GoKawiil
Tech News
A new open-source project called OKF Agent Memory gives AI coding agents a standardized way to retain project knowledge across sessions, storing it as plain Markdown files with YAML frontmatter directly inside a repository's knowledge/ folder. Built on the Open Knowledge Format v0.2, it combines a spec, behavioral conventions, an agent skill layer, and a Go-based CLI/library for parsing, validation and search.
A developer suggests flipping the typical .gitignore convention: instead of listing files to ignore, developers should block everything with a wildcard and explicitly allow only the file types they want tracked, such as source files, README, and module files. This approach aims to prevent common mistakes like committing .DS_Store files, node_modules, IDE configs, or sensitive environment variables. The post also recommends using 'git check-ignore -v' to debug tracking issues and mentions lazygit as a useful Git terminal tool.
Zed, the Rust-based multiplayer code editor from the team behind Atom and Tree-sitter, positions itself as a faster, lighter alternative to VS Code and Cursor. Its latest update adds tabular previews for CSV, TSV, PSV and SSV files with sortable columns and filtering, plus new Git blame and stashing actions and reduced memory usage for large files. Community contributors also improved DeepSeek model support, JetBrains-style keymaps, Markdown table sizing, and SSH authentication handling.
A developer examining Git's command-line safety flags found that removing or moving a git worktree containing submodules requires the --force flag, a restriction dating back to git worktree's 2015 introduction. The analysis traces how git worktree add had to be patched to ignore submodule.recurse to avoid corrupting empty submodule paths, and argues that git submodules function as a de facto package manager, with the gitlink SHA acting as a lockfile entry and .gitmodules as the manifest.
The Linux Foundation's IT infrastructure director revealed that AI crawlers hunting for clean, LLM-free training data are hammering the organization's kernel.org git servers, consuming more CPU power than all legitimate human and tool access combined. Because cgit can generate near-infinite valid URLs for commits, diffs, and patches across hundreds of forks, scrapers are redundantly fetching duplicate data at massive scale.
The maintainer of git.kernel.org reports that AI training crawlers are consuming more CPU resources than all legitimate access combined, including actual git clones. Across five geographically distributed nodes, 14 CPU cores are constantly occupied just rendering git commits as HTML pages for these bots, even though the same data is available far more efficiently via direct git clone.
Shadowserver reports over 8,300 internet-facing Gitea instances remain unpatched against CVE-2026-60004, a critical code injection bug already being exploited in the wild. The flaw lets an attacker with repository write access run arbitrary shell commands as the Gitea service account, and since Gitea allows open self-registration by default, unauthenticated users can create an account and repository to gain that access. Gitea patched the issue in version 1.27.1 on July 27, and CISA has added it to its known exploited vulnerabilities list, giving federal agencies just three days to remediate.
CISA has added a critical Gitea vulnerability to its Known Exploited Vulnerabilities catalog after confirming attackers are exploiting it in the wild. The flaw, found in the diffpatch API endpoint, lets someone with repository write access run shell commands as the Gitea service account, and since many installations allow open self-registration, even unauthenticated attackers can gain that access simply by signing up and creating a repository. Gitea patched the issue in version 1.27.1 released July 27.
Walgit is a new open-source Git hosting server written in Rust that runs as one binary with no database or leader node, storing all repository data directly in an S3-compatible bucket or Google Cloud Storage. It supports smart HTTP fetch/push, Git LFS, bundle-uri clones, a web browsing UI, a JSON API with SDK, per-repo push policies and webhooks, letting repositories scale beyond the size of the host machine. Any number of servers can point at the same bucket and serve identical repositories without coordination, since the bucket itself is the source of truth.
CodeFloe has launched as a professionally hosted public Git forge, using the open-source Forgejo project as its underlying platform. The service provides standard forge features like repositories, issues, pull requests, releases, packages, APIs and migration tools, while adding its own integrations on top through a publicly maintained fork.