Preact 11.0.0 shipped on September 30 after beta and RC builds that dropped IE11 and removed SuspenseList; 11.0.1 followed on October 8 with Suspense and ref fixes.
The fifth annual State of Open Source in Europe report links sovereignty goals to upstream participation, and counts 48% of organizations running private forks that cost an average of 311 hours per release cycle.
Qdrant's v1.19.2 release notes list faster sparse-vector upserts, a fix for filtered HNSW searches returning no results, GCS and Azure Blob snapshot support, and two security changes.
SGLang v0.5.21 lets PD instances switch between prefill and decode without a restart, makes a Rust prefix-cache core the default, and removes deprecated endpoints.
GitHub says unvalidated npm trusted publishing configurations now expire 48 hours after creation, and npm now rejects trusted publishing tokens from GitHub Actions issue_comment events.
The Apertus project's 1.5 release adds image and audio understanding, an optional thinking mode and a 262,144-token window to its 8B and 70B open models, under Apache 2.0.
The open-source Goose agent shipped v1.54.0 on October 8 with HTML session export and a first-time mode prompt, following v1.53.0's MCP Apps window, SSRF guard and Meta Muse Code provider.
The Rust Release Team's 1.99.1 point release, dated October 15, fixes three regressions: a missing wcslen symbol, FFI bool return values on x86_64, and rust-lld on macOS.
OpenTofu 1.12.8, published October 14, 2026, lists an HTTP/2 excessive-CPU fix for tofu init; a maintainer's pull request proposes shipping the v1.13 fix in 1.13.2.
NVIDIA's TensorRT-LLM v1.4.0rc0, published October 14, 2026, labels two API changes (BREAKING) in its release notes and lists five known issues.
The Linux Foundation says the BUILD Foundation is operational as of October 14, 2026, with six initial members and funding priorities for Bazel maintainers, documentation and supply chain security.
PgBouncer 1.26.1, dated October 14, fixes CVE-2026-107350, CVE-2026-107349 and CVE-2026-107348 in versions up to 1.26.0, and changes how ignore_startup_parameters interacts with search_path.