Devtools infrastructure rebuilt itself around agents this week, even as GitHub and others retired their own AI bets.

The week in devtools

The dominant move in devtools this week was infrastructure rearranging itself around a non-human user. Across identity, CI, realtime, and content platforms, the products that shipped the most significant changes were not adding features for developers to click — they were exposing their own control planes as things an agent can drive, and in several cases retiring the AI products they built last year to do it. Auth0 gave AI agents their own identity type; Buildkite collapsed failed-build triage into a single tool call for agents; Cursor stopped shipping editor features and started shipping fleet management. The common thread is a bet that the primary consumer of developer infrastructure is shifting from a person to a program.

The counter-current was consolidation and retreat. GitHub killed its model-hosting product outright, conceding raw inference to the model vendors while it concentrates on the surfaces it owns. MinIO stripped login and the admin console out of its open build, and Strimzi shipped a 1.0 defined by everything it deleted. And in the week's sharpest reminder that none of these platforms fully control their own stack, Vercel had a model pulled from its AI Gateway by government directive. Capability expansion and strategic narrowing ran side by side, but both were reactions to the same shift.

Leaders

GitHub had the loudest week and pointed in two directions at once: it retired GitHub Models entirely — playground, catalog, inference API, bring-your-own-key, all gone with no successor — while shipping stacked pull requests into public preview and taking Copilot code review's agent skills and MCP support to GA. The message is a narrowing of where GitHub competes: give up hosting models, double down on the repository and review surfaces it already owns.

Auth0 landed four sparks around a single idea — agents need their own identity, not a borrowed one. Agents as Principal gives each agent its own identifier, credentials, and audit trail; Token Vault Privileged Worker lets background agents pull a user's third-party tokens with no active session. It is one of the clearest statements this week that agent identity is becoming its own category.

Windmill did two things that usually don't happen together: it moved its AI chat into full authoring sessions in beta, and it dropped the Enterprise license requirement from BigQuery and Snowflake, handing two paid runtimes to the free tier. Sessions produce scripts, flows, and apps as reviewable drafts, and git sync now deploys from a tracked branch — the AI thread and the deployment thread converging on one workflow.

Depot kept vertically integrating past its build-acceleration roots. Test results went generally available with pass/fail counts on every job, and Depot Code entered private beta as a diskless git server that keeps packfiles as objects on S3 — build acceleration turning into a full CI platform that owns the source too.

Cursor shipped fleet management rather than editor polish: cloud agents now launch from an iOS beta into isolated VMs, and Auto mode became a router that dispatches each request to a frontier or price-efficient model. The IDE is becoming one of several places you supervise agents from, not the place the work happens.

Wildcards

Vercel suspended Claude Fable 5 on its AI Gateway for every user, citing a US Government directive, and said plainly it does not know if or when access returns. It is a rare public admission that a platform's model catalog is not fully its own — a control-plane dependency most vendors would rather not surface.

MinIO went the other way on openness, removing LDAP and OIDC login from the open-source server and deprecating the embedded console into a separate project. The open build narrows to a storage engine while paying users are pointed at the commercial AiStor tier — open-core boundary-drawing in a week otherwise about opening things up.

Strimzi shipped a 1.0 defined by deletion: every CRD API but v1 removed, with mandatory resource conversion required before any upgrade. It is a maintenance-driven milestone rather than a feature one, and every subsequent release note in the window just repeats the conversion warning.

Themes that compounded

• Agent identity became a named category, with Auth0, WorkOS, and Clerk all shipping credentials, keys, and login flows built for machines rather than people.
• Products retired their own AI bets to become substrates instead: GitHub killed Models, Cosmic retired AI Studio, and Expo wound down Expo Agent while keeping its MCP server.
• CI and build infrastructure optimized for agent consumption, with Buildkite, Depot, and Cursor treating a program querying an API — not a human reading logs — as the primary reader.
• MCP kept spreading as the default integration surface, showing up in Buildkite's stateless-spec server, Expo's now-free server, and Cursor's team marketplaces.
• Security-by-default tightened, with Supabase closing its most-exploited default so tables stay private unless explicitly exposed, and GitHub adding publish-time npm malware scanning.

Watch this week

The open question is whether agent identity settles into a standard or stays a set of vendor-specific primitives. Auth0, WorkOS, and Clerk are all shipping into the same gap on their own terms, and their next releases will show whether they converge on shared shapes — Cross App Access, agent principals, machine keys — or fragment. Watch too whether more platforms follow GitHub, Cosmic, and Expo in retiring first-party AI products to sit underneath someone else's agent, and whether Vercel's model-access suspension turns out to be an isolated event or the first of several supply-side shocks to hosted model catalogs.