LoginSign Up
← Back to DevOps
Weekly · DevOps · Week of October 26, 2026

GitHub's package firewall led a week in which MCP servers and agent tooling picked up security controls.

supply-chain-securitymcpagent-ruleshardeningmodel-support
Y
Generated 2h agoDrawn from 8 products

The week in development

Security at the edges of the AI toolchain was the dominant story. GitHub put a package firewall into public preview to block install-time malware, Appsmith hardened config loading and SMTP hosts around its embedded MCP server, and Workato added per-user OAuth to proxied MCP servers. As agents gain write access to apps, content and pipelines, the vendors are adding identity and validation first.

The second pattern is agent-awareness in developer tools. CodeRabbit now reads Claude Code's .claude/rules, Sanity opened document validation to all MCP users, and Zed let terminal tabs move into its Agent Panel. Tools are being shaped so agents and humans work from the same files and rules.

Leaders

GitHub shipped the week's spark: a package firewall in public preview that targets malware that runs at install time and steals credentials on CI hosts and developer machines. The same day brought Dependabot support for npm 12, pnpm 11 and 12 and Bun 1.4, dependency versions in the Dependabot alerts REST API, changes to secret scanning audit-log events due November 12 and a one-click conversion of branch protections to rulesets.

CodeRabbit reads Claude Code rules from .claude/rules, applying a rule only to files in its paths frontmatter or to an inferred scope when none is given. Beyond comment-only review, it has a CLI that launches cloud Coding Agent tasks and an AI Deep Scan across linked repositories, now in beta.

Sanity MCP server 2.42 makes a documents_validate tool available to everyone in beta for checking documents against the deployed schema. Studio 6.20 switches workspaces without a reload, and Manage can export organization activity to Google Cloud Storage.

Appsmith v2.5.1 loads docker.env as data so shell expressions stop startup, rate-limits self-serve signup per IP, applies the restricted-host policy to SMTP datasources and stops MCP-authenticated Git requests from checking out remote branches. It follows v2.4, which introduced the embedded MCP server in beta.

Wildcards

Gravity Forms 3.2 is the first core minor in its window, adding a Repeater field and updated column layouts after two weeks of add-on point releases. It is a WordPress form builder shipping a conventional feature among tools shipping agent plumbing.

Manticore Search spent October on maintenance: string range filters no longer collapse to equality checks, COUNT(DISTINCT) respects session collation and crash dumps now report the running operation and table.

Themes that compounded

  • MCP servers were hardened or extended in Appsmith, Sanity and Workato.
  • Supply-chain and secrets tooling grew in GitHub, covering the package firewall and secret scanning.
  • Shared rule files between agents and reviewers appeared in CodeRabbit.
  • Frequent model additions continued in Zed, with Gemini 4 Argon landing in 1.24.3.

Watch this week

GitHub has a November 12 secret scanning audit-log change on the calendar, so expect related notices before then. Appsmith released a hardening patch directly after 2.5.0 widened MCP editing, which makes further MCP-related fixes the likeliest next entries. Zed ships weekly, and its 1.24.4 patch landed the day after a model addition, so another model or agent change is likely.