open-source

Microsoft has elevated Rust to Tier-1 status alongside C++, C#, and TypeScript, and detailed a new compiler backend linking Rust to MSVC.

Node.js 26.9.0 adds a global Worker class implementing the WHATWG Web Worker API and enables the experimental node:ffi module by default.

The first release candidate of Valkey 9.2 introduces fork-free backups, reusable ACL roles, a radix-tree Path Hash type, and a B+ tree for large sorted sets.

At RustConf in Montreal, Rust's programming manager outlined CPython's scaled-back plan to add an optional internal Rust API in Python 3.16, along with unresolved technical hurdles.

Percona Server for MySQL 9.7.2-2 ships DISTANCE() and VECTOR_DISTANCE(), letting developers rank embeddings by similarity directly in SQL across five distance metrics.

Homebrew 7.0.0 adds a brew vulns scanner and advisory database, swaps Linux Bubblewrap sandboxing for Landlock, and patches a cask sandbox-escape flaw.

Git 2.56.0-rc1 adds new git refs subcommands and, via an amended 2.55 release note, confirms Rust will become a mandatory build dependency in Git 3.0.

GNOME 51 launched September 16 with reworked Mutter frame scheduling, a Reduced Motion accessibility toggle, and, per OMG Ubuntu, FIDO2 passkey login support.

Alibaba open-sourced OpenCodeReview, an AI code-review CLI it says outperforms Claude Code on precision using far fewer tokens, while independent reviewers warn of a low recall ceiling and weaker results outside Alibaba's own benchmark.

The indexed-btree npm package evades npm v12's install-script blocking by hiding its malware loader inside a runtime method instead, Checkmarx reports.

htmx skipped version 3 and shipped 4.0, replacing XMLHttpRequest with fetch(), building in morphing swaps, and requiring an :inherited suffix for attribute inheritance.

The Rust security response working group and crates.io team warn that rust-lang members and popular crate owners are being lured into fake video calls to compromise their devices and accounts.