Skip to content
Tech Radar · Week 41

Tech radar: week 41 of 2026

5–11 Oct 2026

Covers Compiled from public sources
In short

In the week of 5–11 Oct 2026, 14 notable open-source releases shipped (including OpenAI Python SDK v3.29.0, Tauri tauri v2.12.3, Expo [email protected]), CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Margaret Hamilton has died” (2123 points).

Releases worth knowing about

AI & machine learning

Mobile & desktop

  • Tauri tauri v2.12.3

    <summary<em<h4Cargo Audit</h4</em</summarymentions security

  • - [iOS] Add getAppleStoreEnvironmentAsync(), which returns StoreKit's App Store environment for the running build ('production', 'sandbox' or 'xcode')

  • The macOS autoUpdater now streams update downloads to disk, resumes an interrupted download on the next check instead of starting over, and applies a

Web frameworks

  • FastAPI 0.143.0

    Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from OTEL environment variables, set FASTAPIOTELAU

  • Next.js v16.4.0

    Check out the 16.4 announcement post to get an overview of the changes.mentions security

  • Laravel v13.35.0

    [13.x] Allow fake assertions to accept an array of properties by @jackbayliss in https://github.com/laravel/framework/pull/61770

Cloud & DevOps

Languages & runtimes

  • Node.js v26.11.1

    \[2dc4638e85] - Revert "build: toggle doc-kit verbosity based on V" (Antoine du Hamel)

Testing & security tools

  • Playwright v1.64.0

    New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like

Actively exploited vulnerabilities

Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 5.

CVEProductWeaknessAdded
CVE-2016-3081Apache StrutsApache Struts Command Injection Vulnerability2026-10-08
CVE-2015-5477ISC BIND ISC BIND Data Processing Errors Vulnerability2026-10-08
CVE-2021-3199ONLYOFFICE DocsONLYOFFICE Docs Server Path Traversal Vulnerability2026-10-08
CVE-2015-3306ProFTPD ProFTPDProFTPD Improper Access Control Vulnerability2026-10-08
CVE-2023-22894Strapi StrapiStrapi Cleartext Storage of Sensitive Information Vulnerability2026-10-08

Need help patching or assessing exposure? See our cybersecurity and DevOps services.

What developers discussed

The most upvoted technology stories on Hacker News during the week.

  1. 01
    Margaret Hamilton has died
    2123 points · 258 comments · 2026-10-07
  2. 02
    Mistral Large 4
    2042 points · 1216 comments · 2026-10-06
  3. 03
    Triple-A Minesweeper
    1444 points · 287 comments · 2026-10-09
  4. 04
    Cloudflare acquires Deno
    1387 points · 726 comments · 2026-10-09
  5. 05
  6. 06
  7. 07
    Passkeys are a trap
    1136 points · 575 comments · 2026-10-11
  8. 08
    Sorry, I'm in a meeting
    1050 points · 288 comments · 2026-10-09
  9. 09
    Claude Haiku 5.5
    1049 points · 488 comments · 2026-10-07
  10. 10
  11. 11
  12. 12

How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.

Want a team that keeps your stack current?

Upgrades, migrations, security patching and new builds. Tell us what you run and what is worrying you.