Search the desk.
Explore official releases, tools and ideas across every topic.
The best of the archive
MCP servers fix six vulnerabilities in filesystem, Git and fetch
The MCP reference servers patch six security issues. Filesystem users should upgrade to 2.3.0; Git and fetch server users need the 2026.11.11 releases.
Serve a Worker's static assets from a URL path like /blog/
You can now serve your Worker's static assets from a URL path prefix, such as example.com/blog/, without changing your build output. Previously, to serve assets from /blog/, you had to nest your files in a matching blog directory.
Git security vulnerabilities announced
Git is releasing updates addressing six security vulnerabilities affecting recursive clones, reference handling, merges, binary patches, and imports. Here is what users need to know. The post Git security vulnerabilities announced appeared first on The GitHub Blog.
Open SourceOpen Source AI Salons: Shaping the OSAID, Together
Two years after the release of the Open Source AI Definition (OSAID 1.0), the Open Source Initiative hosted the first in a series of Open Source AI Salons, gatherings to discuss the future of the OSAID.
New Figma Motion updates: physics based springs, style and Lottie export previews
With this Figma Motion feature bundle, Motion designers will have an easier way to preview preset animation styles, view Lottie files before exporting, and more fine tune controls with physics based springs.
Evaluate Flagship feature flags from Rust
The Flagship Rust SDK provides an async OpenFeature provider with HTTP and local evaluation for Rust server applications.
Claude Code updates its default Fable model and fixes MCP OAuth redirects
Claude Code 2.1.321 adds Fable 5.2 and fixes cases where MCP OAuth secrets could be sent to a redirected host.
Docker Sandboxes vs. Containers: Choosing the Right Isolation for AI Agents
Docker Sandboxes run agents inside microVMs with their own kernel, filesystem, network, and Docker Engine; containers share the host kernel.
Developer ToolsInside GitHub’s new Git storage architecture
GitHub's new Git storage architecture is built so thousands of agents can push to a single repository at once. Here's how it works. The post Inside GitHub’s new Git storage architecture appeared first on The GitHub Blog.
CNCF Score project improved its security posture by joining the Docker-Sponsored Open Source Program
See how CNCF Score improved container security with Docker Scout, Hardened Images, and the Docker-Sponsored Open Source Program.
Automatic retries for Durable Object calls
The runtime now retries fetch() and RPC calls to a Durable Object when they fail with a retryable error before reaching it. This applies whether the caller is a Worker or another Durable Object. Short disruptions, such as brief network interruptions, no longer need a retry loop in your code.
FrontendIntroducing Adaptive Dark Mode
We’re excited to announce Adaptive Dark Mode in Safari 27.3 beta.
Cloudflare Agents adds Pi 1.5 support and a new session view
PiHarness gains Pi 1.5 support, batched streaming writes, session.watch() and a way to continue runs without sending a new message.
Tailwind CSS adds a Turbopack loader for Next.js
Tailwind CSS 4.3.4 introduces @tailwindcss/turbopack and fixes watch mode and CSS scoping behavior.
Where should your code live in a Docker Sandbox?
Docker Sandboxes support three ways to organize an agent’s code: shared mounts, Git worktrees, and clone mode. Here’s how to choose between them.
The Ecosystem is the Answer: Docker, the Blueprint Alliance, and the Importance of Collaboration in the Agentic Era
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
FrontendWhat's new in Astro - October 2026
October 2026 - Astro 7.4, conference talks, and more!
Node.js 26 enters long-term support as Lithium
Node.js 26.13.0 marks the 26.x line as LTS through April 2029. The release changes support metadata rather than adding runtime features.
AI ModelsWe’re announcing Genie 4, our new world model for real-time interactive simulation.
Today, we’re announcing our research on Genie 4, our new world model that brings unprecedented realism and native audio to real-time interactive simulation.The Genie 4 m…
FrontendBlocking Identity Resolution Infrastructure
Apple and WebKit have shipped protections against web tracking for a long time.
Open SourceOpening New Paths for Open Source
Members Newsletter – October 2026: From NY to Halifax and Prague, the past few weeks opened new paths for collaboration, policy, and sustainability across the open source ecosystem.
Open SourceNew website reflects OSI’s evolving mission
Over the years, OSI’s work has expanded beyond the Open Source Definition and licensing to encompass policy and standards, research and education, and Open Source AI. The new website brings these areas into clearer focus, making it easier for the community and our partners to discover what we do and find ways to get involved.
Send custom API headers with Wrangler and Cloudflare CLI
Wrangler 4.160.0 and Cloudflare CLI ( cf ) 1.0.0-beta.29 support custom headers for Cloudflare API requests. Use CLOUDFLARE_API_HEADERS to add headers or override most generated values, with the exception of protected body and transport headers.
Prioritize Web Assets operations with metric views
The Web Assets > Operations page now includes metric-focused views for traffic, errors, latency, response size, and security. Each view surfaces the relevant metrics and supports server-side sorting, making it easier to prioritize operations in large inventories.