Software Development
577 articles RSS
Solid 2.0.0-rc.15 Release Notes List a Fix for Concurrent-Request Hydration IDs and an Experimental Server Hook for Router Link State
Solid's release notes for 2.0.0-rc.15, tagged October 13, 2026, describe fixes for server-render context under concurrent requests, a mid-parse hydrate() change and a new experimental link-state API for routers.
OpenSSF Blog Says Privateer, a Plugin-Based Security and Compliance Evaluation Framework With an Optional LLM Review Step, Is Now a Sandbox Project
A post on OpenSSF's blog dated October 13 says Privateer was approved as a Sandbox project under the ORBIT Working Group; it has an optional LLM step and its results do not determine legal compliance.
Scala 3.10.0, the First Scala Next Release, Makes A with B an Error and Stabilizes SIP-67; Maintainers Still Recommend Scala 3.9 LTS for Libraries
The Scala project announced 3.10.0 on 12 October 2026, removing legacy syntax, stabilizing SIP-67 and previewing three SIPs; its blog and GitHub notes differ on the strict-equality SIP.
GitHub Adds repository_creation:write and installation_repositories:write Permissions for Apps and PATs, Saying Repo Admins Can Add Approved Apps
GitHub says GitHub Apps and fine-grained PATs get two new repository permissions, repository admins can add org-approved apps, and apps gain offline_access.
HashiCorp Archives the Boundary Community Edition Repository, Saying No New Releases or Security Patches Are Currently Planned
The hashicorp/boundary README says Boundary Community Edition is no longer under active development and the repository is read-only, with no new CE releases or security patches planned.
GitHub Adds Anonymous Authentication for Organization-Level Dependabot Private Registries, but Two Docs Pages Still List Only Three Methods
GitHub's October 12 changelog adds an Anonymous option for organization-level Dependabot private registries; two docs pages read October 13 still list Token, Username and password, and OIDC.
Weaviate 1.40.1 and 1.38.21 Release Notes Cite Fixes for x/net CVE-2026-78663 and zlib CVE-2026-85091, While 1.39.12 Cites Only the x/net Fix
Weaviate published 1.38.21, 1.39.12 and 1.40.1 on October 12 and 13; the notes cite two CVE fixes, list no breaking changes or features, and do not describe the CVEs.
SQLite 3.54.0 Adds CLI Prompt Escape Sequences and a .diskused Command, Deprecates sqlite3_analyzer and Requires Windows Vista or Later
SQLite 3.54.0, dated 2026-10-09, reworks the sqlite3 CLI, adds query planner changes and new date modifiers, and ends Windows XP support, per the project's release log.
GitHub Opens Push Attribution to Enterprise Customers in Limited Public Preview, Adding a Pusher Identity and a "Committer must match pusher" Rule
GitHub's October 12 changelog says it now records the authenticated pusher of each commit and adds a ruleset condition that blocks mismatched committers, in a limited public preview for Enterprise.
Ruby 4.1.0-preview1 Adds Per-Ractor Garbage Collection and Windows YJIT Support, and Limits Class Changes to the Owning Ractor
Ruby's 4.1.0-preview1, published 12 October 2026, runs the default GC per Ractor, limits class modification to the owning Ractor and adds YJIT on Windows mswin.
Bitwarden Says Its App-Store Apps Will Become Commercially Licensed Builds While the GPLv3 Version Stays on GitHub
A Bitwarden community-forum post says store-published apps will switch to commercially licensed builds; users are asking which future features will be commercial-only.
GKE Sandbox Makes Its microVM Type Generally Available on Clusters Running 1.37.0-gke.4713000 or Later, With No GPU or TPU Support
Google's GKE release notes say the microVM sandbox type, built on Kata Containers and Cloud Hypervisor, became generally available October 7; Google's docs list nested virtualization as a requirement.