Week of July 6–12, 2026
434 releases 94 breaking 12 security 5 tools featured
claude-code, prometheus, hasura deliver critical CVE fixes this week.
Claude‑Code patched a critical consent‑recording flaw, while Prometheus upgraded sanitize-html to thwart CVE-2026-53606, and Hasura refreshed OpenSSL for CVE-2026-45447, reinforcing security across diverse stacks.
Editor's Picks
The Prometheus monitoring system and time series database.
Bumps `sanitize-html` dependency to v2.17.5 fixing CVE-2026-53606.
Read full release →Fast, instant realtime GraphQL APIs on Postgres with fine grained access control, also trigge...
upgrade openssl in ubuntu base image to fix CVE-2026-45447
Read full release →Category Pulse
Archive
Security & Auth tools · 11 releases +
-
VaulTLS v1.3.0 feature
Adds Key Revocation Lists (KRL) support for OpenSSL certificates
-
zitadel v4.16.0 feature
Add FIPS 140-3 compliant build and runtime checks in crypto module.
-
SafeLine v9.3.10 feature
Adds a read-only role for the console.
-
Checkov 3.3.8 bugfix
CKV_K8S_40 fix
-
trufflehog v3.95.9 feature
Adds OpenRouter detector.
AI & Machine Learning · 32 releases +
-
activepieces 0.86.3-rc.3 bugfix
S3 upload/cleanup fix
-
AionUi v2.1.33 maintenance
Routine maintenance and dependency updates.
-
pydantic-ai v2.9.0 mixed
Security fix + GPT-5.6 + usage command
-
GPT-5.6 controls + Multi-agent beta + Sandbox fixes
-
browser-use 0.13.4 bugfix
Fix navigation readiness detection handling same-document navigations without burning timeout.
Infrastructure · 16 releases +
-
ztnet v0.8.1 bugfix
Prevent duplicate managed routes in routing system.
-
Fixes recovery lock password enforcement on BYOD macOS hosts, now skipped.
-
xpipe 23.7 feature
Adds workaround when zellij multiplexer freezes
-
seaweedfs 4.39 mixed
Async Rust writes, Go volume improvements, Filer JWT auth
-
helm v3.21.3 bugfix
containerd drop + bump
Observability · 12 releases +
-
Nezha v2.2.10 maintenance
Routine maintenance and dependency updates.
-
parseable v2.9.4 bugfix
oauth sync + helm chart fixes
-
Bug fixes in 17.26.0
-
dozzle v10.6.9 bugfix
Log marker stripping
-
langfuse v3.212.0 mixed
Dashboards + Analytics + Chores
Developer Tools · 7 releases +
-
electerm v3.15.120 mixed
Security fixes + UI/feature updates
-
chhoto-url 7.4.10 bugfix
No-cache fix
-
apko v1.2.24 maintenance
Routine maintenance and dependency updates.
-
budibase 3.39.29 bugfix
Primary display fix
-
streamlit 1.59.1 maintenance
Routine maintenance and dependency updates.
CI/CD · 5 releases +
-
ArgoCD v3.4.5 bugfix
Fixes auto-sync skipping when newer commit arrives during sync with manifest-generate-paths.
-
dokku v0.38.22 mixed
Custom chown, network origin, buildpack replace, docker-options JSON
-
helm-controller v1.6.2 maintenance
Routine maintenance and dependency updates.
-
Terrateam 20260706-1312-514a437 maintenance
Routine maintenance and dependency updates.
-
dokploy v0.29.10 bugfix
Scrollbar layout shift fix
Self-Hosted · 36 releases +
-
Wallos v5.1.0 bugfix
Session expiration AJAX fix
-
metube 2026.07.12 bugfix
UI robustness fixes
-
Cosmos-Server v0.22.27 maintenance
Routine maintenance and dependency updates.
-
backrest v1.14.1 bugfix
Retention & download bugfixes
-
wekan v9.87 bugfix
Fix card movement between swimlanes
Show low-signal releases (1)
-
neodb 0.16.3.2 bugfix
Bug fixes and stability improvements.
Data & Databases · 3 releases +
-
doris 4.0.7 maintenance
Source, x64, arm64 releases
-
yugabyte-db v2024.2.10.0 maintenance
Routine maintenance and dependency updates.
-
surrealdb v3.2.0 maintenance
Routine maintenance and dependency updates.
Get the weekly brief in your inbox. No spam, just software releases that matter.
Subscribe