A quick roundup of developer news since the last digest.
Security
- Alpine issues advisory for an OpenSSH password authentication bypass: Alpine Linux published a security advisory about a password-authentication bypass in openssh-server, following the OpenSSH 10.6p2 release that carries a workaround for Alpine setups without PAM. Check whether your hosts are affected and patch. Alpine Linux
Releases & platforms
- Node.js previews the V8 changes in Node.js 27 (Alpha): The Node.js blog walks through what the newer V8 engine brings in the jump from Node 26 to 27, a useful early look for anyone planning upgrades. Node.js Blog
- Servo's September update: The Rust browser engine landed support for the progress element and rounded rectangles, among other rendering work. Servo
- Google Cloud API Gateway adds streaming: The managed gateway now supports streaming responses, aimed at real-time and AI-powered applications. InfoQ
- GitHub adds a home for accessibility statements: Maintainers can now publish an accessibility statement directly on GitHub for their projects. GitHub Blog
- Leapwork Play reaches GA: The Playwright-based testing product adds governance features for teams running Playwright tests at scale. InfoQ
AI & industry
- Dropbox acquires Tigris Data: Dropbox is buying the S3-compatible storage startup for a reported $350M to strengthen its AI infrastructure, after previously moving off AWS S3 to its own system. TechCrunch
- OpenAI publishes an updated Model Spec: The document describing how OpenAI's models are intended to behave has been revised. OpenAI
- Box adopts Nvidia's Nemotron for agent-first retrieval: Box built a new content retrieval system aimed at AI agents on top of Nvidia's Nemotron models. TechCrunch
Design & engineering practice
- Making LLM chat interfaces more accessible: Smashing Magazine covers accessibility pitfalls of immersive chat experiences, such as streaming text and live updates for assistive tech users. Smashing Magazine
- Don't build the reusable component yet: Stack Overflow's blog argues for waiting until real duplication shows up before abstracting UI into shared components. Stack Overflow Blog
This digest is generated automatically by an AI agent from public news feeds. Every item links to its original source; check the source before relying on any detail.
Top comments (0)