Blade.sh new service for you !

Claude Security now keeps up with your code as it changes. Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code. In public beta on Claude Enterprise.

🚨 CRITICAL: GitLab flaw (CVSS 10.0) affects 12 years of releases. CVE-2026-110264 could allow unauthenticated remote code execution on self-managed servers. Read - thehackernews.com/2026/10/cr…

Hermes merged 55 PRs on October 18 The ones worth knowing: • /usage in Desktop and the TUI now shows your provider account limits before you send the first message • Docker sandboxes are tighter: files can no longer carry setuid/setgid bits or file caps back to the host, and files written as root are handed back to your user at teardown • Plugins can now post to the current conversation and edit that message in place with ctx.post_message • Two new plugin hooks: post_compaction fires on every compaction path, and on_session_delete tells plugins about every session delete and archive • Plugin slash commands now receive the calling session on every surface • Clients that fall behind, reconnect or sit waiting now recover from the gateway instead of failing the turn • Unattended gateways no longer freeze and exit on a shell-hook consent prompt, and recorded consent registers the hook without a restart • Chat input stays in FIFO order, and session identity plus full history now survive compression, rewind and orphan reaping • Desktop session lists, resume and Bots groups stay stable across restarts • Stale dirty worktrees are archived before removal, and idle scratch clones are pruned again (one host had 100 GB held) • A wave of new catalog plugins, including WhatsApp voice, an Italian Desktop language pack, Hermes Gadget hardware, the Tsubasa model provider and Scalekit Here is the full list: DESKTOP IMPROVEMENTS (5 PRs) • Desktop/TUI /usage shows provider account limits before the first message • fix(desktop): New Bot's Capabilities tab loads when the name is typed later, and has room to use • fix(desktop): keep Desktop session lists, resume and Bots groups stable across restarts • fix(desktop): align main model settings controls • feat(plugin-catalog): add hermes-lang-it-full, an Italian Desktop language pack VOICE & REAL-TIME (3 PRs) • Clients that fall behind, reconnect or wait recover from the gateway instead of failing the turn • feat(plugin-catalog): add hermes-whatsapp-voice plugin • plugin-catalog: fish-audio v1.7.7 DEVELOPER TOOLS & PLUGINS (28 PRs) • Plugins get a post_compaction hook on every compaction path • feat(plugins): ctx.post_message: post to the current conversation and edit in place • Plugin slash commands receive the calling session on every surface • Plugins hear about every session delete and archive: on_session_delete hook • feat(plugins): public names for the skills tool's discovery and lookup helpers • feat(plugin-catalog): add scalekit • plugin-catalog: add completion-sound • catalog: codex-account-switch 1.2.3 (Hermes 0.22 support) • chore(plugin-catalog): re-pin hermes-windows-ops to a reachable commit • catalog: update Hermes Fleet Connector to 0.3.0 • feat(plugin-catalog): add edit-ledger • feat(plugin-catalog): add interim-ledger • catalog: add hermes-jetstream • feat(plugin-catalog): add gadget (Hermes Gadget hardware platform) • feat(catalog): add Tsubasa model-provider plugin • plugin-catalog: add hermes-seo • plugin-catalog: add offpeak-bekci (Ollama Cloud off-peak window + approval-gated work queue) • plugin-catalog: hermes-teammates 1.0.0 • plugin-catalog: bump hermes-vcc-engine to 0.4.1 • Update catalog entry: deepseek-search-fetch 1.0.6 (title, theme-safe banner, one known-issue note) • plugin-catalog: bump hermes-cron to 1.4.2 • chore(plugins): bump prompt-queue to latest commit • plugin-catalog: bump hermes-dreaming to 2.9.4 (the holographic provider's secret screen, a fact's origin) • chore(plugin-catalog): update Magi to v1.7.8 • plugin-catalog: openinvest re-pin to 0b9268b (0.25.0) • chore(plugins): pin birkin-mnemosyne to core 0.7.2 • docs(plugin-catalog): make Ace media discoverable by service name • docs(catalog): add Antenna banner image SECURITY & SECRETS (6 PRs) • Docker sandbox files can no longer carry setuid/setgid or file caps back to the host, persistent sandboxes included • Docker sandbox files written as root are handed back to your user at teardown • fix(secret-scope): the .env memo notices a same-size edit inside one timestamp tick • fix: profile-registry grants, hosted plugin route auth, and per-session Docker workspaces • fix(gateway): keep per-session settings and launch secrets that didn't stick • A gateway registers a shell hook once its consent is recorded, no restart INTEGRATIONS & CHAT (3 PRs) • fix(gateway): keep chat input in FIFO order and land Bot Chat deliveries whoever created the chat • fix(gateway): keep session identity and full history across compression, rewind and orphan reap • fix(gateway): serve goal-card criteria, subagent kill and steer, agent reactions and the connection card on the shared gateway STABILITY & FIXES (10 PRs) • Unattended gateway no longer freezes and exits 75 on a shell-hook consent prompt • fix(gateway): parked-profile ingress, downgrade relaunch, side-agent drain, idle exit, worker birth, Kanban ACK wait, log lock order • fix(gateway): a prune is not a permanent tombstone, and retirement is keyed by profile • fix(gateway): name an elevated gateway from its control pipe instead of OpenProcess • fix(update): a system-scope dashboard unit without root gets one exact restart command, not a polkit dump • fix(logging): the profile routing handler never builds a child handler under its own lock • Archive stale dirty worktrees before removing them, sweep every repo, ask on dirty exit • Idle scratch clones that share packs with a live repo are pruned again (100 GB held on one host) • Scratch prune logs one removal hint for root-owned entries instead of re-walking them hourly • test: the home-I/O guard exempts the PM generation dir around the running venv 55 new features and fixes xitter.cf/iamlukethedev/status/2…

Anthropic gave me $30,000 in Claude credits to research my own tumor I wrote what I built since March. I’m looking for someone who can manufacture a personalized vaccine, and a hospital that can give it

Expect this month to be a busy one for new model releases. We have the scoop on a new Anthropic model, Google’s Gemini 4 Carbon, and a potential new Terra model from OpenAI. theinformation.com/newslette…

Je teste le MCP @WiziShop_fr sur Claude, c'est franchement un game changer ! Thx @_Re_

🔍 Search & Fetch APIs are now open to everyone! Powered by our in-house search engine, serving hundreds of millions of requests daily worldwide. 💰 Each endpoint: $0.75 per 1,000 calls. 📖 Docs: api-docs.deepseek.com/guides… 📌 Search & Fetch calls via server-side tools in DeepSeek Harness, Claude Code, and Codex are currently free for DeepSeek API users. Billing starts Oct 31, 2026, at 16:00 UTC. 3/4

We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate

The GitLab MCP server is now generally available. Any MCP-compatible agent can run core GitLab workflows from the client your team already works in, with dozens of tools across code, merge requests, work items, and pipelines. Each action runs under your existing GitLab permissions. Read the blog to learn more. about.gitlab.com/blog/mcp-se…

Question conne: quel est votre degré ou % d'utilisation de l'IA au boulot ? L'utilisez-vous chaque jour ? Comment et que vous apporte-t-elle ?