IBM and Red Hat Lightwell: Fix Open Source Deps, Not Just Find Them
IBM and Red Hat commercially launched Lightwell on July 8 — a platform that actually fixes your vulnerable open source dependencies instead of ...
Refuse: Block Vulnerable Package Installs Before Your AI Agent Does
Refuse is an open-source shim that intercepts npm, pip, cargo, and 15 more package managers ...
Andrew Kelley Challenges Bun Rewrite: Slop Predates AI
Andrew Kelley says Bun was writing slop before AI made it faster. His July 9 ...
Together AI Raises $800M: Open-Source Inference Just Got Serious
Together AI closed an $800M Series C. With 200+ open models, an OpenAI-compatible API, and ...
OpenAI Patch the Planet: AI Fixes Open-Source Security
OpenAI’s Patch the Planet uses GPT-5.5-Cyber and Trail of Bits engineers to find and fix ...
DockSec: Fix Docker Vulnerabilities, Not Just Find Them
DockSec is the OWASP-backed Docker scanner that pairs Trivy, Hadolint, and Docker Scout with an LLM to deliver line-specific Dockerfile fixes — not ...
Apache Iceberg v4: What the Dev List Reveals in July 2026
Apache Iceberg v4 is in active development. What the dev mailing list reveals in July ...
GLM-5.2: Open-Weight Model Beats GPT-5.5 at 1/6th Cost
Z.ai's GLM-5.2 beats GPT-5.5 on SWE-bench Pro, tops Design Arena, and delivers 1M-token context at ...
CloudNativePG 1.30: DatabaseRole CRD and Two CVE Patches
CloudNativePG 1.30 ships a new DatabaseRole CRD for GitOps role management, Lease-based failover, and patches ...
Akrites Is Live: The Linux Foundation Unifies OSS Security
The Linux Foundation launched Akrites on June 25th — a shared SIRT and coordinated vulnerability ...