Tech radar: week 20 of 2026
11–17 May 2026
In the week of 11–17 May 2026, 19 notable open-source releases shipped (including Tauri tauri v2.11.2, Electron electron v42.1.0, vLLM v0.21.0), CISA added 2 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “I believe there are entire companies right now under AI psychosis” (2105 points).
Releases worth knowing about
Mobile & desktop
<summary<em<h4Cargo Audit</h4</em</summarymentions security
Fixed a crash in the macOS Touch ID WebAuthn prompt caused by a missing string resource, and added touchID.promptReason to app.configureWebAuthn() to
AI & machine learning
This release features 367 commits from 202 contributors (49 new)!
api: add servicetier parameter to responses compact method (625827c)
Ollama 0.24 includes support for the Codex App, OpenAI's desktop experience for working on Codex threads in parallel with built-in worktree support an
PyTorch 2.12.0 Release Notesmentions security
api: Add BetaManagedAgentsSearchResultBlock types (3681f10)
This release adds support for version="v3" in streamevents / astreamevents for langchain agents. Refer to the event streaming guide for details.
Changes since 1.2.0a7
Web frameworks
[12.x] Disable pausing on managed queue workers by @kieranbrown in https://github.com/laravel/framework/pull/59871
| Commit | Description |mentions security
Languages & runtimes
\[4f780905c5] - crypto: fix potential null pointer dereference when BIO\meth\new() fails (Nora Dossche) 61788mentions security
Automation
1.123.43 (2026-05-13)mentions security
Cloud & DevOps
https://code.visualstudio.com/updates/v1120
What's new highlightsmentions security
Testing & security tools
SHA-256: aa5cbcbbf48f41ca185fce900e19592f1ade4cd5994eb6e0ede468dac8a6f302mentions security
Changelog: https://docs.cypress.io/app/references/changelog15-15-0
🌐 HAR recording on Tracing
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 2.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-20182 | Cisco Catalyst SD-WAN | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | 2026-05-14 |
| CVE-2026-42897 | Microsoft Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | 2026-05-15 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01I believe there are entire companies right now under AI psychosis2105 points · 1272 comments · 2026-05-15
- 02Bambu Lab is abusing the open source social contract1404 points · 428 comments · 2026-05-12
- 03Project Gutenberg – keeps getting better1239 points · 286 comments · 2026-05-15
- 04Postmortem: TanStack NPM supply-chain compromise1097 points · 465 comments · 2026-05-11
- 05Removing the modem and GPS from my 2024 RAV4 hybrid1091 points · 585 comments · 2026-05-14
- 06I moved my digital stack to Europe1040 points · 610 comments · 2026-05-13
- 07I'm going back to writing code by hand1038 points · 617 comments · 2026-05-11
- 08Googlebook932 points · 1571 comments · 2026-05-12
- 09If AI writes your code, why use Python?919 points · 980 comments · 2026-05-11
- 10Why senior developers fail to communicate their expertise826 points · 333 comments · 2026-05-12
- 11Mozilla to UK regulators: VPNs are essential privacy and security tools808 points · 356 comments · 2026-05-17
- 12Show HN: Needle: We Distilled Gemini Tool Calling into a 26M Model776 points · 211 comments · 2026-05-12
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.