Tech radar: week 40 of 2026

- Add enableRemoteNotifications config plugin option. Set it to false to skip the APNs entitlement for apps that use only local notifications. Default

<summary<em<h4Cargo Audit</h4</em</summarymentions security

Added launch-failure reporting with systemErrorCode to the app child-process-gone event. 54231 <sup(Also in 45)</supmentions security

api: add custom voice creation and agent session events (4013) (e5de2e5)

| Package | Version |

pip install -U mcp. Docs: https://py.sdk.modelcontextprotocol.io/mentions security

Nemotron 3 Diarizationmentions security

api: add list spend limits endpoint (e8f0cac)

Ollama now supports decision models through /v1/systemone, based on TypeSafe’s Jev API.

ℹ️ This release adds partial support for jobs: only manually-triggered jobs are supported for now, scheduled jobs are not yet available. Full job supp

- [SECURITY] Bump google.golang.org/grpc to v1.83.1 to fix HTTP/2 DATA frame fragmentation memory exhaustion (GO-2026-6348). 19834mentions security

- 15928 7f57b1c Thanks @ichernetsky-cf! - Allow "us" as a jurisdiction for Container applications

https://code.visualstudio.com/updates/v1140

What's new highlightsmentions security

<a id="1.99.0-Language"</a

👉 https://github.com/aquasecurity/trivy/discussions/11333mentions security

This release contains security fixes for the following advisories:mentions security

✨ Add native OpenTelemetry support. PR 16403 by @tiangolo.

[13.x] Include duration in JobProcessed event by @jackbayliss in https://github.com/laravel/framework/pull/61672

serveStatic decodes the request path a second time, leading to bypass of middleware on static pathsmentions security