Tech news, September 15, 2026
Tuesday: 29 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.
News
10 pieces.
- Reforesting the sbt plugin ecosystem and sbt 2.1.0 beta
This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance.
- More data, smaller responses: what's new in Cypress Cloud MCP
New tools, more data, smaller responses: what's new in Cypress Cloud MCP as of September 2026.
- DjangoCon Europe 2027 is heading to Innsbruck, Austria!
We’re delighted to announce that DjangoCon Europe 2027 will take place in Innsbruck, Austria, from February 17–21, 2027!
- Beyond the data: what a Business Analyst does at Nubank
Understand how Business Analysts at Nubank use data, context, and experimentation to guide product decisions.
- GPT-6 Astra leads on math benchmarks, but not on software engineering
OpenAI's GPT-6 Astra tops the Epoch Capabilities Index (ECI) with a score of 166, ahead of Claude Fable 5.1 at 164 and GPT-5.6 Sol at 162.
- Swift 6.4 Released
Swift 6.4 is now available.
- First Public Working Draft: Web Authentication: An API for accessing Public Key Credentials Level 4
This specification defines an API enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenti…
- Ruby 4.0.7 Released
Ruby 4.0.7 has been released.
- Why Streamhouse: mission-critical data and AI need infrastructure built for live
Redpanda has joined Aiven, Confluent, StreamNative, and Ververica to form the Streamhouse Working Group.
- From Curiosity to Impact: Inside the MongoDB Intern Experience
Discover how MongoDB interns create real impact through meaningful projects, mentorship, and community.
Security Desk
6 pieces.
- Oracle Critical Security Patch Update Advisory - September 2026
- HCSEC-2026-39 - Go-getter vulnerable to a privilege escalation issue in its archive decompression handling
Bulletin ID: HCSEC-2026-39 Affected Products / Versions: Go-getter up to 1.8.8 and 2.2.3; fixed in go-getter 1.8.9 and 2.2.4 Publication Date: September 15, 2026 Summary The go-ge…
- Grow CRA Readiness: Find Your Path Through the European Union Cyber Resilience Act
Discover how the EU Cyber Resilience Act (CRA) impacts your open source work.
- AI coding puts Secure by Design in the spotlight
The software industry is entering the AI era burdened by legacy flaws and weaknesses, making Secure by Design essential.
- 1Password's AI patching benchmark is misleading
1Password’s FLAWED report, published on August 6, 2026, gives defenders a misleading picture of AI patching.
- QSB-119: Potential attacker-controlled format string in qvm-open-in-vm
We have published Qubes Security Bulletin (QSB) 119: Potential attacker-controlled format string in qvm-open-in-vm.
Technical Guides
5 pieces.
- Beyond the model: Engineering AI infra with scientific judgement
How Airbnb’s agent harness transforms unstructured data exploration by encoding scientific methodology into scalable, reproducible, and audit-ready infrastructure.
- Keeping AI on Track: Lessons from Doctolib’s Oxygen Design System
How we created the Claude Oxygen Plugin to turn AI-generated prototypes into Design System-compliant code, and why Design Systems are becoming the harness for frontend AI agents.
- From middleman to copilot: Doctolib’s data mesh shift, seen from ingestion
Custodians, not owners Two years ago at Doctolib (the leading European e-health company connecting 90 millions of patients with more than 500,000 health professionals) data storag…
- From client brief to a pitch prototype that runs
The fastest way to turn a client brief into a working prototype to present: a five-step agency process, what to show in the room, and what to hold back.
- Postglow & Honeyblocks: Writer Tools Built on Bolt.new
Filmmaker Angela Hollowell built Postglow and Honeyblocks on Bolt.new: share-image receipts for writers and newsletter blocks beehiiv wouldn't build.
AI in the Field
1 piece.
Columns
3 pieces.
- Nail the Narrative
Sumeet Gayathri Moghe finds many folks building presentations get tangled in building slides without a coherent narrative.
- Table of Contents Web Component
…and another one.
- You can run git on object storage if you re-make packfiles
It sure seems that a bunch of companies are trying to ship a git product of some kind as of late.
Research
4 pieces.
- Year Four of The CMU Robotics Institute Pathways Fellowship Program Kicks Off
The Carnegie Mellon University Robotics Institute Pathways Fellowship, an initiative in partnership with InnovatePGH to nurture non-traditional entrepreneurial talent and foster i…
- Inside Beijing’s Chipmaking Offensive, One Year On
One year after CSET first published an analysis of China’s progress in the global semiconductor manufacturing equipment market, we provide a new analysis based on updated 2025 dat…
- Omnidirectional type inference for ML: principality any way
The Damas-Hindley-Milner (ML) type system owes its success to principality , the property that every well-typed expression has a unique most general type.
- Generative File Systems: Specification-Driven Synthesis and Evolution via LLMs
File systems are critical OS components that require constant evolution to support new hardware and emerging application needs.