open-source

RPM 6.1.0 adds PKCS11 hardware-token signing and macro modifiers, the first release under a new versioning scheme modeled on the Linux kernel.

Grafana 13.2 brings a generally available shared query library, Git Sync support for GitHub Enterprise and webhook-based GitLab/BitBucket sync, and a public-preview view panel sidebar for viewers.

DuckDB's team previewed version 2.0, codenamed Cyanoptera, replacing its PostgreSQL-derived SQL parser with an extensible PEG-based parser and adding client/server mode and triggers.

Researchers found one threat actor ran typosquatting campaigns on RubyGems and npm days apart, sharing an identical Rust loader and Go infostealer.

GitHub now feeds Dependabot malware alerts from OpenSSF's malicious-packages data across npm, PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer.

Cloudflare open-sourced @cloudflare/ci, a CI/CD SDK that replaces YAML pipelines with TypeScript running on Cloudflare Workflows.

An open-source Rust vector index built on Google Research's TurboQuant algorithm reports beating FAISS on speed, memory and insertion latency in benchmarks published alongside its 1.0.0 release.

Mitchell Hashimoto's new startup Superlogical is building a client-server terminal multiplexer on his Ghostty terminal engine, aiming to fix the latency of tmux, Zellij, and GNU Screen.

Linus Torvalds released Linux 7.2 on August 16, 2026, headlined by cache-aware CPU scheduling, default Btrfs large-folio support, and a raft of late-week DRM scheduling reverts.

Modular released the Mojo compiler and toolchain as open source under the Apache 2.0 license, one week after the language hit 1.0.

Rust's next-generation borrow checker, Polonius Alpha, is now live on nightly for testing, with the project aiming to stabilize it before 2026 ends.

rsync 3.5.0, released August 13, patches 33 CVEs found through an audit, fuzzing, and outside researchers, following the disruptive May 3.4.3 security release.