Open Source
125 articles RSS
Linux Foundation Launches BUILD Foundation for the Bazel Ecosystem With ASML, Canva, Datadog, EngFlow, Figma and Spotify as Initial Members
The Linux Foundation says the BUILD Foundation is operational as of October 14, 2026, with six initial members and funding priorities for Bazel maintainers, documentation and supply chain security.
OpenSSF Blog Says Privateer, a Plugin-Based Security and Compliance Evaluation Framework With an Optional LLM Review Step, Is Now a Sandbox Project
A post on OpenSSF's blog dated October 13 says Privateer was approved as a Sandbox project under the ORBIT Working Group; it has an optional LLM step and its results do not determine legal compliance.
HashiCorp Archives the Boundary Community Edition Repository, Saying No New Releases or Security Patches Are Currently Planned
The hashicorp/boundary README says Boundary Community Edition is no longer under active development and the repository is read-only, with no new CE releases or security patches planned.
Bitwarden Says Its App-Store Apps Will Become Commercially Licensed Builds While the GPLv3 Version Stays on GitHub
A Bitwarden community-forum post says store-published apps will switch to commercially licensed builds; users are asking which future features will be commercial-only.
Deno Team Joins Cloudflare: Deno Runtime Gets One More Year of Monthly Releases, Deno Deploy Shuts Down in Six Months and celld Merges Into workerd
Deno's team is joining Cloudflare; Deno says it will support the runtime for one more year, run Deno Deploy for six months, and merge celld into workerd.
Let's Encrypt Will Default to 64-Day Certificates on February 10, 2027, With Staging Testing From October 14
Let's Encrypt says it will issue 64-day certificates by default from February 10, 2027, shortening authorization reuse to 10 days; 45-day certificates follow in 2028.
COSMIC Bans AI-Generated Contributions as a GNOME Developer Urges Projects to Accept AI-Found Vulnerability Reports
System76's COSMIC desktop now requires contributors to declare no AI-generated content in pull requests, while GNOME's Michael Catanzaro argues projects should still accept AI-generated vulnerability reports.
Ladybird's September Update Adds macOS Hardware Video Decoding and a Separate Media Process After a Week of Security Testing With Trail of Bits
Ladybird's September report covers a week of Trail of Bits security testing, VideoToolbox hardware decoding on macOS, a separate media process, OffscreenCanvas and a crash reporter.
Pico CSS Is No Longer Maintained: v2.1.1 Is the Final Release, Repositories Archived, and the MIT License Lets Anyone Fork
The minimalist Pico CSS framework says v2.1.1 is its final release and its repositories are archived, while its MIT license allows forks that use a different name.
Siemens Ends OpenRadioss, Removing Public Repositories for the AGPL Crash-Simulation Solver
Siemens is retiring the OpenRadioss project it inherited from Altair; its GitHub organization shows no public repositories, and source access moves to an approved-partner program.
Samba 4.25 Ships Experimental SMB3 Persistent Handles, Cluster Functional Levels and a Ceph Object Gateway Module
The first stable Samba 4.25 release adds experimental SMB3 Persistent Handles, a cluster functional level for safer rolling upgrades, and Ceph Object Gateway shares.
postmarketOS Rebrands as Nura After an 18-Month Naming Process, Citing Trademark and Pronunciation Problems
The mobile Linux OS postmarketOS is now Nura, moving to nura.eco and filing a trademark after a naming process of roughly a year and a half.