitHub Copilot code review now configurable via REST and GraphQL APIs
Developers can manage Copilot code review settings through the REST and GraphQL APIs, from enterprise policies to individual repositories. The review overview comment has been made more compact, and new attribution fields expose review sources and effort. These changes affect Copilot Pro, Pro+, Max, Business, and Enterprise plans.
github.blog - 5Coding agentsGitHub Trending
Vercel Labs releases agent-browser CLI for AI-driven browser automation
agent-browser is a Rust‑based command‑line tool that lets AI agents control a browser step‑by‑step, using snapshots and element references. It supports Chrome, alternative engines, and cloud browsers, making it useful for developers building AI agents that need web interaction.
github.com190 stars today - 6AIGitHub Trending
Anthropic releases open-source repository of Claude Agent Skills
Anthropic has published a public GitHub repo containing example skills for Claude, showing how to extend the model with custom instructions, scripts, and resources. Developers can browse, copy, or adapt these skills for tasks like document handling, testing, or creative work, and install them via Claude Code, Claude.ai, or the API.
github.com390 stars today - 7Dev toolsGitHub Trending
Ruff provides a fast Python linter and formatter written in Rust
Ruff is a Python linting and formatting tool built in Rust, claiming 10‑100× speed improvements over tools like Flake8 and Black. It can replace multiple Python code quality tools and is used by projects such as FastAPI and Pandas, offering pip installation and pyproject.toml support.
github.com350 stars today - 8SecurityLobsters
Alpine Linux patches OpenSSH password authentication bypass
Alpine Linux advises users of the openssh-server package to upgrade OpenSSH and restart the sshd daemon, or disable password authentication, to close a vulnerability that allows login without a password. The issue affects Alpine releases 3.16‑3.24 and edge when password authentication is enabled.
- 9SecurityLobsters
OpenBSD top adds -Q flag to display chroot, pledge and unveil status
The top(1) utility in OpenBSD now includes a -Q option that shows whether each process is using chroot, pledge, or unveil. This makes it easier for developers and administrators to audit privilege usage directly from top, without relying on less convenient commands.
- 10LanguagesLobsters
Go testing pattern introduces generic MustCreate helper
A Go developer proposes a generic MustCreate test helper to simplify creating values that can error, reducing repetitive error checks in tests. The pattern works with Go 1.18 generics and can be extended for multi-parameter constructors, helping keep test code concise.
- 11AIDevHunt launch
Skilder bundles agent skills, MCP tools and apps into unified plugins
Skilder packages Agent Skills, MCP tools, and MCP apps as versioned plugins served from a single endpoint. The plugins run server‑side, keeping keys off local machines, with logging and guardrails, and can be used by Claude Code, Cursor, Codex, Copilot or any MCP client.
18 points - 12AIDevHunt launch
apilabs.ai launches SuperContracts to add API context for Claude Code
apilabs.ai introduced SuperContracts, an open-source YAML-based contract layer that helps Claude Code understand API workflows, dependencies, and execution context. Developers can define multi-step processes, validate responses, and set guardrails using reusable contracts, enabling more reliable AI-generated code. The project includes a demo video and a GitHub repository.
14 points - 13Dev toolsProduct Hunt
LiveReview launches free AI-powered code review that auto-approves low‑risk PRs
LiveReview, a free and self‑hostable tool, scores pull requests for risk and automatically approves the lowest‑risk 30‑50% of changes. Riskier changes are routed to engineers, aiming to reduce incidents, rollbacks and senior reviewer workload.
producthunt.com - 14AIProduct Hunt
ChatGPT Images 2.6 adds faster generation, editing and GIF creation
OpenAI released Images 2.6 for ChatGPT, Codex and the API. It speeds up image generation, supports targeted edits, SVG export and native animated GIF output. Developers can use the new API models to integrate faster or higher‑quality visual content into their apps.
producthunt.com - 15AIProduct Hunt
Google launches Gemini Omni 1.2 Flash video model with longer clips and lower cost
Google DeepMind released Gemini Omni 1.2 Flash, a video generation model that creates up to 15‑second clips at $0.07 per second for 720p, 30% cheaper than the prior version. It adds multi‑turn editing, better lip‑sync, and upscale options, useful for developers building ads or product videos via the Gemini API or Google AI Studio.
producthunt.com
