7 things worth knowing from this week
The 7 that mattered most this week, each in one line.
Next.js Security Update for Upstream Vulnerabilities
TL;DRNext.js released versions v16.4.1 and v15.5.28 to patch critical remote code execution and high severity denial of service vulnerabilities.
Read on nextjs.org →GitLab warns of max severity code execution vulnerability
TL;DRGitLab patched a maximum-severity remote code execution vulnerability tracked as CVE-2026-97229 in the CI/CD Regular Expression Compiler.
Read on bleepingcomputer.com →OpenAI promised developers six months’ notice. GPT-4o users got three.
TL;DROpenAI is retiring GPT-4o, GPT-4o mini, GPT-4.1, and GPT-4.1 mini from its API on January 14, 2027.
Read on thenewstack.io →AWS Lambda announces Lambda Web Functions
TL;DRAWS Lambda introduces Lambda Web Functions, allowing code to handle HTTP requests directly using standard frameworks like Express or Hono without adapters.
Read on aws.amazon.com →Hello Python 3.15, goodbye 3.10, and now I can use 3.11
TL;DRPython 3.15 introduces explicit lazy imports, unpacking in comprehensions, and a built-in low-overhead sampling profiler named Tachyon.
Read on simonwillison.net →Ubuntu 26.10 (Stonking Stingray) released
TL;DRUbuntu 26.10 introduces Linux kernel 7.3, full adoption of Rust-based coreutils, post-quantum-ready package signing, and expanded TPM-backed full-disk encryption.
Read on lists.ubuntu.com →Better HTTP/1 connection reuse
TL;DRGo 1.27 introduces automatic asynchronous draining of unread HTTP/1 response bodies in net/http.Transport to improve connection reuse.
Read on go.dev →Your stack, every morning
Pick your languages and tools. Code News sends a Daily brief at 9:00 and a Past week recap, with a TL;DR on every article.
Code News by CodeBldr · picked from 240+ developer sources · tap a story to read it on the original site