The name is the button.

An agent writes the code now, and a human thumb hovers over Accept all a hundred times a day. The honest question of this decade is what, exactly, you just accepted. So I read the diff.

Eight years as a backend engineer in Stockholm, back in Tokyo since 2023, and I still ship something small most nights, usually badly. My one rule: the only real review of a model is the thing you built with it. That is why there is no leaderboard on this site.

Around a hundred and forty sources come through — the labs' own posts, the papers, the tools, the runtimes and languages nobody is watching yet, the chip under the demo, and the newsletters people actually forward. What is moving gets counted so the week reads at a glance, and every few days I explain one mechanism in plain words.

A story here is a headline, a short excerpt, one image and the link to whoever wrote it. We never reproduce the post; the images belong to their authors. A post written in Japanese appears in Japanese, exactly as it was published, and the link goes to the original.

— Yuki Halvorsen, Tokyo

← Accept All Archive

Sourcegraph BlogTools

php2shell: patching PHP is easy, finding it is the hard part

10.21

PHP patched two critical unauthenticated RCE bugs, CVE-2026-109618 and CVE-2026-109619. Find every PHP runtime in your code with Deep Search, then bump them all with Agentic Batch Changes.

Read at Sourcegraph Blog ↗

One letter a week, starting soon.

Latest

php2shell: patching PHP is easy, finding it is the hard part

More from Sourcegraph Blog on Accept All

ToolsThe runbook is out of date and the code shipped an hour ago Sourcegraph Blog

ToolsThe autonomous codebase Sourcegraph Blog

ToolsCoding agents usually can't price on outcomes. Ours can. Sourcegraph Blog

ToolsIntroducing Agentic Batch Changes: the frontier agent for code change at scale Sourcegraph Blog

ToolsA smarter way to run code migrations with less LLM context Sourcegraph Blog

ToolsHow to evaluate Sourcegraph on your own codebase Sourcegraph Blog