Programming digest · 2026-11-08

Claude Code exposed passwords in 1,122 public GitHub repos via "Don't Ask Again" feature — A critical security flaw in AI code assistants risks exposing credentials across widely used platforms

Sources:[2] apiiro.com[7] nfsu2.xyz

ZapFast is a fast native WhatsApp client built with Rust and egui — Demonstrates real-time UI performance and efficient resource use in a privacy-focused messaging app

Sources:[3] github.com

GitHub’s new pull request overview page is now in public preview — Improves visibility and navigation for collaborative code reviews at scale

Sources:[5] github.blog

Asahi Linux 7.3 progress report details challenges in Apple device Linux support — Highlights efforts to protect open-source integrity against commercial exploitation

Sources:[61] lwn.net

Discord's Rust rewrite delivers near-instant cold starts vs. sluggish Electron — Proves performance gains in user experience with lower-level language adoption

Sources:[50] daily.dev

Companies like Cloudflare and Antrhopic are releasing public agent skills for AI workflows — Expands ecosystem interoperability and automation via standardized toolkits

Sources:[26] github.com[29] github.com[30] github.com

OPFS.ts enables TypeScript developers to access the local origin private file system — Bridges client-side storage with modern web standards for secure data handling

Sources:[43] reddit.com

pg_vectorsearch brings scalable vector search to PostgreSQL using PRISM indexing — Offers lower memory use and faster indexing than graph-based alternatives

Sources:[59] infoq.com

Bumpy is a file-based versioning tool for monorepos with branch-based prereleases — Simplifies changelog management and publish workflows in large-scale projects

Sources:[60] infoq.com

Grab improved mobile app stability by safely managing AI-generated code surges — Addresses rising defect rates from rapid AI-assisted development

Sources:[58] infoq.com