Trending OSS — embedded, mobile, networks, web, AI · 2026-10-27 09:02

Trending OSS — embedded, mobile, networks, web, AI

ESPHome 2026.10.0 makes native ESP8266 builds the default and compresses OTA — The October stable release switches ESP8266 compiles to ESPHome’s native Arduino toolchain (cutting cold builds nearly in half on Apple Silicon without Rosetta), adds automatic deflate OTA compression on ESP32, RP2040, LibreTiny and host, trims RAM across the fleet, and ships about 20 new components including Wi‑Fi CSI motion sensing and USB‑UART bridges. ESPHome · cmvqa4t4cd95339f8b0e1f7f7

Zephyr 4.5.0-rc3 hard-freezes TriCore, Hexagon, QUIC and mpipe for the October cut — Maintainers tagged the third release candidate on 22 October as the hard freeze ahead of the still-pending 4.5.0 final; draft notes highlight Infineon TriCore and Qualcomm Hexagon support, an experimental GStreamer-style multimedia pipeline, QUIC/HTTP/3, and roughly 178 new boards. GitHub · cmvqa4t4e3f9cb94f1bccd1fd

Compose Multiplatform 1.13.0-beta01 opens the 1.13 beta train — JetBrains’ first 1.13 beta adds AnnotatedString bullet rendering, iOS UIKit safe-area interop policy, Desktop SwingGraphics frame pacing, and Safari-on-iOS text/focus fixes, with a binary-incompatible Desktop DragAndDropTransferAction change that forces library recompiles. GitHub · cmvqa4t4f85ead3f0d4e46f11

Cilium 1.20.4 is an out-of-band security patch for compromised eMudhra CAs — The release upgrades Go to 1.26.10 so compromised eMudhra intermediate certificates are no longer trusted (CVE-2026-111943), refreshes dependencies, removes an unused pebble binary from the image, and backports Gateway API BackendTLSPolicy and eBPF NAT/checksum fixes after 1.20.3. GitHub · cmvqa4t4g1c6c7e5357fddb17

Traefik 3.7.16 plugs ForwardAuth NTLM/Kerberos identity leakage — Traefik Labs shipped 3.7.16 (and 2.11.60) for high-severity GHSA-hrpp-p4fc-wwf8: ForwardAuth no longer reuses a shared auth-server connection pool that could let one client inherit another user’s Negotiate identity, and the fix also covers Ingress NGINX auth-url in 3.7. GitHub · cmvqa4t4hbb33957f433a8757

Istio 1.31.3 ships ISTIO-SECURITY-2026-008 against eMudhra intermediates — The patch rebuilds ubuntu/distroless CA bundles without emSign ECC Root CA - G3, moves istiod/istioctl/pilot-agent to Go 1.26.10, and bumps ztunnel’s rustls-webpki so compromised intermediate chains are rejected for egress TLS and JWKS fetches. Istio · cmvqa4t4i4d85c0236ac9be7c

KrakenD CE 3.0.2 upgrades Go to distrust compromised eMudhra CAs — The Apache-licensed API gateway’s community and enterprise 3.0.2 builds adopt Go 1.26.10 for CVE-2026-111943 so forged backend or mTLS client certificates chaining through the revoked intermediates fail verification; CE also bumps amqp for CVE-2026-107386. KrakenD · cmvqa4t4j78d6738aa5669e56

llama.cpp b11879 fuses CUDA FFN gate/up matmuls with GLU in MMQ — The 25 October pre-release runs dense FFN gate and up quantized matmuls as one mul_mat_q launch and applies GLU in the write-back for prompt processing on Turing and newer NVIDIA GPUs (Q4_K through IQ4_XS). GitHub · cmvqa4t4k666820aa50bf6d7f

OpenViking 发布 v0.5.2：强化隐私治理与智能体记忆可靠性 — 该版本覆盖服务端、智能体插件、隐私保护、编译工作流、Studio 与命令行，新增会话隐私自动提取、恢复及隐私树相关工具，改进会话记忆读取与提取重试，并把原内置的朗链集成改为需单独安装的外部包；工作记忆摘要默认关闭，升级前需阅读迁移说明并完成回归验证。 GitHub · cmvqa4t4lc215bc5e8cffe3e0