Open Source

MCP’s 2026-07-28 spec removes sessions and the initialize handshake, making the protocol stateless — here’s what changed and why it matters.

Moonshot AI’s Kimi K3 is the first open 2.8T-class model, and it’s already beating GPT-5.6 Sol on coding benchmarks — with full weights landing July 27.

Biome replaces ESLint, Prettier, and half your build pipeline with a single Rust-based tool 100x faster — and it’s already becoming the default choice.

Bun just merged a massive PR rewriting its core from Zig to Rust — over a million lines changed in roughly a week.

Nearly two years after the xz Utils backdoor shocked the open source world, the supply chain security landscape has changed — but not enough.

OpenTofu has matured significantly since its fork from Terraform. Here’s where things stand and what it means for teams managing cloud infrastructure.

Rust’s integration into the Linux kernel has moved beyond proof of concept into real subsystems, but the cultural and technical challenges remain fascinating.

A supply chain attack on the popular Ultralytics YOLO package highlights the persistent vulnerability of the Python ecosystem’s distribution pipeline.

OpenTelemetry’s logging API and SDK reaching general availability completes the observability trifecta. Here’s why this matters more than you might think.

Broadcom’s deletion of Bitnami images from Docker Hub is a wake-up call about depending on container registries you don’t control.

The uv package manager experimentally adds code formatting, continuing its ambitious push to become a single tool for the entire Python development workflow.

Google releases Gemma 3 at 270M parameters, proving that smaller, more efficient models might matter more than the next big model launch.