Source / pnpm
pnpm 12.10 hardens the security of the dependency installation lifecycle
The new release blocks several paths outside the store, strengthens lockfile verification, and improves validation for configuration dependencies.
Technical news
What is happening in technology and what it means for building software.
AI selects and contextualizes news about software engineering, architecture, applied AI, security and web performance.
Permanent archive · 182 news items
Search newsTechnical news
Source / WPE WebKit / Igalia
WPEPlatform simplifies WebKit integration for embedded browsers
The new stable API moves rendering and input management from applications into WebKit and the platform implementation, making migration smaller but not trivial.
Source / Google Research
Google proposes a contextual layer for controlling AI-agent security
A CAPS workshop report identifies three structural difficulties of autonomous agents and proposes combining contextual policies, sandboxing, user controls, and dynamic evaluation
Source / Chrome for Developers
Chrome’s email verification trial enters a critical phase for integrators
Chrome’s October origin-trial update adds Android support, third-party tokens, and cryptographic changes that require verifiers and providers to prepare for migration
Source / GitHub Blog
ReviewBench proposes a more realistic way to measure AI code review
GitHub has published an open benchmark combining real pull requests, human review, static analysis, and production-oriented metrics.
Source / WebdriverIO
WebdriverIO v10 turns agent verification into a reproducible loop
WebdriverIO v10 combines model-assisted exploration, deterministic replay, traces, and WebDriver BiDi to test web, mobile, and desktop applications.