Today's digest · Wednesday, July 15

The 18 things in AI/dev today.

LiveNext issue at 7:00 CET

Stories

#1 / TODAY

The Hacker News·1 min·22h agoFREE

Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

A security researcher found that Grok Build, an AI coding tool from xAI, uploads entire Git repositories to xAI's cloud storage, not just the files it reads. This behavior exposes all repository history, including secrets and sensitive data, to xAI's servers, raising privacy concerns for developers using the tool.

Developers using Grok Build may unknowingly expose entire repository histories, including secrets, to xAI's servers.

grokxaiprivacysecurity

thehackernews.com

Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

Your AI Agent's Bill Tripled Overnight. The Prompt Cache Broke, Not the Model.

#2 / TOP STORY

DEV CommunityFREE

Your AI Agent's Bill Tripled Overnight. The Prompt Cache Broke, Not the Model.

A developer reports that an AI agent's bill tripled overnight due to a broken prompt cache, not a model issue. The article describes how a caching failure caused repeated full prompt processing, leading to unexpected cost spikes. The consequence is that developers must monitor cache health to avoid similar billing surprises.

Cursor 0day: When Full Disclosure Becomes the Only Protection Left

#3 / TOP STORY

Hacker NewsFREE

Cursor 0day: When Full Disclosure Becomes the Only Protection Left

Mindgard disclosed a 0day vulnerability in Cursor after the vendor failed to respond. The full disclosure approach was taken as the only remaining protection for users. The post details the vulnerability and the disclosure process, emphasizing the need for transparency when vendors do not patch.

aigest · daily

Get this every morning.

One email. The signal. Built for builders.

Free · Unsubscribe in one click · No trackers

// Worth acting on5 stories

Why Your TypeScript 7 Upgrade Broke ESLint, ts-jest, and ts-morph

TypeScript 7's breaking changes can halt development workflows by breaking essential tools like ESLint and ts-jest.

typescripteslintts-jestts-morph

DEV Community3h ago1mFREE

Building a Custom Metrics Exporter for Kubernetes

Custom metrics enable autoscaling based on real-world signals beyond CPU and memory.

kubernetesprometheusmetricsautoscaling

Kubernetes13h ago1mFREE

Vercel Plugin now available in VS Code and GitHub Copilot CLI

Developers can now get Vercel-specific guidance directly in their editor and CLI via Copilot.

vercelcopilotvs-codecli

Vercel31h ago1mFREE

git-absorb: git commit --fixup, but automatic

Automates fixup commit creation, saving developers time in maintaining a clean git history.

gittoolproductivity

Lobsters22h ago1mFREE

Using uvx in GitHub Actions in a cache-friendly way

Caching uvx in GitHub Actions reduces workflow run times by avoiding repeated package downloads.

uvxgithub-actionscachingpython

Simon Willison30h ago1mFREE

// Worth knowing8 stories

i've been building platforms first for 25 years. i think it's wrong now.

A veteran developer's shift away from platform-first thinking may influence how others approach software architecture.

platform-firstsoftware-architecturedeveloper-experience

DEV Community3h ago1mFREE

Alternative(s) to run CUDA on non-Nvidia hardware

Developers may gain hardware flexibility for CUDA workloads, reducing vendor lock-in.

cudagpuspectral-computehpc

Hacker News22h ago1mFREE

i tested an ai incident commander against 15 real outages — 88% pass rate

Demonstrates that AI can reliably handle incident response, potentially reducing manual toil for on-call developers.

aiincident-responsedevopstesting

DEV Community3h ago1mFREE

I built a blazing-fast OpenAPI mock server in Rust — starts in milliseconds, zero config, dynamic fake data

Developers can instantly mock APIs without slow boot times or configuration, speeding up frontend and integration work.

rustopenapimock-serverapi

DEV Community3h ago1mFREE

Multi-agent social intelligence with Strands Agents and Amazon Bedrock

Enables developers to build scalable multi-agent social intelligence systems using AWS Bedrock.

awsbedrockagentssocial-intelligence

AWS ML Blog12h ago1mFREE

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

Developers using Claude for Chrome must consider risks from other extensions with claude.ai script access.

claudechrome-extensionsecurityvulnerability

The Hacker News13h ago1mFREE

AWS will now watch Microsoft’s cloud for you

Developers managing multi-cloud security can now centralize AWS and Azure alerts in one dashboard.

awsazuresecuritymulti-cloud

The New Stack12h ago1mFREE

Dependabot version updates introduce default package cooldown

Reduces update noise and prevents rapid successive updates to the same dependency.

dependabotgithubdependenciesdevops

GitHub Changelog14h ago1mFREE

More selected · 2

From $39/Month to $1: How I Moved 10+ Sites Off Hostinger for Free

Developers can drastically cut hosting costs by migrating multiple sites to free alternatives.

hostingmigrationcost-savingdevops

DEV Community3h ago1mFREE

Large-Scale TensorCircuit Contractions on GPUs: Disabling XLA GPU Autotuning

Disabling XLA GPU autotuning reduces memory overhead for TensorCircuit contractions, making GPU memory usage more predictable.

tensorcircuitgpuxlajax

DEV Community3h ago1mFREE

// Yesterday13 stories