Comparing curl's switch to public handling of LOW and MEDIUM reports, Gentoo's sponsor search and the EU CRA reporting regime, using the Commission, The Register, FOSS Force and curl's maintainer.
LiteLLM's root-cause analysis says an Agent Platform master key committed on May 27 and never revoked led to the 1.107.0 compromise, replacing its earlier log-leak theory; GitHub commits show exfiltration workflows on October 10 and 12.
Reporting from TechCrunch, The Register and Artificial Analysis shows decision models judged by competing indexes, a game benchmark, vendor-run tests and a security study, with no single shared comparison.
The first 1.14 alpha adds cancellation tokens for tasks, a Project.toml key that selects the syntax version, labeled blocks, and a new exact package resolver.
A Valkey blog post reports that a three-shard Valkey 9 cache served 4,631 requests versus 3,692 on the same two 8-GPU nodes, at a cost of about 15% on top of the GPU bill.
Go 1.26.10 filters certificate chains through a set of eMudhra intermediates; Cilium, Terraform and OpenTofu have since released builds, and the Go thread debates the hardcoded approach.
Visual Studio Code 1.143 makes the Copilot harness the default for new sessions, adds a preview of side-by-side model comparison and an experimental cleanup for inactive agent worktrees.
Electron 45.0.0, published October 21, upgrades to Chromium 156.0.8078.48 and Node v24.22.0, lists breaking changes for preload scripts and screen capture, and ends support for Electron 42.
Cursor says its Origin git forge now integrates with over 20 apps, and any team building developer tools can submit one; Origin remains in early beta.
Hugging Face's Diffusers 0.42.0 adds FLUX.3 Image Klein, Bria Fibo 2.0, Kandinsky 6, SANA-WM and RFD4-Proteína, and now requires Python 3.11 or newer.
Pillow 13.0.0, released October 16, fixes 40 advisories published October 17, including two rated critical and an EPS filename argument injection in the Ghostscript call.
DeepSpeed 0.19.8 removes elastic training, Progressive Layer Dropping, Apex AMP and graph harvesting; configs that still set them now raise DeepSpeedConfigError.