open-source

Systemd 260 removes SysV init script support, introduces OverlayFS-based mstack container tooling, adds a Varlink metrics framework, and raises the minimum kernel to Linux 5.10.

DuckDB 1.5.0 introduces a VARIANT type that speeds JSON queries up to 100x, promotes GEOMETRY into core, overhauls the CLI, and delivers broad performance gains across more than 6,500 commits from nearly 100 contributors.

The Linux Foundation launches the OCUDU Ecosystem Foundation with 47 members including AMD, Nokia, NVIDIA, and Verizon to build an open-source radio access network stack for 5G and 6G, backed by the Pentagon's FutureG office.

Neovim 0.12.0, released March 29, adds a native plugin manager, inline LSP completions, a redesigned message interface, LuaJIT-powered performance gains, and built-in HTTP requests, setting the stage for a 1.0 release targeted in the next development cycle.

The CNCF incubating project ships runtime threat detection powered by CEL-based rules, a centralized security metadata store, and the first open-source controls for auditing AI agent configurations in Kubernetes clusters.

A Caltech spinout backed by Khosla Ventures has released a family of fully 1-bit language models under Apache 2.0 that compress an 8-billion-parameter model to 1.15 GB while matching full-precision rivals on standard benchmarks.

The Copilot SDK, now in public preview with support for five languages and bring-your-own-key authentication, exposes the same agent runtime powering GitHub Copilot CLI as a programmable library for building custom AI-driven tools and workflows.

Google DeepMind shipped four Gemma 4 model variants on April 2 under the OSI-approved Apache 2.0 license, replacing the restrictive Gemma Terms of Use and removing all barriers to commercial deployment, modification, and redistribution.

The CNCF Technical Oversight Committee has voted to accept Tekton, the Kubernetes-native CI/CD framework with 600-plus contributors and 11,000 GitHub stars, ending its tenure as a CD Foundation graduated project.

Oracle ends security patches for MySQL 8.0 on April 30, leaving 58 percent of monitored instances on an unsupported version with no fix path for new vulnerabilities.

A misconfigured npm package exposed 512,000 lines of Claude Code's TypeScript source code via a source map file pointing to Anthropic's cloud storage, marking the company's second data exposure in less than a week.

A 630-line Python script by Andrej Karpathy that lets AI agents autonomously run and iterate on ML experiments has become one of the fastest-growing open source projects of 2026, with Shopify's CEO among early adopters reporting double-digit performance gains.