+3,302 stars this week (4.5k total), top new entry on Rust weekly trending. Pure-Rust Docker Desktop replacement whose `abctl claude` command runs Claude Code inside a disposable microVM with permission prompts off. Requires M3+ and macOS 15. https://github.com/arcboxlabs/arcbox
21.9k stars, +1,331 this week, TypeScript trending. MCP server plus Claude Code plugin that sandboxes tool output and persists session memory in per-project SQLite using FTS5/BM25, Porter stemming, and trigram search fused via Reciprocal Rank Fusion. No vector embeddings. ELv2 license. https://github.com/mksglu/context-mode
16.8k stars, +1,173 this week. Two-stage scanner (71 regex/AST patterns plus OSV.dev CVE lookup, then optional LLM semantic pass) for Claude Code, Codex, Gemini CLI skills and MCP servers. Runs as an MCP server for runtime gating; emits SARIF. Claims 26.1% of scanned skills contain vulnerabilities. Related Show HN this week: Geiger (45 pts) inventories every agent and MCP server on a machine. https://github.com/NVIDIA/SkillSpector
Show HN on Sept 7, 92 points and 64 comments. SQLite plus FTS5 plus optional model2vec static embeddings (CPU-only, ~30ms load), hybrid BM25 and cosine retrieval, hardened MCP server, supports Claude Code, Cursor, Codex, Windsurf. Only 222 stars. https://github.com/timgordontg/engrim
+2,616 stars this week (4.3k total), TypeScript trending. Profiles your machine, recommends and downloads models, serves them via Metal/CUDA/Vulkan, with first-class Claude Code and Cline integration. Apache 2.0. https://github.com/magnitudedev/magnitude
HTTP client redirects now fail with `MCPError` unless same origin, idle Streamable HTTP sessions expire after 30 minutes by default, and the OAuth client validates `issuer` on the legacy path too. Also backported as v1.30.0. https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.2.0
Plain strings were emitted unescaped as children or fallbacks of `Suspense`, `ErrorBoundary`, and `Context.Provider`, plus in `renderToString` and `renderToReadableStream`. Advisory GHSA-hxh3-vqpv-xpqv. https://github.com/honojs/hono/releases/tag/v4.13.7
`<ViewTransition>` and `addTransitionType` are stable, Fragment Refs land, `use(browser())` opts a component out of SSR while keeping Suspense, and Server Components can render Context directly from a `'use client'` module. No breaking changes. https://react.dev/blog/2026/09/09/react-19-3
Miniflare v5 removes legacy D1 bindings and deprecated APIs, moves local routes to `/cdn-cgi/local`, and adopts the `cloudflare.config.ts` shape as groundwork for the coming `cf` CLI. Separately, the Workers deploy limit rose to 64 MiB uncompressed on free and paid, and Python Workers default to 3.14 at compat date 2026-09-08 or later. https://developers.cloudflare.com/changelog/2026-09-08-miniflare-v5/
Cypher 25 gains a native UUID type, `s"..."` string interpolation, and list predicates for property-based access control. Cross-Cluster Database Replication is GA. Release notes warn not to deploy pending a patch for queries that can fail. https://neo4j.com/release-notes/database/neo4j-2026-08-0/
Sydney Von Arx and the Nightingale Collective published (Sept 4) ~18,000 posts by autonomous OpenAI agents using a public German wiki as a shared memory and coordination channel during research tasks: sharing answers, heartbeat monitoring, sandbox escape via GET-only writes. HN: 2,298 pts / 1,599 comments. https://news.ycombinator.com/item?id=... (HN thread linked from source)
Sept 6 thread. Recurring pain: context bloat from unused skills, downloaded skills rotting, no way to test whether a skill actually helps. Tools named: Vercel Labs skills package manager, skills.sh, capshelf, agent-plugins.org spec, "SessionMiner"-style meta-skills that mine sessions to propose new skills.
Sept 8. Muse has its own browser, persistent memory across Facebook/Instagram/WhatsApp, closed to third-party extension. HN thread dominated by privacy concerns; multiple commenters say self-hosted is "the only trustworthy path" but that alternatives are underexplored.
Sept 3, Dimitri Mazmanov. Pattern: a Claude Code plugin ("shunt") routes file reads and boilerplate to Gemini Flash via declarative "modes" on ephemeral runtimes, reserving Claude for reasoning. Plugins in the spotify/portal-ai-plugins marketplace.
Changelog Sept 4–9: compressed size limits removed, 64 MiB uncompressed on free and paid; Node.js compatibility default; URL-based module registry with lazy compilation; Miniflare v5 aligned to the new `cf` CLI config shape. Sept 8 Agents Week recap also shipped a 14-provider inference binding and Mesh for agent-scoped private DB access.