Aikido and StepSecurity say stolen GitHub credentials have pushed a CI secret stealer since November 10; their counts differ and no cited source says how the credentials were obtained.
Ubuntu's documentation lists seven commands configured to use GNU Coreutils in 25.10, five in 26.04 LTS and none in 26.10; press and project sources show bugs surfacing through scripts, an audit and image builds.
OpenAI's November 4 API release adds a complexity setting, SVG and GIF output and markup edits; the API reference says GIF requires preview access, the 2.6 pages list Batch as not supported, and gpt-image-2 is deprecated for removal on February 10, 2027.
The Java language team says it has ceased development of Primitive Types in Patterns, instanceof, and switch after five previews; the feature will be removed from JDK 28, and Constant Patterns is planned.
Git 2.56.1 and backports to the 2.50 through 2.55 series fix six CVEs announced November 10, 2026; Git for Windows 2.56.1 was published at 22:13 UTC that day.
Reports on Broadcom's vSphere Express cite up to 128 cores and a $9,600 figure that none of the cited reports attributes to Broadcom; analysts split on the EEA vSphere 8 terms.
Fedora 45 was announced November 3 after two NO-GO calls from its October 20 target; Linuxiac and Phoronix list kmscon, enforced RPM signatures and restricted ptrace.
InfoQ reports Angular's ngp preprocessor does its analysis in Rust on Oxc; a Ninja Squad benchmark measured 2x to 3x faster cold builds, while Angular's README calls ngp an early-stage prototype.
Google's developer blog says agents ignored inline TODO bug references in 94% of encounters, and that unprompted detours to them added 70% more steps per session.
Apple, Google, JetBrains and GitHub document running other vendors' coding agents in Xcode, Android Studio, Air and GitHub; their pages differ on who lists the agents, which account is used and what usage and audit data they describe.
Google's spend caps, now generally available, pause one listed service in a project; AWS's limits pause a whole project in a gradual rollout; Azure's limit equals subscription credit.
Chrome's documentation dates XSLT's removal from Stable to Chrome 158 on November 17, 2026, outside origin-trial and enterprise-policy exceptions; Edge's notes say Edge 159. A crawl study estimates about 120 broken pages.