GLM-5.2, a 753B-parameter text-only model from Z.ai, is now the top open weights model on the Artificial Analysis Intelligence Index, outperforming MiniMax-M3, DeepSeek V4 Pro, and Kimi K2.6. It features a 1 million token context window and ranks second on the Code Arena WebDev leaderboard, despite lacking image input capabilities.
In 2025, the economics of code production shifted dramatically, making code generation effectively free and instant. This change caused a cultural shift in software development, where lines of code moved from being carefully curated to being disposable and regenerable.
Georgi Gerganov confirms that Qwen3.6-27B is highly capable for coding tasks, noting its daily use on local hardware like M2 Ultra and RTX 5090. He describes using a minimal pi agent with a short system prompt to align it with his workflow, highlighting its utility for maintaining open-source projects.
Claude Fable 5 was banned under export controls after researchers demonstrated it could 'fix' code with known vulnerabilities. The model successfully generated patches and test scripts for security flaws, a capability essential for defensive cybersecurity. The researchers argue this is a legitimate security function, not a threat, and that banning such models undermines real-world cyber defense.
Katie Moussouris, a cybersecurity expert, reported that Anthropic shared the White House's Fable jailbreak report with her for evaluation. She noted that Fable refused to analyze insecure code but complied when asked to fix it, describing this as the model functioning as intended in cyberdefense.
Datasette has released a new plugin, datasette-apps, enabling self-contained HTML+JavaScript applications to run in a secure iframe sandbox. These apps can execute read-only or write SQL queries against Datasette databases, with built-in security features like CSP headers and sandbox restrictions to prevent data exfiltration or unauthorized access.
Datasette 1.0a34 introduces tools to insert, edit, and delete rows within the interface. These features are available on table pages and as action items on row pages, addressing a long-overdue capability in the UI.
Simon Willison configured Cloudflare's CAPTCHA to activate only for search queries containing at least one ampersand. The rule uses a custom filter: (http.request.uri.path wildcard r"/search/*" and http.request.uri.query contains "&"). This allows simple searches like /search/?q=lemur to pass without CAPTCHA.
datasette-agent 0.3a0 introduces the execute_write_sql tool that prompts users before writing to databases, ensuring permission checks are respected. The update also enhances datasette agent chat with user approval support, new command options like --unsafe for auto-approval, and plain text tool outputs for CLI display.
datasette-apps 0.1a2 introduces a new apps-set-csp permission to guard custom network and CSP origins, with an optional allow-list for non-privileged users. The release also improves keyboard navigation in the stored query picker and fixes issues with link confirmation and logging panels in full-screen mode.
datasette-apps 0.1a3 fixes a bug allowing users without create-app permission to create apps. It also resolves an issue where non-owners could edit private apps, aligning edit and delete permissions with view permissions.
datasette-acl 0.6a0 expands permissions from table-level to general resource sharing. The plugin enables multi-user Datasette instances to grant fine-grained access control over resources.
The click-to-play Web Component displays a still image with a click-to-play button that loads a GIF on demand. It supports progressive enhancement, allowing GIFs to be loaded only when users interact with the image.
Brent Simmons retired a year ago and has since focused on improving NetNewsWire, an open-source RSS reader first released in 2002. The project continues to evolve without commercial pressure, maintaining its commitment to free and accessible software.
datasette-tailscale 0.1a0 is an experimental alpha plugin that enables Datasette to run with a Tailscale sidecar, connecting to a Tailnet via localhost. It uses Python bindings for the tailscale-rs library and allows access to http://datasette-preview/.