On August 5, 2026, Novee Security demonstrated at Black Hat USA that a GitHub issue opened by an account with no write access was enough to execute arbitrary code on the CI runners behind Claude Code, Gemini CLI, and OpenAI Codex repositories. If your CI/CD pipeline executes code from GitHub issues without sandboxing, treat this as a CVE with no patch — yet.

Docker promoted Buildx Bake to general availability with Docker Desktop 4.38, eliminating the last barrier to multi-platform builds for teams still juggling separate per-architecture scripts.