Coding
Python Language Summit 2026 debates Rust and a new GC
The Python Language Summit 2026 reports are out: 47 core developers weighed Rust in CPython, a new garbage collector, a std namespace and faster startup.
Coding
Languages, build systems and engineering practice: Rust stabilizations, Python migrations, Emacs releases, supply-chain incidents and the governance fights behind them. Plain-language explanations of what a change means in code, written for people who will hit it on Monday.
Coding
Archinstall 4.5 adds AArch64 boot support and RT kernels
Archinstall 4.5, out September 29, 2026, sets up 64-bit ARM machines with GRUB or Limine, adds real-time kernels and turns on TLS verification.
Coding
PeopleSoft CVE-2026-35273: one encoded letter beats WAFs
ShinyHunters is mass-exploiting Oracle PeopleSoft CVE-2026-35273 (CVSS 9.8) again, dodging WAF rules by writing one letter of the path as %50.
Coding
postmarketOS is now Nura: what changes for developers
postmarketOS, the phone Linux distribution started in 2017, is now Nura. The name won an 18-month search that drew more than 300 suggestions.
Coding
SharePoint, MikroTik bugs hit CISA's exploited list
CISA added a Microsoft SharePoint Server bug and a MikroTik RouterOS exploit chain to its exploited-vulnerability list, with a patch deadline of September 28 for U.S. federal agencies.
Coding
Citrix NetScaler flaws: CISA sets a Sept. 30 deadline
CISA added two Citrix NetScaler flaws, both scoring 9.5 of 10 on the CVSS severity scale, to its exploited-vulnerability list on September 27, giving federal agencies until September 30 to patch.
Coding
Linux LZ4 resync to v1.10.0 lifts decompression up to 21%
A 9-patch series moves the kernel's 2017-2018 LZ4 code to upstream v1.10.0, adds bounds checks and speeds 16K-block decompression by 21%.
Coding
DRBD 9 edges toward mainline Linux with 7 prep patches
LINBIT posted 7 patches on September 23 that reshape the kernel's DRBD 8.4 code toward DRBD 9, which supports up to 31 peers per volume.
Coding
Python documentation is now available in German
The Python docs now have a German edition at docs.python.org/de/3/. The core pages are 100% translated; the full set stands at 9.17%.
Coding
Rails World 2026: DHH says hand-written code is obsolete
DHH says he wrote 150,000 lines of code in August 2026 alone, versus 30,000 a year by hand, as 37signals rewrites Hey's mail server in Rust.
Coding
Linux set_robust_list2 syscalls return in v7 for FEX-Emu
Igalia posted v7 of the set_robust_list2 futex syscalls on September 25, 2026, 10 months after v6, to help FEX-Emu run 32-bit x86 code on Arm64.
Coding
Go 1.27 simd package brings portable, emulated SIMD
Go 1.27's experimental simd package runs one vector code path on AVX-512, NEON, wasm and RISC-V, and emulates it where hardware SIMD is missing.
Coding
WordPress 7.1.2 fixes get_page_template() RCE flaw
WordPress 7.1.2 patches CVE-2026-87902, a remote code execution bug in get_page_template() that reaches back to 4.7. Update now, the project says.
Coding
Fearless SIMD 1.0 brings stable, safe SIMD to Rust
Fearless SIMD 1.0, released September 21, gives Rust safe SIMD from SSE2 to AVX-512, NEON and WebAssembly, with a stable API and 3 years of security fixes.
Coding
Linux 7.3-rc4 arrives with LLM-caught error path fixes
Linux 7.3-rc4 landed on September 20, 2026, its fixes split in thirds across drivers, filesystems and architecture code. Torvalds credits LLMs.
Coding
Linux 7.4 patch opens files 39% faster in tests
A 43-line Linux 7.4 patch drops two redundant dentry references when opening a file, lifting a 20-core benchmark by 39%.
Coding
Vulkan 1.4.363 adds an Intel GPU version query
Vulkan 1.4.363 ships VK_INTEL_device_info, an Intel extension that reports a GPU's graphics IP version as three plain numbers.
Coding
Linux 7.3 Btrfs fixes filesystem IDs and grub2 boot
A Btrfs change in Linux 7.2-rc1 made filesystem IDs unstable and broke OpenConnect key derivation. The fix touches 10 files.
Coding
Jemalloc 5.4.0 ships 160 commits after Meta revival
The first jemalloc release since Meta renewed its investment carries over 160 commits, a new OS abstraction layer and per-CPU arena selection.
Coding
Rust warns maintainers about fake job video calls
Rust's security team says attackers are booking video calls with crate owners under fake job offers, then asking them to install a missing codec.
Coding
Shopify drops React Native for Swift and Kotlin
Shopify is rebuilding its apps in Swift and Kotlin 6 years after going all-in on React Native. Coding agents did enough of the porting to change the math.
Coding
Mojo 1.1 starts taking outside compiler contributions
Mojo 1.1 takes outside compiler contributions a month after the Apache 2.0 release, and completes the removal of fn, alias and @parameter if.
Coding
Swift 6.4 ships async defer and makes Swift Build default
Swift 6.4 lands async code in defer blocks, module selectors, and a 40x faster WebAssembly bridge, with Swift Build now the default in the package manager.
Coding
Rustls 0.23.45 fixes a TLS 1.3 flaw open since 2024
Versions 0.23.13 through 0.23.44 accepted TLS 1.3 handshake messages at the wrong encryption level, a bug introduced in September 2024.
The daily brief
Three to five stories a day, and what each one means for the people who build software. Free, no spam.