MangoWC, the lightweight Wayland compositor known as "dwm but Wayland," released version 0.18.5 today. On paper the tag is a single-line version-string bump, but it quietly bundles two weeks of work spanning 13 commits from three contributors. The update adds a cross-monitor special-tag option, exposes output transform via IPC, and fixes resize stutter, XWayland mapping failures, and Electron tray icons that vanish on restore. It's a maintenance patch in a fast-moving 0.18 series, signaling the project is moving into steady-state growth rather than another major feature drop.
On November 4, the Apache NetBeans project published RC3, the third and final release candidate for NetBeans 32 before its general-availability launch. Released as a small bug-fix-only build via commit fc5046f, it delivers three maintenance fixes including an AI-assisted annotation fix from the project's first-time contributor mvanhorn. RC3 also carries a recurring warning for plugin developers, since MIME-type content types for editor kits will break on JDK 27 and later.
ML4W OS 2.17, released today by Stephan Raabe, adds a macOS-style app switcher triggered by ALT + Tab to his popular Hyprland dotfiles package. The update also brings a wallpaper carousel, a window-mode toggle, microphone and audio-output controls, and a redesigned screenshot menu. Most tellingly, default apps now install only on the first setup instead of with every update, preserving deliberate user changes. As one of the most populated Hyprland configs at ~5,080 stars, the quality-of-life release reinforces ML4W's push toward polished, cross-distro desktops.
VS Code 1.145 reached the Stable channel today, pushing the editor further into "agent host" territory with sessions that survive across windows, machines, and folder closures. The biggest additions are remote agents that feel local, cron-powered scheduling for recurring automations, verbosity controls to mute chat noise, and the ability to mix different AI harnesses in a single session. On the enterprise side, organizations now get authoritative MCP allowlisting, blocked uninstall for managed plugins, and clearer sandboxing guidance. Microsoft also trimmed several tools from the Local harness, shipped two bug fixes, and included a throwaway Blobby jump game.
GIMP 3.2.8 shipped as a focused maintenance release rather than a feature-packed upgrade. Its standout fix restores "Offset" as a non-destructive filter that had been accidentally disabled in an earlier 3.2 update. The patch bundles dozens of other refinements, from fixed RTL text editing and faster large-gradient handling to a transparent look at a wave of security reports. It's now available for free download on Linux, Windows, and macOS.
Rails shipped two coordinated security releases this week, 8.1.4.1 and 8.0.5.2, patching 21 issues across nearly every subsystem in a single batch. A Critical 9.8 flaw in Active Storage dominates the list, letting attackers read and write arbitrary files through ImageMagick and potentially reach remote code execution. Most of the remaining issues sit in the Medium and Low range, including an XSS cluster in Action View's text helpers and a Strong Parameters bypass. The bigger story is the calendar: security support for Rails 8.0 ends on 7 November 2026, just three days after these releases, making 8.0.5.2 likely the final 8.0 security patch.
The PHP Group shipped three release candidates at once, with 8.6.0 RC5 being the final one before 8.6.0 goes general availability on 19 November 2026. The two older lines got their next maintenance candidates too, 8.5.13 RC1 and 8.4.28 RC1, each inheriting fixes for the two critical RCE vulnerabilities disclosed on 21 October. 8.6's headline feature is partial function application, letting you pre-fill arguments with ? or ... placeholders, while the RC-level changelogs are dominated by the usual memory-safety and JIT fixes. All three are test software, not for production, and should release as stable versions within days if no blockers turn up.
Faugus Launcher pushed version 2.5.7 today, the day before World of Warcraft: Forever launches, and its sole developer plans to step back afterward to play the game himself. The free, open-source Linux app lets users run Windows games like Battle.net titles through Valve's Proton layer without touching a command line. The release is fix-focused rather than feature-heavy, adding unique per-game window classes to untangle taskbar buttons, fixing a sleeping-inhibitor leak, and cleaning up retained memory. Maintained almost entirely by one developer known as Faugus, the project sits at roughly 2,600 GitHub stars with an active but small contributor base.
Valve shipped SteamVR Beta 2.19.1 with a single goal: sharper streamed VR, bringing clearer text, better colors, and cleaner edges to games and interfaces alike. The biggest change is a new rendering pipeline that draws straight from source textures, cutting an extra resampling step so more detail survives the trip to your headset. It's aimed squarely at wireless streaming for the Steam Frame, and it quietly lands a pile of Linux VR parity fixes along the way. It stays a beta for now, so expect follow-ups as the crash fixes get tested after wider release.
Hyprland maintainer Vaxry released v0.57.1 today, a small maintenance patch that backports a dozen fixes from main onto the 0.57.0 feature drop. The update targets NVIDIA black screens, keybinding and chord-resolution issues, session-lock errors when a monitor is unplugged, and display-handling bugs like an incorrect max_bpc value. It lands just five days after 0.57.0, the project's largest release yet, which introduced Compiz-inspired wobbly windows, swappable blur variants, and a foundational scene-composition renderer refactor. Anyone already on 0.57.0 should grab the update now, though legacy .conf users must still migrate manually to hyprland.lua.
IPFire has shipped Core Update 205 as an emergency release, fast-tracking a patch for CVE-2026-98432, a critical (9.8) use-after-free vulnerability in the Linux kernel's TCP stack. The update carries only a new kernel (6.18.60) plus a fix for a Broadcom network driver crash, and it requires a reboot to take effect. The flaw, reported by Anthropic, lets an attacker gain root access remotely with no credentials, which prompted warnings of active exploitation. Meanwhile, the broader feature set originally planned for CU205 was relocated to Core Update 206, now available in the testing channel.
GloriousEggroll published GE-Proton 11-12 today, a community-maintained fork of Valve's Proton. It rides on Valve's Proton 11 and Wine 11 with NTSync support, then layers on a large pile of game-specific fixes. The changelog spans Wine internals, graphics translation, controllers, Wayland, video playback, HDR, and dozens of per-game tweaks, with individual contributors credited. It's free and not affiliated with Valve, installs via ProtonUp-Qt, but official Proton is still recommended unless a game needs it.
Strata 0.2.10, released November 2, 2026 by Niko Veit, makes the small DFlash2 drafter the default for the 125B Qwen3.8-Flash-Next model, freeing VRAM and adding roughly 1% to 12% decode speed depending on your hardware. Its new all-cards split engine, built from sFNX, launches automatically on Linux and roughly doubles throughput on dual RTX A6000 or RTX PRO 6000 Blackwell setups. For the first time, 8 GB cards get a full 128K context that shrinks nothing, while DeepSeek gains Metal-based vision support on Mac and a trimmed ISTA-DAS Coder variant appears. It's powerful on consumer hardware, though a smooth experience still wants a 5090-class GPU, 96 GB of RAM, and a 70 GB download.
Weston 15.0.2 has shipped as the second bug-fix release in the 15 feature line, undoing a shader change from 15.0.1 that had broken YUV video rendering on PowerVR and Vivante drivers. Marius Vlad of Collabora announced it on the Wayland developers' mailing list, packing roughly 18 patches from seven contributors since 15.0.1. The release also clears the last blockers to the lua-shell, letting users finally load external Lua modules instead of just running the stock example. It's mostly aimed at people still on Weston 15, since the line has already been overtaken by the 16 cycle.
Amethyst Mod Manager, ChrisDKN's native Linux mod manager, released v2.6.1 today, as a rebuild of v2.6.0 to fix a Flatpak launch bug. The update is essentially just a version bump, with the underlying commit changing only two files and touching a net of four additions and one deletion. Despite the thin diff, it inherits the full 2.6.0 feature set, including the reworked plugin system, headless JSON-RPC API, and virtual-filesystem deploy method. Users can install it via Flatpak, AppImage, or the AUR, with the Flatpak path recommended for automatic updates.
IPFire has opened Core Update 206 to public testing, with the main urgency being a pair of command-injection vulnerabilities in its "Who Is Online" (WIO) add-on that let attackers run shell commands with the web server's privileges. The project also rebuilt its web UI to no longer spawn a shell at all, closing an entire class of injection flaws, and removed compromised root certificates and hardened the DNS resolver and IPS along the way. Beyond security, CU206 reworks IPFire's localization around GNU gettext and a dedicated Weblate instance, adds LoongArch as its fourth 64-bit architecture, and refreshes a wide slice of the base OS including OpenSSL 3.6.5 and Suricata 8.0.8.
Audacity 4.0.2 launched November 2, 2026, as a patch release aimed at fixing corruption bugs and crashes rather than adding new features. It restores autosave during recording and brings back shortcuts like trim and zoom, while clearing data-loss issues that could wreck a project.
OpenShot 4.1.1 is a maintenance release that Jonathan Thomas pushed to GitHub over the weekend, arriving right after the ambitious 4.1 feature drop. The headline upgrade is broader GPU-accelerated exports, adding AMD AMF, HEVC NVENC, and Intel QSV presets so users can export faster. It also fixes real-world reliability bugs, including file-locked saves and issues on network shares.
Faugus 2.5.6, the latest release of the open-source Faugus Launcher for running Windows games on Linux, shipped today with Discord Rich Presence as its headline feature. The update also adds automatic title, icon, and cover detection from game executables, persistent theme changes, and a batch of bug fixes and performance tweaks. Built on UMU-Launcher, the Python and GTK 4 app lets users launch storefront clients like Battle.net, Ubisoft Connect, and the EA App through a light, modern GUI, riding a wave of Proton-native launchers competing with Lutris and Heroic. It's installable via Flatpak, .deb, RPM, AppImage, and AUR from GitHub, though it still falls short of a full Lutris replacement for Epic and GOG cloud sync.
Budgie 10.10.4 released today as the fourth minor update to the Wayland-only 10.10 series, led by developer Joshua Strobl. The headline fix finally repairs auto-hiding panels and dock mode, which broke when the desktop switched from X11 to Wayland in January. It also adds Raven keyboard navigation, a Super+T shortcut to toggle all panels, screen-dimming and locker choices, and a benchmarked startup-speed boost. The update rolls into distro repos gradually, so Fedora, Ubuntu Budgie, and Solus will pick it up over the coming weeks.
