open-source

Henrique Dias is retiring File Browser, archiving its GitHub repo on September 1 after concluding the decade-old codebase can't be patched into shape.

GCC's Steering Committee will decline copyright-significant contributions derived from LLM output, carving out exceptions for small changes and test cases.

GitHub says its Sponsors program has funneled more than $100 million to open source maintainers since 2019, with growth accelerating sharply.

System76 released COSMIC Epoch 1.5.0, fixing Chromium/Electron scaling bugs, a D-Bus deadlock, and raising the wallpaper limit from 100 to 500.

Five banks piloted a shared open source patching alliance; FINOS says AI-accelerated vulnerability discovery makes mutualized fixes urgent.

A critical Gitea vulnerability lets a repository writer convert a crafted patch into a live Git hook and run shell commands as the service account.

JFrog researchers turned a 16-year-old FFmpeg decoder bug, CVE-2026-8461, into working remote-code-execution exploits against Jellyfin and Nextcloud using one 50 KB video file.

Debian has opened a General Resolution with four competing proposals on AI-assisted contributions, from an outright ban to conditional acceptance, with no vote date set yet.

The React team merged a work-in-progress Rust rewrite of the React Compiler, and Vercel says early Turbopack tests found 20-50% faster compilation.

Codeberg e.V. members voted 358-144 to prohibit AI-generated 'vibe-coded' projects and to commit that Codeberg will never train AI on hosted code, citing soaring hardware costs and community trust.

Jellyfin's project leader, a nearly-eight-year core team member, and a co-founder all departed within days in July 2026, citing burnout and a dispute over AI-assisted development tools.

GitHub is halving public bug bounty payouts starting July 27, reserving its largest rewards for a new invite-only VIP tier as it fights a flood of low-quality, AI-generated reports.