Tech radar: week 8 of 2026
16–22 Feb 2026
In the week of 16–22 Feb 2026, 13 notable open-source releases shipped (including FastAPI 0.131.0, Ollama v0.17.0, Electron electron v40.6.0), CISA added 8 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Keep Android Open” (2258 points).
Releases worth knowing about
Web frameworks
🗑️ Deprecate ORJSONResponse and UJSONResponse. PR 14964 by @tiangolo.
Hono v4.12.0 is now available!
- Add mauve, olive, mist, and taupe color palettes to the default theme (19627)
- fix(vscode-extension): Highlight function calls with optional chaining (4f8d3995f0)
- feat: allow comments in tags (17671)
[12.x] Fix: @return in doc blocks by @alipowerful7 in https://github.com/laravel/framework/pull/58746
AI & machine learning
OpenClaw can now be installed and configured automatically via Ollama, making it the easiest way to get up and running with OpenClaw with open models
Changes since langchain-core==1.2.13mentions security
api: Add top-level cache control (automatic caching) (a940123)
<img width="1920" height="1080" alt="image" src="https://github.com/user-attachments/assets/80e37670-6d70-402b-8c8e-ccfb8c32df2d" /
feat: add conformance test infrastructure for v1.x by @felixweinberger in https://github.com/modelcontextprotocol/typescript-sdk/pull/1518
Mobile & desktop
Added the ability to disable auto-focusing of WebContents on navigation using webPreferences.focusOnNavigation. 49512 <sup(Also in 41)</sup
Automation
ai-builder: Improve code-builder, addressing eval issues (25726) (5c5cc07)
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 8.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | 2026-02-18 |
| CVE-2021-22175 | GitLab GitLab | GitLab Server-Side Request Forgery (SSRF) Vulnerability | 2026-02-18 |
| CVE-2026-2441 | Google Chromium | Google Chromium CSS Use-After-Free Vulnerability | 2026-02-17 |
| CVE-2008-0015 | Microsoft Windows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | 2026-02-17 |
| CVE-2025-49113 | Roundcube Webmail | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | 2026-02-20 |
| CVE-2025-68461 | Roundcube Webmail | RoundCube Webmail Cross-site Scripting Vulnerability | 2026-02-20 |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | 2026-02-17 |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | 2026-02-17 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Keep Android Open2258 points · 737 comments · 2026-02-20
- 02I built Timeframe, our family e-paper dashboard1616 points · 369 comments · 2026-02-22
- 03I want to wash my car. The car wash is 50 meters away. Should I walk or drive?1516 points · 949 comments · 2026-02-16
- 04Facebook is cooked1513 points · 847 comments · 2026-02-20
- 05I verified my LinkedIn identity. Here's what I handed over1483 points · 490 comments · 2026-02-21
- 06Claude Sonnet 4.61346 points · 1226 comments · 2026-02-17
- 07GrapheneOS – Break Free from Google and Apple1182 points · 925 comments · 2026-02-17
- 08Thank HN: You helped save 33k lives1148 points · 112 comments · 2026-02-17
- 0915 years later, Microsoft morged my diagram1047 points · 398 comments · 2026-02-18
- 10How I use Claude Code: Separation of planning and execution976 points · 591 comments · 2026-02-22
- 11Gemini 3.1 Pro963 points · 914 comments · 2026-02-19
- 1214-year-old Miles Wu folded origami pattern that holds 10k times its own weight928 points · 202 comments · 2026-02-16
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.