☕️ Torvalds embraces AI code review for Linux

Hi there, this is your daily ☕️ DevShot.

In today's DevShot:

🐧 Torvalds embraces AI code review for Linux

🔑 Canva revokes millions of sessions with S3

🤖 Meta's Muse Glimmer runs on one GPU

🐙 GitHub Code Quality now generally available

☕ Java's JEP 401 redefines == for objects

⚡ Convex adds one-command Expo backend

Plus: 🎁 5 other news you might like, 🛠️ 5 tutorials, 🧰 6 tools, and 📚 5 papers.

• Linus Torvalds has accepted AI and LLM tools as a permanent part of Linux kernel review, after Linux 7.2-rc7 landed on August 9 with over 400 fixes he directly credits to automated scanning.
• The candidate touches nearly every subsystem, including a memory management fix in ptdump that closed an eight-year-old use-after-free race Syzbot flagged in June, with Claude Opus 4.8 helping trace the root cause.
• Kernel policy still requires a human to triage and sign off on every AI-assisted contribution, and Torvalds settled the debate in July, telling objectors they could fork or leave; Linux 7.2 stable is expected around August 16.

• Canva rebuilt its session revocation system to handle hundreds of millions of active sessions, storing revocation data in Amazon S3 as compact immutable records instead of hammering MySQL on every deployment.
• Gateways download the 12-hour revocation window as 30-minute S3 objects, each revocation a 16-byte binary record searched in sorted in-memory arrays, cutting the cache footprint by ~88% while conditional GETs fetch only changed chunks.
• Asynchronous workers process over 2,000 revocations per second and merge them using conditional PUTs for optimistic concurrency, letting Canva shrink its revocation database to two read replicas and scale load with write throughput rather than gateway count.

• Meta released Muse Glimmer, a 30-billion-parameter open-weight agent model that runs locally on a single 24GB consumer GPU like an RTX 4090 or a 32GB Apple Silicon Mac, keeping sensitive workflows off the cloud.
• Shipping under Apache 2.0 with weights on Hugging Face, the model was trained around the agent loop, planning, tool calls, self-checking and failure recovery, and ~4-bit quantization shrinks its weights under 20GB with only 0.2-1% accuracy loss.
• DFlash speculative decoding, where a drafter proposes 16-token blocks the main model verifies in parallel, roughly triples generation speed on an RTX 5090 to ~233 tokens/sec, cutting the latency that accumulates across an agent's many turns.

• GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team, pairing CodeQL analysis with AI-assisted detection of maintainability and reliability issues and Copilot Autofix suggestions surfaced in pull requests.
• On a pull request it reports findings in context and flags test-coverage impact, while on the default branch it surfaces existing quality debt, with rulesets enforcing thresholds and an evaluate mode for gradual rollout.
• It's a separate paid product, not part of Advanced Security, priced at $10 per active committer monthly plus usage charges for AI features; preview users should review where it's enabled to avoid unexpected costs.

• Java's JEP 401 landed as a preview in JDK 28, adding value classes: identity-free instances with implicitly final fields that redefine == to compare field values rather than object references.
• Declaring a class with the value modifier makes its fields final and bans synchronized instance methods, while == succeeds when operands share the same class and equal fields, comparing reference-typed fields recursively.
• Enabling the preview turns primitive wrappers and other value-based JDK classes into value classes, letting the JVM scalarize or flatten them-sometimes into 64 bits-though it falls back to normal allocation when optimization fails.

• Convex and Expo teamed up to let you provision and wire a reactive, fully typed backend to an Expo app with a single EAS CLI command, skipping separate signups, dashboards, and copy-pasted tokens.
• Under the hood the command creates or reuses a Convex team connection, spins up a project and deployment, writes your config, and sets the public deployment URL as an EAS variable across production, preview, and development.
• You write server functions in TypeScript and clients subscribe to them, so results update automatically when data changes; unlinking only strips EAS integration metadata and leaves your Convex data and deployments intact.