This week in software: Aug 24–30, 2026
1054 releases from 453 products, Monday to Sunday UTC. The most notable, ranked by how widely each product is used, with every security-tagged release listed in full.
Security fixes
uBlock Origin
Raymond Hill · Security & PrivacyFix possible injection of scriptlets requiring trust from non-trusted sources; Import google-ima-dai shim from AdGuard shims; Replace List-KR with filterslists-KO; Remove support…
Hoppscotch
Hoppscotch · Developer ToolsData-driven collection runs with CSV or JSON data files; REST and GraphQL requests in a single unified workspace; Request documentation loss on save; Connection timeout dropdown…
Google Chrome
Google · BrowsersFixed inappropriate implementation in CORS (CVE-2026-76033); Fixed use after free in Media (CVE-2026-12462); Fixed insufficient validation of untrusted input (CVE-2026-12025)…
Google Chrome
Google · BrowsersFixed use after free in DOM (CVE-2026-76021); Fixed buffer overflow in Network (CVE-2026-76022); Fixed use after free in HTML (CVE-2026-19559); Fixed privilege elevation in Import…
ClickHouse
ClickHouse · Databases & DataValidate Iceberg metadata file path for null bytes.; Fixed out-of-bounds read in formatRowNoNewline with empty rows.; Fixed uninitialized memory exposure in query results.; Fixed…
Notable releases
hermes-agent
NousResearch · AIConsent-gated real-profile browsing using your default Chromium profile for local browsing with Windows close-with-approval flow; Desktop Browser with its own OS window and…
Kubernetes
CNCF · Infrastructure & DevOpsSee kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.
react-native
Meta · Frameworks & LibrariesAdd hard fail and clear error message when an autolinking plugin host is referenced as a dependency in SwiftPM; Bump Hermes to version 250829098.0.17; Type Animated.Value.addListen…
transformers
huggingface · AIAdd support for GLM-5.3-Flash, a natively multimodal model with 320B total parameters and 18B active parameters; Restore backward compatibility for the tensor-parallel API; Fix…
Counter-Strike 2
Valve · Gamescustomhudlayout entity for scripted maps to provide custom UI with support for Panel, Label, Image, and Button panel types; CSS styling support for customhudlayout entities…
open-webui
open-webui · AIHuman in the loop tool approval where administrators can enable requiring manual approval for tool execution in conversations; Built-in tool allowing models to pause and ask up to…
Claude Code
Anthropic · Developer ToolsAdded PreModelSwitch and PostModelSwitch hook events to block, confirm, or annotate a model switch; SessionStart resume hooks now receive session staleness and estimated re-cache…
Material UI
MUI · Frameworks & LibrariesAdd theme.focusVisible opt-in keyboard focus ring across components; Prevent sticky hover border on touch devices in buttongroup; Complete Traditional Chinese localization…
gemini-cli
gemini-cli · AIDynamically resolve Cloud Workstations proxy redirect URI for OAuth flows; Resolve swallowed directory mismatch in IDE connections; Add evaluation validation functionality; Add…
agent-skills
agent-skills · AINew skill constraint-driven-development establishes a project's quality bar as a written contract in CONSTRAINTS.md, interviews on relevant dimensions, supplies defaults, maps…