The paper in your inbox every morning
Straight from the source · The paper, day by day

The Tech Gazette

Daily archive
Vol. I No. 54 Saturday, November 14, 2026 Closing 8:46 AM UTC · next edition 10:00 AM UTC

Tech news, November 7, 2026

Saturday: 113 pieces the paper read from primary sources, by section, newest first. Each links to its source; the line under it is the source's own opening.

The morning briefing

As the paper printed it on /brief/ at 08:46 UTC, in the sources' own words.

  1. LeadGiving Back to the Open Source We Build On

    LanceDB adds ASOF join support to Apache DataFusion, improving time-series joins while giving back to the open source projects we rely on.

    LanceDB
  2. NewsWhat’s new with Google Cloud

    Want to know the latest from Google Cloud?

    Google Cloud
  3. NewsNavigating the volatile silicon market: updates on memory and storage pricing

    Updated on November 6th, 2026 We’ve been able to keep DDR5 pricing stable for the last few months by buffering inventory.

    Framework
  4. Outage[Block Storage] - fr-par-1 - Write latency increase due to background operations

    Since 22h UTC, mean write latencies slowly increased on one Block cluster on fr-par-1 due to background operations pilling up overnight until 05h19 UTC.

    Scaleway
  5. SecurityRe: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by theknell on Nov 06 Jacob — you asked whether it even entirely works when there is no salt to borrow.

    oss-security (Openwall)
  6. Deadlinegemini-3.6-flash shuts down in 12 days

    Replacement: gemini-3.8-flash.

    Google Cloud (Vertex AI)

News

13 pieces.

  1. CNCF12:30 UTCWe organized Sustainability Month. Here’s what we learned.

    What do Kubernetes resource allocation, eBPF, carbon observability, and GPUs have in common?

  2. Google Cloud release notes08:00 UTCNovember 07, 2026

    Google SecOps SOAR Announcement Release 6.3.105 is now available for all regions.

  3. Asahi Linux04:30 UTCProgress Report: Linux 7.3

    Well here we are again.

  4. GitHub Changelog00:27 UTCCopilot code review: API management and review overview updates

    You can now manage GitHub Copilot code review settings through the REST and GraphQL APIs, from enterprise policy down to individual repositories.

  5. CoreWeave00:23 UTCWe Said We Would. Then We Did.

    CoreWeave CEO Michael Intrator reflects on 2025: post-IPO scale, global expansion, platform innovation, performance leadership, and powering AI at production scale.

  6. LangChain00:01 UTCManaged Deep Agents v0.10: Browser Use and Async Subagents

    Managed Deep Agents v0.10 adds browser use, so agents can work on sites with no API and hand you the window to sign in, and async subagents for background work.

  7. Vercel00:00 UTCDeepSeek V4.1 Flash 1017 Ultrafast now available on AI Gateway

    DeepSeek V4.1 Flash 1017 Ultrafast is now available on AI Gateway through Fireworks.

  8. PostgreSQL00:00 UTCAgensGraph 2.18 Released: Graph Database on PostgreSQL 18 with Expanded ISO GQL Support

    The AgensGraph Development Team is pleased to announce the release of AgensGraph v2.18.6.1, the latest version in the 2.18 series.

  9. PostgreSQL00:00 UTCBrume: FK-safe pseudonymization for PostgreSQL test and debug copies

    Brume 2.1, an open source (Apache 2.0) tool that creates deterministic, foreign-key-safe pseudonymized copies of PostgreSQL databases for testing, debugging and demos, is now avai…

  10. PostgreSQL00:00 UTCHeapDeck: an on-call monitor for PostgreSQL on iPhone and iPad

    HeapDeck is a new native app for engineers on call for PostgreSQL 13 to 19, on the App Store for iPhone and iPad.

  11. PostgreSQL00:00 UTCPG Observability Map 1.0.0 Released

    We are pleased to announce the initial release (1.0.0) of PG Observability Map, a interactive web-based tool designed to visualize and explore PostgreSQL observability, metrics, a…

  12. Twilio00:00 UTCBroadcast text messaging: What is it & how to use it

    Broadcast text messaging sends one SMS to your whole list as private, individual texts.

  13. Preact00:00 UTCPreact Website Design Competition Winners

    We are excited to announce the winners of the Design Competition!

New Models

1 piece.

  1. Hugging Face Hub03:06 UTCOpen model: adventists-ai/Sophon-Realtime-v1

    Trending on the Hugging Face Hub.

Security Desk

15 pieces, the newest 10 here.

  1. Python Security Announcements19:58 UTC[Security-announce][CVE-2026-124249] http.cookiejar deletes cookies of other domains via expired Set-Cookie

    There is a MEDIUM severity vulnerability affecting CPython.

  2. oss-security (Openwall)18:55 UTCCVE-2026-123776: RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the CGI process

    Posted by Robert Rothenberg on Nov 07 ======================================================================== CVE-2026-123776 CPAN Security Group ================================…

  3. oss-security (Openwall)18:53 UTCCVE-2026-121265: SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update

    Posted by Robert Rothenberg on Nov 07 ======================================================================== CVE-2026-121265 CPAN Security Group ================================…

  4. oss-security (Openwall)18:51 UTCRe: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by theknell on Nov 07 Following up on my measurements post from last night.

  5. oss-security (Openwall)18:49 UTCRe: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by Richard Kettlewell on Nov 07 https://github.com/besser82/libxcrypt/blob/develop/lib/util-make-failure-token.c Pedantically: the result will be "*" if the buffer is only…

  6. oss-security (Openwall)05:53 UTCRe: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by theknell on Nov 06 Jacob — you asked whether it even entirely works when there is no salt to borrow.

  7. oss-security (Openwall)04:28 UTCRe: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by Jacob Bachmeyer on Nov 06 Does it even entirely work?

  8. oss-security (Openwall)04:26 UTCRe: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by theknell on Nov 06 Said I'd figure it out, so here we go.

  9. oss-security (Openwall)04:25 UTCRe: "sshole": password authentication bypass: OpenSSH + musl libc

    Posted by Matt Johnston on Nov 06 I view avoiding account existence exposure as more of a privacy feature than security.

  10. Microsoft Security02:44 UTCARTEX abuse expands as cybercriminals target financial sector

    In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector using the agentic AI offensive framework ARTEX.

Technical Guides

4 pieces.

  1. Real Python14:00 UTCPython Project Structure: How to Choose the Right Layout

    Learn how to structure Python projects: pick between flat and src/ layouts, organize your code, and apply the patterns to CLI, web, and GUI apps.

  2. Real Python14:00 UTCManaging Multiple Python Versions With pyenv

    Learn how to use pyenv to manage multiple Python versions, prevent conflicts, and keep your projects compatible and development smooth.

  3. Real Python14:00 UTCThonny: The Beginner-Friendly Python Editor

    Learn how to use Thonny, the free Python IDE built for beginners, to write, run, and debug your code with its step-by-step debugger.

  4. Real Python14:00 UTCAbsolute vs Relative Imports in Python

    Compare Python relative imports with absolute imports, weigh the pros and cons of each, and learn best practices for writing clean import statements.

Columns

5 pieces.

  1. Dylan Patel (SemiAnalysis)19:01 UTCWe Visited China’s Stargate in Inner Mongolia

    A wind-powered 800MW campus, 120MW built within a year, a 5MW SST-native 800V DC pilot and a cooling design without central chillers

  2. Murat Demirbas08:22 UTCWriting as a thinking tool

    In middle school I could not get through long passages no matter how hard I tried.

  3. swyx (Latent Space)03:04 UTC[AINews] Anthropic IPO: Whither Now?

    November 6, 2026 — ARC Prize tests Inkling 2 Small, and Thinking Machines explains how it caught early checkpoints bypassing guardrails.

  4. Sean Goedecke00:00 UTCWorking with designers

    I love working with designers, in part because (unlike managers and product managers) they’re culturally different from engineers.

  5. Charlie O'Neill00:00 UTCWhy the bottleneck to AI progress may be human dignity

    There aren't many bets I'd take against scaling curves, but one of them is the human ego

Research

5 pieces.

  1. ACM TOSEM12:00 UTCFeatOutline: Feature-Oriented Repository Summarization for Enhanced Code Comprehension and Maintenance

    Repository-level code summaries are typically organized around directories and files, making functionality that spans multiple artifacts difficult to see and trace to its implemen…

  2. ACM TOSEM12:00 UTCEnhancing Neural Code Representation With Additional Context

    Automated program comprehension underpins many software engineering tasks, from code summarisation to clone detection.

  3. ACM TOSEM12:00 UTCTo See is Not to Master: Teaching LLMs to Use Private Libraries for Code Generation

    Large Language Models (LLMs) have shown strong potential for code generation, yet they remain limited in private-library-oriented code generation, where models are expected to gen…

  4. ACM TKDD (Knowledge Discovery from Data)12:00 UTCKnowledge Graph-based Retrieval-Augmented Generation for Schema Matching

    Traditional similarity-based schema matching methods fail to resolve semantic ambiguities and conflicts in complex, domain-specific mappings due to a lack of commonsense and domai…

  5. ACM TOIS (Information Systems)12:00 UTCA Survey on Robust Sequential Recommendation: Fundamentals, Challenges, Taxonomy, and Future Directions

    Sequential recommender systems (SRSs) have become essential for modeling users’ evolving preferences and supporting personalized information filtering.

Releases

16 pieces, the newest 12 here.

  1. LiteLLM22:48 UTC1.108.3 (LTS)
  2. AI SDK19:33 UTC@ai-sdk/zai@3.0.49
  3. AI SDK19:33 UTC@ai-sdk/xai@5.0.40
  4. AI SDK19:33 UTC@ai-sdk/workflow-harness@1.0.176
  5. npm releases19:27 UTCai 7.0.165
  6. mise16:27 UTCv2026.11.4: zip:: includes for config and tasks
  7. FastAPI15:41 UTCFastAPI 0.162.2: FastAPI includes an official skill that helps coding agents use new features and recommended patterns for…
  8. mise14:20 UTCmise-daemons-v2026.11.4
  9. FastAPI11:55 UTCFastAPI 0.162.1: Add parameter model guidance to the FastAPI skill. PR #16693 by @tiangolo
  10. llama.cpp05:44 UTCb12183: opencl: add arange (#31829)
  11. Hono04:58 UTCHono 4.13.17: fix(cookie), match the Secure- and Host- prefixes case-insensitively in #5608
  12. npm releases04:27 UTClangchain 1.6.3

New Repos & Packages

19 pieces, the newest 8 here.

  1. npm #ai-agent22:57 UTCcloakbrowser 0.7.1
  2. npm #ai-agent20:43 UTCinstar 1.3.1719
  3. npm #mcp19:28 UTC@ai-sdk/mcp 2.0.93
  4. GitHub #mcp17:45 UTC21stware/bowel (490 stars)
  5. npm #mcp16:07 UTCfallow 3.41.0
  6. npm #ai-agent08:02 UTCinstar 1.3.1704
  7. GitHub #generative-ai07:47 UTCEpicGiantite13205/ai--manus (52 stars)
  8. GitHub #generative-ai06:35 UTCabhinay-h/manus-ai (55 stars)

Watch

3 pieces.

  1. Cognitive Revolution · YouTube20:35 UTCAI:AM: Is THIS the AI We Want? Alarming Acceleration, AI Election Bets, GPU Trading & AI-Native VC
  2. GitHub · YouTube15:00 UTCWork together, your way, with GitHub Copilot
  3. GitHub · YouTube07:06 UTCOpen Source Friday: pgmq

Package releases

32 from the most used packages' own repositories, the newest 15 here.

  1. 22:02 UTCzip v9.4.2 · every release →
  2. 21:45 UTCwcmatch 12.0.1 · every release →
  3. 21:41 UTCparse5 v8.1.1 · every release →
  4. 21:27 UTCbracex 3.2.2 · every release →
  5. 20:55 UTCoffice365-rest-python-client v3.3.1 · every release →
  6. 20:27 UTCnodemailer v10.4.0 · every release →
  7. 17:56 UTCspomky-labs/otphp 11.5.1 · every release →
  8. 17:54 UTCpypdfium2 5.15.1 · every release →
  9. 17:03 UTCflat-cache 2026-11-07 · every release →
  10. 17:01 UTC@azure/abort-controller @azure/core-xml_1.6.1 · every release →
  11. 16:58 UTCdatamodel-code-generator 0.91.0 · every release →
  12. 16:37 UTCamphp/process v2.1.2 · every release →
  13. 15:20 UTCphpmailer/phpmailer v7.2.0 · every release →
  14. 14:52 UTCwatchpack v2.6.4 · every release →
  15. 13:04 UTCmkdocs-material 9.8.1 · every release →