The week in dev
The 7 that mattered most this week, each in one line.
Security advisory: Critical remote code execution vulnerabilities, update now
TL;DRPHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 fix two critical unauthenticated remote code execution vulnerabilities.
Read on php.net →Node.js 24.22.1 (LTS)
TL;DRNode.js version 24.22.1 (LTS) fixes multiple high and medium severity security vulnerabilities affecting TLS, DNS, HTTP, and crypto modules.
Read on nodejs.org →Hugo van Kemenade: Releasing Python 3.15.0
TL;DRPython 3.15.0 was officially released with features like lazy imports, a new frozendict builtin, and UTF-8 as the default encoding.
Read on hugovk.dev →The 7.3 kernel has been released
TL;DRLinux kernel 7.3 is now available, featuring 18,765 non-merge commits from 3,021 developers, including 807 first-time contributors.
Read on lwn.net →Release OpenSSL 4.1.0 · openssl/openssl
TL;DROpenSSL 4.1.0 adds support for DTLS 1.3, RFC 8701 GREASE, and IKEV2 KDF, plus new architecture and build targets.
Read on github.com →What to check before upgrading the Anthropic SDK
TL;DRAnthropic released API version 2026-10-21 alongside Python SDK 2.0.0 and TypeScript SDK 1.0.0, introducing breaking changes to request contracts and authentication headers.
Read on flaviocopes.com →A more reliable way to add and edit contacts on Android
TL;DRApps targeting the upcoming Android release will have direct writes to contacts via the WRITE_CONTACTS permission rejected with a SecurityException.
Read on developer.android.com →Your stack, every morning
Pick your languages and tools. Code News sends a Daily brief at 9:00 and a Past week recap, with a TL;DR on every article.
Code News by CodeBldr · picked from 240+ developer sources · tap a story to read it on the original site