Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Spritely Institute releases Hoot 0.10.0, its Scheme-to-WebAssembly compiler backend for Guile and general-purpose Wasm toolchain, with compiler, runtime and toolchain fixes and features since 0.9.0 in May, plus a new Hoot game jam template for building HTML5 canvas games in Scheme ahead of the autumn Lisp Game Jam starting October 30, 2026.
5 min · 1,061 words
Yavashark: I've Built A JS Engine Every Day For 950 Days Straight
Announcing Yavashark, a small embeddable and easily extendable JavaScript engine written in Rust that its sole author has worked on every day since March 17, 2024 (4,200+ commits). It passes about 82% of test262, supports Temporal and Intl, can run TypeScript and React, and lets developers bind Rust functions to JavaScript with a macro; the author also joined TC39 as an Invited Expert.
4 min · 847 words
SuperPlane 1.0: The Open Source Software Factory for Teams
SuperPlane launches 1.0 of its open source (Apache 2.0), model-agnostic software factory for engineering teams. It wraps coding agents in a shared path from ticket to verified, merged pull request: it scores backlog tasks for readiness, runs each in its own cloud environment, returns evidence such as checks and screenshots, and loops on CI and review until a PR is ready.
6 min · 1,401 words
Popcorn 1.0: Moving from AtomVM to OTP/BEAM
Software Mansion's Kuba Gonet explains Popcorn 1.0, the first stable release of the library that runs Elixir in the browser, which swaps AtomVM for the full OTP/BEAM virtual machine compiled to WebAssembly, giving much broader OTP compatibility and a sturdier VM, and walks through why they switched and how they made it boot fast.
8 min · 1,914 words
Introducing LFM3: Every Modality for Specialized Intelligence
Liquid AI releases LFM3, an open-weight family of 2B-class models (text, vision, audio, omni and decision) built on one new tri-hybrid backbone pre-trained on 22T tokens; LFM3-1.7B beats the larger LFM2.5-2.6B, the text model fits in about 1 GB at 4-bit with a 256K context, and every model can be fine-tuned on a single GPU for on-device specialised use.
20 min · 4,683 words
Stalwart v1.0: The Fastest Mail Server on the Planet
Stalwart's maintainer announces v1.0 of the Rust mail and collaboration server five years after its first commit, focused on performance work (SIMD/SWAR parser rewrites, profiling-driven optimisation, benchmarks) and finalising the on-disk data format.
14 min · 3,170 words
I refuse to accept a censored Internet. Join Me at FOSDEM 27
Bogomil Shopov invites developers, researchers and activists to the Digital Dissident Devroom at FOSDEM 2027, a track on free software for censorship circumvention, secure communication and whistleblowing, and lays out its scope, the kinds of talks wanted and the call-for-participation dates.
4 min · 1,009 words
oai-math-revised: a community hub for revising OpenAI’s math write-ups
A guest post on Terence Tao's blog by Abhinav Nellore, Johannes Schmitt, Soledad Villar and Rachel Ward announcing oai-math-revised, an open community GitHub effort to make OpenAI's published math write-ups easier to understand and better cited, and inviting mathematicians at every level to contribute and review.
1 min · 111 words
HumanLayer open-sources its core under Apache 2.0: the desktop and web apps, the daemon that runs Claude Code and Codex sessions, the cloud API and Electric sync proxy, plugins, RPI skills and Linear CLI, and the data model. Self-built copies have no telemetry; cloud users see no change for now.
2 min · 498 words
Moonshot AI introduces Kimi K3.1 Pro, a post-trained 3T-class open-weight model with a 1M-token context window and gains in coding, 3D creation and financial research, plus a 2-3x faster Highspeed variant; full weights are due by Nov 4.
14 min · 3,235 words
ThinkingCap: Gemma-4-26B-A4B — up to 69% and on average 39% less thinking, at unchanged accuracy
BottleCap AI releases the fifth ThinkingCap model, a fine-tune of Google's gemma-4-26B-A4B-it that cuts thinking tokens by 38.9% on average (up to 69.1%) across twelve benchmarks for a 0.15pp accuracy cost, with looping reduced from 3.6% to 0.8%.
6 min · 1,385 words
Getting ready to operate Taler in Germany
The GNU Taler project announces Taler Operations AG, a new company in Bochum that will apply to BaFin for an e-money licence to operate the privacy-preserving Taler payment system in euros, first in Germany, and explains why a regulated operator is needed.
3 min · 803 words
Your AI agent fixed the bug, but what else did it change?
Trail of Bits releases patching-bugs and regression-hunt, two agent plugins built through its Patch the Planet work with OpenAI that reproduce bugs, develop and test fixes, and check patches for regressions within a project's own threat model and patching guidelines.
8 min · 1,778 words
We just gave a million dollars to Open Source maintainers
Sentry raised its Open Source budget from $750,000 to $1,000,000 this year. The post explains why, its Open Source Pledge, and how the money was split among maintainers and foundations, with the full list of recipients.
3 min · 771 words
New open-source method shows the same AI request emits 8.5 times more CO₂ in Texas than in Sweden
Berget AI releases an open-source, MIT-licensed method for calculating the carbon emissions of each individual AI request, developed with Stockholm Environment Institute, WattTime and Klimatkollen, showing grid location can change per-request emissions by a factor of 8.5.
5 min · 1,168 words
Patch the Planet: global response coordination as agents uncover critical vulnerabilities
OpenAI describes leading a coalition with PHP maintainers, Calif, Wiz, Cloudflare and others to fix critical PHP vulnerabilities found with AI, commits $1B in subsidized Daybreak access for frontline defenders, and proposes a five-stage framework for coordinating responses to critical bugs in widely used software.
8 min · 1,812 words
Today's PHP Security Release, and How We're Strengthening PHP Security
The PHP Foundation explains the two critical RCE vulnerabilities fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, how they were found with researchers and AI security tools and fixed, how PHP security handling has changed over two years, and what dependent organizations need to fund.
8 min · 1,860 words
Announcing DuckDB 2.0.0 LTS “Cinnamon Teal”
The DuckDB team announces DuckDB 2.0.0 LTS, its biggest feature release so far: a polished Quack protocol for DuckDB as a server, asynchronous I/O, a first-class VARIANT type, agent mode, triggers, an extensible PEG-based SQL parser, plus breaking changes and migration notes.
12 min · 2,753 words
Do minor curl vulnerabilities in the open
curl maintainer Daniel Stenberg announces that from October 26, 2026 the project will require LOW and MEDIUM severity vulnerability reports to be filed as public GitHub issues, keeping only HIGH and CRITICAL reports private on HackerOne. He explains the change as a survival response to an avalanche of AI-assisted reports, and discusses the benefits, risks and severity guidelines.
4 min · 961 words
Announcing the GPU notification group and Linker Working Area
The Rust compiler team announces a GPU-target notification group for vendor experts helping diagnose GPU backend issues, plus a Linker working area to integrate alternative linkers such as Wild and to field linker questions, with Zulip streams and signup via rust-lang/team.
1 min · 295 words