Software News
Releases, tooling changes, and announcements across the software industry.
VS Code 1.135 Lets You Pick Up an Agent Session in a Different App
The August release adds cross-application session continuity for coding agents and an experimental feature that gets a second opinion from a different model.
SOFTWARE NEWSKubernetes v1.37 "Garhwal" Released
The release ships 67 enhancements, including a fully stable watch-cache initialization path for the API server.
SOFTWARE NEWSNext.js Rushes Out an Accelerated Security Release
Vercel moved a scheduled patch forward after finding a critical remote-code-execution flaw in an image-processing dependency.
SOFTWARE NEWSGitHub Publishes a Postmortem for Its August 17 Outage
A capacity shortfall in one data center cascaded into a nearly eight-hour outage touching almost every core GitHub service.
SOFTWARE NEWSGitLab 19.3 Adds a Secrets Manager and Bulk Vulnerability Remediation
The release moves GitLab Secrets Manager into limited availability and lets teams resolve many SAST findings in one action.
SOFTWARE NEWSFirefox Moves to a Two-Week Release Cadence
Starting with Firefox 155 on September 1, Mozilla is doubling its release frequency to match Chrome and Edge.
SOFTWARE NEWSPostgreSQL Patches Five Versions and Ships a 19 Beta
The update closes 28 security vulnerabilities and more than 110 bugs across five supported major versions.
SOFTWARE NEWSGoogle Cloud Previews Datastream Integration With Knowledge Catalog
The preview lets teams discover and govern Datastream's streams and connection profiles alongside their other cataloged data assets.
SOFTWARE NEWSDocker Desktop 4.86.0 Patches a Container Path-Escape Flaw
The release fixes CVE-2026-17106, a destination-escape vulnerability in docker container cp, alongside Swarm networking and shutdown fixes.
SOFTWARE NEWSDjango 6.1 Ships as Django 6.0 Exits Mainstream Support
The framework's twice-yearly release lands with new field-level and delete controls, and starts the clock on retiring the previous release.
SOFTWARE NEWSCompromised npm Packages Spread Credential-Stealing Malware
A hijacked maintainer account published malicious versions of keyv and several related caching packages, and the payload spread to hundreds of downstream packages.
SOFTWARE NEWSSvelte's August Update Refines Its Developer Tooling
The monthly update adds a component-stack context menu to the Svelte Inspector and a terminal-based variant of its official AI plugin.
SOFTWARE NEWSGitHub Ships Stacked Pull Requests to Public Preview
Ordered chains of small, focused pull requests can now be reviewed in parallel and merged as one operation.
SOFTWARE NEWSNode.js Patches Three Active Release Lines
A coordinated release fixes a Permission Model bypass and several TLS, DNS, and core-module issues across Node.js 26.x, 24.x, and 22.x.
SOFTWARE NEWSDocker Buildx 0.36.0 Adds Source Policy Validation for Build Images
The release verifies the authenticity of BuildKit release images and fixes a Kubernetes-driver hang.
SOFTWARE NEWSStripe Formalizes a Continuous API-Versioning Cadence
Twice-yearly major versions are now paired with monthly backward-compatible releases carrying the same version name.
SOFTWARE NEWSPyPI Starts Rejecting New Files on Releases Older Than 14 Days
A policy years in discussion finally shipped after two popular packages were compromised through exactly the gap it closes.
SOFTWARE NEWSJetBrains Ships Rider 2026.2 With Faster Performance and Game-Dev Upgrades
The release cuts debugger launch times, speeds up branch switching, and adds new tooling for Godot and Unreal Engine developers.
SOFTWARE NEWSnpm v12 Turns Off Install Scripts by Default
The most significant security change in npm's history stops dependencies from running code at install time unless a team explicitly allows it.
SOFTWARE NEWSChrome 150 Expands DevTools With a Memory Debugging Suite and Deeper AI Assistance
The release leans further into tooling built for coding agents, alongside more conventional CSS authoring upgrades.
SOFTWARE NEWSGitHub Sets a Retention Policy for Closed Dependabot Alerts
Closed security alerts will move to archival storage after two years, with the change taking effect September 25, 2026.
SOFTWARE NEWSNext.js Previews "Instant Navigations" for Server-Rendered Apps
A new opt-in feature set aims to make server-driven Next.js apps feel as responsive as single-page apps, without giving up server rendering.
SOFTWARE NEWSBytecode Alliance Ratifies WASI 0.3
The release rebases WebAssembly's system interface on the Component Model's native async primitives — async func, stream, and future.
SOFTWARE NEWSHomebrew 6.0 Introduces a Tap Trust Security Model
Third-party taps now require explicit approval before their code runs, part of a release that also adds Linux sandboxing and early macOS 27 support.
SOFTWARE NEWSValkey 9.1 Adds Database-Level Access Control and Cuts Per-Key Memory Overhead
The Redis fork's latest release focuses on tightening permissions and shrinking the memory cost of storing data at scale.
SOFTWARE NEWSNetlify Drops Per-Seat Pricing From Its Pro Plan
A flat $20-a-month rate now covers unlimited team members, undercutting a competitor's per-seat model for any team larger than one person.
SOFTWARE NEWSThe Document Foundation Removes Dozens of Collabora-Affiliated Members
A bylaws provision aimed at conflicts of interest cost LibreOffice several of its longest-serving core contributors their foundation membership.
SOFTWARE NEWSNeovim 0.12 Ships a Built-In Plugin Manager
A new experimental vim.pack module gives Neovim users lockfile-based plugin management without reaching for a third-party tool.