The full feed
Fresh signals from official sources, filtered down to the tools and ideas you care about.
MCP servers fix six vulnerabilities in filesystem, Git and fetch
The MCP reference servers patch six security issues. Filesystem users should upgrade to 2.3.0; Git and fetch server users need the 2026.11.11 releases.
Send custom API headers with Wrangler and Cloudflare CLI
Wrangler 4.160.0 and Cloudflare CLI ( cf ) 1.0.0-beta.29 support custom headers for Cloudflare API requests. Use CLOUDFLARE_API_HEADERS to add headers or override most generated values, with the exception of protected body and transport headers.
Serve a Worker's static assets from a URL path like /blog/
You can now serve your Worker's static assets from a URL path prefix, such as example.com/blog/, without changing your build output. Previously, to serve assets from /blog/, you had to nest your files in a matching blog directory.
Prioritize Web Assets operations with metric views
The Web Assets > Operations page now includes metric-focused views for traffic, errors, latency, response size, and security. Each view surfaces the relevant metrics and supports server-side sorting, making it easier to prioritize operations in large inventories.
LanguagesGoogle Summer of Code 2026 results
The Rust Project participated in Google Summer of Code (GSoC) for the third time this year. This time we had 13 projects, and our dear contributors have been working very hard on them for several months.
Git security vulnerabilities announced
Git is releasing updates addressing six security vulnerabilities affecting recursive clones, reference handling, merges, binary patches, and imports. Here is what users need to know. The post Git security vulnerabilities announced appeared first on The GitHub Blog.
Open SourceOpen Source AI Salons: Shaping the OSAID, Together
Two years after the release of the Open Source AI Definition (OSAID 1.0), the Open Source Initiative hosted the first in a series of Open Source AI Salons, gatherings to discuss the future of the OSAID.
AI ModelsWe’re bringing Adobe’s creative and productivity tools closer to your everyday Google apps.
Google and Adobe are integrating creative and productivity tools. Edit PDFs in Drive and use Adobe AI in Gemini. See what’s new in this partnership.
New Figma Motion updates: physics based springs, style and Lottie export previews
With this Figma Motion feature bundle, Motion designers will have an easier way to preview preset animation styles, view Lottie files before exporting, and more fine tune controls with physics based springs.
Set a concurrency limit for each Workflow
You can now set a concurrency limit on an individual Workflow to cap how many of its instances run at the same time.
Workers Builds and Pages now list GitHub repositories based on your GitHub account
When you connect a GitHub repository to Workers Builds or Pages, the accounts and repositories you can pick from are now based on your own GitHub account, so the list reflects the repositories you work with on GitHub.
Faster MP4 downloads from Cloudflare Stream
description: Generate downloadable video files faster without implementation changes.
Evaluate Flagship feature flags from Rust
The Flagship Rust SDK provides an async OpenFeature provider with HTTP and local evaluation for Rust server applications.
Claude Code updates its default Fable model and fixes MCP OAuth redirects
Claude Code 2.1.321 adds Fable 5.2 and fixes cases where MCP OAuth secrets could be sent to a redirected host.
Run Exo agents on Cloudflare
You can now run Exo agents on Cloudflare, with Durable Objects coordinating conversations and Cloudflare Sandboxes running Linux tools. Define an agent in Markdown, then use Exo's CLI or HTTP API to run it.
Dasha 1.10: Patroni auto-discovery, wait analysis and replication slot forecasts for PostgreSQL
Dasha is an open source performance dashboard for PostgreSQL fleets. It connects to your clusters with a read-only role, shows what the databases are doing right now, and explains what to do about it. Nothing is installed on the database hosts: no agent, and no extension beyond the ones you already have.
Partitioned cookie support for Bot Management
Cloudflare now adds the Partitioned attribute to the __cf_bm cookie on compatible HTTPS requests. The attribute is added only when the cookie can also be issued with SameSite=None and Secure. When users access your content through an <iframe> on another site, the browser handles __cf_bm as a third-party cookie.
Run the Codex agent loop on Cloudflare Workers
Run the Codex agent loop in a Cloudflare Durable Object with this experimental Agents SDK example ↗︎. Conversations, files, and completed model and tool results persist across restarts, allowing the agent to recover after interruptions.
PG Observability Map 1.0.0 Released
We are pleased to announce the initial release (1.0.0) of PG Observability Map, a interactive web-based tool designed to visualize and explore PostgreSQL observability, metrics, and internal diagnostic views. Key Features & Highlights: Interactive visual mapping of PostgreSQL system views, functions, and statistics.
HeapDeck: an on-call monitor for PostgreSQL on iPhone and iPad
HeapDeck is a new native app for engineers on call for PostgreSQL 13 to 19, on the App Store for iPhone and iPad. It opens on one health verdict with ten tiles. The Locks screen draws the tree from pg_blocking_pids() with the root blocker on top and counts the sessions that stopping it would free.
Brume: FK-safe pseudonymization for PostgreSQL test and debug copies
Brume 2.1, an open source (Apache 2.0) tool that creates deterministic, foreign-key-safe pseudonymized copies of PostgreSQL databases for testing, debugging and demos, is now available. Why Brume? Development teams often need realistic data to reproduce bugs, run tests or prepare demos, but copying production exposes real personal data.
AgensGraph 2.18 Released: Graph Database on PostgreSQL 18 with Expanded ISO GQL Support
The AgensGraph Development Team is pleased to announce the release of AgensGraph v2.18.6.1, the latest version in the 2.18 series. AgensGraph is an open-source graph database, built on PostgreSQL 18.6, that runs SQL and graph queries over the same data, in the same transaction and even in the same statement.
Beyond code generation: A developer’s guide to agentic engineering
Writing code got faster. The work around it didn't. See how you can plan, write code, review changes, and investigate production issues with GitHub Copilot, and what work still needs your judgment. The post Beyond code generation: A developer’s guide to agentic engineering appeared first on The GitHub Blog.
Docker Sandboxes vs. Containers: Choosing the Right Isolation for AI Agents
Docker Sandboxes run agents inside microVMs with their own kernel, filesystem, network, and Docker Engine; containers share the host kernel.
Select objects even faster with Figma’s AI image editing tools
Select area is an AI image editing tool that lets you select part of an image to isolate or erase it.
Developer ToolsInside GitHub’s new Git storage architecture
GitHub's new Git storage architecture is built so thousands of agents can push to a single repository at once. Here's how it works. The post Inside GitHub’s new Git storage architecture appeared first on The GitHub Blog.
Developer ToolsAccessibility statements now have a home on GitHub
GitHub now highlights ACCESSIBILITY.md files and helps maintainers document accessibility goals, known barriers, supported environments, contributor expectations, and reporting processes. The post Accessibility statements now have a home on GitHub appeared first on The GitHub Blog.
CNCF Score project improved its security posture by joining the Docker-Sponsored Open Source Program
See how CNCF Score improved container security with Docker Scout, Hardened Images, and the Docker-Sponsored Open Source Program.
Improvements to agent-generated vector illustrations and icons
The Figma agent now generates polished vector illustrations and icons that are easy to edit, match to your style, or animate.
Automatic retries for Durable Object calls
The runtime now retries fetch() and RPC calls to a Durable Object when they fail with a retryable error before reaching it. This applies whether the caller is a Worker or another Durable Object. Short disruptions, such as brief network interruptions, no longer need a retry loop in your code.
Granular access controls for the top Personal Agents
The Configure AI bot policies setting is now named AI Crawler and Agent access policies. Personal agents act on a person's behalf, fetching information or browsing in response to a request. The updated policies let you set actions for the top Personal Agents individually.
FrontendIntroducing Adaptive Dark Mode
We’re excited to announce Adaptive Dark Mode in Safari 27.3 beta.
Developer ToolsArnis turns any place on Earth into a Minecraft world
Louis Erbkamm built the first prototype in his free time. Now GitHub Copilot helps him maintain it alone. The post Arnis turns any place on Earth into a Minecraft world appeared first on The GitHub Blog.
Cloudflare Agents adds Pi 1.5 support and a new session view
PiHarness gains Pi 1.5 support, batched streaming writes, session.watch() and a way to continue runs without sending a new message.
Clone connected GitHub repositories into Figma by default
Cloning will be enabled by default for new GitHub repository connections, so teams can import code into Figma without an additional admin approval step.
Your prototype connections, now context for code layers
When you create a code layer from design frames, the agent now reads the prototype connections and interactions between them.
See which AI assistants act for your users in Account Abuse Protection
Account Abuse Protection now shows when a recognized AI assistant makes a login or sign up request, and which account it was acting for. Population overview: See which AI assistants are active across your users and how many accounts use them.
Tailwind CSS adds a Turbopack loader for Next.js
Tailwind CSS 4.3.4 introduces @tailwindcss/turbopack and fixes watch mode and CSS scoping behavior.
AI ModelsThe latest AI news we announced in October 2026
Here are Google’s latest AI updates from October 2026
Where should your code live in a Docker Sandbox?
Docker Sandboxes support three ways to organize an agent’s code: shared mounts, Git worktrees, and clone mode. Here’s how to choose between them.
The Ecosystem is the Answer: Docker, the Blueprint Alliance, and the Importance of Collaboration in the Agentic Era
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
FrontendWhat's new in Astro - October 2026
October 2026 - Astro 7.4, conference talks, and more!
From Working Group to SIG Architecture: spotlight on AI Conformance
In this SIG Architecture spotlight we talked with Janet Kuo (Google) and Yuan Tang (TensorScale AI) about the journey of AI Conformance in Kubernetes, from the initial Working Group to the integration SIG Architecture as a subproject.
Open SourceFOSDEM 2027: CFP for Open Source & EU Policy Devroom
The OSI, in collaboration with APELL, Eclipse Foundation, Github, Linux Foundation Europe, Mozilla, NLNET Labs, Open Forum Europe, and OpenSSF, are delighted to invite you to submit a proposal for a talk, and join us for the 4th edition of the Open Source & EU Policy devroom at FOSDEM.
Node.js 26 enters long-term support as Lithium
Node.js 26.13.0 marks the 26.x line as LTS through April 2029. The release changes support metadata rather than adding runtime features.
AI ModelsWe’re announcing Genie 4, our new world model for real-time interactive simulation.
Today, we’re announcing our research on Genie 4, our new world model that brings unprecedented realism and native audio to real-time interactive simulation.The Genie 4 m…
Announcing the Workload Conformance Working Group
We are excited to announce that the Kubernetes community now has a Workload Conformance Working Group. The working group is writing a shared standard for how workloads behave at runtime on Kubernetes. To get it right, we need input from the people who build those workloads and from the people who run the clusters they're deployed on.
FrontendWebKit Features for Safari 27.2
Safari 27.2 is here, refining Customizable Select, renaming a Grid Lanes property, and delivering 20 bug fixes across accessibility, media, CSS, and more.
LanguagesHow to fund Rust contributors
TLDR: To fund general maintenance, donate to the Rust Foundation Maintainers Fund or sponsor the RustNL Maintainers Team To fund specific features and improvements, sponsor fundable Rust Project Goals To fund individual contributors, donate to their GitHub Sponsors accounts There is always so much to do in the Rust Project!
FrontendWebKit Features for Safari 27.1
Today iPhone Duo arrives, and with it, Safari 27.1.
LanguagesAnnouncing TypeScript 7.1 Beta
Today we’re excited to announce the beta release of TypeScript 7.1! npm install -D typescript@beta Let’s take a look at what’s new in TypeScript 7.1! Support for Import Attributes in Ambient Modules Import attributes are metadata that are attached to import statements.
FrontendBlocking Identity Resolution Infrastructure
Apple and WebKit have shipped protections against web tracking for a long time.
Open SourceOpening New Paths for Open Source
Members Newsletter – October 2026: From NY to Halifax and Prague, the past few weeks opened new paths for collaboration, policy, and sustainability across the open source ecosystem.
Open SourceNew website reflects OSI’s evolving mission
Over the years, OSI’s work has expanded beyond the Open Source Definition and licensing to encompass policy and standards, research and education, and Open Source AI. The new website brings these areas into clearer focus, making it easier for the community and our partners to discover what we do and find ways to get involved.
AI ModelsTIME has named Google SynthID one of the Best Inventions of 2026.
TIME named Google SynthID a Best Invention of 2026 for its groundbreaking approach to AI watermarking and verification.
LanguagesAnnouncing Rust 1.99.1
The Rust team has published a new point release of Rust, 1.99.1. Rust is a programming language that is empowering everyone to build reliable and efficient software.
FrontendAstro 7.4
Astro 7.4 adds a --timings flag that shows where your build spends its time, separate build and runtime image services, a notFound() handler for custom entrypoints, and experimental parallel prerendering and custom redirect pages.
Why Is My Kubernetes Job Still Pending? Tracing Kueue Admission with Headlamp
You submit a Kubernetes Job and wait for its Pods to appear. A minute passes. Then another. The Job is still suspended, there are no application logs, and there may not even be a Pod to inspect. In a cluster managed by Kueue, this can be completely normal. Kueue may still be deciding whether the Job can use the requested resources.
AI ModelsWe’re powering European scientific discovery with advanced AI compute and frontier models.
Google DeepMind and Google Cloud are providing up to 200 top European scientific researchers with direct access to our frontier models, together with $3 million in compu…