GitHub made Copilot local sandboxing generally available, added local Ollama model discovery to its CLI, and Microsoft detailed a 53GB on-device MAI Code 1.1 Flash.
Anthropic's Claude Haiku 5.5 lists at $0.10 per million input tokens for prompts up to 100,000 tokens, versus $1 for Haiku 4.5, and adds a 1M-token context window and adaptive thinking.
Node.js 26.11.0 renames DatabaseSync and StatementSync to Database and Statement with aliases kept, adds --process-timeout, and 26.11.1 reverts three commits.
OpenAI says it will add invisible watermarks to ChatGPT and Codex text in the EU, and API developers anywhere can opt in; testing shows light synonym edits cut detection.
Gradle 9.8.1 fixes three high-rated flaws: two Java deserialization bugs in daemon communication and an SSL-failure repository fallback, plus three 9.8.0 regressions.
StepSecurity and Socket report that [email protected] on npm steals credentials and AI-tool configs, and installs a monitor that deletes files if a stolen GitHub token is revoked.
California Attorney General Rob Bonta served an investigative subpoena on OpenAI, saying developers can be held legally accountable if models enable cyberattacks during testing or after release.
Nuxt 4.6 ships a server-agnostic nuxt/server import surface, interop support for Vue 3.6 Vapor Mode and a root app secret, alongside Nuxt CLI v4.
PGX Inc. released pgx-bm25 1.0, a C extension adding Okapi BM25 ranked full-text search to PostgreSQL 17 and 18 as an index access method with WAL and replication.
GitHub made stacked pull requests generally available on October 6, adding approval-preserving rebases, merge-queue groups and worktree support in the gh stack CLI extension.
Google's Open Source Software Vulnerability Reward Program stopped accepting product vulnerability reports as of October 1, 2026, with an update promised in Q1 2027.
Lambda is securing up to $4 billion led by Coatue and Blackstone, per WSJ reporting, days after closing a $1.008 billion investment-grade GPU loan.