Coding Tools
GitHub Copilot adds local sandboxing
GitHub Changeloghigh confidence
Why it matters
- →Reduces security risk by limiting AI agent access to local files and network resources.
- →Provides granular control over permissions per project, enhancing developer trust.
- →Fails safely if OS-level enforcement is not possible, preventing silent policy violations.
GitHub has introduced local sandboxing for the Copilot app, now in public preview, to restrict AI agent access to local files, network resources, and credentials. Users can configure granular policies per project, including read/write permissions, network access controls, and credential handling for Git and GitHub CLI operations. The feature is disabled by default and requires manual activation via settings or the /sandbox command; it does not apply to cloud or remote sessions. If the operating system cannot enforce the requested policy, the session fails securely rather than running without restrictions.
Read originalMore from GitHub Changelog
© GitHub ChangelogCoding Toolscoding
GitHub Actions drops Node 20, mandates Node 24
GitHub has permanently removed Node 20 from its hosted runners, forcing all JavaScript actions to run on Node 24. The safety net of the unsecure node opt-out is gone, meaning workflows relying on older action versions will break immediately. This shift eliminates legacy runtime support and introduces compatibility constraints for macOS 13.4 and ARM32 architectures. Maintainers must update their action metadata now, while workflow users need to upgrade dependencies to avoid CI failures.
GitHub Changelog
© GitHub ChangelogCoding Toolscoding
GitHub Copilot adds OpenTelemetry for enterprise agent monitoring
GitHub Copilot finally gives enterprises visibility into their AI agents with native OpenTelemetry support. Administrators can now route agent traces to existing monitoring tools, tracking model requests and tool usage without forcing developers to configure telemetry individually. This closes a critical gap in observability, allowing teams to investigate unexpected behavior through step-by-step execution flows. Prompt content remains excluded by default, balancing transparency with privacy concerns for sensitive code.
GitHub Changelog
© GitHub ChangelogCoding Toolscoding
Copilot JetBrains 1.18 adds agent controls and shared skills
GitHub Copilot for JetBrains is tightening the leash on autonomous coding with assisted approvals that auto-accept low-risk tool calls while flagging higher-risk actions. The update brings organizational governance to individual IDEs, allowing teams to deploy shared skills and custom instructions across both local and agent sessions. Codex agents now offer a plan mode, letting developers review strategies before implementation begins. This shift moves the plugin from simple code completion toward managed, enterprise-grade automation.
GitHub Changelog
More in Coding Tools
Coding Toolscoding
Claude Code v2.1.281 fixes session stability and adds Bedrock guardrails
This release stabilizes Claude Code's core reliability by fixing persistent bugs in session resumption and prompt caching that previously caused data loss or infinite loops. It also tightens enterprise security with new Bedrock upstream support for IAM role assumption and mandatory guardrail application. The update addresses critical edge cases like proxy stream drops and oversized tool calls, ensuring smoother operation in complex development environments.
Claude Code Releases
Coding Toolscoding
llama.cpp b11140 optimizes sparse attention on CUDA
This release targets a specific bottleneck in long-context inference by optimizing the sparse flash attention prefill step for NVIDIA GPUs. By templating kernels to unroll loops at compile time, batched sparse operations drop from 586 microseconds to 244 microseconds on 49k context windows. This isn't just a generic speed bump; it makes handling very long documents significantly more efficient for users relying on sparse attention mechanisms. The change is already baked into the standard CUDA builds, requiring no special flags.
llama.cpp Releases
Coding Toolscoding
llama.cpp b11146 adds CUDA 13 and Snapdragon support
The latest llama.cpp build brings immediate relevance to users on bleeding-edge NVIDIA hardware with native CUDA 13.4 support across Linux and Windows, closing the gap for those testing next-gen GPU architectures. More notably, it finally addresses the mobile inference landscape by including a dedicated build for Linux arm64 Snapdragon devices, covering CPU, Adreno GPU, and Hexagon NPU paths. This moves local AI beyond just desktop GPUs into the realm of high-performance edge computing on Qualcomm silicon. While Apple Silicon builds have KleidiAI disabled in this specific release, the expansion to ARM-based mobile NPUs marks a significant shift in where llama.cpp can run efficiently.
llama.cpp Releases