Latest security news

Scala 3.8.3 is now available!

Scala 3.8.3 is now available! Release highlights Local coverage exclusions with // $COVERAGE-OFF$ blocks ( #24486 ) Coverage-instrumented builds can now disable coverage for a selected region of code, instead of excluding a whole file or class. This is useful for generated code, intentionally defensive branches, or support code that would otherwise distort coverage results. //> using scala 3.8.3 //> using options --coverage-out coverage-data class Parser : def parse ( input: String ) : Int = input . toInt // $COVERAGE-OFF$ def debugFallback ( input : String ) : Int = if input == "zero" then 0…

Fixing a Command Injection Vulnerability in sbt

This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . As part of our ongoing work on the sbt 2 release, we’ve been reviewing and hardening core parts of the sbt codebase. During that work, we discovered a command injection vulnerability in how sbt resolves source dependencies on Windows. The issue has been assigned CVE-2026-32948 , rated Moderate (CVSS 6.7), and is now fixed. If you use sbt on Windows, update to sbt 1.12.8 or sbt 2.0.0-RC10 or later to apply the fix. The vulnerability…

Laravel AI SDK: Building Production-Safe Database Tools for Agents

Build production-safe database tools with the Laravel AI SDK. Scope Eloquent queries by user, add vector search with SimilaritySearch, and prevent prompt injection.

Cutting Laravel Cloud Load Times by 60% with Nightwatch

How we cut environment dashboard response times from 907ms to 354ms with Laravel Nightwatch by fixing N+1 queries, redundant data, and deferring load.

Announcing Scala Days 2026

We are very happy to announce that the Scala Days 2026 conference will be taking place 12 - 13 October in Berlin, Germany, one of Europe’s most vibrant tech and open source hubs, known for its strong culture of collaboration and its growing role in advancing digital sovereignty through open technologies. Grab your Super Early Bird ticket and join us in Berlin this autumn! Co-located events Workshops will follow on 14–15 October, with various community-driven, co-located events taking place around the conference, possibly including the preceding weekend. Meet Plain Schwarz For the Scala Days 2…

Scheduled Autoscaling for Laravel Cloud

You can now [define a scaling schedule on Laravel Cloud](https://laravel.com/cloud/docs/compute#scheduled-autoscaling) and let it handle the rest. Set your autoscaling limits once for each traffic win...

Inertia v3: What's Changed Since the First Beta

What changed in Inertia v3 since the first beta: simpler layout props, Vite 8 support, a withApp callback, and new Blade components.

Next.js Across Platforms: Adapters, OpenNext, and Our Commitments

Next.js 16.2 introduces a stable Adapter API, a public adapter test suite, and a working group for more consistent deployment across platforms.

K6 Load Testing on Laravel Cloud: 17,000 Requests per Second and Autoscaling Under Pressure

Learn how to load test a Laravel app with k6: 20,000 virtual users, bimodal latency jitter, and Laravel Cloud autoscaling under real pressure. Here's what happened.

Developing a minimally HashDoS resistant, yet quickly reversible integer hash for V8

Node.js 25.8.2 (Current)

Node.js 24.14.1 (LTS)

Node.js 22.22.2 (LTS)

Node.js 20.20.2 (LTS)

Swift 6.3 Released

Swift is designed to be the language you reach for at every layer of the software stack. Whether you’re building embedded firmware, internet-scale services, or full-featured mobile apps, Swift delivers strong safety guarantees, performance control when you need it, and expressive language features and APIs. Swift 6.3 makes these benefits more accessible across the stack. This release expands Swift into new domains and improves developer ergonomics across the board, featuring: More flexible C interoperability Improvements to cross-platform build tooling Improvements for using Swift in embedded…

Tuesday, March 24, 2026 Security Releases

Python 3.15's JIT is now back on track

A look at Python's JIT in 3.15a7.

Porting the Scala 2 optimizer to Scala 3

This post covers work done under the Sovereign Tech Fund investment umbrella: Maintenance of the Standard Library/Core Library Modules and APIs . The work is coordinated by the Scala Center . We are porting the optimizer from the Scala 2 compiler to the Scala 3 compiler, improving the performance of Scala 3 applications without requiring developers to write more complex code. In early microbenchmarks of code written in a high-level functional style, we’re seeing 10-30% faster execution. But what exactly is this optimizer and why is it necessary? This work is available as of version 3.8.3-RC3…

Laravel Cloud CLI: Deploy and Manage Laravel Apps from the Terminal

The Laravel Cloud CLI lets you deploy Laravel apps, manage environments, and run Artisan commands from the terminal. Install via Composer and skip the dashboard.

NSD 4.14.2 released

Today, we released version 4.14.2 of the authoritative DNS nameserver NSD. This release addresses a bug in the processing of IXFRs when adding and deleting RRs in collated IXFRs within the same network packet. You can get source packages of this version from the downloads page . Related links …

Lazy BDDs with eager literal differences

This is a follow up to our batch of set-theoretic types optimizations, this time targeting differences.

Next.js 16.2

Next.js 16.2 includes Adapters, rendering performance improvements, improved debugging and error pages, and more.

Turbopack: What's New in Next.js 16.2

Turbopack in Next.js 16.2 brings faster builds, SRI support, postcss.config.ts, tree shaking of dynamic imports, Server Fast Refresh, inline loader configuration, and over 200 bug fixes.

Next.js 16.2: AI Improvements

Next.js 16.2 ships AGENTS.md in create-next-app, browser log forwarding, dev server lock file with PID, and next-browser for AI agent debugging.

Which AI Model Is Best for Laravel?

We benchmarked 6 AI models on 17 real Laravel tasks, with and without Laravel Boost. See which model wins, which fails, and by how much.

Bun v1.3.11

Fixes 105 issues (addressing 307 👍). 4 MB smaller on Linux. x64 Bun.cron for OS-level cron jobs and expression parsing, Bun.sliceAnsi for ANSI/grapheme-aware string slicing, richer Bun.markdown list metadata; bun test --path-ignore-patterns; native Windows ARM64 .bin shim; dgram UDP fixed on macOS, fs.openSync numeric flags fixed on Windows (unbreaks tar@7), http2 WINDOW_UPDATE fix; bundler --bytecode/barrel/import-attribute fixes; CSS unicode-range/mask/border-radius fixes; Proxy-array crash fixes, CRLF injection fix, bun install hang fixes, and many Node.js compatibility improvements.

runc v1.3.5 -- "Lo viejo funciona!"

This is the fifth patch release of the 1.3.z release series of runc, and primarily contains a few fixes for issues found in 1.3.4. Fixed Recursive atime-related mount flags (rrelatime et al.) are now applied properly. ( #5115 , #5098 ) PR #4757 caused a regression that resulted in spurious cannot start a container that has stopped errors when running runc create and has thus been reverted. ( #5158 , #5153 , #5151 , #4645 , #4757 ) Changed Updated builds to Go 1.25, libseccomp v2.6.0. ( #5111 , #5053 ) Minor signing keyring updates. ( #5146 , #5139 , #5144 , #5148 ) Static Linking Notices The…

Managed Databases Are Now Available in Laravel Forge

Let Laravel Forge handle managed Postgres clusters for you with automated backups, PITR, high availability, and monitoring, all from your Forge dashboard.

Building Multi-Agent Workflows with the Laravel AI SDK

Build Anthropic's five multi-agent patterns with the Laravel AI SDK, from prompt chaining and routing to parallelization, and more.

Laravel MCP Server: Auth & Security Best Practices

Add authentication to your Laravel MCP server without writing an authorization server. Plus, security best practices.

PHP 8.5.4 Released!

The PHP development team announces the immediate availability of PHP 8.5.4. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.4 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

PHP 8.4.19 Released!

The PHP development team announces the immediate availability of PHP 8.4.19. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.19 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

Laravel MCP: A Complete Guide

Learn how to build a Laravel MCP server with tools, resources, and prompts. Step-by-step guide to exposing your app to AI clients like Claude and ChatGPT.

Node.js 25.8.1 (Current)

Hardening Scoverage Support in Scala 3

This post covers work done under the Sovereign Tech Fund investment umbrella: Scoverage hardening . The work is coordinated by the Scala Center . Summary Code coverage is a key part of maintaining high-quality Scala projects. We’ve recently made progress on making Scoverage more robust for Scala 3, expanding the way we test it and discovering and fixing new issues. Background Measuring how much of your Scala code is exercised by tests sounds simple until you try to do it yourself. That’s where code coverage tools come in. Code coverage is not optional for many organizations. As one of the QA…

WordPress 6.9.2 Release

WordPress 6.9.2 is now available This is a security release that features several fixes. Because this is a security release, it is recommended that you update your sites immediately. You can download WordPress 6.9.2 from WordPress.org, or visit your WordPress Dashboard, click “Updates”, and then click “Update Now”. If you have sites that support automatic […]

Adobe Acrobat および Reader の脆弱性対策について(2026年3月)

Microsoft 製品の脆弱性対策について(2026年3月)

Python 3.15.0 alpha 7

The penultimate 3.15 alpha is out!

CPython: 36 Years of Source Code

An analysis of the growth of CPython's codebase from its first commits to the present day

Swift at scale: building the TelemetryDeck analytics service

TelemetryDeck is an app analytics service specifically for developers, designed to manage usage analytics that are anonymized, privacy-focused, and really easy to use. TelemetryDeck is managing the data of over 16 million people every month, helping thousands of app publishers improve their products, and we’re doing it all with a Swift-based infrastructure. The decision to go with Swift brought a lot of unexpected advantages for us. We come from a world of iOS in the frontend, Python, Node, or Ruby in the backend for server-based applications. Compared to these languages and frameworks, Swift…

Inertia.js v3 Is Now in Beta

Inertia.js v3 beta is out. No more Axios, a new Vite plugin handles SSR automatically, and optimistic updates are now built in. Upgrade guide included.

Node.js 22.22.1 (LTS)

Node.js 20.20.1 (LTS)

Laravel AI SDK, Boost, or MCP: Which Tool Do You Need?

Laravel AI SDK, Boost, and MCP serve different purposes. Learn when to use each one, how they work together, and how to build faster with Laravel.

Node.js 25.8.0 (Current)

Introducing the Laravel Community App

Discover Laravel events, meet your people, and level up as a developer. Download the Laravel Community app on iOS and Android.

Laravel Cloud API and CLI: Ship Faster, Automate More

The Laravel Cloud API and CLI are now GA. Ship faster, automate more, and manage more infrastructure without growing your team.