Tech radar: week 32 of 2026
3–9 Aug 2026
In the week of 3–9 Aug 2026, 15 notable open-source releases shipped (including LangGraph langgraph-checkpoint==4.2.0, Anthropic Python SDK v0.121.0, Node.js v26.7.0), CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Don't be a meat proxy” (1849 points).
Releases worth knowing about
AI & machine learning
Changes since checkpoint==4.1.1
api: add mid-conversation-tool-changes-2026-07-01 beta (c7d1531)
api: Add gpt-5.5 and tool name/namespace to Responses types (3569) (dd1202d)
Languages & runtimes
\[58717685a1] - (SEMVER-MINOR) crypto: support loading private keys through STORE loaders (Filip Skokan) 63949mentions security
Web frameworks
[12.x] Prevent fatal errors when logging deprecations fails by @GrahamCampbell in https://github.com/laravel/framework/pull/60907
Check out the 16.3 announcement post to get an overview of the changes.mentions security
Hono v4.13.0 is now available!
Cloud & DevOps
https://code.visualstudio.com/updates/v1132
What's new highlightsmentions security
Downloads: https://elastic.co/downloads/elasticsearch
This is the namespace release: Prisma Next now publishes as 17 packages under the @prisma scope, and an application depends on exactly one database fa
ℹ️ This release introduces a new way to reconcile resources such as volumes and networks
Mobile & desktop
Added available to process.getSystemMemoryInfo() on Linux, exposing proc/meminfo MemAvailable. 52379 <sup(Also in 42, 44)</sup
Testing & security tools
Changelog: https://docs.cypress.io/app/references/changelog15-20-0
👉 https://github.com/aquasecurity/trivy/discussions/11033mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 6.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-63077ransomware use | JetBrains TeamCity | JetBrains TeamCity Deserialization of Untrusted Data Vulnerability | 2026-08-05 |
| CVE-2026-34486 | Apache Tomcat | Apache Tomcat Missing Encryption of Sensitive Data Vulnerability | 2026-08-04 |
| CVE-2026-9198 | IBM Langflow | IBM Langflow Code Injection Vulnerability | 2026-08-04 |
| CVE-2026-18556 | N-able N-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-08-04 |
| CVE-2026-18577 | N-able N-central | N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-08-03 |
| CVE-2026-8037 | Progress LoadMaster | Progress LoadMaster Command Injection Vulnerability | 2026-08-07 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Don't be a meat proxy1849 points · 741 comments · 2026-08-03
- 02In Memory of My Wife, Elise Cawley, with Thanks for 36 Wonderful Years1645 points · 95 comments · 2026-08-04
- 03LLMs reward expertise1416 points · 573 comments · 2026-08-03
- 04Mario Meets Pareto1188 points · 169 comments · 2026-08-06
- 05Qwen3.8-Max: A New Bar for Coding and Cowork1124 points · 612 comments · 2026-08-03
- 06What happens if an entire class of workers loses faith in their careers1110 points · 1325 comments · 2026-08-07
- 07Discovery Loop954 points · 599 comments · 2026-08-05
- 08AMD acquires Taalas to boost inference performance by etching models in silicon949 points · 722 comments · 2026-08-06
- 09“Code was never the hard part” is an insult to all programmers946 points · 589 comments · 2026-08-08
- 10US strikes $1.2B deal to pay German firm to halt offshore wind projects910 points · 887 comments · 2026-08-07
- 11Changes at Google DeepMind: Demis Hassabis from CEO to Chair, Jeff Dean departs867 points · 933 comments · 2026-08-05
- 12How I use LLMs to learn complex topics835 points · 547 comments · 2026-08-09
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.