Tech radar: week 18 of 2026
27 Apr – 3 May 2026
In the week of 27 Apr – 3 May 2026, 13 notable open-source releases shipped (including Ollama v0.23.0, Electron electron v41.5.0, LangChain langchain==1.3.0a1), CISA added 4 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Ghostty is leaving GitHub” (3521 points).
Releases worth knowing about
AI & machine learning
Claude Desktop is now supported with Ollama Launch.
release(langchain): 1.3.0a1 (37140)mentions security
Changes since 1.2.0a4
<img width="699" height="176" alt="image" src="https://github.com/user-attachments/assets/d3bae269-bea7-4ddf-a53f-d4718befdb17" /
api: api update (18f834a)
This release features 752 commits from 320 contributors (123 new)!mentions security
Mobile & desktop
Added app.configureWebAuthn() to enable the Touch ID platform authenticator for WebAuthn on macOS, and a select-webauthn-account session event for cho
<summary<em<h4Cargo Audit</h4</em</summarymentions security
Web frameworks
This release includes fixes for the following security issues:mentions security
[13.x] Apply rector fixes by @lucasmichot in https://github.com/laravel/framework/pull/59787
Cloud & DevOps
1.15.0 (April 29, 2026)
https://code.visualstudio.com/updates/v1118
This release fixes mutiple security issues.mentions security
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 4.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2024-1708ransomware use | ConnectWise ScreenConnect | ConnectWise ScreenConnect Path Traversal Vulnerability | 2026-04-28 |
| CVE-2026-41940ransomware use | WebPros cPanel & WHM and WP2 (WordPress Squared) | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability | 2026-04-30 |
| CVE-2026-31431 | Linux Kernel | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability | 2026-05-01 |
| CVE-2026-32202 | Microsoft Windows | Microsoft Windows Protection Mechanism Failure Vulnerability | 2026-04-28 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Ghostty is leaving GitHub3521 points · 1051 comments · 2026-04-28
- 02Zed 1.02153 points · 690 comments · 2026-04-29
- 03Your phone is about to stop being yours1702 points · 889 comments · 2026-04-28
- 04VS Code inserting 'Co-Authored-by Copilot' into commits regardless of usage1513 points · 850 comments · 2026-05-02
- 05Copy Fail1491 points · 516 comments · 2026-04-29
- 06Claude Code refuses requests or charges extra if your commits mention "OpenClaw"1349 points · 720 comments · 2026-04-30
- 07HERMES.md in commit messages causes requests to route to extra usage billing1251 points · 531 comments · 2026-04-29
- 08Cursor Camp1215 points · 195 comments · 2026-04-29
- 09Where the goblins came from1072 points · 660 comments · 2026-04-30
- 10Microsoft and OpenAI end their exclusive and revenue-sharing deal990 points · 845 comments · 2026-04-27
- 11Online age verification is the hill to die on974 points · 711 comments · 2026-04-29
- 12Localsend: An open-source cross-platform alternative to AirDrop923 points · 275 comments · 2026-04-28
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.