Node.js 26.10.0 has been released today. The headline additions put two long-requested utilities directly into the platform: util.debounce() and util.throttle(), so developers no longer need to pull them from npm. It also adds crypto.parsePKCS12() for pulling keys and certs out of .p12/.pfx bundles, extends the experimental Virtual File System into node:ffi, and rounds out the release with synchronous Blob support, socket transfers, and SQLite's undefined-to-NULL binding. Alongside these, the release bundles a wide sweep of correctness and crypto-hardening fixes, though it sits in the Current line rather than LTS, meaning you get the newest APIs but no long-term frozen stability.
Mango, the popular open-source Wayland compositor built on dwl and wlroots, just shipped version 0.17.3, its fourth release of the 0.17.x series in just ten days. The update adds a float_full_to_top global option so floating and fullscreen windows can finally share a layer, plus the ability to dim focused versus unfocused windows for clearer focus. Fixes this round cover keyboard keycode bindings, config hot-reload crashes, tag animations, and screen sharing in the Wemeet video app. The rapid cadence once again highlights how this one-maintainer project, led by DreamMaoMao, keeps moving quickly.
Flatpak 1.18.3 released today as a maintenance update focused on security dependency updates and regression repairs rather than new features. It bumps bubblewrap to 0.12.0 and xdg-dbus-proxy to 0.1.8 to close two known CVEs affecting Flatpak's sandboxing and D-Bus communication. The release also fixes a build regression on SELinux systems tracked as issue #6818, along with a flatpak-spawn subsandbox fix and a bundle install crash. Users can install it through their normal package manager or Flathub, though local runtime builders on SELinux systems get the most out of it.
BlueOnyx refreshed installation media for its three active server releases, 5210R, 5211R, and 5212R. The images bundle every DNF update available to date and ship as bootable ISOs, virtual appliance images (VDI/VMDK), and Incus/LXC containers. Highlights include an Easy-Migrate fix, relaxed CLI PHP limits, consistent Opcache defaults, and self-healing Jailkit integrity checks.
Matomo released version 5.14.0 with its headline feature being aggregated real-time counters that keep live dashboards running even when the Visits Log is disabled for privacy compliance. The update also improves the AI chatbot, adds period-level forecasting, fixes long-broken pie charts, and rolls out Tag Manager refinements. Since it contains no major database upgrade, moving from 5.13.x should be low-risk. The stable release arrives just days before the Matomo 6.0 beta, so it stands as the safe line while the team pushes toward the next major version.
FEX-2609.1 is a three-commit hotfix released today that repairs a Linux syscall regression 2609 itself introduced, restoring the syscall/int 0x80 instructions as proper block ends. The same patch rescues the RDPID instruction on Win32 hosts lacking the TPIDRRO register, and bumps the disk-cache format to version 20 to match the altered codegen. It's a small but meaningful correctness update for the open-source x86 emulator that runs PC software on ARM64 Linux. The patch is available now on the project's GitHub releases page, with the next mainline tag expected within a month.
The Wine Staging 11.18 release adding two new experimental patches. The service_check_arch patch stops 64-bit services from being mislabeled with the wrong WOW64 flag, fixing a bug that made services fail to start. The more user-relevant quartz-vy12_to_rgb patch adds software YUV-to-RGB conversion, repairing broken video playback in DirectShow-based players and games. The release also updates the vkd3d-latest patchset and rebases the usual ~90 experimental patches against the latest Wine development branch.
Wine 11.18 shipped September 18, 2026 as a bi-weekly development release, delivering roughly 380 commits from 38 contributors and 21 bug fixes. The headline focus is expanded ntoskrnl.exe work for loading Windows kernel-mode drivers, backed by real test coverage rather than mere stubs. In the same cycle the project also corrected startup regressions it had itself introduced in an ambitious ntdll process-initialization rework. Beyond the internals, the fixes touch recognizable titles like Assassin's Creed Rogue and The Bard's Tale IV, with the next development build expected in about two weeks.
MangoWC 0.17.2 shipped on September 17, 2026 as a lean stability patch fixing crashes, build problems, and memory leaks. It marks the third release in a single week, following the feature-packed 0.17.0 milestone and the regression-cleaning 0.17.1. The sparse notes mask real work visible in the commit history, including a dangling-pointer fix tied to config hot-reloading. For users on the 0.17 line, upgrading before adopting newer commits is the recommended move.
Amethyst Mod Manager has released v2.5.0, its most feature-heavy update yet, bringing native support for browsing and installing Wabbajack modlists. The same release adds Project Zomboid to its nearly 100 supported games, along with usability tweaks like a content column, hideable buttons, and a data-tab file blacklist. Developer Chris DKN quietly signals a shift toward stability, explicitly pausing new feature requests to shore up reliability instead of piling on capabilities. You can grab it as an AppImage, Flatpak, or from the AUR, though the new Wabbajack integration still carries some rough edges for early adopters.
pgAdmin 4 v9.18 shipped today, bundling 29 changes with four freshly patched vulnerabilities, all credited to outside researchers. The most serious, CVE-2026-86863, is an authentication bypass in Webserver mode that lets anyone assert any identity, including admins, without a credential. Two more CVEs close repeated injection holes in the Backup and Restore tools by routing database names through PGDATABASE instead of libpq's connection-string expansion. Alongside a much-welcomed VS Code-style Object Explorer toggle, the release also refreshes core dependencies and is strongly advised for every server-mode deployment.
MariaDB Server 13.0.2 reached General Availability on 15 September 2026, marking the latest point release in the 13.0 rolling series that began as a Preview in March. Importantly, it is a rolling release, not an LTS ,MariaDB recommends staying on the 12.3 line if you want long-term maintenance and slow upgrade cycles, while 13.0 is for those chasing the newest features. The standout capability is the ability to run DuckDB as a pluggable, in-process storage engine for fast columnar analytics, though it's still in gamma and carries several limitations.
Mesa 26.2.3 shipped as the third bugfix update of the 26.2 cycle, bringing roughly 75 commits from 39 contributors with zero new features. The release targets real applications you actually use, fixing crashes and glitches in Counter-Strike 2, X-Plane 12, Minecraft's Voxy mod, and Apple's Portals 2 on Apple Silicon. Under the hood it also patches memory leaks, query-sync races, and driver-level bugs across AMD, Intel, NVIDIA, Qualcomm Adreno, and ARM Mali code. There's no new feature set to get excited about, but it keeps your open-source GPU drivers more stable, with the next bugfix release slated for September 30.
Node.js 26.9.0 shipped September 16, 2026, most notably enabling its Foreign Function Interface by default so JavaScript can call into native libraries without a C/C++ addon. A new node:bench module landed, only for the team to quietly move it behind an --experimental-bench flag after review raised concerns about benchmark integrity. The release also brings first-class Web Workers in thread contexts, an experimental DTLS API, and crypto upgrades like a generic MAC API and OpenSSL provider discovery. Since Node 26 is still in "Current" and won't reach LTS until October 2026, treat this as a testing build rather than a production upgrade.
Zed Industries shipped its 1.20.1 patch today, marking yet another fast weekly update since the April 2026 1.0 launch. The release adds an optional cursor animation, a setting to open Markdown files straight into rendered preview, and Emmet's long-requested wrap-with-abbreviation command. Behind the cosmetics it also closes real privacy gaps, stopping private files and projects from leaking through project search and the Agent Panel. Ships with the same rapid cadence as Zed's competing AI-forward direction, available now on GitHub for macOS, Linux, and Windows.
Zen Browser 1.22.2b is a new stable release that upgrades its engine to Firefox 156, inheriting Mozilla's MFSA2026-90 security patch that fixes 67 CVEs across high, moderate, and low severity. It adds practical touches like macOS auto-start on boot and five new command-bar actions for faster tab management. The build also tackles day-to-day annoyances, from Picture-in-Picture subtitles and Split View bugs to broken cross-device sync and a Windows taskbar that wouldn't auto-hide. Zen's built-in PDF viewer reportedly loads 45% faster, and open-source users benefit from riding Firefox's engine for rapid, reliable security updates.
Heroic Games Launcher released 2.22.3 today, a hotfix that repairs a regression shipped earlier in v2.22.2. That earlier build rewired how the launcher routes Windows games through UMU, accidentally wrapping every game in the runtime and producing a broken "umu inside of umu" command that stopped launches cold. Players reported failures with titles like Lord of the Rings Online and Satisfactory, and the only workaround was disabling UMU in settings entirely. The fix stops the double-wrapping without disturbing existing store-manager logic, and the maintainer hints a major version is coming.
Visual Studio Code 1.138 launched today, pushing Microsoft's Agent Host architecture into everyday use. The update lets agent sessions run inside local Dev Containers, jump between the ChatGPT app and VS Code, and switch between Copilot and ChatGPT subscriptions mid-conversation. Microsoft also added session hygiene features like auto-archiving merged sessions, a completion confetti animation, and badges that flag sessions needing attention. Not everything lands immediately, since much of it sits behind Preview toggles and settings, so it's worth knowing before you expect the full stack on launch.
Godot 4.8 Dev 6, the sixth pre-release snapshot of the current feature cycle, announced by Thaddeus Crews. Its headline feature is screen-space contact shadows for directional lights, built on Bend Studios' approach and deliberately capped to eight lights for performance. It landed in under a week because two blockers, a macOS Metal startup crash and a Google Play upload failure, needed quick fixes ahead of September's feature freeze. XR users should note a new OpenXR Spatial Container regression tied to the multi-layer projection camera
GE-Proton 11-7 delivering an 85-patch Wineland overhaul that makes Wine's native Wayland driver finally usable for cross-process child-window rendering. The build extends work first introduced in 11-6, pushing past Valve's own Proton 11 and maturing the path that Windows launchers and embedded web panels rely on. Alongside it lands dozens of targeted fixes for games like Forza Horizon 5, Diablo IV, Black Desert Online, and DOOM Eternal, plus new Sony-to-XInput controller defaults and a rebased video stack. It's a large release, so GloriousEggroll flags several fixes as still needing retesting rather than declaring a clean sweep. Grab the tarball from the GitHub Releases page and force it per game through Steam's Compatibility settings.
