Node.js 26.9.0 turns on node:ffi by default, six weeks before Node 26 becomes LTS
Any code in a Node 26.9.0 process can now call into a C library with no flag and no compiled addon. We tested the official binary, and the two ways to switch it off.
Runtimes, databases and the tooling underneath them.
Any code in a Node 26.9.0 process can now call into a C library with no flag and no compiled addon. We tested the official binary, and the two ways to switch it off.
Beta build 26220.9343 adds Cloud rebuild, a recovery option that wipes the system disk and reinstalls Windows 11 from Windows Update, no USB stick required. Microsoft's documentation spells out the error codes, the log paths, and one warning to take seriously.
curl 8.22.0: nine CVEs, TLS-SRP removed, NTLM and SMB next.
Apple's new EU business terms swap a per-install fee for a 5% commission and open marketplace operation to non-EU companies.
Chrome 152 removed Private Aggregation two milestones late, and Privacy Sandbox's status page shows what else is queued.
A Go security fix set a read deadline it only cleared when ReadTimeout was non-zero — killing h2c streams until 1.25.14, 1.26.7 and 1.27.0.
OpenSSH 10.5 fixes an agent-locking bypass, a client use-after-free and a restrict-keyword gap - and announces the end of batched releases.
uutils coreutils 0.10.0: 645/690 GNU tests pass, TOCTOU fixes, mv --exchange, OpenSSL checksums.
PG19 Beta 2's fixes cluster on temporal tables, property graphs, and REPACK — plus one revert.
Firefox 153 turns on Local Network Access restrictions by default; plain-HTTP pages can no longer reach the LAN.