DevHunt Daily

Dev tools & AI news, every day

Every morning we pick the 10-15 stories that matter most to developers from Hacker News, GitHub Trending, Lobsters, AI lab and dev blogs, Product Hunt and DevHunt launches. Each one gets a short summary and links to the tools it is about.

Monday, October 26, 2026

  1. 1
    AIHacker News

    OpenAI and Anthropic slash LLM prices by up to 80%

    OpenAI and Anthropic have reduced the cost of their latest language models dramatically, with cuts of up to 80% on input, output, and cache tokens. The price drops affect models such as GPT‑5.6 Luna, GPT‑6 Sol/Luna, Claude Sonnet 5, and Claude Opus 5.5, making API usage much cheaper for developers.

    minimaxir.com237 pointsDiscussion
  2. 2
    SecurityLobsters

    Indian government websites are serving revoked eMudhra TLS certificates

    A security incident revealed that eMudhra's intermediate CAs had compromised private keys, leading to revocation of thousands of certificates. Many Indian government sites continue to present these revoked certificates, causing browsers that enforce revocation (like Firefox) to block them, while others still load them. Developers handling TLS should be aware of the impact on certificate validation across browsers.

    captnemo.in72 pointsDiscussion
  3. 3
    SecurityLobsters

    POSIX wordexp(3) can execute commands on untrusted input

    The C POSIX function wordexp performs shell-style expansions and enables command substitution by default. Without the WRDE_NOCMD flag, inputs like $(whoami) can run arbitrary commands, and some libc implementations fail to block this. Developers should avoid using wordexp with untrusted data.

    yossarian.net56 pointsDiscussion
  4. 4
    Open sourceGitHub Trending

    VoiceStudio launches as an open-source ElevenLabs alternative for voice cloning and dubbing

    VoiceStudio is an open-source desktop app that provides voice cloning, design, video dubbing, dictation, transcription and audiobook creation in over 600 languages. It runs locally on macOS, Windows and Linux, with optional GPU acceleration and a one‑command installer. Developers can use it without cloud services or integrate via its local API.

    github.com1,592 stars today
  5. 5
    Open sourceGitHub Trending

    Coolify launches as an open-source self‑hostable PaaS alternative to Heroku, Vercel and Netlify

    Coolify is a free, open‑source platform that lets developers deploy static sites, full‑stack apps, databases and over 360 one‑click services on their own servers. It supports deployment from Git providers, custom domains, automatic HTTPS and offers both self‑hosted and managed cloud options, which is relevant for teams seeking control over infrastructure.

    github.com152 stars today
  6. 6
    Open sourceGitHub Trending

    Impeccable adds design guidance commands for AI coding agents

    Impeccable provides a CLI and browser extension that lets AI coding tools apply a set of design rules and 24 commands to improve frontend design. It records product context, runs deterministic checks without API keys, and offers commands for auditing, critiquing, polishing, and more, helping developers produce more consistent UI.

    github.com1,092 stars today
  7. 7
    AIProduct Hunt

    AgentGrid.io launches shared workspace for humans and AI agents

    AgentGrid.io is a new platform that lets people and AI agents collaborate on documents, websites, apps, and designs in real time. It offers live editing, version history, and agent‑agnostic access, targeting developers and product teams that use AI in their workflows.

    producthunt.com
  8. 8
    AIProduct Hunt

    Llama Windows adds local OpenAI‑compatible server to Windows 11

    Llama Windows integrates llama.cpp into the Windows 11 system tray, providing a local AI server that can be accessed via Alt+Space or through an OpenAI‑compatible API at localhost:9931/v1. It lets multiple apps share a single model cache from Hugging Face, eliminating separate downloads and cloud inference.

    producthunt.com
  9. 9
    AIDevHunt launch

    CodeCrab launches local-first AI code reviewer for private code analysis

    CodeCrab is a desktop application that runs AI-powered code reviews entirely on the developer's machine, keeping source code private. It integrates with existing AI CLI tools and uses the user's own API keys, allowing parallel reviews without additional AI service costs. Developers gain faster feedback while maintaining data security.

    17 points
  10. 10
    AIDevHunt launch

    AI-Atlas maps developers' AI skills from public GitHub code

    AI-Atlas analyzes public GitHub repositories to score AI projects across six fields, providing a detailed skill profile and a leaderboard. It offers a markdown badge for GitHub profiles and suggestions for improving project scores. The service is free and runs without executing code, targeting students and developers seeking verifiable AI credentials.

    60 points
  11. 11
    WebHacker News

    F-Zero X decompilation ported to Nintendo 3DS with native 60 fps support

    A post‑mortem details the two‑phase effort that brought the F‑Zero X decompilation to both New and Old 3DS models, adding a native renderer and 64DD Expansion Kit support. The release runs at native 60 fps on New 3DS and comparable performance on Old 3DS, using a single source tree for all builds.

    hypnotize.works91 pointsDiscussion
  12. 12
    EngineeringHacker News

    Observability article argues wide events are simpler than metrics, logs and traces

    A blog post critiques the complexity of OpenTelemetry’s focus on traces, metrics and logs, suggesting that recording generic wide events provides a clearer, more flexible way to observe distributed systems. Developers may consider using event‑based approaches for easier data slicing and analysis.

    isburmistrov.substack.com88 pointsDiscussion

Sunday, October 25, 2026

  1. 1
    SecurityHacker News

    Brotli decoder flaw (CVE-2026-111497) impacts Node, Python, Bun and other HTTP libraries

    A critical out‑of‑bounds write in Brotli versions 1.0.3‑1.2.0 allows remote code execution. The vulnerability affects Node.js, Python packages, Bun and several other runtimes that decode Brotli. Developers should upgrade to patched Brotli versions or disable Brotli decoding until updates are available.

    aikido.dev296 pointsDiscussion
  2. 2
    Dev toolsHacker News

    Roku moves all developer repositories from GitHub to GitLab

    Roku has transferred its developer documentation, sample apps, and SDK tooling repositories from GitHub to GitLab, keeping repository names unchanged. Developers need to update any bookmarked URLs, submodule references, CI pipelines, or AI indexing to the new GitLab paths. The migration aims to centralize Roku's open‑source resources in one location.

    blog.roku.com278 pointsDiscussion
  3. 3
    Open sourceHacker News

    bbtree claims to be the fastest Rust B-tree map implementation

    bbtree is a no‑std, zero‑dependency B‑tree map that the author says is up to five times faster than the standard library's BTreeMap on a single thread and scales to 12× faster than crossbeam‑skiplist on 96 threads, while using less memory. Developers may consider it as a drop‑in replacement for ordered maps in performance‑critical code.

    bbtree.xiangpeng.systems87 pointsDiscussion
  4. 4
    AIHacker News

    Cerebras details how it runs trillion‑parameter models across multiple wafers

    Cerebras explains its method for fitting and executing a 3‑trillion‑parameter model on its WSE‑3T wafer‑scale chips, using layer partitioning, 4‑bit quantization and RDMA token passing. Developers interested in large‑scale AI hardware deployment can see the required wafer count and pipeline approach.

    cerebras.ai82 pointsDiscussion
  5. 5
    AIGitHub Trending

    Google Gemini CLI offers terminal AI access but is being replaced by Antigravity CLI

    The open‑source Gemini CLI lets developers run Gemini models from the command line, with installation via npm, Homebrew, or other package managers. As of June 18 2026 it is superseded for unpaid and Google One users by Antigravity CLI and isn’t optimized for Gemini 4 Argon, so developers should consider switching for the latest model support.

    github.com44 stars today
  6. 6
    AIGitHub Trending

    NVIDIA releases OpenShell 0.1 with sandboxed AI agent runtime

    OpenShell 0.1 adds stable releases, new isolation primitives, and policy APIs for running autonomous AI agents safely. It enforces file, system call, and network policies via kernel sandboxing and formal verification, supporting Linux, macOS, and Windows (WSL). Developers can use Docker, Podman, or Kubernetes to deploy it.

    github.com896 stars today
  7. 7
    CloudGitHub Trending

    Hallmark adds anti‑AI design skill for Claude Code, Cursor and OpenCode

    Hallmark is a design skill that generates web pages while avoiding typical AI‑generated patterns. It supports 48 themes, custom prompts, and can redesign or audit existing pages, useful for developers using AI coding tools.

    github.com455 stars today
  8. 8
    AIGitHub Trending

    Cindy launches as an open-source AI agent that runs locally

    Cindy is a new open-source AI agent that works out of the box on a developer's machine, integrating models like Claude Code and Codex. It can automate tasks across desktop, mobile and browsers, and supports local or cloud‑based operation, which may interest developers looking for customizable AI assistance.

    github.com477 stars today
  9. 9
    Dev toolsGitHub Changelog

    Copilot usage metrics API now includes usage from tools like OpenCode

    The Copilot usage metrics API adds a new totals_by_client field that reports model requests and token usage from external tools such as OpenCode. This lets enterprise and organization owners see how non‑IDE tools consume Copilot, aiding governance and support decisions.

    github.blog
  10. 10
    SecurityVercel

    Vercel Agent uses scoped plans to request permissions for production fixes

    Vercel Agent first investigates a deployment issue with read‑only access, then presents a plan that details required actions and scopes before any changes are made. Developers can review and approve each plan, ensuring the agent only uses permissions the user already possesses.

    vercel.com
  11. 11
    EngineeringLobsters

    Docker is weird: author highlights oddities in container runtime

    The author built a simple container runtime and observed several surprising aspects of Docker, such as containers being just processes, images being simple directories, and the reliance on root privileges. The post also critiques Go’s suitability for low‑level container tasks. Developers may find the insights useful for understanding Docker’s internals.

    codeandcake.dev100 pointsDiscussion
  12. 12
    LanguagesLobsters

    Wild 0.11.0 released with enhanced linker script support and Mac port progress

    Wild 0.11.0 adds default Wasm linking, expanded GNU linker script features, and improved Mac support, allowing Rust linking on macOS. It also introduces performance tweaks, thread limits, and new command‑line options. Developers using Wild as a linker will benefit from broader script capabilities and better cross‑platform builds.

    github.com31 pointsDiscussion
  13. 13
    Dev toolsLobsters

    Emacs adds unified folding interface with kirigami.el

    The author configures Emacs 32.0.50 to use kirigami.el, which consolidates multiple folding engines (Tree‑sitter, Hideshow, Outline, Org) under a single set of keybindings. This provides consistent behavior and performance across programming and markup modes, simplifying navigation for developers.

    jointhefreeworld.org25 pointsDiscussion

Saturday, October 24, 2026

  1. 1
    SecurityHacker News

    OpenSSL 4.1.0 released with DTLS 1.3 support and new optimizations

    OpenSSL 4.1.0 adds DTLS 1.3, GREASE extensions, IKEv2 KDF, and architecture-specific optimizations. It also introduces new build targets for MSVC 2013 and drops several legacy configurations. Developers should note changes to the tsget utility and the removal of no-ecdsa/no-ecdh options.

    github.com182 pointsDiscussion
  2. 2
    SecurityHacker News

    CVE Tracker site reports 394,368 vulnerabilities with monthly and yearly projections

    The CVE Tracker at 0xosprey.com shows over 394,000 recorded vulnerabilities, with 12,688 added in the current month. It provides projections for future CVE counts, useful for developers monitoring security trends.

    cve.0xosprey.com145 pointsDiscussion
  3. 3
    LanguagesHacker News

    UUIDv7 timestamps may drift and break monotonicity guarantees

    The blog explains that RFC‑9562 allows UUIDv7 implementations to modify the embedded timestamp, which can cause timestamps to diverge from actual creation time and even run ahead of the system clock. Python's uuid.uuid7() demonstrates runaway timestamps when the clock is set back, affecting ordering and uniqueness expectations.

    alexsci.com126 pointsDiscussion
  4. 4
    AIGitHub Trending

    Ziwei-doushu releases v4.0 dataset with 674,976 charts and 8.7 million interpretations

    The open‑source Ziwei‑doushu engine published a new v4.0 dataset covering 674,976 Chinese astrology charts from 1950‑2026, providing 8,774,688 interpretation segments (~204 billion characters). The release includes updated algorithms, DST handling, and corrected textual references, useful for developers building astrology tools or data‑driven applications.

    github.com546 stars today
  5. 5
    Dev toolsGitHub Trending

    PHP source repository details build, test, and contribution process

    The php/php-src repository on GitHub contains the PHP interpreter source code, licensing information, and instructions for installing prebuilt binaries or building from source on various platforms. It also outlines testing procedures, extension management, and how to contribute via pull requests.

    github.com716 stars today
  6. 6
    Dev toolsGitHub Trending

    Node.js repository provides runtime details and release schedule

    The Node.js GitHub repository outlines the open-source JavaScript runtime, its governance, release types, download locations, and security verification steps. Developers can use this information to understand versioning, obtain binaries, and verify releases for their projects.

    github.com66 stars today
  7. 7
    SecurityCloudflare

    Cloudflare launches post-quantum GeoKey Manager for regional key protection

    Cloudflare introduced a post‑quantum GeoKey Manager in closed beta, allowing decryption keys to be unwrapped only on servers in specified geographies. The service uses hybrid ML‑KEM‑768 and X25519 encryption to protect keys against harvest‑now, decrypt‑later attacks while supporting data sovereignty requirements.

    blog.cloudflare.com
  8. 8
    WebCloudflare

    Cloudflare adds Origin Range Requests to improve large file caching

    Cloudflare released a self‑service Origin Range Requests feature that automatically coordinates partial fetches, reducing latency and bandwidth waste for large objects. The change removes the need to tune range sizes and works on all plans, benefiting developers serving media, downloads, or package files.

    blog.cloudflare.com
  9. 9
    Dev toolsVercel

    Vercel CLI adds spend management commands

    The Vercel CLI now supports viewing, setting, and removing team spend budgets, including a flag to pause deployments when the budget is reached. It also provides commands to list budget alert history with filtering options. Developers can manage costs directly from the command line.

    vercel.com
  10. 10
    CloudOpenAI

    OpenAI details multi-tenant scaling of Habitat storage with Azure Cosmos DB

    OpenAI explains how its Habitat storage platform was re‑architected for multi‑tenant use on Azure Cosmos DB, achieving faster reads and supporting over 500 PB of data for more than a billion users. Developers may learn from the trade‑offs between single‑ and multi‑tenant designs and the performance optimizations applied.

    openai.com
  11. 11
    SecurityOpenAI

    OpenAI hardens frontier model training environments and adds high‑compute red‑team testing

    OpenAI detailed new security measures for training and evaluating frontier AI models, including offline-only training, layered defenses, and a high‑compute red‑team program that uses powerful models to find and fix vulnerabilities. The changes aim to prevent models from escaping sandboxes or accessing the internet during development.

    openai.com
  12. 12
    AISimon Willison

    Moonshot releases Kimi K3.1 Pro model with pricing and performance details

    Moonshot added the Kimi K3.1 Pro model to its API, offering a standard and a Highspeed version that is 2‑3× faster at double the cost. Pricing is $2 per million input tokens and $10 per million output tokens, matching GPT‑6.1 Sol and half the price of Claude Opus 5.5. Developers can access it via OpenAI‑compatible endpoints such as the llm‑exe tool.

    simonwillison.net
  13. 13
    AIHacker News

    ThinkingCap reduces token usage of Gemma-4-26B-A4B by up to 69% with minimal accuracy loss

    Bottlecap AI released ThinkingCap‑modified Gemma‑4‑26B‑A4B that cuts average thinking tokens by 38.9% (up to 69.1%) while keeping overall accuracy within 0.15 percentage points. The model runs on the same vLLM stack, offering lower inference cost for developers using the original Google model.

    bottlecapai.com113 pointsDiscussion
  14. 14
    AIGitHub Trending

    Claude-Red adds 78 offensive security skill files for Claude AI

    Claude-Red is a library of 78 SKILL.md files that teach Claude AI red‑team techniques, covering web, cloud, AD, and more. Developers can drop these files into Claude’s skill system to get context‑aware guidance for authorized security testing and research.

    github.com226 stars today

Archive

2 more days

Built something developers should hear about? Launch it on DevHunt: the week’s top launches make the news here.