Microsoft's TypeScript 7.1 beta, announced October 20, adds source phase imports, import attributes in ambient modules, es2026 and content mappers; a release candidate is due in about a month.
A Linux Foundation report presented at All Things Open estimates 25% of incoming pull requests are low-quality AI output, while 52% average time savings on code authoring sit beside thin project governance.
GitHub's package firewall, in public preview for Enterprise Cloud, checks npm downloads against malware advisories, attestation changes and a minimum package age; only npm is supported.
Anthropic's user profiles let API platforms tag each request with an end customer's ID, so a safety restriction or ban can apply to one customer; related webhook events are not yet live.
GitHub made open source license compliance generally available for Enterprise Cloud, including data residency, with audit log events, policy APIs and a package-check endpoint for coding agents.
An attacker replaced download archives on five OVHcloud CLI releases on October 19; a customer's pinned SHA-256 caught it, and OVHcloud had not enabled GitHub's release immutability.
RabbitMQ 4.4.0, released October 19, adds delayed delivery on quorum queues, a v2 classic-queue file format that blocks downgrades, and stricter OpenID Connect discovery checks.
Grafana's October 13 patch releases fix four CVEs rated Medium (CVSS 5.3 to 6.5) in Git Sync, the Prometheus rule conversion API and the Azure Monitor data source.
GitHub says agentic autofix is generally available for Enterprise Cloud customers with Code Security or Advanced Security, assigning alerts to Copilot and billing AI Credits plus Actions minutes.
In its iOS, iPadOS, macOS and visionOS 27 releases, WebKit blocks network access to identity resolution services at the domain level, so they cannot receive users' email addresses.
A Go blog post says Go 1.27's net/http now drains unread HTTP/1 response bodies for up to 50 ms or 256 KB on close, so connections can be reused.
OpenAI's changelog lists prompt-to-voice for all API customers on October 16 and native Decisions integration in GPT-Live on October 15, plus nine new voices.