Tech radar: week 31 of 2026
27 Jul – 2 Aug 2026
In the week of 27 Jul – 2 Aug 2026, 16 notable open-source releases shipped (including OpenAI Python SDK v2.52.0, n8n [email protected], Vite v8.2.0), CISA added 3 vulnerabilities to its Known Exploited Vulnerabilities catalog, and the most discussed developer story on Hacker News was “Show HN: Elevators” (1680 points).
Releases worth knowing about
AI & machine learning
api: content provenance checks (1d6c118)
MCP Python SDK v2 Stable Releasementions security
vLLM v0.26.0 Release Notesmentions security
fix(server): prioritize zod issues and format them by @mozmo15 in https://github.com/modelcontextprotocol/typescript-sdk/pull/1503
Automation
core: Import security audit risk reporters with a file extension (35275) (6a71142)mentions security
Web frameworks
Please refer to CHANGELOG.md for details.
| Commit | Description |
✨ Add app.frontend(checkdir="auto"), to make local development more convenient with fastapi dev. PR 16102 by @tiangolo.
Disable libvips's unfuzzed image loaders and savers.mentions security
Bump postcss from 8.5.15 to 8.5.23 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in https://github.com/laravel/frame
Cloud & DevOps
- [SECURITY] Bump golang.org/x/text to v0.39.0 (CVE-2026-56852) and google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf). 19290 by @krajoramamentions security
This is the General Availability release of Redis 8.10 in Redis Open Source.
https://code.visualstudio.com/updates/v1131
Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).mentions security
Languages & runtimes
This is a security release.mentions security
Mobile & desktop
Added available to process.getSystemMemoryInfo() on Linux, exposing proc/meminfo MemAvailable. 52378 <sup(Also in 43, 44)</sup
Actively exploited vulnerabilities
Added to the CISA Known Exploited Vulnerabilities (KEV) catalog this week: 3.
| CVE | Product | Weakness | Added |
|---|---|---|---|
| CVE-2026-20316ransomware use | Cisco Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability | 2026-07-29 |
| CVE-2026-16812 | Arista VeloCloud Orchestrator | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 2026-07-27 |
| CVE-2025-68686 | Fortinet FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-07-27 |
Need help patching or assessing exposure? See our cybersecurity and DevOps services.
What developers discussed
The most upvoted technology stories on Hacker News during the week.
- 01Show HN: Elevators1680 points · 415 comments · 2026-07-31
- 02Kimi-K3 on HuggingFace1382 points · 544 comments · 2026-07-27
- 03UEFA and its national associations will not participate in FIFA competitions1235 points · 674 comments · 2026-07-30
- 04Our position on open-weights models1180 points · 1749 comments · 2026-07-27
- 05PGSimCity - How PostgreSQL Works930 points · 91 comments · 2026-07-27
- 06Show HN: Open-source engine running Gemma 4 26B in 2 GB RAM on any M-series Mac919 points · 342 comments · 2026-07-29
- 07The coolest use for the Vision Pro849 points · 320 comments · 2026-07-29
- 087.1 Earthquake in Japan819 points · 234 comments · 2026-07-28
- 09Read this before you buy that TV streaming stick818 points · 552 comments · 2026-07-30
- 10AI companies are shredding rare books801 points · 513 comments · 2026-07-27
- 11Superlogical796 points · 458 comments · 2026-07-29
- 12The session you cannot take with you790 points · 226 comments · 2026-07-31
How this is made. Compiled automatically from GitHub releases API, Hacker News (Algolia search API), CISA Known Exploited Vulnerabilities catalog. Releases cover about 60 widely used projects and include minor/major versions and any release mentioning a security fix. It is a digest, not a complete list: it can miss things. Always check the linked source before acting.