GitHub made open source license compliance generally available for Enterprise Cloud, including data residency, with audit log events, policy APIs and a package-check endpoint for coding agents.
An attacker replaced download archives on five OVHcloud CLI releases on October 19; a customer's pinned SHA-256 caught it, and OVHcloud had not enabled GitHub's release immutability.
RabbitMQ 4.4.0, released October 19, adds delayed delivery on quorum queues, a v2 classic-queue file format that blocks downgrades, and stricter OpenID Connect discovery checks.
Grafana's October 13 patch releases fix four CVEs rated Medium (CVSS 5.3 to 6.5) in Git Sync, the Prometheus rule conversion API and the Azure Monitor data source.
GitHub says agentic autofix is generally available for Enterprise Cloud customers with Code Security or Advanced Security, assigning alerts to Copilot and billing AI Credits plus Actions minutes.
In its iOS, iPadOS, macOS and visionOS 27 releases, WebKit blocks network access to identity resolution services at the domain level, so they cannot receive users' email addresses.
A Go blog post says Go 1.27's net/http now drains unread HTTP/1 response bodies for up to 50 ms or 256 KB on close, so connections can be reused.
OpenAI's changelog lists prompt-to-voice for all API customers on October 16 and native Decisions integration in GPT-Live on October 15, plus nine new voices.
JAX 0.12.0, tagged October 19, adds erfcinv, a polynomial primitive, defremat and a proxy backend, and removes jax.custom_remat and support for AVX-only CPUs.
Vitest 5.1.0-beta.1, a prerelease published October 19, adds CLI flags to rerun failed tests or tests affected since the last run, plus Temporal support in vi.setSystemTime().
Bloom Security says SlugFest let attackers claim freed GitHub slugs to publish to over 1,500 npm packages; GitHub now expires unvalidated trusted publishing configurations after 48 hours.
Gentoo has masked its Chromium package and set removal for October 24 unless a volunteer takes over, as maintainers cite long builds, fast releases and a four-release lag.