Latest news week: 19 to 25 October 2026
Critical · PHP / 21 Oct 2026
A security update is only useful when the process serving your users actually runs it. PHP2Shell is a reason to examine the journey from a patched package to a verified deployment.
Security · Node.js / 21 Oct 2026
Your project can have one lockfile and several Node.js runtimes. This week's security releases offer a useful way to check whether your laptop, build jobs and deployed service are telling the same version story.
Languages & tools · Beta / 20 Oct 2026
Changing hundreds of files is easy to automate. Explaining why each change is safe takes more thought. TypeScript's new compiler API invites a more useful kind of automation: one that can inspect, compare and justify its work.
Engineering · Git / 21 Oct 2026
A system can have plenty of workers and still make unrelated tasks wait in line. GitHub's infrastructure update offers a practical question for anyone designing concurrent software: how much work have you accidentally put behind one lock?
Open source · Performance / 22 Oct 2026
Waiting for every result can make a simple page feel broken. Apache's archive update gives us a reason to rethink what a page needs before it can help someone, and what can arrive afterward.