Issue #3 ·
Copilot Projects and computer use, Supabase Compute, free OpenAI API credits
Issue 3 of New this week: the releases from the past week that matter if you build with AI tools, each linked to its primary source. This week: GitHub's Universe launches for the Copilot app plus an open-source prototyping tool, free monthly API credits for ChatGPT Pro and Business, Supabase running agents inside your project, Replit Cloud Agents opening tested pull requests, Cursor's Agent SDK, and a Railway security notice worth acting on.
Get New this week by email
We'll ask you to confirm by email. See our privacy policy.
- newsSupabase
Supabase stops exposing new tables to the Data API automatically from October 30
Supabase's changelog says that from October 30, 2026, existing projects follow the rule new projects have had since May 30: a new table you create in the public schema can't be reached through the Data API (supabase-js, REST and GraphQL) until you add an explicit Postgres GRANT. Tables you already have keep their current grants, apps that connect to Postgres directly aren't affected, and RLS works the same as before. A missing grant returns error 42501, "permission denied for table", with a hint showing the GRANT to run.
Why it matters: If your AI coding tool creates Supabase tables for you, have it add GRANT statements alongside enabling RLS and adding policies, or the new table won't show up in your app.
Primary source ↗ - releaseGitHub Copilot
GitHub Copilot app adds Projects and computer use
GitHub's changelog says Projects in the GitHub Copilot app, now in public preview, let you describe a goal, add context such as repositories, design mocks, Slack threads or meeting notes, and have Copilot run as many agents as the work needs and bring back results such as pull requests for review. The app can also generate and edit images in chat, and computer use, in public preview on macOS and Windows, lets Copilot read app content, click controls and enter text in desktop apps after asking for your approval.
Why it matters: Work that spans several repos, or that lives in apps without an API, can be handed to Copilot as one project instead of many separate sessions.
Primary source ↗ - open-source
GitHub open-sources Replica, an AI prototyping tool
GitHub Design open-sourced Replica under the MIT license. It turns natural-language requests in the GitHub Copilot app into interactive prototypes guided by your team's own components, patterns and documentation, and an optional self-hosted Replica Hub lets teammates explore published prototypes and leave comments.
Why it matters: Prototypes come out looking like your product instead of a generic AI template, and the tool is free to adapt.
Primary source ↗ - pricingOpenAI API
ChatGPT Pro and Business subscriptions now include monthly OpenAI API credits
OpenAI's developer docs say eligible ChatGPT Pro and Business subscriptions can claim free monthly API credits by linking an API organization they own: $100, $200 or $500 for the matching Pro tier, and $20 per paid Standard seat or $100 per paid Premium seat for Business, pooled and capped at $500 per workspace per month. The subscription must be paid and at least seven days old, the first grant is prorated, and unused credits expire at the end of the billing cycle without rolling over.
Why it matters: If you already pay for ChatGPT Pro or Business, your side project's API calls may be covered without adding a payment method to the API platform.
Primary source ↗ - launchSupabase
Supabase Compute lets you run agents and background jobs inside your project
Supabase launched Compute in private alpha: services that run next to your Postgres data in the same project, for agents, APIs, long-running jobs and WebSocket services, deployed from Node, Deno or any Dockerfile with the Supabase CLI. Sizes are 2 GB with 1 vCPU or 4 GB with 2 vCPUs. During the alpha it is free through a waitlist, only for projects in us-west-2, meant for evaluation rather than production, and every service gets all of the project's secrets.
Why it matters: Agents and jobs that outgrow a 400-second Edge Function may not need a second hosting platform.
Primary source ↗ - releaseReplit
Replit Cloud Agents open tested pull requests on your company codebase
Replit says anyone on a team can now describe a change in plain language and Cloud Agents find the relevant code, make the change with a live preview, test it in isolated cloud sandboxes by clicking through the running app, and open a GitHub pull request or GitLab merge request with screenshots and video attached. Engineers approve what ships, and Replit says the feature is available for all Pro and Enterprise customers, with review-feedback memory in early access.
Why it matters: Non-engineers can turn a feature idea into a reviewed, tested pull request instead of a ticket.
Primary source ↗ - newsRailway
Railway asks all users to rotate environment variables after a security incident
Railway disclosed that an unauthorized third party may have accessed encrypted environment variables and, for some of them, obtained the decrypted contents. It recommends that all users immediately roll every environment variable stored in Railway, including API keys and private registry credentials, and review service logs for unusual activity. Railway's status page says new signups remain paused with no reopening date yet.
Why it matters: If you deploy on Railway and haven't rotated your keys since October 21, do it now.
Primary source ↗ - releaseCursor
Cursor's Agent SDK is generally available
Cursor's changelog says the Agent SDK is generally available: you define an agent as a folder of code with instructions, typed tools, skills and MCP connections, test it with evals, and deploy it to Cursor with agent-sdk deploy or run it on your own infrastructure. Agents can wake on GitHub, GitLab and Bitbucket pull request, comment and CI events, Slack mentions and DMs, webhooks, or a cron schedule.
Why it matters: Small team bots like a PR autofixer or an issue triager can be built, tested and deployed from one project folder.
Primary source ↗
