Tech radar: week 3 of 2026
12–18 Jan 2026
In the week of 12–18 Jan 2026, 11 notable open-source releases shipped (including Svelte [email protected], Electron electron v40.0.0, Ghidra Ghidra 12.0.1), CISA added 2 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “ASCII characters are not pixels: a deep dive into ASCII rendering” (1353 points).
Releases worth knowing about
Web frameworks
- feat: customizable <select elements (17429)
| Commit | Description |
[12.x] Add @includeIsolated directive for isolated Blade includes by @KennedyTedesco in https://github.com/laravel/framework/pull/58311
Fixed a JWT algorithm confusion issue in the JWT and JWK/JWKS middleware.mentions security
Mobile & desktop
Chromium 144.0.7559.60
Testing & security tools
SHA-256: 85bd2990945f3a78df4d1e09f1bb1f40ab77be3bac62c6e7678900788c7f0f41mentions security
Changelog: https://docs.cypress.io/app/references/changelog15-9-0
Automation
Fix security issue in @rudderstack/rudder-sdk-node via major version upgrade from 2.1.4 to 3.0.0 (24303) (04a1370)mentions security
Languages & runtimes
This is a security release.mentions security
AI & machine learning
allow raw JSON schema to be passed to messages.stream() (955c61d)
Changes since checkpoint==3.0.1
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 2.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2025-8110 | Gogs Gogs | Gogs Path Traversal Vulnerability | 2026-01-12 |
| CVE-2026-20805 | Microsoft Windows | Microsoft Windows Information Disclosure Vulnerability | 2026-01-13 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01ASCII characters are not pixels: a deep dive into ASCII rendering1353 points · 149 comments · 2026-01-17
- 02Cowork: Claude Code for the rest of your work1298 points · 565 comments · 2026-01-12
- 03Scott Adams has died1069 points · 1794 comments · 2026-01-13
- 04STFU1043 points · 601 comments · 2026-01-16
- 05Apple picks Gemini to power Siri1038 points · 651 comments · 2026-01-12
- 06Cloudflare acquires Astro960 points · 391 comments · 2026-01-16
- 07Ask HN: Share your personal website950 points · 2386 comments · 2026-01-14
- 08AI generated music barred from Bandcamp949 points · 726 comments · 2026-01-13
- 09FBI raids Washington Post reporter's home946 points · 582 comments · 2026-01-14
- 10Statement from Jerome Powell924 points · 808 comments · 2026-01-12
- 11Claude Cowork exfiltrates files870 points · 399 comments · 2026-01-14
- 12If you put Apple icons in reverse it looks like someone getting good at design854 points · 321 comments · 2026-01-17
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.