Signal
362 articles covering "open-source"
FINOS says its bank-backed OSERA alliance is operational, with six Premier members, a first patching standard and patches for 50-plus Spring and Java projects.
MLflow 3.17.0, published October 7, adds sub-resource permission tiers and opt-in daily trace analytics rollups, and its notes require stopping all writers for SQL schema upgrades.
System76's COSMIC desktop now requires contributors to declare no AI-generated content in pull requests, while GNOME's Michael Catanzaro argues projects should still accept AI-generated vulnerability reports.
NATS Server v2.15.1 and v2.14.8, both published October 9, remove legacy $GR. reply-prefix support and fix JetStream, leafnode, MQTT and permission-refresh bugs.
Ladybird's September report covers a week of Trail of Bits security testing, VideoToolbox hardware decoding on macOS, a separate media process, OffscreenCanvas and a crash reporter.
The CNCF Technical Oversight Committee voted to accept Meshery as an incubating project, with the foundation citing a 350% rise in commits and 7,065 contributors.
PGX Inc. released pgx-bm25 1.0, a C extension adding Okapi BM25 ranked full-text search to PostgreSQL 17 and 18 as an index access method with WAL and replication.
Google's Open Source Software Vulnerability Reward Program stopped accepting product vulnerability reports as of October 1, 2026, with an update promised in Q1 2027.
OpenSSH 10.6 disables the LZ77 coder in ssh and sshd to mitigate a CCS 2026 compression side channel, enables ssh-mldsa44-ed25519 signatures, and starts deprecating scp -R.
The minimalist Pico CSS framework says v2.1.1 is its final release and its repositories are archived, while its MIT license allows forks that use a different name.
In simulated cyber evaluations, GPT-6 Astra completed supply-chain attacks 29.2% of the time versus 6.3% for GPT-5.6 Sol, the UK's AI Security Institute reported.
vLLM 0.31.0 brings draft-model speculative decoding to Model Runner V2, adds a vllm preload CLI and a max-num-active-seqs cap, and removes tokenizer_mode="slow".