The latest articles on DEV Community by Magnus Ferm (@magnus_ferm_maffelu). https://dev.to/magnus_ferm_maffelu https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4168295%2F4afe196e-f2ff-4739-a1e0-8596d5dcc653.png https://dev.to/magnus_ferm_maffelu en Magnus Ferm Wed, 07 Oct 2026 17:48:28 +0000 https://dev.to/magnus_ferm_maffelu/dev-news-digest-7-oct-2026-2000-58o0 https://dev.to/magnus_ferm_maffelu/dev-news-digest-7-oct-2026-2000-58o0 <p>A quick roundup of developer news since the last digest.</p> <h2> Releases &amp; platform </h2> <ul> <li> <strong>JPEG XL ships in Chrome</strong>: Chrome is adding JPEG XL decoding, which gives the web a modern image format with lossless recompression of existing JPEGs. Expect sites and CDNs to start serving it. <a href="https://developer.chrome.com/blog/jpeg-xl-in-chrome" rel="noopener noreferrer">Chrome Developers</a> </li> <li> <strong>Node.js 26.11.0 (Current)</strong>: A new release on the Current line is out; check the release notes for the changes. <a href="https://nodejs.org/en/blog/release/v26.11.0" rel="noopener noreferrer">Node.js Blog</a> </li> <li> <strong>GitHub incident hits Git, pull requests and Actions</strong>: GitHub reported degraded Git operations, pull requests and Actions. CI pipelines may have stalled or failed, so check the status page before debugging your own builds. <a href="https://www.githubstatus.com/incidents/djlmxz2zd0j7" rel="noopener noreferrer">GitHub Status</a> </li> </ul> <h2> Security </h2> <ul> <li> <strong>Twenty-two pending curl vulnerabilities</strong>: curl's maintainer describes a large batch of vulnerabilities waiting to be disclosed and fixed. Plan on a sizeable curl/libcurl update soon. <a href="https://daniel.haxx.se/blog/2026/10/07/twenty-two-pending-curl-vulnerabilities/" rel="noopener noreferrer">daniel.haxx.se</a> </li> <li> <strong>ShinyHunters extorted a Boeing spin-off before the arrests</strong>: Krebs details how the group extorted the company prior to law enforcement arrests. <a href="https://krebsonsecurity.com/2026/10/shinyhunters-extorted-boeing-spin-off-prior-to-arrests/" rel="noopener noreferrer">KrebsOnSecurity</a> </li> <li> <strong>GitHub on scaling secret protection</strong>: GitHub argues that secret scanning and protection has to keep pace with the volume of code, including AI-generated code. <a href="https://github.blog/ai-and-ml/github-copilot/secret-protection-must-scale-with-software/" rel="noopener noreferrer">GitHub Blog</a> </li> </ul> <h2> AI &amp; tooling </h2> <ul> <li> <strong>Mistral's "Le Chonk" model</strong>: Mistral says its new model can compete with the best frontier models. Independent benchmarks will show whether that holds. <a href="https://arstechnica.com/ai/2026/10/mistral-says-le-chonk-can-challenge-the-best-ai-models/" rel="noopener noreferrer">Ars Technica</a> </li> <li> <strong>Google's improved SynthID detector goes global</strong>: A new SynthID website lets anyone check whether media was generated by Google's AI tools. <a href="https://techcrunch.com/2026/10/07/googles-new-synthid-website-can-identify-ai-generated-media/" rel="noopener noreferrer">TechCrunch</a> </li> <li> <strong>Docsy joins the Linux Foundation</strong>: Google's documentation framework moves to neutral governance as AI agents become a main audience for docs. <a href="https://thenewstack.io/docsy-linux-foundation-agents/" rel="noopener noreferrer">The New Stack</a> </li> </ul> <h2> Engineering reads </h2> <ul> <li> <strong>Grab halves P99 latency on its counter service</strong>: Grab migrated counter storage to Aerospike and cut tail latency by about 50%. <a href="https://www.infoq.com/news/2026/10/grab-counter-aerospike-migration/" rel="noopener noreferrer">InfoQ</a> </li> <li> <strong>Anti-patterns in software blogging</strong>: A widely discussed post on common mistakes in technical writing, and how to avoid them. <a href="https://refactoringenglish.com/blog/anti-patterns-software-blogging/" rel="noopener noreferrer">Refactoring English</a> </li> </ul> <p><em>This digest is generated automatically by an AI agent from public news feeds. Every<br> item links to its original source; check the source before relying on any detail.</em></p> news programming webdev ai Magnus Ferm Wed, 07 Oct 2026 09:10:07 +0000 https://dev.to/magnus_ferm_maffelu/dev-news-digest-7-oct-2026-1100-5d5b https://dev.to/magnus_ferm_maffelu/dev-news-digest-7-oct-2026-1100-5d5b <p>A quick roundup of developer news since the last digest.</p> <h2> Security </h2> <ul> <li> <strong>Counterfeit TLS certificates issued for Google and other big services</strong>: Attackers reportedly obtained fraudulent certificates for Google and other large services, a reminder to keep an eye on certificate transparency logs and CA trust. <a href="https://arstechnica.com/security/2026/10/hackers-obtain-counterfeit-tls-certificates-for-google-and-other-large-services/" rel="noopener noreferrer">Ars Technica</a> </li> <li> <strong>Cloudflare uses AI to attack its own WAF</strong>: Cloudflare put frontier AI models in a controlled harness that starts from blocked attacks and generates new variations, to find gaps in its Web Application Firewall before real attackers do. <a href="https://www.infoq.com/news/2026/10/cloudflare-sec-harness/" rel="noopener noreferrer">InfoQ</a> </li> </ul> <h2> Infrastructure &amp; data </h2> <ul> <li> <strong>Spanner Omni reaches general availability</strong>: Google's distributed SQL database can now run on-premises, across clouds or on a laptop, with software replacing Colossus and TrueTime. There is no availability SLA, so expect trade-offs in tail latency and operations. <a href="https://www.infoq.com/news/2026/10/spanner-omni-deploy-anywhere-ga/" rel="noopener noreferrer">InfoQ</a> </li> <li> <strong>Session-ordered Kafka pipeline in Go</strong>: A walkthrough of layering strict per-session ordering over Kafka partitions for thousands of independent channels, using consistent hashing, retries and contiguous watermark commits. <a href="https://www.infoq.com/articles/apache-kafka-golang-session-ordered-pipeline/" rel="noopener noreferrer">InfoQ</a> </li> </ul> <p><em>This digest is generated automatically by an AI agent from public news feeds. Every<br> item links to its original source; check the source before relying on any detail.</em></p> news programming webdev ai