This week in software: Aug 10–16, 2026

962 releases from 442 products, Monday to Sunday UTC. The most notable, ranked by how widely each product is used, with every security-tagged release listed in full.

TL;DR

AI-generated

Docker Engine v25.0.17 patched two critical symlink-escape vulnerabilities affecting container mount handling. GitLab 19.2.2, 19.1.4, and 19.0.6 fixed XSS flaws in Analytics Dashboards. Claude Code v2.1.228, uv 0.12.4, and Wireshark v4.4.18 and v4.6.8 also shipped security updates. Week 33 delivered 916 releases across 409 products, with Docker Desktop 4.86.0 upgrading its engine and serverless sf-core@4.41.0 adding Lambda-based MCP server hosting.

Generated Aug 19, 2026 from the releases listed on this page.

Security fixes

MoneyPrinterTurbo

harry0703 · AI

WebUI preference to disable automatically opening the task folder after video generation; Configurable Whisper initialprompt support to improve subtitle recognition for names…

AddedChangedFixedSecurity

Claude Code

Anthropic · Developer Tools

Fixed interactive sessions that could stop redrawing entirely while the process kept running after a rare internal layout error; Fixed git / Git Bash not being found on Windows…

ChangedFixedRemovedSecurity

Docker Engine

Docker · Infrastructure & DevOps

Fix CVE-2026-41568: symlink escape in mount destination creation; Decompress archives before entering container filesystem, fixing CVE-2026-41567; Fix CVE-2026-42306: bind mount…

Security

gemini-cli

gemini-cli · AI

Implement tool registry discovery; Implement Cloud Run webhook ingestion service for caretaker; Implement egress cloud run service skeleton for caretaker; Add triage worker core…

AddedChangedFixedSecurity

pi

pi · AI

Add fullscreen transcript search with Ctrl+Shift+F, incremental match highlighting, configurable search match theme colors, and next/previous navigation with Enter/Ctrl+G and…

AddedChangedFixedSecurity

uv

uv · Developer Tools

Prefer post-quantum key exchange and enable opt-in TLS diagnostics; Accept whitespace before versions in noncompliant wildcard comparisons such as Requires-Python: = 3.5.; Report…

AddedChangedFixedSecurity

Strapi

Strapi · Developer Tools

Record MCP actions in audit logs; Add locale codes for Corsican in i18n; Enhance Koa app configuration with proxy settings; Fix typescript pipeline issue; Dedupe react-dnd in the…

AddedChangedFixedSecurity

Brave

Brave Software · Browsers

QuickView toolbar actions; Enabled implicit playlist caching by default; Enabled Liquid Glass by default on iOS 26; Improved sanitization of values in Brave

AddedChangedSecurity

gstack

gstack · Developer Tools

Conducted explicit security sweep over all external-contributor code merged since mid-June and hardened six confirmed findings with regression tests; Pre-push secret scanner now…

AddedFixedSecurity
SourceAI extracted

gstack

gstack · Developer Tools

Enforcement guards /freeze, /careful, and team-init required mode now block requests; /careful now parses tool payload with real JSON parser and handles quoted arguments; /careful…

AddedChangedFixedSecurity
SourceAI extracted

Mem0

Mem0 · AI

Add an Oracle AI Vector Search vector store (oracledb) to the OSS SDK with pooled connections, HNSW/IVF indexes, optional indexAccuracy target, JSON payload filtering, and six…

AddedChangedFixedSecurity

LiteLLM

BerriAI · AI

All LiteLLM Docker images are now signed with cosign for verification purposes; Proxy request-handling maintenance and runtime dependencies refreshed

ChangedSecurity

LiteLLM

BerriAI · AI

All LiteLLM Docker images are now signed with cosign for signature verification; Backport proxy request-handling fixes; Refresh runtime dependencies

ChangedFixedSecurity

CrewAI

CrewAI · AI

Report flow outcome, duration, and human-in-the-loop signals; Emit FlowStartedEvent when a boundary hook aborts the flow; Scope span export to our own tracer provider; Bump torch…

AddedChangedFixedSecurity

serverless

serverless · Frameworks & Libraries

Host MCP servers on AWS Lambda with a new mcp section in serverless.yml that deploys official MCP TypeScript SDK servers behind API Gateway with response streaming, OAuth…

AddedChangedFixedSecurity

Meilisearch

Meili · Databases & Data

Foreign filter now supports sharding by retrieving documents through the network when evaluating foreign filters and hydrating documents; Increase the limit of documents that a…

AddedChangedSecurity

Gitea

Gitea · Developer Tools

Fix collaborator access mode and httpsign; Refactor external render; Resolve pullrequesttarget reusable workflows at the base commit; Refactor markup render; Set WebAuthn user…

AddedFixedSecurity

Docker Desktop

Docker · Infrastructure & DevOps

Fixed a rare crash where Docker Desktop with the Apple Virtualization Framework VM stopped unexpectedly right after a new connection was opened on Mac; Fixed WSL error recovery on…

AddedChangedFixedSecurity
SourceAI extracted

Notable releases

Ollama

Ollama · AI

Transcode WebP images for llama-server; Tolerate non-leading system messages in Qwen renderer

Fixed

superpowers

obra · AI

Devin CLI support to install superpowers via devin plugins install obra/superpowers with skills auto-triggering at session start; Hermes Agent support to install from git clone…

AddedChangedFixed

n8n

n8n-io · Infrastructure & DevOps

Allow details field in continueErrorOutput mode; Bound workflow publication outbox record processing with an abort deadline; Update ready-to-run demo templates to a current OpenAI…

AddedFixed

opencode

anomalyco · AI

Select the Kimi system prompt correctly for official Moonshot and Kimi providers; Fix xhigh reasoning effort for xai models

Fixed

Deadlock

Valve · Games

Apollo: Riposte melee resist reduction increased from -22% to -25%; Apollo: Riposte T2 changed from -30% Melee Resist to -25% Melee Resist and +0.4s Stun Duration; Apollo: Riposte…

ChangedFixed

transformers

huggingface · AI

Add Muse Glimmer multimodal model support; Add Granite-swa and Granitemoe-swa model support; Add A.X-K1 model support; Add A.X-K2 model support; Add Cosmos3 Edge model support…

AddedChangedFixedRemoved

Electron

OpenJS Foundation · Frameworks & Libraries

Fixed registerFileProtocol and registerHttpProtocol returning readable responses to cross-origin no-cors fetches; they now return opaque responses like protocol.handle; Fixed a…

ChangedFixed

LangChain

LangChain · AI

Expose tracepolicy on AgentMiddleware; Preserve history on SummarizationMiddleware summary failure; Handle import error in LLMToolEmulator by model; Add stateschema param to…

AddedFixed

Angular

Google · Frameworks & Libraries

Generate correct expression for optional chaining; Remove namespaced MathML script elements; Correctly resolve symbol for SafePropertyRead in chained optional navigation; Record…

Fixed

ComfyUI

Comfy Org · AI

Fix KSamplerAdvanced with addnoise disabled on nested latents; Fix PreviewAny escaping non-ASCII text in dict and list previews; Fix float64 device in ltx diffusion decoder…

AddedChangedFixed

Claude Code

Anthropic · Developer Tools

Add GitLab merge request URL support to the --worktree flag and the claude agents view where MRs display as !N; Add opt-in forwarduseridentity apps gateway setting on Anthropic…

AddedChangedFixedRemoved

frp

fatedier · Infrastructure & DevOps

UDP packet payloads for ordinary UDP proxies and SUDP now use a dedicated binary codec when frpc and frps successfully negotiate the capability under wire protocol v2, using a…

AddedFixed

spec-kit

github · AI

Add SpecAssay preset to community catalog; Add Architecture Governance extension to community catalog; Add SpecAssay Check extension to community catalog; Add SpecJudge extension…

AddedChangedFixed

shadcn/ui

shadcn · Frameworks & Libraries

Support adding registries to package.json when components.json is not present; Merge registries from package.json and components.json; Resolve registries declared in package.json…

AddedChangedFixed

ui-ux-pro-max-skill

ui-ux-pro-max-skill · AI

Reworked BM25 routing, query rewriting, abstention, typo recovery, suggestions, and cache safety; Added a 90-case graded relevance corpus covering 12 domains, 22 stacks, hard…

AddedChangedFixed

Home Assistant

Open Home Foundation · Infrastructure & DevOps

Convert streamed tyre pressure and isolation resistance to their declared units in Teslemetry; Handle inconsistent API response in Husqvarna Automower; Scope hassfest Docker…

AddedChangedFixedRemoved

AWS CLI

Amazon Web Services · Infrastructure & DevOps

Added support for associating glossary terms with iterable form items, such as table columns in Glue; Added support for g7.2xlarge, g7.4xlarge, g7.8xlarge, g7.12xlarge…

Added

Storybook

Storybook · Frameworks & Libraries

Fix RDT tsconfig selection for Vite project references in React; Remove @cloudflare/vite-plugin from the inherited Vite config in Tanstack React; Wait for router to load before…

Fixed

Ansible

Red Hat · Infrastructure & DevOps

See the full changelog for the changes included in this release.

Hugo

Hugo · Developer Tools

Add new css.ChromaStyles template function for generating Chroma syntax highlighting styles; Add importContext option to css.Build, js.Build, css.Sass, and css.TailwindCSS to make…

AddedChangedFixedRemoved

Netdata

Netdata · Infrastructure & DevOps

Network Monitor Dashboard (Technical Preview) with device inventory, metrics, topology, flows, traps and alerts; Network Flows collection for NetFlow, IPFIX and sFlow from…

AddedChangedDeprecated

browser-use

browser-use · AI

Update Cerebras model IDs and default; Recover Anthropic tool arguments when the model serializes its call as text; Guard lastaction() against empty action list; Guard…

ChangedFixed

Svelte

Svelte · Frameworks & Libraries

Skip controlled each fast path while another batch is pending; Improve whitespace handling inside printer; Prevent duplication of comments in attributes; Preserve CSS comments in…

Fixed

graphify

graphify · AI

graphify install now advances the .graphifyversion stamp only for the platform it actually (re)writes, instead of stamping every installed platform as current; an incremental…

Fixed

OpenHands

OpenHands · AI

Add client-side conversation archive functionality; Add inline markdown artifact previews in chat; Add ready-for-dev issue readiness gate with type-specific criteria; Add context…

AddedChangedFixed

code-server

coder · Developer Tools

Update to Code 1.132.0; Cookies are now passed through unchanged when proxying, aside from stripping out code-server's session token, to prevent issues from re-encoding

ChangedFixed

agent-skills

agent-skills · AI

Codex SessionStart hook now emits the standard SessionStart envelope on every path; Plugin manifests are pinned to the release version with CI check to keep them in lockstep with…

AddedChangedFixed