Software Development

A deserialization guard bypass in ERB forced an out-of-band Ruby 4.0.3 on April 21, four months after 4.0's ZJIT debut established Ruby's new Rust-backed compiler.

Kotlin 2.3.20 ships name-based destructuring, default Build Tools API on Kotlin/JVM, Gradle 9.3.0 compatibility, and Wasm string performance gains of up to 4.6 times.

pnpm 11's release candidate ships minimumReleaseAge=1 day, blockExoticSubdeps, and strictDepBuilds as defaults, baking lessons from the March 2026 Trivy and axios attacks into the package manager itself.

Git 2.54, released April 20, introduces a new history-editing command inspired by Jujutsu, config-based hooks, geometric repacking by default, and a pluggable object database built over two years and roughly 400 commits.

Kubernetes v1.36, releasing April 22, brings accelerated SELinux volume labelling to GA, expands Dynamic Resource Allocation for AI hardware, and permanently removes the insecure gitRepo volume driver.

Forgejo 15.0 lands as the project's new LTS release with repository-scoped access tokens, reusable workflow expansion, OpenID Connect support, and ephemeral runners.

Oracle has made the Karpenter Provider for OCI generally available, giving OKE users a more flexible way to scale Kubernetes worker nodes.

Rust 1.95 lands with a new `cfg_select!` macro, `if let` guards in `match`, stabilized APIs, and a stricter stance on custom target JSON on stable.

Cursor's April 2 release shifts the product toward multi-agent orchestration, with cloud-local handoff, review artifacts, and a plugin marketplace.

The new public-preview command installs, pins, updates, and publishes portable skills for Copilot, Claude Code, Cursor, Codex, Gemini CLI, and Antigravity — with git-backed provenance and an explicit prompt-injection warning.

Raspberry Pi OS 6.2 tightens security by requiring a password for sudo commands on new installations and replaces PulseAudio with PipeWire across the desktop stack.

Microsoft's third .NET 11 preview brings the first in-SDK drop of C# 15 union types, Zstandard support in ASP.NET Core, and cryptographically signed container images.