open-source

Microsoft's bounty program paid over $20 million to 562 researchers this year after expanding scope to cover open-source software and third-party components.

Turso, which rewrote SQLite from scratch in Rust, is now building a Postgres-speaking frontend on the same engine, aiming to be what its CEO calls 'the LLVM of databases.'

Home Assistant's August release removes the long-standing :8123 port requirement for new installs and strips 'advanced' and 'expert' wording from roughly 43 places in the app.

GitHub detailed a technical-preview Actions network firewall and rounded up npm and Actions defaults changed since February, drawing sharp Hacker News debate over delay-based defenses versus package signing.

Python 3.15.0rc1 shipped August 4 with the feature set frozen and no further ABI changes allowed, as the release team targets an October 1 final.

Transmission's maintainers have split the widely used BitTorrent client into a new project, ReTransmission, after a long-running disagreement over whether to add more maintainers.

CachyOS's August 2026 release rewrites the Shelly package manager from C# to Zig, moves the kernel-manager backend and Cachy-Update applet to Rust, and adds experimental Server Edition installer profiles.

The ASF graduated streaming-lakehouse project Apache Fluss and mailing-list archive browser Apache Pony Mail from its Incubator on August 6, 2026.

Five Rust teams adopted a policy on Aug. 5 letting contributors use LLMs to analyze and review code but barring LLM-authored PRs, comments, and docs, with a circuit breaker if AI PRs exceed 50% of merges.

Node.js shipped 11 CVE fixes across three High-severity HTTP/2 and Permission Model bugs on July 29, after two delays, while EOL versions 18 and 20 get nothing upstream.

Mistral AI open-sourced Shieldstral, a 3B-parameter safety classifier that judges content against natural-language policies without retraining, released as the first project from NVIDIA's Open Secure AI Alliance.

Red Hat and partners including NVIDIA, Microsoft, and IBM Research launched asago, an open source project that automates translating AI governance policy into deployable safety controls.