open-source

Biome v2, released June 2025, introduces type-aware lint rules and a plugin system without requiring tsc, reaching v2.4 by February 2026.

Mesa 26.1.0, released May 6, 2026, delivers over 40 new Vulkan extensions across major GPU drivers, adds VirtIO-GPU native-context support for Intel, and marks the end of VirGL maintenance.

OpenSSL 4.0.0 landed on April 14 as the library's first major version bump since 2018, adding ECH, post-quantum hybrid key exchange, and removing the legacy engine API and SSLv3.

SIG-etcd has released the first beta of etcd 3.7.0, introducing streaming reads for large result sets, up to 2x faster lease operations, and the complete elimination of all v2 API code.

Apache Iceberg 1.11.0 arrives with at-rest encryption across all table files, Spark 4.1 and Flink 2.1 compatibility, and Deletion Vector write support for Flink.

Grafana Labs shipped version 13 at its annual conference in Barcelona, graduating dynamic dashboards and Git Sync to GA while delivering a rebuilt Loki that runs aggregation queries up to 10x faster.

Mozilla ships Firefox 151 on May 19, 2026, patching 25 security vulnerabilities and adding PDF merging, Document PiP, Web Serial API, and tighter fingerprinting controls.

Zig 0.16.0 released April 14 with a mandatory I/O interface that eliminates function coloring, a 30,000-line type resolution redesign, and millisecond incremental builds.

VoidZero's Vitest 4.1 adds pytest-style test tags, an experimental mode to bypass Vite's module runner, async leak detection, and a reporter optimized for AI coding agents.

A new Linux Foundation working group--backed by Sonatype, the Rust Foundation, OpenSSF, and a dozen registry operators--aims to close the funding and governance gap before AI-driven download volumes overwhelm critical open source infrastructure.

Nine days after v0.13 closed Hermes Agent's durability gap, Nous Research shipped v0.14 on May 16 — adding pip install from PyPI, native Windows, and a local OpenAI-compatible proxy that wraps Claude Pro, ChatGPT Pro, and SuperGrok subscriptions.

After an Alpha Omega-mediated Mythos scan turned up five claimed vulnerabilities, the curl security team triaged the list to one low-severity CVE bound for curl 8.21.0 in late June.