AI Coding Live News

On November 3 (US Pacific time), Vercel launched Security Review in public beta. It is a new Vercel Agent capability alongside Code Review and Investigation: once enabled, every push to connected GitHub repositories triggers a diff-only vulnerability review that finishes in seconds. Findings land in the Security dashboard, PR comments and the CLI, and can be fixed with one click by Vercel Agent or pulled into your own coding agent via vercel security vulnerabilities. It is available to Pro and Enterprise teams, and reviews are free until November 10.

Zoom

Microsoft Research, Microsoft Security and UC Berkeley open-sourced TokenEconomizer on GitHub (Apache 2.0, v0.1.0 released October 26), a plugin for Claude Code, Codex, GitHub Copilot CLI and Pi, with experimental opencode support. It learns from earlier sessions in the same repository: micro-skills remember repo facts, tool pruning drops tool definitions that go unused, and a loop guard nudges an agent that is stuck. The paper reports 18.4–30.9% lower mean cost across five agent and model combinations on 277 SWE-Bench tasks (paper figures).

Zoom

On October 29 Pika released Pika H3 Flex, a joint audio-video generator post-trained on MiniMax H3, with weights on Hugging Face, code on GitHub, and ComfyUI and Diffusers support. Pika says it distilled sampling from 50 denoising steps to six, averages about 1.8x faster DiT denoising than Fal H3 Max at 768p, and can produce a 15-second clip with soundtrack in as little as about 7 seconds; the hosted API adds 1080p to 4K upscaling and five exportable audio stems (dialogue, score, SFX, foley, ambience). All speed and quality figures are vendor-reported.

Zoom

LM Studio posted on X at 15:32 UTC on Oct 29 that users can now download a new oMLX engine inside LM Studio and run it with MLX models they already have. The official changelog lists it in Bionic 1.1.10, alongside speculative decoding for MLX models and an in-app terminal. oMLX is an open-source Apple Silicon inference server maintained by developer jundot (Apache 2.0, about 23,000 GitHub stars) built around continuous batching and a two-tier RAM and SSD KV cache. LM Studio has not published speed comparisons for the engine.

Zoom

At GitHub Universe on Oct 28, GitHub shipped a batch of Copilot Automations updates. Shared automations now belong to the repository, act as Copilot, bill AI credits to the repo owner and keep running after their creator leaves. Automations gain 24 new GitHub event triggers, REST API triggers from external systems and chaining, plus 20 new tools and custom MCP servers. Teams can cap AI credits per run, day, week or month, automations can propose improvements to their own prompts from real outcomes, and VS Code 1.144 can run them in the cloud.

Zoom

On Oct 28 GitHub published its Octoverse 2026 report: developers pushed code 17.9 billion times in the past 12 months, more than 2024 and 2025 combined, with 34.3 billion commits and 1.3 billion merged pull requests (3.5 million a day). By September more than 40% of pull requests started with an agent draft, up from 17% in March; 55% of Copilot monthly active users use agentic features, and paid Copilot users used 47 distinct models in September.

Zoom

During GitHub Universe on Oct 28, Microsoft put the Microsoft Copilot harness, the shared agent execution layer behind Copilot Code, Copilot Studio, the GitHub Copilot app, the CLI and VS Code, into Foundry Agent Service as a public preview. Microsoft runs the agent loop and sandbox while developers supply instructions, skills, tools and model choice; Microsoft says it works across 20+ frontier models plus bring-your-own-key. Long-running resilience for hosted agents also reached GA. Harness runtime usage is free until Dec 1.

Zoom

At Universe 2026 on Oct 28, GitHub made GitHub Agentic Workflows, an open source GitHub Next project, generally available on GitHub Free, Team and Enterprise. Developers describe tasks such as issue triage, CI failure analysis, documentation updates and test writing in natural-language Markdown, and gh aw compiles them into standard Actions YAML run by Copilot or a coding agent of their choice. GA adds self-hosted ARC runners with Docker-in-Docker, a non-experimental gh aw forecast cost estimate, per-workflow model providers and model routing, and Cloud Hypervisor or NVX micro-VM isolation.

Zoom

At GitHub Universe 2026 on Oct 28, GitHub made Copilot Fusion generally available. It merges the multi-model orchestration of the Project HydraFusion research preview with Copilot auto model selection: users pick Copilot Fusion and an effort level (Standard, High or Max) in the model picker, and the system decides which models to use and whether to run a Single, Cascade or Critique workflow. GitHub says Fusion Max scored 60 on the Artificial Analysis Coding Agent Index, two points below Claude Code with Opus 5.5 Max, at about half the API cost per task, about half the tokens and about 40% less time. Each underlying model is billed at its standard rate, and paid plans get 30% off through Nov 30.

Zoom