Menu
View
Theme
Text size
The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

Tech news, November 1, 2026

Sunday: 118 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.

  1. LeadVivaldi Mobile 8.3 RC 1 – Vivaldi Android Browser snapshot 4192.10

    Today’s Snapshot is the first release candidate for Vivaldi Mobile 8.3 release on Android.

    Vivaldi
  2. NewsTumbleweed Monthly Update - October 2026

    As openSUSE Tumbleweed barrels through the autumn, the month of October brought Linux enthusiasts several changes for this premier rolling release.

    openSUSE
  3. NewsMulti-Node Unused Index Verification

    Every MySQL schema that’s been around for a few years collects indexes nobody remembers adding.

    Percona
  4. OutageService Degradation - Billing and Usage Dashboard

    We are continuing to work towards a resolution and will share more information as it becomes available.

    Cursor
  5. SecurityTrojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines

    On October 29, 2026, trojanized builds (2.1.312 and 2.1.313) of the official Claude Code VS Code extension were published to Cursor's VS Code Extension Marketplace for macOS and W…

    StepSecurity

News

8 pieces.

  1. The GitHub Blog21:36 UTCGame Off 2026: The theme is SHIFT

    GitHub’s annual month-long game jam is back for its 14th year!

  2. MariaDB Foundation18:18 UTCMariaDB Foundation Newsletter – 1 November 2026

    InnoDB about 3x faster on in-memory workloads, the FOSDEM 2027 M-ecosystem devroom call for papers, parallel query execution, our first India meetup and 17 years of MariaDB Server.

  3. MariaDB Foundation15:28 UTCWhat MariaDB’s plugin API can carry: the HyperLogLog case

    Can a complete analytic feature live outside the MariaDB server core?

  4. Vivaldi08:36 UTCVivaldi Mobile 8.3 RC 1 – Vivaldi Android Browser snapshot 4192.10

    Today’s Snapshot is the first release candidate for Vivaldi Mobile 8.3 release on Android.

  5. openSUSE08:00 UTCTumbleweed Monthly Update - October 2026

    As openSUSE Tumbleweed barrels through the autumn, the month of October brought Linux enthusiasts several changes for this premier rolling release.

  6. Google Cloud release notes08:00 UTCNovember 01, 2026

    Agent Platform Workbench Change 20261101-2230-rc0 Release Change 20261101-2230-rc0 Release Change Installed latest packages from upstream dependencies.

  7. Percona05:26 UTCMulti-Node Unused Index Verification

    Every MySQL schema that’s been around for a few years collects indexes nobody remembers adding.

  8. Julia00:00 UTCThis Month in Julia World (October 2026)

    Community Newsletter for October 2026

Security Desk

14 pieces, the newest 10 here.

  1. oss-security (Openwall)22:09 UTCApache Wicket: 19 CVEs fixed in 8.20.0, 9.25.0 and 10.12.0

    Posted by Emond Papegaaij on Nov 01 On 1 November the Apache Wicket PMC published 19 security advisories.

  2. oss-security (Openwall)17:58 UTCGoogle::Auth for Perl (2 CVEs)

    Posted by Robert Rothenberg on Nov 01 CVE-2026-74759 Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external a…

  3. oss-security (Openwall)17:55 UTCCVE-2026-13575: HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI

    Posted by Robert Rothenberg on Nov 01 ======================================================================== CVE-2026-13575 CPAN Security Group =================================…

  4. SANS Internet Storm Center09:12 UTCOneNote File Extraction, (Sun, Nov 1st)

    Recently, I had to extract embedded files from a set of OneNote files (extension.one).

  5. StepSecurity07:22 UTCTrojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines

    On October 29, 2026, trojanized builds (2.1.312 and 2.1.313) of the official Claude Code VS Code extension were published to Cursor's VS Code Extension Marketplace for macOS and W…

  6. oss-security (Openwall)01:31 UTCCVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder

    Posted by Timothy Legge on Oct 31 ======================================================================== CVE-2026-115946 CPAN Security Group ====================================…

  7. Debian Security Advisories00:00 UTCDSA-6600-1 vim - security update

    Multiple vulnerabilities were found and fixed in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved).

  8. JFrog Security Research00:00 UTCBeta9 is vulnerable to a Build Worker Sandbox Escape via Chroot-only Buildah Isolation

    CVE-2026-120306, CRITICAL, Beta9 is vulnerable to a Build Worker Sandbox Escape via Chroot-only Buildah Isolation

  9. JFrog Security Research00:00 UTCBeta9 is vulnerable to a Container Escape via Unvalidated Sandbox File Paths

    CVE-2026-120307, CRITICAL, Beta9 is vulnerable to a Container Escape via Unvalidated Sandbox File Paths

  10. JFrog Security Research00:00 UTCBeta9 is vulnerable to Host Filesystem Exposure via Volume Path Traversal

    CVE-2026-120308, CRITICAL, Beta9 is vulnerable to Host Filesystem Exposure via Volume Path Traversal

Technical Guides

4 pieces.

  1. Real Python14:00 UTCOperator and Function Overloading in Custom Python Classes

    Use Python operator overloading to make built-in functions and operators work with your own classes, and write more Pythonic code.

  2. Real Python14:00 UTCDocumenting Python Code: A Complete Guide

    A complete guide to documenting Python code.

  3. Real Python14:00 UTCRecursion in Python: An Introduction

    Get to grips with Python recursion: what it is, how it works, when to reach for it, and how recursive and iterative solutions compare.

  4. Real Python12:00 UTCQuiz: Documenting Python Code: A Complete Guide

    In this quiz, you'll test your understanding of documenting Python code.

AI in the Field

1 piece.

  1. AWS Public Sector22:49 UTCHow NASWA scales real-time labor market insights with AWS generative AI

    In this post, we share how NASWA scaled real-time labor market insights using AWS generative AI.

Columns

3 pieces.

  1. Dylan Patel (SemiAnalysis)18:40 UTCThe Datacenter Backlash Goes Bipartisan: Next Week's Midterms and the 2028 Buildout

    2027 is largely locked in.

  2. Thorsten Ball08:49 UTCJoy & Curiosity #104

    Interesting & joyful things from the previous week

  3. Sean Goedecke00:00 UTCFast and slow ways to improve your reputation

    To get a good reputation in tech companies, you need to work on important projects.

Research

2 pieces.

  1. NVIDIA Research03:14 UTCDiLaDiff: Distilled Latent-Augmented Diffusion for Language Modeling

    DiLaDiff: Distilled Latent-Augmented Diffusion for Language Modeling Diffusion language models intrinsically fail to capture correlations between decoded tokens, which leads to a…

  2. NVIDIA Research03:00 UTCTest-time scaling of diffusions with flow maps

    Test-time scaling of diffusions with flow maps A common recipe to improve diffusion models at test-time so that samples score highly against a user-specified reward is to introduc…

Releases

21 pieces, the newest 12 here.

  1. Wrangler23:42 UTC@cloudflare/vite-plugin@1.67.0
  2. Wrangler23:25 UTC@cloudflare/vitest-plugin@1.4.12
  3. Wrangler23:25 UTC@cloudflare/workers-utils@0.50.2
  4. htmx23:12 UTChtmx 2.0.11: Added <hx-partial> tag support, backported from 4.0, a response can carry <hx-partial hx-target="...">…
  5. htmx23:06 UTChtmx 4.0.1: Any trigger now cancels a pending delay or throttle trigger on the same element, as in 2.x
  6. CrewAI21:21 UTCCrewAI 1.15.34: Add standalone LiteLLM catalog PR before version bump
  7. OpenAI Python SDK20:56 UTCOpenAI Python SDK 3.42.1: api, preserve Responses WebSocket connection behavior (#4221) (38075d8)
  8. Apache Airflow20:42 UTCproviders-common-ai/1.1.0
  9. Apache Airflow18:30 UTCproviders-openlineage/2.21.0
  10. llama.cpp17:23 UTCb12033
  11. Redis15:08 UTC8.12 RC2
  12. vLLM09:21 UTCvLLM 0.33.0: vLLM v0.33.0

New Repos & Packages

28 pieces, the newest 8 here.

  1. npm #ai-agent22:18 UTC@plannotator/pi-extension 0.28.44
  2. GitHub #developer-tools20:53 UTCUncensoredLabs/uncensored-ai-api (913 stars)
  3. npm #mcp20:38 UTCadd-mcp 2.6.1
  4. npm #mcp20:02 UTCruvector 0.3.7
  5. npm #ai-agent18:21 UTCcloakbrowser 0.7.0
  6. GitHub #llm17:19 UTCBalanov/uncut (256 stars)
  7. npm #mcp16:33 UTCagentdb 3.3.0
  8. npm #llm15:39 UTC@json-render/react 0.21.4

Watch

2 pieces.

  1. Databricks · YouTube14:00 UTCHow to Use Database Branching in Databricks Lakebase
  2. Big Technology · YouTube04:17 UTCThe Biggest Gap in AI Isn’t the Models

Package releases

35 from the most used packages' own repositories, the newest 15 here.

  1. 22:48 UTCamphp/process v2.1.1 · every release →
  2. 22:29 UTCjose v6.2.15 · every release →
  3. 21:47 UTCfast-equals v6.2.2 · every release →
  4. 21:47 UTCansis v4.5.0 · every release →
  5. 21:08 UTCjsonpointer v3.7 · every release →
  6. 21:07 UTCwtforms 3.3.2 · every release →
  7. 20:52 UTCfastmcp v4.1.5 · every release →
  8. 20:49 UTCopenssl-sys openssl-v0.10.82 · every release →
  9. 20:39 UTCauthlib v1.9.2 · every release →
  10. 20:21 UTClcobucci/clock 3.7.0 · every release →
  11. 20:11 UTC@formatjs/ecma402-abstract @formatjs/intl-pluralrules@7.0.2 · every release →
  12. 20:09 UTCmistralai v3.7.0 · every release →
  13. 19:59 UTCmsgpackr-extract v3.0.6 · every release →
  14. 19:52 UTCconventional-commits-parser template-v1.4.1 · every release →
  15. 19:51 UTCcython 3.3.1 · every release →