GoKawiil
Tech News
Radicle disclosed two critical security vulnerabilities affecting every released version of its code collaboration stack: network traffic between nodes is unencrypted and can be read by anyone observing the path, and the connection handshake's peer authentication can be bypassed. Security researcher Konstantinos Maninakis reported the encryption issue on June 24, 2026, prompting the disclosure.
A developer describes discovering that git supports two additional ignore mechanisms beyond the well-known .gitignore file: a per-clone .git/info/exclude file and a global excludes file set via the core.excludesFile config option. Neither of these files gets committed to the repository, unlike .gitignore, making them suited for personal scratch files and editor or OS clutter respectively. The writer says an AI coding assistant, Claude, prompted the discovery by suggesting untracked personal notes be added to .git/info/exclude.
Git 2.56 ships with over 700 non-merge commits, introducing an experimental 'git history drop' subcommand that removes a specific commit and replays subsequent history, though it fails on repositories containing merge commits. The release also expands 'git refs' with create, delete, update, and rename subcommands, and adds several smaller usability improvements like pull suggestions in 'git status' and a '--delete-merged' flag for 'git branch'.
Foremerge is a new open-source coordination protocol that sits on top of Git to let multiple AI coding agents, such as Claude Code, Codex, or Cursor, share their intended changes before writing code. Each agent registers what function or component it plans to modify in a shared SQLite-backed list stored inside the project's .git folder, so overlapping or contradictory plans can be flagged before they merge. The current release, version 0.5.0, is a local-first, pre-1.0 MVP with a working CLI, JSON API, MCP server, and conflict detector, though it doesn't yet support coordination across multiple machines.
Rickub is a new Git hosting platform that bundles organization and repository management, merge requests, and an integrated AI reviewer called Athena that leaves inline comments and verdicts on every merge request. It also supports running existing GitHub Actions workflows unchanged, hosting OCI artifacts like container images, Helm charts, SBOMs and WASM in the same namespace as code, and offers CLI, API and MCP access using one token and permission model.
A reverse-engineering report by developer ferstar found that ZCode, the coding agent built by Z.ai around its GLM models, silently packages a user's entire workspace—including .git history, LFS caches, reflogs and global configs—encrypts it, and uploads the archive to Aliyun OSS whenever a user is logged in. The researcher captured a 313MB encrypted archive from a 345MB commercial project spanning over 42,000 files, plus 564 logged failed upload attempts during investigation.
A developer investigating unexpected disk usage discovered that Zhipu's ZCode AI coding app compresses and encrypts entire project workspaces—including .git history, LFS caches, reflogs and configs—and uploads them to Aliyun OSS without visible user consent. The encryption uses a server-issued RSA public key while the private key stays server-side, meaning neither the user nor the local client can ever decrypt the archives sitting on the user's own disk. In the investigated case, a 313MB encrypted baseline snapshot of a commercial project had failed to upload 564 times and remained queued locally.
A developer building an open-source Git server on top of object storage (Tigris) found that standard Git packfiles, designed for local disk and memory-mapped access, performed poorly when objects had to be fetched via byte-range guesses from cloud buckets. After an initial filesystem-shim approach failed at production scale, they created a new columnar packfile format built specifically for object storage, which required no changes to Git clients and performed well on real-world repositories.
East River Source Control, a startup operating quietly for over a year, published a post outlining why it believes existing tools like Git are struggling under the pressures of AI-driven, agentic software development. The company says it plans to announce its product soon but is first laying out its reasoning about where version control needs to evolve.
A developer describes abandoning Git for personal projects after learning of a proposal within the Git project to make Rust mandatory. Citing long experience with systems like RCS, CVS, SVN, Mercurial and Bazaar, they chose Fossil as a replacement, noting its C codebase, small footprint, and simpler workflow without a staging area.
A developer describes discovering git worktrees—a decade-old git feature they'd never used—after noticing tools like Claude Code create a separate worktree for each task so multiple AI agents can work on the same repository in parallel. The piece explains that worktrees let you check out multiple branches into separate working directories simultaneously, all sharing the same underlying repository data, unlike traditional branch switching which requires stashing and checking out.
A longtime version control industry veteran, who competed against Git with Plastic SCM and now works on Git performance at Origin, argues the field is undergoing its most significant transformation in two decades. He points to two converging pressures: AI coding agents generating commits at unprecedented volume, and growing developer interest in alternatives to GitHub's dominance.