Software Development

TDF removed 30+ Collabora staff from membership—including 7 of the project's top 10 core committers—citing a legal dispute clause in newly adopted bylaws, prompting Collabora to announce a separate development track.

GitLab's April release adds a CI Expert Agent that generates pipelines from repository analysis, moves Agentic SAST vulnerability resolution to GA, and delivers natural-language DevOps analytics.

Canonical releases Ubuntu 26.04 LTS on April 23, shipping Rust-based coreutils and sudo as defaults, GNOME 50 without X11, and a 6 GB RAM floor that redefines the distribution's baseline for the next decade.

Anthropic's first major Bun release since acquiring the runtime tackles long-running-process leaks, adds isolate, parallel and shard test flags, and lands days after Pulumi made Bun a fully supported infrastructure-as-code runtime.

A deserialization guard bypass in ERB forced an out-of-band Ruby 4.0.3 on April 21, four months after 4.0's ZJIT debut established Ruby's new Rust-backed compiler.

Kotlin 2.3.20 ships name-based destructuring, default Build Tools API on Kotlin/JVM, Gradle 9.3.0 compatibility, and Wasm string performance gains of up to 4.6 times.

pnpm 11's release candidate ships minimumReleaseAge=1 day, blockExoticSubdeps, and strictDepBuilds as defaults, baking lessons from the March 2026 Trivy and axios attacks into the package manager itself.

Git 2.54, released April 20, introduces a new history-editing command inspired by Jujutsu, config-based hooks, geometric repacking by default, and a pluggable object database built over two years and roughly 400 commits.

Kubernetes v1.36, releasing April 22, brings accelerated SELinux volume labelling to GA, expands Dynamic Resource Allocation for AI hardware, and permanently removes the insecure gitRepo volume driver.

Forgejo 15.0 lands as the project's new LTS release with repository-scoped access tokens, reusable workflow expansion, OpenID Connect support, and ephemeral runners.

Oracle has made the Karpenter Provider for OCI generally available, giving OKE users a more flexible way to scale Kubernetes worker nodes.

Rust 1.95 lands with a new `cfg_select!` macro, `if let` guards in `match`, stabilized APIs, and a stricter stance on custom target JSON on stable.