October 17 – 23, 2026
Saturday to Friday, Brasília time.
- 3,355pieces
- 844sources
- 16new models
- 8exploited vulnerabilities
- 68major incidents
The Week's Top Stories
What mattered most, each in its maker's or first source's words.
-
1
Agentic workflows in production: Mechanisms, trade-offs, costs and design patterns
Explore how production agentic workflows are designed, orchestrated, evaluated, and governed, with practical guidance on patterns, trade-offs, costs, and failure modes.
-
2
Why Open Models Can Win on Enterprise Cost and Control
See how enterprise teams cut inference costs and keep control of fine-tuning, distillation, and guardrails by running open models on their own infrastructure.
-
3
What Is ARIA, and How Did We Build It?
Putting an agent next to your experiments was the easy part. The real work was making its research outlast the chat without taking authority from the researcher.
-
4
LeRobot Trains on Lance, Mining Robot Fleet Data Demo, Vector Search at 10B Scale
LeRobot trains directly from Lance datasets in object storage, a hybrid scan mines robot fleet data for edge cases, and distributed search reaches 1,066 QPS across 10B vectors, plus upcoming events, enterprise updates, a…
-
5
CodeQL changes for macOS 27, Xcode 27, and Swift 6.4
Starting with macOS 27 and Xcode 27, Apple no longer includes Intel (x86_64) code in some of the system binaries and libraries that CodeQL relies on to trace builds. As… The post CodeQL changes for macOS 27, Xcode 27, an…
-
6
Get Started with Kimi K3 on CoreWeave Dedicated Inference
Follow this step-by-step guide to deploy Kimi K3 on CoreWeave Dedicated Inference on NVIDIA GB300 NVL72.
-
7
The Decisions API is now generally available with gpt-6-luna.
Update · gpt-6-luna · v1/decisions. The Decisions API is now generally available with gpt-6-luna. Cache shared input across requests for prompt-cache discounts, include images in individual question instructions, and pas…
Also reported by ClickHouse
-
8
OlmoEarth v1.3: State-of-the-art embeddings for the whole planet
OlmoEarth v1.3 brings state-of-the-art satellite embeddings, precomputed global data, and a browser-based Embeddings Explorer for mapping and analyzing the planet.
Also reported by Hugging Face
Security
Vulnerabilities newly known to be exploited (CISA), then the week's most relevant advisories.
- CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected p…
- CVE-2026-96656: Plex Media Server External Control of File Name or Path Vulnerability
Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652…
- CVE-2026-96655: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path paramet…
- CVE-2026-96654: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability c…
- CVE-2026-96652: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST…
- CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerability
Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading t…
- CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerability
Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise th…
- CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.
- How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)
Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private…
- CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH)
- DSA-6583-1 libheif - security update
Multiple security issues were discovered in libheif, a library for reading and writing HEIF and AVIF images. Processing specially crafted images could result in denial of service through excessive resource consumption or…
- Vulnerabilities in PHP Affecting Cisco Products: October 2026
On October 21, the PHP Foundation announced the availability of a Critical PHP Security release addressing two critical vulnerabilities: CVE-2026-109618 - RCE via OOM corruption CVE-2026-109619 - RCE via stale glob…
- CVE-2026-115936: IO::Compress::Brotli versions from 0.004001 before 0.023 for Perl bundle a brotli library with an out-of-bounds write in the decoder
Posted by Timothy Legge on Oct 23 ======================================================================== CVE-2026-115936 CPAN Security Group ======================================================================== CVE…
Major Incidents
Outages the providers themselves rated major or critical.
- Scheduled Maintenance
- JFrog Cloud Platform - Multiple Service Disruptions in Azure Southeast Asia
- Organization Dashboards are failing to load with Invalid kid parameter error
- Elevated AuthKit Error Rates
- Sentry is down
- [Medium] Issue with multiple Box Services
- Multiple services were experiencing issues in the europe-west2 region.
- JFrog Cloud Platform - Multiple Service Disruptions in GCP Europe West
- INC20000294
- Delayed delivery of Astro Alerts
- Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London)
- Insights Dashboard failing to load
- Agent Runner failures
- gcp-eu-west2-b-availability-zone-issues
- Multiple Confluent Cloud services are in a degraded state - GCP EU-West2
- Vietnam - General service degradation
- Degraded event ingest
- Slowness in US region
- Polling Workers Degragation
- Some GCK6 App Project Pages are Failing to Load
- Sentry.io not loading
- DeepSeek V4.1 Flash Fast Outage on Model APIs
- Elastic Cloud scaling issues in Azure
- US Customers MQTT Service Disruption
- Service Disruption Impacting Chase connections
- Sentry.io not loading in US region
- Apple partial outage for App Store Server API - Sandbox
- Restrictions with Nextcloud Workspace
- Some GCK6 App Project Pages are Failing to Load
- P2 - [WEBHOSTING] - PHP Emergency maintenance
- Asana downtime
- Project lifecycle operations such as project creation, pausing, and restoration, in all regions
- Disrupted Bitbucket availability
- EU Agents disruption in SIP calls
- [GAPI] - [global] - Dedicated deployment deletion failing
- INC20000301
- Wireless connectivity disruptions
- Degraded VOD playback
- Mux Data Collection Latency
- Authentication errors for some users
- Registry Proxy Pull Performance is Degraded
- Degraded Package Install and Publishing
- Service Disruption Impacting Chase connections
- Project lifecycle operation errors in the EU region
- 403 error when trying to access Autoops in newly created serverless projects
- Elevated Mgmt API Error Rates in Multiple Regions
- Bandwidth Local Market Impairment - 328 - Dayton, OH
- Elevated 5xx Errors
- Email notifications for SLOs, Triggers, and Anomaly Detection not sending
- GitHub and Other VCS workloads experiencing intermittent issues
- Bandwidth Local Market Impairment - Fresno/Los Angeles/San Luis Obispo, CA
- Snyk Container Degradation in SNYK-US-01
- Elastic Support Portal is unavailable
- United States - SMPP service degradation
- Elevated Trace Ingestion Latency and Errors for Grafana Cloud Traces in AWS Germany
- United States - Moments service degradation
- "access.redhat.com - Security Pages - CVE Outage
- access.redhat.com - Security Pages - CVE Outage
- Connection errors affecting Salesforce Pardot Zaps
- Snyk Test Down in SNYK-US-01
- Elevated 503 Errors and Documentation Availability
- Network connectivity issues affecting services in North America
- Increased error rates loading User and Admin portal
- Elevated errors across SSO and AuthKit
- Elevated errors for Claude Fable 5.1, Sonnet 5.5, and Haiku 5.5
- Investigating service outage - Grok models unavailable
- Background jobs partial outage
- Elevated errors for Claude Opus 5.5
Releases
Major and minor versions only — no patches.
- Anthropic Python SDK 1.16.0: api, add datarefreshedat and hasmore to analytics report pages
Features api: add data_refreshed_at and has_more to analytics report pages api: add workspace rate-limit updates to the Admin API api: make User Profiles generally available client: yield server-sent events with unrecogn…
- Anthropic Python SDK 1.17.0: api, add org webhook endpoints and user profile enforcement events
Features api: add org webhook endpoints and user profile enforcement events api: add RBAC Group owner-access error codes to the Admin API api: document the unsupported_charset error code for plugin uploads Bug Fixes bedr…
- Anthropic Python SDK 2.0.0: BREAKING CHANGES
BREAKING CHANGES api: add support for new API version 2026-10-21 Features api: add a workspace_id filter and the usage_tier scope type to list spend limits api: add support for new API version 2026-10-21 Documentation ap…
- Anthropic Python SDK 2.1.0: api, add enforcement status, actions and filter to user profiles
Features api: add enforcement status, actions and filter to user profiles
- Anthropic Python SDK 2.2.0: api, add support for message threads
Features api: add support for message threads api: add usage and cost reports by dimension, mark older reports legacy Bug Fixes client: stop suggesting math.inf in the max_retries error message tools: leave the tool runn…
- Anthropic Python SDK 2.3.0: api, add Claude Tag endpoints for Claude Enterprise organizations
Features api: add Claude Tag endpoints for Claude Enterprise organizations Bug Fixes google-cloud: send user profiles requests to the organization endpoint Chores client: stop sending query params hardcoded in endpoint p…
- aws-sdk-v0.9.0
Features aws: require @anthropic-ai/sdk 0.136.0 or later aws: throw an AnthropicError when actionURLs is read on userProfiles or beta.userProfiles, which the AWS gateway doesn't serve
- sdk-v0.137.0
Features api: add org webhook endpoints and user profile enforcement events Chores ci: run the changelog check on a standard runner tests: make credential tests independent of the caller's environment
- google-cloud-sdk-v1.0.0
BREAKING CHANGES api: add support for new API version 2026-10-21 Features api: add support for new API version 2026-10-21
- sdk-v1.1.0
Features api: add enforcement status, actions and filter to user profiles
- Xcode 27.2 RC (27B48)
View downloadsView release notes
- iOS 27.2 RC (24B115)
View downloadsView release notes
- iPadOS 27.2 RC (24B115)
View downloadsView release notes
- JavaScript APIs v6.1.0
6.1.0 Minor Changes #9940 1aefcb1 Thanks @regseb! - Added spanInBytesToSpanInCodeUnits helper function in subpath exports of @biomejs/js-api. import { spanInBytesToSpanInCodeUnits } from "@biomejs/js-api/nodejs"; // Or:…
- ComfyUI 0.42.0: [Partner Nodes] feat(Krea), add Krea 3 Image node by @bigcat88 in #17067
What's Changed [Partner Nodes] feat(Krea): add Krea 3 Image node by @bigcat88 in #17067 Update workflow templates to v0.11.85 by @comfyui-wiki in #17068 Use FLUX 3 Image in node display labels by @MaanavD in #17075 Bette…
- Diffusers 0.42.0: FLUX.3, Fibo 2.0, Kandinsky 6, and more
Tip This release brings FLUX.3 Image Klein, Bria Fibo 2.0, Kandinsky 6, SANA-WM, and RFD4-Proteína to Diffusers, alongside new adapter support, hardware integrations, and modular pipelines. Python 3.11 or newer is now re…
- v1.18.0 — Smarter Agent Routing, Portable Apps, Deeper Workflow Visibility
Dify 1.18.0 brings Agents that route workflows, portable app packages, deeper visibility into nested workflow runs, and the opt-in Agent Knowledge Base experience. OpenAPI and the new difyctl expand how you build and man…
- electron v44.9.0
Release Notes for v44.9.0 Features Added app shims on macOS to show windows under another app's Dock icon. #55073 (Also in 45 ) Fixes Fixed link-opened windows not using the opener's session and webPreferences. #55048 (A…
- electron v45.0.0
Release Notes for v45.0.0 Stack Upgrades Chromium 156.0.8078.48 Chrome 156 Release Notes Chrome 155 Release Notes New in 154 New in 153 Node v24.22.0 Node 24.22.0 blog post V8 15.6 Breaking Changes Reduced sandboxed rend…
- FastAPI 0.144.0: Add WebSocket support to security dependencies. PR #10147 by @mnixry
Features Add WebSocket support to security dependencies. PR #10147 by @mnixry.
- FastAPI 0.146.0: The rootpath parameter in FastAPI() is deprecated. Configure the server with fastapi run --root-path /api/v1…
The root_path parameter in FastAPI() is deprecated. Configure the server with fastapi run --root-path /api/v1 instead. Breaking Changes Deprecate the root_path parameter in FastAPI. PR #16520 by @tiangolo.
- FastAPI 0.147.0: Omitted bool and bool | None form fields are now interpreted as False, matching unchecked HTML checkboxes…
Omitted bool and bool | None form fields are now interpreted as False, matching unchecked HTML checkboxes. This applies to individual Form parameters and form models, including required fields and fields with defaults of…
- FastAPI 0.148.0: Defaults for omitted Query, Header, Cookie, and Form parameters and model fields are no longer treated as…
Defaults for omitted Query, Header, Cookie, and Form parameters and model fields are no longer treated as user input. Defaults are not validated unless validate_default=True is enabled. If you rely on validators running…
- FastAPI 0.150.0: When no file is selected, browsers submit a file part with an empty filename and empty content. FastAPI now…
When no file is selected, browsers submit a file part with an empty filename and empty content. FastAPI now treats this as missing: required file fields return a validation error, and fields with defaults or default fact…
- FastAPI 0.151.0: JSON request bodies now distinguish an explicit null from an omitted value. For individual Body parameters…
JSON request bodies now distinguish an explicit null from an omitted value. For individual Body parameters, null is validated as None: nullable types accept it, and non-nullable types reject it even when a default is def…
- FastAPI 0.152.0: Validation errors for header parameter models now report the HTTP header name, such as int-val, instead of…
Validation errors for header parameter models now report the HTTP header name, such as int-val, instead of the Python field name, int_val. Explicit aliases, Header(convert_underscores=False), and Pydantic models with loc…
- FastAPI 0.159.0: Add support for optional query, header, and cookie parameter models. PR #16584 by @tiangolo
Features Add support for optional query, header, and cookie parameter models. PR #16584 by @tiangolo.
- FastAPI 0.160.0: Query, header, cookie, and form parameter models now apply their extra configuration to all submitted fields…
Query, header, cookie, and form parameter models now apply their extra configuration to all submitted fields in the same parameter location, consistent with Pydantic behavior. This includes fields declared in other model…
- FastAPI 0.161.0: Add support for combining unions of form models. PR #16596 by @tiangolo
Features Add support for combining unions of form models. PR #16596 by @tiangolo.
- FastAPI 0.162.0: Omitted bool and bool | None form fields now use their declared defaults or produce missing-field errors…
Omitted bool and bool | None form fields now use their declared defaults or produce missing-field errors, consistent with other fields and Pydantic behavior. FastAPI no longer infers False for omitted booleans. This appl…
- Release v0.65.0
What's Changed fix(cli): enforce read-only workspace settings in untrusted folders by @jvargassanchez-dot in #29583 fix(core): avoid duplicate tool response turns when resuming sessions by @diegogodinezr in #29618 fix(co…
- GitHub CLI 2.103.0
Expiring, auto-refreshing OAuth tokens (preview) gh can now sign in with expiring OAuth credentials that it refreshes automatically. When you opt in, gh stores a short-lived access token alongside a rotating refresh toke…
- Google Gen AI SDK 2.32.0: Add basevoice to PromptedVoice in GAOS SDK (5488643)
2.32.0 (2026-10-21) Features Add base_voice to PromptedVoice in GAOS SDK ( 5488643 ) Add generation_output_config to GenerateContentConfig ( 5c008e1 ) Add Live API in-session context updates ( send_context_update ) and t…
- Google Gen AI SDK 2.33.0: Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. (16a29c9)
2.33.0 (2026-10-22) Features Add store to GenerateContentConfig (Gemini Developer API only) and labels to LiveConnectConfig. ( 16a29c9 ) Add support for Python 3.15. ( e1c4fc7 ) Add support for Python 3.15. ( 1a64450 ) c…
- Goose 1.56.0: Automatic thinking level operation for improved model reasoning #12237
Features Automatic thinking level operation for improved model reasoning #12237 Resume failed or cancelled delegate subagents #13015 Subagent session link in UI with view-only subagent sessions #12998 Limit concurrent su…
- JAX v0.12.0
New features Added jax.scipy.special.erfcinv for the inverse complementary error function. Added jax.lax.polynomial for polynomial evaluation. The polynomial primitive is faster and uses less memory when computing gradie…
- Laravel 13.38.0: [13.x] Allow float values in Unique where rule by @sertxudev in #62059
[13.x] Allow float values in Unique where rule by @sertxudev in #62059 [13.x] Remove dead until higher order collection proxy by @xurshudyan in #62057 [13.x] Fix ofMany() alias inside closures by @xurshudyan in #62051 [1…
- LiteLLM 1.106.0: Verify Docker Image Signature
Verify Docker Image Signature All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53. Verify using the pinned commit hash (recommended): A commit hash is…
- MCP TypeScript SDK 2.4.0: @modelcontextprotocol/client
Package Version @modelcontextprotocol/client 2.4.0 @modelcontextprotocol/server 2.4.0 @modelcontextprotocol/core 2.4.0 @modelcontextprotocol/server-legacy 2.4.0 @modelcontextprotocol/codemod 2.4.0 @modelcontextprotocol/n…
- NestJS 12.2.0: Notable changes
v12.2.0 (2026-10-19) Notable changes New options @Sse({ maxPendingDataLength }) sets how many characters of event data may wait for a client that is not reading its events (4M by default; 0 or Infinity lifts the limit) –…
- Nx 24.0.0: angular, support angular v22.2 (#37234, #37375)
24.0.0 (2026-10-21) Features angular: support angular v22.2 ( #37234, #37375 ) angular: remove deprecated SCAM generators ( #37508 ) core: remove deprecated nx watch --includeDependentProjects alias ( #37311 ) core: let…
- OpenAI Codex 0.164.0: New Features
New Features Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. ( #54380, #54381 ) Set model, reasoning effort, speed, and permission profiles directly with in…
- OpenAI Node SDK 7.37.0: api, add degraded external storage status (#2963) (e0fe092)
7.37.0 (2026-10-17) Features api: add degraded external storage status ( #2963 ) ( e0fe092 ) Chores api: add shutdown notices for GPT-4 model aliases ( #2959 ) ( 648cd0a ) Refactors realtime: use generated Translation bi…
- OpenAI Node SDK 7.38.0: api, add typed Live sideband events (#2964) (4be6e72)
7.38.0 (2026-10-17) Features api: add typed Live sideband events ( #2964 ) ( 4be6e72 )
- OpenAI Node SDK 7.39.0: realtime, add opt-in bounded connection recovery (#2968) (64872e5)
7.39.0 (2026-10-18) Features realtime: add opt-in bounded connection recovery ( #2968 ) ( 64872e5 ) Chores api: use neutral moderation examples ( #2969 ) ( 3a3b852 )
- OpenAI Node SDK 7.41.0: add Vertex AI support for the Responses API (#3005) (04b1ac4)
7.41.0 (2026-10-21) Features add Vertex AI support for the Responses API ( #3005 ) ( 04b1ac4 )
- OpenAI Node SDK 7.42.0: api, add voice deletion (#3014) (2a88010)
7.42.0 (2026-10-22) Features api: add voice deletion ( #3014 ) ( 2a88010 ) Bug Fixes agents: avoid repeated ancestor-path hashing ( #3010 ) ( e352050 ) api: avoid excessive work when redacting long log values ( #3012 ) (…
- OpenAI Node SDK 7.43.0: api, Breaking change in a minor release. A Live response's Decisions question instructions can now be a…
7.43.0 (2026-10-22) Features api: Breaking change in a minor release. A Live response's Decisions question instructions can now be a string or an array of text, image, or JSON parts. Code such as question.instructions.tr…
- OpenAI Python SDK 3.34.0: api, add degraded external storage status (#4097) (b216cb2)
3.34.0 (2026-10-17) Features api: add degraded external storage status ( #4097 ) ( b216cb2 ) api: add Realtime Translation WebSocket sessions ( #4095 ) ( bfada50 )
- OpenAI Python SDK 3.35.0: api, add typed Live sideband events (#4099) (8d5cbf0)
3.35.0 (2026-10-17) Features api: add typed Live sideband events ( #4099 ) ( 8d5cbf0 ) api: add ultrafast service tier for Agents ( #4101 ) ( 100bf8f ) Bug Fixes realtime: preserve byte receives with websockets 13 ( #409…
- OpenAI Python SDK 3.36.0: add Vertex AI support for the Responses API (#4139) (3e63d33)
3.36.0 (2026-10-21) Features add Vertex AI support for the Responses API ( #4139 ) ( 3e63d33 ) api: add 30-minute cache-write usage counts ( #4111 ) ( 5589146 ) api: add compaction trigger IDs ( #4122 ) ( 0e5794d ) api:…
- OpenAI Python SDK 3.37.0: BREAKING CHANGES
3.37.0 (2026-10-22) BREAKING CHANGES api: This minor release includes a breaking change to Decisions types. In Live response models, question instructions can now be a string or a list of structured text, image, or JSON…
- oxc crates_v0.155.0
BREAKING CHANGES c7d229b transformer: [ BREAKING ] Decode JSX entities to lone surrogates ( #26712 ) (Dunqing) e3c1b11 ast: [ BREAKING ] Preserve lone surrogates in static property names ( #27095 ) (Dunqing) a0a987c ast:…
- oxlint v1.89.0
BREAKING CHANGES e3c1b11 ast: [ BREAKING ] Preserve lone surrogates in static property names ( #27095 ) (Dunqing) a0a987c ast: [ BREAKING ] Preserve lone surrogates in static member names ( #26677 ) (Dunqing) Features 77…
- oxfmt v0.74.0
Bug Fixes e236de0 formatter_tests: Skip conformance spec calls with non-literal options ( #27957 ) (leaysgur) 782ab6e linter: Search string values without UTF-8 conversion ( #26716 ) (Dunqing) a5d8184 jsdoc: Parse code s…
- Pulumi 3.271.0: [engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the…
3.271.0 (2026-10-21) Features [engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via.id and resolve it as un…
- pkg/v3.271.0: Changelog and go.mod updates for v3.271.0 (#25312)
Co-authored-by: github-actions github-actions@github.com
- Pulumi 3.272.0: [cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy…
3.272.0 (2026-10-22) Features [cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy, and add --show-policy-exceptions to up and preview to list them with their except…
- pkg/v3.272.0: Changelog and go.mod updates for v3.272.0 (#25352)
Co-authored-by: github-actions github-actions@github.com
- Qdrant 1.20.0: #10750 - BM25 scoring directly on the full-text payload index [docs]
Changelog Features #10750 - BM25 scoring directly on the full-text payload index [ docs ] Milestone #57 - TurboQuant: new turbo8 and turbo16 vector datatypes [ docs ] #11125 - Per-element payload indexes: new nested inde…
- React Router 8.5.0: See the changelog for release notes, https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v850
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v850
- v5.0.0-1
5.0.0-1
- Rollup 4.65.0: Support synthetic named exports in namespaces when preserving modules (#6589)
4.65.0 2026-10-22 Features Support synthetic named exports in namespaces when preserving modules ( #6589 ) Bug Fixes Fix a situation where unaligned sourcemaps resulted in a wrong segment ( #6591 ) Forward startup errors…
- swc_core@v82.2.0
chore: Publish crates with swc_core v82.2.0
- Supabase CLI 2.122.0: Supabase CLI v2.122.0 — 2026-10-23
Supabase CLI v2.122.0 — 2026-10-23 This release is mostly fixes. The headline changes are supabase/supabase.lock for pinning stack service versions, PGSSL* and TLS settings now reaching db push --linked and pg_dump, and…
- Temporal 1.32.0-163.8: patched temporal version
patched temporal version
- Temporal 1.33.0-164.1: patched temporal version
patched temporal version
- Temporal 1.33.0-165.0: temporalio/temporal version 1.33.0
temporalio/temporal version 1.33.0
- Terraform 1.17.0: 1.17.0 (October 21, 2026)
1.17.0 (October 21, 2026) NEW FEATURES: Terraform now supports variables and locals in provider requirements ( #39153 ) A new -minimal-refresh planning option has been added, which will only refresh resources that have p…
- Meta Muse Spark Open + NVIDIA Nemotron 3.5
Run NVIDIA's new Nemotron 3.5 models and Meta's new Muse Spark Open locally in Unsloth. New: text-diffusion LLMs, DeepSpeed training and better prompt caching for coding agents. Highlights NVIDIA Nemotron 3.5 Bolt: Run o…
- 1.143.0
https://code.visualstudio.com/updates/v1_143
- chokidar 6.0.0
High level changes Rewrote the watcher around a single observation pipeline. Backend callbacks are treated as invalidations and confirmed with lstat , stat , or readdir before any event is emitted, so the final state aft…
- mise-daemons-v2026.10.0
Release mise-daemons 2026.10.0
- openai 7.38.0
The official TypeScript library for the OpenAI API
- openai 7.39.0
The official TypeScript library for the OpenAI API
- @anthropic-ai/sdk 0.137.0
The official TypeScript library for the Anthropic API
- @anthropic-ai/sdk 1.1.0
The official TypeScript library for the Anthropic API
- openai 7.42.0
The official TypeScript library for the OpenAI API
- openai 7.43.0
The official TypeScript library for the OpenAI API
- @google/genai 2.31.0
[](https://www.npmjs.com/package/@google/genai) [](https://www.npmjs.com/package/@google/ge…
- @anthropic-ai/sdk 1.3.0
The official TypeScript library for the Anthropic API
- opencode 2.1.0: release, v2.1.0
release: v2.1.0
- path-to-regexp v9.0.0
Important: This release switches the package to ESM only and node = 22. The primary incompatible API change is to switch ambiguous matches (2+ parameters in a segment) from the first being greedy to the last. For example…
- pnpm 12.15
This release lets pnpm-workspace.yaml delegate settings to other files and config dependencies with include, adds lockfile.integrityTarget: tar and tar-registry support, accepts zstd-compressed registry responses, and ho…
- vLLM 0.32.0: This release features 814 commits from 363 contributors (121 new)!
v0.32.0 Highlights This release features 814 commits from 363 contributors (121 new)! Structured decisions and generic parsers: the new POST /v1/systemone endpoint answers choice, noul and score questions over a structur…
Research
The papers most useful to a developer this week.
- ScoreRec: Reallocating Probability Mass in Sequential Recommendation via Score-based Diffusion Modeling
Sequential recommendation generates personalized item rankings by estimating latent user-preference distributions from historical interactions. Although Diffusion Models (DMs) have gained prominence due to their exceptional capacity to capture complex distributions, current DM-ba…
- Bias Mitigation in Federated Learning through Feature Integration
Machine learning models are trained on datasets where undesired features have spurious correlations with the target variable, resulting in the bias shifts of the model output to a different class. In federated learning (FL), a common problem is data distribution skew. Since each…
- Mobility Network Forecasting: A Trajectory-based Contact Prediction Approach
Predicting human mobility patterns is crucial for various applications, including urban planning, traffic management, and public health. A key challenge in this domain is identifying when and where interactions, or contacts , occur between moving individuals (i.e., objects) based…
- GraphLLM4CTR: Large Language Model-enhanced Graph Neural Networks for Click-through Rate Prediction in Recommender Systems
Click-through rate (CTR) prediction is a crucial task to estimate the probability that users will click on items in online platforms. Recently, researchers have incorporated semantics derived from large language models (LLMs) into representations of users and items in a graph neu…
- Parselets: An Abstraction for Fast, General-Purpose Algorithmic Information Calculus
This work describes the principle design of a theoretical framework leading to fast and accurate algorithmic information measures on finite multisets of finite strings by means of compression. One distinctive feature of our approach is to manipulate reified representations of the…
End of the week.← The week before · The week after →