This week in software: Jul 27 – Aug 2, 2026
943 releases from 473 products, Monday to Sunday UTC. The most notable, ranked by how widely each product is used, with every security-tagged release listed in full.
TL;DR
AI-generatedCounter-Strike 2 fixed a script-loading bug in tools mode, while cc-switch v3.19.0 closed a credential-leakage vulnerability in Gemini configuration and added zip-slip protections. Google Chrome LTS received fixes for CVE-2026-116, and GoLand and Rider both patched CVE-2026-59792. Docker Engine 29.7.0 made the image mount type non-experimental and added an embedded-containerd feature, while uv 0.12.0 now enforces stricter source distribution formats.
Generated Aug 6, 2026 from the releases listed on this page.
Security fixes
Counter-Strike 2
Valve · GamesRanked Series stickers are now available for purchase with 50% of royalties shared with players, teams, and the tournament organizer; Fixed a bug where scripts would fail to load…
Docker Engine
Docker · Infrastructure & DevOpsAdd an experimental embedded-containerd feature that runs containerd inside the daemon process instead of as a separate managed process; Mount type image is no longer…
GitHub CLI
GitHub · Developer ToolsFix escape sequence injection in commands including gh gist view, gh api, gh pr diff, gh release download --output -, gh codespace logs, gh skills preview, and gh agent-task…
gemini-cli
gemini-cli · AIGroup cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request errors; Implement LLM triage orchestrator and container build for caretaker-triage; Align…
Hoppscotch
Hoppscotch · Developer ToolsAddress collection data loss in personal workspaces; Prevent request loss in large team collections; Implement fallback to initial values for empty environment variables; Add…
Prometheus
Prometheus · Infrastructure & DevOpsBump golang.org/x/text to v0.39.0 (CVE-2026-56852) and google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf); PromQL: Preallocate the active query tracker file to avoid SIGBUS…
Notable releases
hermes-agent
NousResearch · AIBug-fix and salvage waves across the gateway, voice subsystem, desktop app, and installer; Continued platform work on Buzz/Nostr channel, FLUX3 video generation and delivery…
react-native
Meta · Frameworks & LibrariesFixed display: contents nodes having hasNewLayout set incorrectly; Use explicit ReactInstanceManager.mHasStartedDestroyingLock instead of using ReactInstanceManager.mHasStartedDest…
markitdown
microsoft · Developer ToolsAvoid O(n^2) value lookups in PPTX chart conversion; Fix invalid LaTeX macros for mu, nu, tau, and down-arrow in equation conversion; Fix typos and formatting in comments…
open-webui
open-webui · AIRedesigned interface with narrower conversation column, lighter typography, tidier spacing, consistent menus and dropdowns, clearly outlined text boxes, and rearranged settings…
Docker Engine
Docker · Infrastructure & DevOpsFix a regression that prevented pulling images whose layers contain directories without explicit parent directory entries; Fix a regression where the CopyToContainer rejects…
gemini-cli
gemini-cli · AIfix(patch): cherry-pick f47d6c6 to release/v0.53.0-pr-28566 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28610
browser-use
browser-use · AIDo not send default params in gemini genconfig; Fix tool name in flash prompts from replacefilestr to replacefile; Handle file:// URLs in extractstarturl; Stop auto-inheriting…
Dear ImGui
Omar Cornut · Frameworks & LibrariesDragXXX, SliderXXX: fixed a regression in 1.92.9 where clicking a previously Ctrl+Clicked field would flick it to text edit mode for one frame; Tables: fixed Y2 position of lower…
Playwright
Microsoft · Developer ToolsResolve tsconfig "extends" bare specifier via nodemodules walk-up like tsc; Resolve directory-form tsconfig project references with "path" relative paths; Accessibility snapshot…