Replit patches infrastructure and asks some app owners to republish
· Summary by Vibe Code Weekly
Replit says it has patched its tooling, updated infrastructure, and deployed firewall protections for recent vulnerabilities affecting eMudhra, Node.js, PHP, LiteLLM, and the Linux kernel. Some customers should review issues in Security Center and republish affected apps to apply fixes; Replit says it will notify customers who need to take action.
Takeaway Replit’s managed security measures reduce customer work, but builders may still need to republish apps to activate certain patches.
Replit Agent can now prepare one-time supply purchases through Link and Visa, stopping for the owner’s approval before payment. It can also create and manage Google Ads campaigns, drafting assets, recommending budgets, and adding conversion tracking; purchasing is available to Core and Pro users in the US, while ads are available to Pro users worldwide.
Takeaway Replit is expanding its coding agent into business operations, letting founders handle purchases and customer acquisition from within Replit.
Replit describes Agent Habitat, an environment for giving company agents access to internal knowledge and systems within organization-defined boundaries. Its controls include scoped permissions, approval rules, credentials kept outside the agent’s context and added to authorized requests by a broker, plus isolation between the agent and the code-execution sandbox.
Takeaway The architecture shows how teams can delegate more work to coding agents while limiting access, protecting credentials and keeping activity accountable.
Replit says Cloud Agents let non-engineers describe changes in plain language, preview them in a running app, and open pull or merge requests for engineers to review. Agents can test changes in cloud sandboxes, attach screenshots and video, and carry review feedback forward; the offering is available to Pro and Enterprise customers, with workspace-memory improvements in early access.
Takeaway Replit is extending coding agents from app creation into company software workflows, while keeping engineers in charge of what ships.
Replit’s new Monitoring Agent uses production logs and metrics to investigate alerts, identify causes, and validate fixes. Builders can enable automatic publishing so the agent deploys validated fixes and emails a report; publishing remains optional.
Takeaway Replit is extending its coding agent into production maintenance, offering small teams an automated on-call option for apps hosted on the platform.
Replit is introducing three ways for enterprise customers to keep development or published apps in their own cloud: Full BYOC, BYOC for Published Apps, and Image Exports. The options range from running the full Replit platform in a customer tenant to deploying exported Docker images with the customer’s own infrastructure tools.
Takeaway Enterprise builders can use Replit while keeping app hosting and, in some configurations, the development platform within their own cloud environment.