Visual Studio Code 1.135 launches the Agent Host Protocol, an open standard that transforms the editor into a universal runtime for AI agents and allows coding sessions to move seamlessly between applications. The release introduces "Rubber Duck," an experimental feature where complementary models review each other's work, closing 74.7% of the performance gap to flagship models on SWE-Bench Pro. External Agent Sessions now let developers resume work started in other tools, though continuing these sessions typically requires a Copilot subscription. Microsoft has also rolled back the sandboxing rollout for local agents to zero percent as it shifts engineering focus to the new host infrastructure and a new single-pane default layout.
PHP 8.5.10 and 8.4.25 officially shipped on August 27, 2026, delivering cumulative security and stability patches to both active branches. The updates prioritize stack overflow hardening against deeply nested arrays and DOM documents, alongside targeted JIT compiler adjustments in the 8.5 line. With PHP 8.4 now locked to security-only fixes, users must upgrade immediately to resolve serious vulnerabilities like the bccomp out-of-bounds write and the pgsql SQL injection flaw. Developers running untrusted nested data or Opcache-dependent workloads should patch right away to lock in the new crash protections.
WinBoat v0.9.1 has arrived as the final patch for the 0.9 series, delivering four critical security updates including a rapidly resolved PowerShell injection flaw and improved credential redaction. The release upgrades the underlying Electron framework to version 44 and backports stability improvements, tightening the attack surface for users bridging host Linux and guest Windows environments. Despite these hardened defenses, the patch underscores the inherent risks of running untrusted virtual machines via containerized QEMU and FreeRDP within a user's home directory. Developers have already shifted focus to version 1.0, where GPU acceleration and other major feature enhancements are scheduled to follow the current security baseline.
MariaDB has published Q3 2026 maintenance updates for its four active LTS branches, releasing Server 12.3.3, 11.8.9, 11.4.13, and 10.11.19 to deliver bug fixes and stability improvements. The foundation simultaneously marked the end-of-life for MariaDB 10.6, issuing 10.6.28 as the final binary on August 13 with no further community patches. Key changes in 12.3.3 include a new binary logging implementation and innodb_snapshot_isolation now defaulting to ON, a shift that could impact applications relying on REPEATABLE READ isolation. Users currently on version 10.6 are advised to migrate directly to 11.8 or 12.3 to leverage performance gains and new features without intermediate upgrade steps.
OpenSSL released version 4.0.2, addressing eleven vulnerabilities across its supported branches alongside parallel updates for OpenSSL 3.6, 3.5, 3.4, 3.0, and legacy 1.1.1 and 1.0.2 lines. The update patches a mix of Moderate and Low-severity issues, with the most critical finding being CVE-2026-18798, a Moderate-rated double-free flaw in the QUIC server that can trigger a denial of service. Other fixes target heap buffer overflows in CMS key unwrapping, memory amplification in DTLS record buffering, and format string vulnerabilities in the Certificate Management Protocol, all of which lack exploitable remote code execution paths. Administrators running OpenSSL 4.0.0 through 4.0.1 should upgrade to 4.0.2 immediately, while users on older branches must pull the corresponding point releases to resolve the disclosed resource management and integrity check issues.
PHP 8.6.0 Beta 2 has been tagged two days early by release manager Matteo Beccati, introducing an SNMP overhaul, pack() endianness modifiers, and late-arriving session hardening. The build also delivers a dense memory-safety sweep, tackling use-after-free bugs in DOM, Opcache JIT crashes, and updated handling for PDO_PGSQL and ZipArchive. Alongside these improvements, developers should prepare for new deprecations including return inside finally blocks and the removal of SplFileObject CSV methods. The release cadence continues with Beta 3 on September 10 and a hard feature freeze on September 22, targeting general availability on November 19, 2026.
Ardour 9.8 is live now, adding initial support for musical key and scale tracking that lets you visualize and auto-correct out-of-scale MIDI notes directly in the editor. The update caps mid-recording crash data loss at five seconds and reconstructs partially written FLAC and BWF files with their broadcast metadata intact. Clip recording now guarantees a two-bar count-in and features a new modifier that locks clip boundaries together during slip edits. You can download the free DAW for Windows, macOS, and Linux directly from the official community page.
Seafoam Labs has published Shelly ALPM v3.1.0, adding a native in-process PKGBUILD builder that fully replaces makepkg for AUR compilation without acting as a wrapper. The release arrives just 27 days after the v3.0 overhaul, which swapped the entire C#/.NET codebase for Zig and GTK4 to eliminate runtime overhead. Security improvements include Landlock sandboxing, mandatory audit logs, and integrity hashing before execution, though features like the sandbox remain opt-in and some legacy makepkg sources are unsupported. Users can install the package manager via CachyOS packages, the AUR, or by building from source with Zig 0.16.0.
DXVK-Sarek 1.13.0, codenamed "Pacemaker," is delivering a major performance polish for gamers running Windows titles on older hardware like Intel Core 2 or ARM SBCs. The update introduces selectable shader compilation with a new dyasync default designed to reduce stutter on weak CPUs, alongside a new low-latency frame pacing mode and a dynamic memory allocator that fixes frequent out-of-memory crashes for integrated GPU users. D7VK also jumped to version 2.1 with improved legacy rendering support, and the project has streamlined its build process for tighter integration with the Proton-CachyOS fork. Users can now enable the layer system-wide by setting PROTON_DXVK_SAREK=1 on compatible Proton builds.
GNU Emacs 31.1 closing a six-month cycle with a sharp focus on terminal usability and completion polish. The update turns on mouse support by default for compatible TTYs, adds a dedicated user-lisp/ folder that auto-compiles your config files, and finally allows child frames to run outside graphical displays. You'll also get an editable grep buffer, a rewritten flex completion algorithm that ranks results far more accurately, and a new beginner-friendly theme meant to soften the historical learning curve. Behind the scenes, the legacy unexec dumper has been removed, the old ctags binary is gone in favor of Universal Ctags, and Org mode shipped at v9.8.
HestiaCP 1.10.4 arrives as the fifth update in three weeks, delivering security hardening and critical bug fixes following the major 1.10.0 feature release. The version includes a vital patch for SFTP backup rotation where carriage return characters were breaking the file count, causing unbounded storage growth on remote backups. Security improvements prevent passwords from leaking into auth.log and journalctl by passing credentials through temporary files instead of command-line arguments, with reviewer extensions covering SMTP relay scripts. Additional changes disable Roundcube IMAP debug logging by default to save disk space, fix mail filter breaks caused by a missing imap_sieve plugin, and correct UI navigation errors in the admin panel.
WineHQ's VKD3D 2.1 has officially landed, bringing a major overhaul to how Linux and Proton handle DirectX 12 shaders. The update fixes long-standing HLSL evaluation bugs, adds proper half-precision arithmetic, and introduces a dead store elimination pass to match Microsoft's compiler layout exactly. Reflection APIs received a massive expansion across D3D10, D3D11, and D3D12, while new 64-bit conversion operations finally unlock mature DXIL and mesh shader support. You will see fewer broken games on Steam Play, though the project still leans heavily on a small core of dedicated volunteer maintainers.
Amethyst Mod Manager 2.3.0 has officially landed, bringing a long-awaited VFS deployment method that lets Linux and Steam Deck users overlay mods through Proton without touching the actual Steam prefix. The update also expands AAA support to include Elden Ring and its Nightreign spinoff, pushing the total supported title count past 95. Developed in Python and PySide6 by ChrisDKN, the open-source tool now ships via AppImage, Flatpak, and the Arch User Repository with stable and beta channels on Flathub. After nearly two years of breakneck iteration, the manager is rapidly closing the gap with Windows-first competitors like Vortex and MO2.
PixiEditor 2.1.2.2 is now available, bringing a focused patch to the popular open-source 2D art editor. The update resolves nagging animation timeline bugs, including blank frame previews and performance leaks, while also updating the default shader code to support modern GLSL 300 compilation. Contributors also corrected alpha blending artifacts in procedural nodes and squashed a subtle variable renaming conflict within the GLSL editor.
Wine Staging 11.16 has arrived, tracked to upstream Wine's 11.16 development branch and released by maintainer Alistair Leslie-Hughes. The release's centerpiece is the new ws2_32-af_unix patchset, which finally brings AF_UNIX socket support for local inter-process communication, replacing the obsolete wintrust-WTHelperGetProvCertFromChain patch. On the graphics front, six vkd3d-latest commits introduce HLSL shader codegen enhancements and IR optimizations, complemented by a rebase of upstream fixes for X11 rendering, Kerberos auth, and kernel-mode transitions. This update expands the 383-category patchset to better support Linux services like D-Bus, Wayland compositors, and database clients that depend on Unix domain sockets.
Bottles 66.8 has arrived, introducing NVIDIA CUDA compute libraries as installable dependencies to enable GPU acceleration for creative apps like DaVinci Resolve running through Wine prefixes. The update also adds UMU Launcher shortcuts for unified desktop entries, redesigns library cards for better navigation, and finally makes the Wine shutdown and reboot buttons functional via improved process handling. Alongside these features, the release restricts McSoda runners to macOS, resolves HEAD probe issues for dependency downloads, and adds sigstore/cosign signing to the Flatpak distribution for enhanced supply chain security.
Krita AI Diffusion 1.53.0 is adding semantic segmentation control layers via the Anima regional controlnet and modernizing its backend with PyTorch 2.13 and CUDA 13. The update doubles down on hardware accessibility by introducing int4 and int8 quantization support, allowing artists to run larger diffusion models like Flux on GPUs with as little as 6 to 8 gigabytes of VRAM. For cloud users on Interstice.cloud, the release implements EU AI Act compliance through metadata tagging and invisible watermarking, though local runners remain entirely unaffected. Developers removed Nunchaku optimization and insightface to consolidate their quantization strategy, while community contributors also fixed long-standing timestamp and prompt import bugs across Windows, Linux, and macOS.
Goverlay 1.9.0 is now available on GitHub, bringing Russian translation support and a crucial MangoHud config state fix. The Qt6 interface lets Linux gamers manage MangoHud, vkBasalt, OptiScaler, and Proton tweaks through a card-based layout that generates ready-to-paste launch commands.
The Godot Engine team has released Godot 3.6.3 LTS, a maintenance update primarily driven by the need to meet new Android 16 and iOS 15 requirements from Google Play and Apple. While the release doesn't introduce major engine features, it updates Android export templates to API level 36, bumps the iOS minimum to 15.0, and strips out years-old 32-bit export code that has long been non-functional. Under the hood, developers also receive security patches for mbedTLS and libpng, alongside long-overdue fixes for Windows WASAPI audio crackling and GDScript function signature hints. As the final generation of the 3.x series, this LTS branch continues to receive critical patches to support studios that haven't yet migrated to Godot 4.x.
OpenZFS 2.4.4 landed on August 21 alongside maintenance releases 2.3.9 and 2.2.11, pulling in 967 commits that tighten security, fix long-standing cache bugs, and add Linux kernel 7.2 support. The release enforces strict caller credential checks across virtual device layers and locks down zone-level isolation, meaning unprivileged containers can no longer bypass capability requirements when touching block devices. Administrators get a new zhack mmp reclaim command to recover pools stranded by Multi-Mirror Protocol failures, while a sweep of PRs finally resolves five years of tangled L2ARC rebuild logic and infinite loop issues. Multi-tenant workflows also benefit from the new send:encrypted delegation permission and cleaner POSIX ACL cache behavior after dataset rollbacks, making this one of the most polished storage updates in the project's history.
