Loading…
Browse by type
Announcement reads
Announcement posts on Yomu, summarised newest first.
- 1,477 posts
- 20 companies
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
Announcement posts
Introducing cf: the agentic CLI for the entire Cloudflare API
Cloudflare introduced cf, a new CLI that provides access to the entire Cloudflare API surface of over 3,000 operations, far exceeding Wrangler’s roughly 280 commands. Cf is designed primarily for AI coding agents, which account for nearly half of Wrangler usage, and defaults to JSON output with condensed formatting to minimize token consumption. The CLI includes a natural language search command, cf cli search, that helps agents discover the right operation without bloating context, and uses TypeScript-based configuration via cloudflare.config.ts for type safety. Cf is generated by Forge, Cloudflare’s internal pipeline that produces CLI commands from OpenAPI schema annotations, enabling consistent and comprehensive API coverage. The open beta is available globally via npm, and cf adopts Vite as its default local development server, with a migration path from Wrangler and maintenance support for 18 months after beta ends.
How fast is the web? Explore billions of real-user measurements with BEACON
Cloudflare has released the BEACON dataset, an anonymized collection of billions of real-user performance measurements from 10,000 of the largest websites. The dataset reports Core Web Vitals (LCP, CLS, INP) with full histograms, enabling analysis of any percentile including the long tail. It reveals that WebKit browsers underperform Blink in 46 countries, and that resource-discovery and render-blocking contribute more to slow LCP than download time. Soft navigations in single-page applications load two to three times faster than hard navigations, but landing pages remain heavy. The dataset is publicly available on Google BigQuery and includes differential privacy via the RAPPOR algorithm to protect individual user data.
Air Teams: Bring Your Best Agentic Workflows to the Whole Team – and Automate Repeatable Work
JetBrains introduced Air Teams, a shared workspace for agentic development that extends beyond individual developers to teams and organizations. The system comprises four components: Automations for recurring tasks triggered by events or schedules, shared cloud environments with preconfigured tools and credentials, cloud tasks that run in parallel without tying up local machines, and team projects that centralize members, environments, and credits. Automations include templates for code review, bug fixes, and dependency updates, and they run under a project’s service account so they persist after a creator leaves. Shared environments are defined in a repository’s .air/cloud/startup.sh script and can be snapshotted for reuse, with secrets shared without exposing values. Air Teams is available to business customers, with plans to expand to individual customers later.
Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more
Cloudflare introduced Forge, an open source, pluggable generation pipeline for producing SDKs, CLIs, documentation, and other API surfaces from API definitions. Forge runs in CI on each team’s API repositories, linting every change and generating preview builds of the CLI, docs, and SDKs with only the changes highlighted, similar to Workers Previews. It supports OpenAPI as input and can chain transformers to produce outputs like Cap’n Web bindings, TanStack Query, or MCP servers, enabling generation of bindings from Workers to other APIs. Forge is designed to reduce coordination overhead across Cloudflare’s hundreds of services and repos, and to enable better API versioning without breaking existing clients or SDKs. It is available under the Apache 2.0 license and can be run for free, privately or publicly, and already generates the output required for the cf CLI.
The road to the agentic browser: A Kitesurf update
Kitesurf, Cloudflare’s browser for AI agents built entirely on Workers, has received a major update. It now supports WebMCP, enabling agents to call site functions like searchFlights() instead of simulating clicks, and site owners can enable WebMCP with one switch. The browser passes over 730,000 Web Platform Tests, up 500,000 since launch, and adds support for CSS Layout, CSSOM, custom elements, URL-based module resolution, and improved iframe behavior. Efficiency optimizations reduce DOM traversal overhead, font fetching, and timer work, keeping CPU usage in line with launch benchmarks despite expanded capabilities. Kitesurf also gains full Browser Run API coverage, including Quick Actions from Worker bindings, and a terminal rendering mode using the Kitty protocol or ANSI text, with open-sourcing planned soon.
Introducing The Cold Start: pitch your startup live at Cloudflare Connect
Cloudflare announces The Cold Start, a live startup competition at Cloudflare Connect in San Francisco on Monday, October 19, 2026. Five early-stage companies with less than $10 million raised will each get five minutes on stage to pitch their vision to judges including Cloudflare co-founders Matthew Prince and Michelle Zatlyn, and CTO Dane Knecht. The winning startup receives $500,000 in Cloudflare credits, a billboard in San Francisco, and an invitation to the VIP speakers dinner. Applications close Friday, October 2, 2026, and Cloudflare will pay travel for the five finalists. The competition is inspired by Cloudflare’s own launch at TechCrunch Disrupt in 2010 and is part of its Cloudflare for Startups program, which offers eligible companies up to $350,000 in credits.
EmDash 1.0: the stable CMS with a secure plugin registry
EmDash 1.0 is a stable, free, and open source content management system built on Astro, offering a production-tested admin for editors and agent-friendly workflows through an API, CLI, and built-in MCP server. Its decentralized plugin registry, built on AT Protocol, lets developers publish plugins without ceding ownership of their identity or releases to a central marketplace, while site owners can discover and install plugins directly. Cloudflare migrated its own blog to EmDash as part of its “Customer Zero” approach, handling millions of pageviews per week and spikes up to 5,000 RPS, which led to features like KV object caching and Hyperdrive database adapter. The project is MIT-licensed with over 175 contributors and translations into 25 languages, and it supports sandboxed plugins for security. EmDash separates the plugin from the catalog, allowing other services to index the same publications without requiring developers to start over.
Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen
Cloudflare announced an experimental Emscripten target for wasm-bindgen, enabling native Rust code compiled with wasm-bindgen to run directly on Workers with full platform feature virtualization. This resolves the long-standing incompatibility between Emscripten and wasm-bindgen by having Emscripten drive the build while wasm-bindgen produces portable bindings included in Emscripten’s library system. The integration virtualizes timers, file system operations, and sockets atop Workers’ Node.js APIs, bringing significantly improved library compatibility for many previously unsupported Rust crates after minor patches to libraries like libc and socket2. Tokio async runtime support is achieved through WebAssembly JavaScript Promise Integration, which suspends blocking calls and returns control to the event loop without stalling. In testing, a Rust Minecraft server (Pumpkin) was deployed inside a Durable Object with TCP ingress using real Tokio sockets, persisting world state through Durable Object storage and supporting multiplayer connections.
Rider 2026.2.3 Is Released!
Rider 2026.2.3 is released, adding AI performance analysis to the Monitoring tool window and fixing an issue with the AI Agent Setup widget on Windows. The Monitoring tool window collects runtime data every time an application runs, allowing the AI agent to find bottlenecks and link them to code using the Analyze with AI action, which sends a prompt to the agent to begin the investigation. The agent uses the dottrace-analyze skill to show where time was spent, follow hot paths in code, and provide useful performance insights in the chat. This feature requires Windows, dotUltimate or the All Products Pack, and the AI Assistant plugin. The widget fix addresses issue RIDER-143160, where clicking its taskbar icon with display scaling below 175% failed to open the widget, and updates are available from the IDE, Toolbox App, or website.
Holo4: powering generalist computer-use agents
Holo4 is a new series of agentic models designed to interact with software through any available interface: GUIs, code, MCP, and APIs. It comes in two sizes, a 27B dense model and a 35B-A3B Mixture of Experts model, both available on the H Models API. The models were trained through supervised and reinforcement learning on environments and tasks generated by the Agentic Task Factory, which produces verifiable tasks from documentation alone. On the OSWorld 2.0 benchmark, Holo4 27B scores 61.7% against 81.8% for Opus 5.5, achieving competitive performance at a fraction of the cost. The company also released Holotron4 Nano, an updated version of Holotron 3 built on the Nemotron 3 Nano Omni model using the same post-training stack.
chDB Durable Layer for agent memory
Agent memory built on chDB, an embedded SQL OLAP engine, accumulated state such as project rules, user preferences, and recall traces on a single laptop. Moving that memory to CI, sandboxes, or another laptop broke the local-disk assumption because the MergeTree directory existed on only one disk. Adding a ClickHouse server backend fixed portability but turned every recall into a network round trip. The chDB Durable Layer fills the gap by keeping the local analytical hot path while publishing authoritative state to object storage (S3, GCS, or Azure Blob). Applications write to a local working copy and use flush() to publish writes and checkpoint() to compact the log, avoiding a sidecar or database server. The contract supports Python, Node, Go, and Rust bindings with cross-binding recoverability.
A More Reliable Compilation Scheme for Kotlin Multiplatform Modules
Kotlin Multiplatform’s current compilation scheme can cause IDE and compiler disagreements or unexpected resolution of platform-specific declarations from common source sets. In Kotlin 2.5.0-Beta1, an optional separate compilation approach aligns compiler behavior with IDE analysis, making common code resolve only against metadata KLIB declarations. This also eliminates issues like overload selection differing by target and type inference failures in platform code. Separate compilation is experimental and disabled by default, enabled by adding kotlin.kmp.separateCompilation=true to gradle.properties. Known issues include problems with cinterop commonization and single-target modules; library authors must publish metadata KLIBs for the feature to work correctly.
NVIDIA Open Agent Safety Platform: A Reference for Continuous In-Silicon Agent Monitoring
The post compares early internet security—where browser sandboxing isolated pages—to the current need for trust layers in AI agents, citing incidents where agents escaped evaluation environments and misreported actions. NVIDIA introduces OpenShell, an open-source secure runtime that sandboxes each agent with kernel-level isolation and enforces verifiable policies defined by operators before and during execution. The platform follows five core principles, including out-of-band enforcement, controlling the path to the model as a kill switch, and scaling agent authority with reasoning visibility, to prevent agent drift. For hardware-level protection, NVIDIA Sentry extends monitoring into BlueField DPUs, which sit on the node’s only path to the model, providing continuous out-of-band observability and real-time policy enforcement at line speed. The architecture is optimized for NVIDIA Vera CPU and BlueField DPU systems, enabling fleet-wide agent security with full lineage tracking, and for existing Vera systems, enabling protections is just a software update.
Add Runtime Controls to AI Agents with NVIDIA OpenShell
AI agents with broad access to systems and data can cause failures like modifying production data or exposing secrets. NVIDIA OpenShell 0.1.0 is an open-source runtime that enforces permissions outside the agent workload using sandboxed execution, controlled service access, credential management, and formal policy analysis. It combines a Gateway for lifecycle management, a Supervisor that checks outbound requests against policy, and a Sandbox with kernel-level filesystem and process controls and no network path except through the supervisor. The supervisor inspects HTTP, GraphQL, and MCP traffic to allow reads while blocking writes on the same API, and real credentials are kept outside the agent workload and bound to authorized endpoints. OpenShell supports multi-tenant platforms, formal policy verification that can prove permissions remain within boundaries, and policy advisor for dynamic network changes, and is adopted by Cadence, Slack, and Gecko Robotics for chip design, enterprise automation, and physical AI.
Welcome RL Environments to the hub
Hugging Face Hub now has a dedicated RL Environments filter for dataset repositories tagged with rl-environment, addressing the problem of siloed environments across frameworks like Harbor, Verifiers, OpenEnv, and NeMo Gym. Instead of building a new registry, the Hub uses existing dataset repos with framework tags that generate loading snippets, so an environment consists of tasksets stored as datasets and runtimes provided by frameworks. The environment gives an agent a task, responds to actions with observations, and scores the outcome with rewards for evaluation or training, and users can run environments by pulling the dataset and using the framework’s runtime and verifier code. The release includes pre-tagged environments such as BeyondSWE, Terminal-Lego, Multi-SWE-RL-Verified, and others, with run commands provided for each framework. Future plans include per-config snippets and automatic framework tagging on upload, and the Hub already stores data, versions it, gates it, and serves it to millions.
Securing Agentic Commerce Using Auth0 and the Universal Commerce Protocol (UCP)
Auth0 is bringing secure identity to the Universal Commerce Protocol (UCP) so retailers can safely let AI agents discover and purchase products on shoppers’ behalf. UCP is an open standard that gives AI agents a consistent way to interact with a merchant’s catalog, cart, and checkout, reducing the need for separate integrations per platform. Auth for UCP provides the identity and trust layer, handling agent registration, account linking, and scoped temporary token issuance through an on-behalf-of token exchange. This ensures that every purchase ties to a verified human with time-limited access and a full audit trail, while agents see only the authenticated shopper’s data. Auth0 is opening Auth for UCP Limited Early Access to select customers through its Agentic Commerce Partnership Program.
Auth0 for ChatGPT - Build and Manage Identity by Just Asking
The Auth0 plugin for ChatGPT enables developers to configure authentication, manage tenants, and generate integration code through natural language prompts without leaving the ChatGPT session. It connects to a real Auth0 account, producing SDK code that matches the actual tenant configuration rather than generic boilerplate that requires fixing later. Users can create applications, set up connections, query tenant data, and get accurate answers grounded in Auth0’s documentation right in the conversation, all without opening the Auth0 dashboard. The plugin addresses the common pattern where identity setup is postponed until after the app demo, disrupting development flow. By integrating identity management into the conversational workflow, it allows developers to describe what they need and receive working identity infrastructure directly in the chat, including enterprise capabilities like Organizations and MFA.
Agents can now set up your website’s security with Turnstile Spin
Cloudflare launched Turnstile Spin, an agent-mediated implementation of its Turnstile CAPTCHA alternative that AI coding agents use to set up security on any website. The two-step Turnstile flow requires a frontend widget and a backend Siteverify call, but many sites skip the backend validation, leaving them exposed to bots. Spin uses the user’s AI coding agent to find frontend and backend code, propose a plan, and after approval automatically embed the widget and wire up the Siteverify call without sending code to Cloudflare. It also fixes improperly installed widgets detected by monitoring Siteverify calls and handles migrations from other CAPTCHA providers. Since its July release over 65,000 widgets have been created via Spin and the generated prompt has been copied more than 30,000 times, and the service remains free.
Welcoming Allie Sperry, our new Customer Success Engineer
Resend has hired Allie Sperry as a Customer Success Engineer to support its growing customer base, bringing experience from Litmus in technical support and Customer.io as a deliverability consultant. Sperry describes herself as an email nerd who enjoys helping developers and builders navigate the complexities of email at scale, and she discovered Resend while building an email sending app for fun using AI tools. She got into software through her older brother’s influence and early experiments with Myspace layouts, which taught her to break down and rebuild code. Her favorite tool is Obsidian for daily notes, and she uses a refillable notebook to draft ideas before uploading photos to Claude or digital notes. Her advice to ambitious software engineers is to focus on the desire to learn rather than knowing everything, and to avoid comparing one’s journey to others, as unique backgrounds create unique work.
Meet (again) Max Schoening, Notion's new CTO
Notion appointed Max Schoening as CTO, reflecting its ethos of merging technology with liberal arts and integrating engineering and design as one job. Schoening, who joined last year, led product and design and shipped significant launches including Custom Agents for everyday knowledge workers and the Developer Platform allowing extensions. His background includes early design at Heroku, Cloud Run at Google, and six and a half years at GitHub working on Issues, Pull Requests, Actions, and cloud development environments used by millions. He advocates open customer-first platforms, and Notion’s open, agent-neutral context aims to benefit customers from small coffee businesses to large global enterprises balancing innovation, token costs, and governance at scale. As a two-time founder, Schoening embodies the multidisciplinary approach Notion values, and the company hires people whose work cuts across traditional discipline boundaries.
Top topics
- Architecture830
- Performance812
- LLMs648
- Machine Learning617
- Open Source561
- AI Agents542
- AI454
- Developer Experience446
Weekly digest
The best engineering reads, once a week.