Skip to main content

Posts

This week in AI dev tools: Gemini 2.5 Flash-Lite, GitLab Duo Agent Platform beta, and more (July 25, 2025)

Gemini 2.5 Flash-Lite is now generally available The model is Google’s fastest and cheapest model, costing $0.10/1M tokens for input and $0.40/1M tokens for output (compared to $1.25/1M tokens for input and $10/1M tokens for output in Gemini 2.5 Pro). “We built 2.5 Flash-Lite to push the frontier of intelligence per dollar, with native reasoning capabilities that can be optionally toggled on for more demanding use cases. Building on the momentum of 2.5 Pro and 2.5 Flash, this model rounds out our set of 2.5 models that are ready for scaled production use,” Google wrote in a blog post .  GitLab Duo Agent Platform enters beta GitLab Duo Agent Platform is an orchestration platform for AI agents that work across DevSecOps in parallel. For instance, a user could delegate a refactoring task to a Software Developer Agent, have a Security Analyst Agent scan for vulnerabilities, and have a Deep Research Agent analyze progress across the repository.  Some of the other agents that...

Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

Google is adding several new features to its cloud-based AI workspace Firebase Studio, following its update a few weeks ago when it added new Agent modes, support for MCP, and integration with the Gemini CLI.  Now it is announcing updated workspace templates for Flutter, Angular, React, Next.js, and general Web that use the Agent mode by default. Users will still be able to toggle between the “Ask” and Agent mode, depending on what the task at hand calls for.  The templates now have an airules.md file to provide Gemini with instructions for code generation, like specific coding standards, handling methods, dependencies, and development best practices.  Google says it will be updating templates for frameworks like Go, Node.js, and .NET over the next few weeks as well.  Developers will also now be able to integrate Firebase backend services into their application using Gemini, which will suggest the proper Firebase services based on the prompt. It will import the n...

Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

Tenable is updating its Vulnerability Priority Rating (VPR) method of scoring vulnerabilities to enable organizations to focus their efforts on the most critical and impactful vulnerabilities. According to the company, Common Vulnerability Scoring System (CVSS), which is used by the CVE database, flags 60% of vulnerabilities as high or critical. When Tenable VPR was launched in 2019, it only flagged 3% as high or critical, and today’s updates bring that number down to 1.6%.  Tenable says this cuts down on noise, leading to faster mean-time-to-remediation, optimized resources, and security efforts that are better aligned with organizational priorities.  Some of the ways Tenable is able to reduce the number of vulnerabilities flagged as critical is that it recalculates risk prioritization every night for over 280,000 different vulnerabilities, predicts the likelihood of a vulnerability being exploited in the near future, and gives a priority rating on a scale from 1 to 10....

Google launches OSS Rebuild tool to improve trust in open source packages

Google is hoping to improve public trust in open source projects with the launch of a new open source project called OSS Rebuild that reproduces upstream artifacts and compares the new package with the original artifact. According to Google, this process enables customers to verify a package’s origin, understand and repeat its build process, and customize the build.  “Our aim with OSS Rebuild is to empower the security community to deeply understand and control their supply chains by making package consumption as transparent as using a source repository,” Matthew Suozzo from the Google Open Source Security Team (GOSST) wrote in a blog post .  It can detect several types of supply chain compromise, such as source code not present in the public source repository being in published packages, build environment compromise, or stealthy backdoors, such as was seen with XZ Utils .  The project itself consists of an automated process for getting declarative definitions for...

AI and its impact on the developer experience, or ‘where is the joy?’

The role of software developer has historically morphed to keep up with advancements in technology. From basic writing and testing code, to use of open source code, to Agile and DevOps tools and methodologies, to security and cloud, and now to AI and vibe coding, developers have been asked to take on more tasks that take away from their original, joyful experience of creating code to meet enterprise needs. With the adoption of AI to produce code even more quickly than developers could, the role is morphing again. Some call it context engineering, or prompt engineering. Some say developers will now have to take on model training and software architecture. All of this raises the question:  What impact does all of this have on the Developer Experience? How can the elusive ‘joy’ in the work be found? To answer those questions, it’s important to first define the term ‘developer experience.’ Andrew Boyagi, customer CTO at Atlassian , helps organizations elevate their developer experie...

Parasoft brings agentic AI to service virtualization in latest release

Parasoft is helping customers address the unique requirements for testing AI with several new capabilities across its various testing solutions. The company added an agentic AI assistant to its virtual testing simulation solution Virtualize , allowing customers to create virtual services using natural language prompts.  For example, a user could write the prompt: “Create a virtual service for a payment processing API. There should be a POST and a GET operation. The operations should require an account id along with other data related to payment.”  The platform will then draw from the provided API service definitions, sample requests/responses, and written descriptions of a service to generate a virtual service with dynamic behavior, parameterized responses, and the correct default values.  According to Parasoft this reduces the need for deep domain knowledge or development skills, and accelerates time to delivery. “This is more than an incremental improvement—it’s a...

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

BrowserStack, a company that offers solutions for testing, has released its Accessibility Design Toolkit , a Figma plugin that helps developers plan for accessibility early in the design stage. According to a recent report from BrowserStack and WebAIM, 94.8% of the one million webpages they analyzed had at least one Web Content Accessibility Guidelines (WCAG) failure. The most common failures were color contract and missing alt text, and both of these issues are easily preventable during the design stage.  “Teams have lacked the tools to catch accessibility issues early, even though most originate in the design phase,” said Nakul Aggarwal, co-founder and CTO at BrowserStack. “Our toolkit addresses this by empowering designers to resolve up to 40% of these issues directly within Figma.” The plugin will automatically detect UI components and validate them against WCAG standards, including color contrast, headings, focus order, image alt-text, landmarks, and touch target sizes....

Scrum Alliance and Kanban University partner to offer new course that teaches both methodologies

The Scrum Alliance and Kanban University are teaming up to produce a new course that combines the best of both the Scrum and Kanban methodologies. The Scrum Better with Kanban course teaches technology professionals how to identify the challenges they are facing with Scrum, find solutions to bottlenecks that are slowing down work, and test that solutions reflect the principles of the Kanban method.  It teaches the six general steps of the Kanban method: visualizing work, limiting work in progress, managing flow, making policies explicit, establishing feedback loops, and continuously improving.  The course also teaches three change management principles, which are to start with what you do now, agree to pursue evolutionary change, and encourage leadership at all levels.  “Visualizing work, whether it be tasks, processes, or broader initiatives, is essential to helping teams stay aligned and deliver value,” said Tristan Boutros, CEO of the Scrum Alliance. “This partne...

ChatGPT now has an agent mode

OpenAI is bringing the power of agentic AI to ChatGPT so that it can handle complex requests from users autonomously.  It leverages two of OpenAI’s existing capabilities: Operator, which can interact with websites, and deep research, which can synthesize information. According to OpenAI, these capabilities were best suited for different situations, with Operator struggling with complex analysis and deep research being unable to interact with websites to refine results or access content that required authentication.  “By integrating these complementary strengths in ChatGPT and introducing additional tools, we’ve unlocked entirely new capabilities within one model. It can now actively engage websites—clicking, filtering, and gathering more precise, efficient results. You can also naturally transition from a simple conversation to requesting actions directly within the same chat,” the company wrote in a blog post .  ChatGPT’s agent mode can handle requests such as “look ...

DevOps won’t scale without platform engineering and here’s why your teams are still stuck

Despite a decade of DevOps fervor, most engineering organizations remain hindered by manual processes, silos, and dependency bottlenecks. Teams cannot truly own their delivery stack and still depend on centralized support for deployment, provisioning, and security. The missing piece in achieving real, sustainable DevOps autonomy is platform engineering. Internal Developer Platforms (IDPs) serve as the foundation for self-sufficient teams, embedding best practices into reusable infrastructure, and empowering developers to move at speed without compromising reliability or governance. Here are five examples: 1. Infrastructure Without Friction DevOps autonomy is only real when developers can provision infrastructure, deploy code, and manage services without constant ops intervention. IDPs encapsulate infrastructure-as-code templates, security policies, and networking rules into curated modules. This allows teams to spin up environments at will without touching Terraform, Kubernetes, or ...

This week in AI dev tools: Slack’s enterprise search, Claude Code’s analytics dashboard, and more (July 18, 2025)

Slack’s AI search now works across an organization’s entire knowledge base Slack is introducing a number of new AI-powered tools to make team collaboration easier and more intuitive. “Today, 60% of organizations are using generative AI. But most still fall short of its productivity promise. We’re changing that by putting AI where work already happens — in your messages, your docs, your search — all designed to be intuitive, secure, and built for the way teams actually work,” Slack wrote in a  blog post . The new enterprise search capability will enable users to search not just in Slack, but any app that is connected to Slack. It can search across systems of record like Salesforce or Confluence, file repositories like Google Drive or OneDrive, developer tools like GitHub or Jira, and project management tools like Asana. “Enterprise search is about turning fragmented information into actionable insights, helping you make quicker, more informed decisions, without leaving Sla...

Report: 71% of tech leaders won’t hire devs without AI skills

As AI becomes more ingrained within the software development life cycle, tech leaders making hiring decisions are saying AI and machine learning are becoming non-negotiable skills. 71% of respondents to a new study from Infragistics say that they won’t hire developers without those skills. The 2025 App Development Trends Report , conducted in partnership with Dynata, features insights from over 300 U.S. tech leaders surveyed between December 2024 and January 2025.  Thirty percent of respondents said that one of their top challenges this year is recruiting qualified developers. In addition to hiring for AI skills, 53% of leaders are also looking for cloud computing skills, 35% are looking for problem solving skills, and 35% are looking for developers who use secure coding practices. “AI is rapidly transforming how businesses develop applications–from streamlining workflows to mitigating security risks—but the technology alone isn’t powerful without a skilled team behind it,” sai...

Slack’s AI search now works across an organization’s entire knowledge base

Slack is introducing a number of new AI-powered tools to make team collaboration easier and more intuitive. “Today, 60% of organizations are using generative AI. But most still fall short of its productivity promise. We’re changing that by putting AI where work already happens — in your messages, your docs, your search — all designed to be intuitive, secure, and built for the way teams actually work,” Slack wrote in a blog post .  The new enterprise search capability will enable users to search not just in Slack, but any app that is connected to Slack. It can search across systems of record like Salesforce or Confluence, file repositories like Google Drive or OneDrive, developer tools like GitHub or Jira, and project management tools like Asana.  “Enterprise search is about turning fragmented information into actionable insights, helping you make quicker, more informed decisions, without leaving Slack,” the company explained. The platform is also getting AI-generated cha...

10 Best DevOps Automation Tools in 2025 Neeraj Mishra The Crazy Programmer

DevOps tooling has become mission-critical. What used to be a niche engineering function is now a core business driver. And with the DevOps automation market projected to hit $72.81 billion by 2032 , your choice of tools can literally make or break your product velocity. Whether you’re a CTO at a scale-up, a DevOps engineer in the trenches, or a founder juggling release chaos, choosing the right automation tools is no longer optional, it’s strategic. After diving deep into what’s working across the industry, here’s a fresh, no-fluff look at the top DevOps automation tools actually making a difference in 2025. Data-driven, real-world examples, and yes, links included. Why It Matters More Than Ever DevOps isn’t just a buzzword anymore it’s the backbone of modern software delivery. If you’re looking to implement or optimize your pipeline, check out our DevOps services to get started the right way. 85% of organizations are using DevOps practices 49% say it helps them ship faster ...

Anthropic’s Claude Code gets new analytics dashboard to provide insights into how teams are using AI tooling

Anthropic has announced the launch of a new analytics dashboard in Claude Code to give development teams insights into how they are using the tool.  It tracks metrics such as lines of code accepted, suggestion acceptance rate, total user activity over time, total spend over time, average daily spend for each user, and average daily lines of code accepted for each user. These metrics can help organizations understand developer satisfaction with Claude Code suggestions, track code generation effectiveness, and identify opportunities for process improvements.  According to Anthropic, by tracking these metrics, development teams will be able to better assess the ROI of AI and see where they are getting the most value.  The company says that an analytics dashboard was one of the most requested features from its enterprise customers, and that it marks another step in the company’s mission to enable engineering teams to adapt their AI practices as things evolve.  The...