Signal
151 articles covering "open-source"
WordPress 7.0 arrives May 20 with a built-in AI Client API and a wp-admin refresh, after real-time collaboration was cut from the release over stability concerns.
Debian's release team has switched on a migration block for any package that fails to build reproducibly, with 98.29% of architecture-independent packages already passing.
After four years of promises, Warp released its terminal client on GitHub under AGPLv3, with OpenAI sponsoring a contribution workflow that has agents writing code while humans focus on review.
Vim 9.2.0435 fixes an OS command injection in :find completion where backtick-enclosed shell commands inside the path option ran during Tab completion, with a modeline-set path enabling exploitation by simply opening a malicious file.
Zyphra's open-weight ZAYA1-8B uses 760M active parameters out of 8.4B total and was trained on a 1,024-GPU AMD Instinct MI300X cluster, narrowing the gap to frontier reasoning models on math benchmarks.
Apache HTTP Server 2.4.67 fixes CVE-2026-23918, a double-free in mod_http2 that triggers on early stream reset and may enable remote code execution on Debian-default builds.
Release manager Hugo van Kemenade postponed Python 3.15.0 beta 1 by two days to May 7, 2026, marking the feature freeze for one of the language's largest releases in years.
The DevTeam released NetHack 5.0.0 on May 2, ending an 11-year wait since 3.6.0 and folding more than 3,100 fixes, a Lua-driven dungeon and quest pipeline, and full C99 source into the 39-year-old roguelike.
PEP 772 was accepted on April 16, 2026, establishing an elected five-member Python Packaging Council with authority over standards covering pip, setuptools, and PyPI.
OpenAI published Symphony on April 28 as an open-source specification for orchestrating Codex coding agents directly off a Linear board, with internal teams reporting a 500% jump in landed pull requests.
On April 28, 2026, Microsoft published the earliest known DOS source code under the MIT License, including the 86-DOS 1.00 kernel and PC-DOS 1.00 development snapshots transcribed from Tim Paterson's printouts.
Attackers published lightning 2.6.2 and 2.6.3 to PyPI on April 30, executing an obfuscated JavaScript payload to harvest cloud credentials from anyone who imported the package. Maintainers quarantined the malicious builds within 42 minutes.