Latest security news

Node.js 25.8.0 (Current)

Introducing the Laravel Community App

Discover Laravel events, meet your people, and level up as a developer. Download the Laravel Community app on iOS and Android.

Laravel Cloud API and CLI: Ship Faster, Automate More

The Laravel Cloud API and CLI are now GA. Ship faster, automate more, and manage more infrastructure without growing your team.

The Python Insider Blog Has Moved!

Python Insider now lives at blog.python.org, backed by a Git repository. All 307 posts from the Blogger era have been migrated, and old URLs redirect automatically.

Python 3.12.13, 3.11.15 and 3.10.20 are now available!

[Python Releases For Your Security!](https://discuss.python.org/t/python-3-12-13-3-11-15-and-3-10-20-are-now-available/106363) New security releases for 3.10, 3.11 and 3.12 are now available.

Laravel February Product Updates

Laravel Cloud API & CLI, MySQL 8.4 upgrade notice, Forge MySQL 9, Nightwatch MCP & Linear integration, and new Framework AI updates.

What's new in Swift: February 2026 Edition

Welcome to this edition of “What’s New in Swift,” where we share interesting projects and updates in the Swift community that deserve visibility to a broader audience. FOSDEM is the largest open source conference in the world, and this year Swift was featured in talks across multiple tracks and a dedicated pre-conference event. Here’s a report from the Swift community: Hey there! Karen Chu here. 👋 I help grow and support the Swift open source community, and one of my favorite things has been increasing Swift’s participation in open source events. As a follow-up to Swift’s presence at FOSDEM…

Migrating sbt plugins to sbt 2 with sbt2-compat plugin

This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . There’s an ongoing, community-driven effort to repopulate the sbt plugin ecosystem in preparation for the sbt 2 release. From sbt 1.x, plugin authors can cross publish against sbt 2.0 release candidates. To facilitate the plugin migration, we’ve created the sbt2-compat plugin . The PluginCompat Pattern sbt 2 is a major upgrade from sbt 1 and makes breaking changes on the API level. As a plugin maintainer, you want to preserve compat…

Bun v1.3.10

Fixes 155 issues (addressing 642 👍). New native REPL, --compile --target=browser for self-contained HTML, TC39 standard ES decorators, Windows ARM64 support, barrel import optimization, and a faster event loop. structuredClone up to 25x faster for arrays, Buffer.slice() 1.8x faster, path.parse() up to 7x faster, fewer closures in bundled output, and upgraded JavaScriptCore with 168x faster deep rope string slicing. Fixes Python asyncio-based MCP servers breaking with Bun.spawn(), plus numerous bugfixes across Node.js compatibility, bun install, the bundler, shell, and Windows.

Lazy BDDs with eager literal intersections

This article explores the latest batch of optimizations we did to set-theoretic types and their representation.

Deno 2.7: Temporal API, Windows ARM, and npm overrides

Deno 2.7 stabilizes the Temporal API, adds Windows on ARM builds, npm overrides in package.json, brotli compression streams, self-extracting compiled binaries, deno create, and dozens of Node.js compatibility improvements.

Node.js 25.7.0 (Current)

Node.js 24.14.0 (LTS)

「LANSCOPE エンドポイントマネージャー オンプレミス版」におけるパストラバーサルの脆弱性について（JVN#79096585）

NSD 4.14.1 released

Today, we released version 4.14.1 of the authoritative DNS nameserver NSD. The previous release promised reduced memory footprint from refactored RDATA storage (and it did for the vast majority of cases), but just after the release, we received a report that NSD was consuming more memory for specific …

The React Foundation: A New Home for React Hosted by the Linux Foundation

The React Foundation has officially launched, hosted by the Linux Foundation.

Your AI Agent Can Now Deploy to Laravel Cloud (and Write This Blog)

Laravel Cloud's API lets AI agents deploy, scale, and manage infrastructure through conversation. See how Florian built a working OpenClaw skill in a few hours.

Build a dinosaur runner game with Deno, pt. 6

Add structured logging, distributed traces, and game analytics to your Deno game and learn how to use Deno Deploy's built-in logs, traces, and metrics dashboards.

Laravel Cloud Incident Report: February 20, 2026

## Summary On February 20, 2026, [Laravel Cloud](https://laravel.com/blog/one-minute-or-less-how-we-built-laravel-clouds-architecture) experienced a connectivity outage lasting approximately 3 hours...

Announcing Swift System Metrics 1.0: Process-Level Monitoring

We are excited to announce the 1.0 release of Swift System Metrics , a Swift package that collects process-level system metrics like CPU utilization time and memory usage. Swift System Metrics runs on both Linux and macOS, providing a common API across platforms. Swift System Metrics visualized in Grafana, demonstrating what's possible with real-time monitoring. Monitoring process metrics enables you to detect performance issues, optimize resource usage, and ensure your service remains reliable and cost-effective under varying loads. You can integrate Swift System Metrics into your service in…

Join the Python Security Response Team!

The Python Security Response Team now has an approved public governance document (PEP 811) and is welcoming new members.

PHP 8.5.3 Released!

The PHP development team announces the immediate availability of PHP 8.5.3. This is a bug fix release. All PHP 8.5 users are encouraged to upgrade to this version. For source downloads of PHP 8.5.3 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

PHP 8.4.18 Released!

The PHP development team announces the immediate availability of PHP 8.4.18. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.18 please visit our , Windows source and binaries can also be found . The list of changes is recorded in the . downloads page there ChangeLog

Building Next.js for an agentic future

How we built and sunset an in-browser agent, shipped MCP integration, and learned that better AI agent support means thinking from the agent's perspective.

Python 3.15.0 alpha 6

This is an early developer preview of Python 3.15 www.python.org/downloads/release/python-3150a6/ Major new features of the 3.15 series, compared to 3.14 Pyt...

Larabelles: Building Space in the Laravel Community

Larabelles creates space for underrepresented developers in Laravel through scholarships, mentorship, and community. See how to join or support the movement.

Node.js 25.6.1 (Current)

Node.js 24.13.1 (LTS)

Build a dinosaur runner game with Deno, pt. 5

Capture player identities, add a customization modal, and persist those preferences via Oak + PostgreSQL.

Laravel Live Denmark 2026

Information: Laravel Live Denmark is back! The conference is a two-day Laravel conference held in Copenhagen, Denmark on the 20 - 21. August 2026. Join us and 300 other Laravel and PHP enthusiasts from around the world got for two days of learning, 16 speakers and more within the Laravel community. August 20-21, 2026 Copenhagen, Denmark 16 speakers +300 Laravel and PHP enthusiasts For more information, see . Laravel Live Denmark 2026 You can also find us at . Twitter

Bun v1.3.9

Fixes 23 issues (addressing 13 👍). Run multiple scripts in --parallel or --sequential. bun:test mock & spyOn get Symbol.dispose support. ESM bytecode compilation. Faster Bun.markdown. Faster RegExp, String.prototype.trim, String.prototype.startsWith.

Introducing the Laravel AI SDK

Build AI-powered Laravel applications with a unified SDK. Generate text, images, audio, and more across OpenAI, Anthropic, and other providers with clean, organized code.

GitLab Patch Release: 18.8.3, 18.7.3, 18.6.5

On February 4, 2026, we released versions 18.8.3, 18.7.3, and 18.6.5 for GitLab Community Edition and Enterprise Edition. This patch release delivers a set of targeted fixes focused on reliability, entitlement handling, and feature-flag consistency across GitLab Duo Agent Platform deployments. The updates reflect real-world usage across diverse environments and usage models, and are part of the normal hardening cycle for a platform that integrates deeply with GitLab workflows, identity, and usage controls. Core agent capabilities and behaviors are unchanged. This patch release does not includ…

Introducing Deno Sandbox

Instant Linux microVMs with defense-in-depth security for running untrusted code.

Deno Deploy is Generally Available

Deno Deploy is now generally available, plus some highlights of new features and tools.

Node.js 25.6.0 (Current)

Laravel January Product Releases

January brings Private Cloud, Valkey caching, expanded Cloud API, plus Forge backup options and Nightwatch real-time exception detection.

Python 3.14.3 and 3.13.12 are now available!

Python 3.14.3 is now available! This is third maintenance release of Python 3.14 Python 3.14.3 is the third maintenance release of 3.14, containing around ...

What's new in Swift: January 2026 Edition

A Reddit thread earlier this month asked about building web apps with Swift. For this edition of “What’s new in Swift,” we invited a developer to share their experience: Hi, I’m Nick Sloan. I’m the head of engineering at Studioworks , a platform that makes it easy and fun to run your creative studio, agency or freelance business. We chose Swift for Studioworks because of how easy it is to write safe and reliable code with great performance. Our Swift project makes use of Hummingbird 2 , Soto (for its incredible DynamoDB Codable support), Hummingbird MacroRouting , and Elementary . Studioworks…

Bun v1.3.8

Fixes 8 issues (addressing 6 👍). Bun.markdown is a builtin CommonMark-compliant Markdown parser written in Zig. Bun's bundler gets bun build --metafile-md to write LLM-friendly module graph metadata. Fixes a regression in 'npm install -g bun' on Windows.

OpenSSL Security Advisory Assessment, January 2026

Bun v1.3.7

Fixes 91 issues (addressing 243 👍). 50% faster `Buffer.from(array)`, 35% faster async/await, 3x faster `array.flat()`, 90% faster `padStart`/`padEnd` via JSC upgrade. New: `Bun.JSON5`, `Bun.JSONL`, `Bun.wrapAnsi()` (33-88x faster than wrap-ansi npm), `--heap-prof-md`, `--cpu-prof-md`, `node:inspector` Profiler API, `replMode` for `Bun.Transpiler`. Fetch now preserves header casing. HTTP/2 fixes for AWS ALB/gRPC/Fauna.

Node.js 25.5.0 (Current)

Build a dinosaur runner game with Deno, pt. 4

Building a leaderboard with database integration for our example browser-based game.

Creating Backup Strategies in Serverless Postgres with Laravel Cloud

Looking to save on costs while protecting your data? Read our tips for setting up a dynamic backup strategy in Laravel Cloud.

Inside Turbopack: Building Faster by Building Less

Learn how we built Turbopack with incremental computation to scale development and builds to massive Next.js applications.