open-source

Mozilla revoked and replaced a GPG signing subkey after an unencrypted copy leaked into a private GitHub repo, finding no evidence of unauthorized use.

HEIR compiles pre-trained AI models to run inference on fully homomorphic encrypted data, letting servers process private data without decrypting it.

A RepoComplianceBench study of four frontier coding agents found they open contribution-rule files only 3.5% of the time and never voluntarily withdraw AI-banned contributions.

DeepSeek released its Harness agent runtime as MIT-licensed open source and rolled out DeepSeek-V4-Pro with native OpenAI Responses API support.

Modular released Mojo 1.0 on August 11, promising API stability and pledging to open-source the compiler in 2026, two months after Qualcomm agreed to buy the company.

An unpatched SQL injection flaw in GeoServer's jsonArrayContains function is already being probed by attackers, watchTowr says, with no CVE or fix yet available.

Podman 6.1 ships volume renaming, a machine restart command, Quadlet ImageVolume support, and IPv6 rootless port forwarding.

Node.js and Deno creator Ryan Dahl has open-sourced celld, letting developers run Cloudflare's Durable Objects and Workers APIs on their own S3-backed infrastructure.

OpenAI released the command-line tool and SDK for Codex Security, formerly Aardvark, under Apache-2.0, while the underlying scanner stays limited-beta.

OPI Abstraction v0.1.0 introduces a vendor-neutral API layer across 26 repositories and a first production deployment blueprint for DPUs and IPUs.

OpenSSH 10.5 patches a locking bypass in ssh-agent and two other flaws, and the project says a surge in AI-assisted vulnerability reports is pushing it toward faster, on-demand security releases.

OpenProject's 17.7 release adds a capacity-planning resource management module for Enterprise plans, plus departments, work schedules, and multiple active sprints for all users.