Tech radar: week 15 of 2026
6–12 Apr 2026
In the week of 6–12 Apr 2026, 11 notable open-source releases shipped (including LangChain langchain-core==1.3.0a1, Anthropic Python SDK v0.94.0, Next.js v16.2.3), CISA added 2 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Git commands I run before reading any code” (2338 points).
Releases worth knowing about
AI & machine learning
release(core): 1.3.0a1 (36656)mentions security
vertex eu region (1658) (b7e157d)
api: add phase field to conversations message (3e5834e)
Web frameworks
This release is backporting security and bug fixes. For more information about the fixed security vulnerability, please see https://vercel.com/changelmentions security
[13.x] Fix missing Illuminate\Queue\Attributes\Delay attribute by @fadez in https://github.com/laravel/framework/pull/59504
This release includes fixes for the following security issues:mentions security
Mobile & desktop
ReactNativeDependencies dSYMs:
Added allowExtensions privilege to protocol.registerSchemesAsPrivileged() to enable Chrome extensions on custom protocols. 50529 <sup(Also in 40, 42)<
Cloud & DevOps
https://code.visualstudio.com/updates/v1115
Today, we are excited to share the 7.7.0 stable release 🎉mentions security
Automation
Anthropic Node: Use models endpoint for credential test (27951) (5519600)
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 2.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-35616 | Fortinet FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | 2026-04-06 |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 2026-04-08 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Git commands I run before reading any code2338 points · 509 comments · 2026-04-08
- 02Sam Altman may control our future – can he be trusted?2202 points · 916 comments · 2026-04-06
- 03I ported Mac OS X to the Nintendo Wii1924 points · 328 comments · 2026-04-08
- 04Project Glasswing: Securing critical software for the AI era1541 points · 836 comments · 2026-04-07
- 05EFF is leaving X1427 points · 1316 comments · 2026-04-09
- 06Filing the corners off my MacBooks1406 points · 678 comments · 2026-04-10
- 07LittleSnitch for Linux1378 points · 461 comments · 2026-04-09
- 08Issue: Claude Code is unusable for complex engineering tasks with Feb updates1364 points · 753 comments · 2026-04-06
- 09Microsoft terminated the account VeraCrypt used to sign Windows drivers1297 points · 501 comments · 2026-04-08
- 10Artemis II safely splashes down1288 points · 453 comments · 2026-04-11
- 11Small models also found the vulnerabilities that Mythos found1284 points · 341 comments · 2026-04-11
- 12Tell HN: Docker pull fails in Spain due to football Cloudflare block1157 points · 421 comments · 2026-04-12
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.