Open Source
Node.js 27 Alpha Moves Glob Traversal Into Native C++
Node.js 27 alpha adds a native C++ glob engine. Inspect the wrapper boundary, async walker, permission test, and limits of the available performance evidence.
THE OPEN-SOURCE BRIEFING
Source changes. Clear explanations. The questions that remain.
The Front Page
CODE & CONTEXTOpen Source
Deno 2.9.8 Validates npm Package Link Names Before Building Paths
Deno 2.9.8 validates npm package-link names before building destinations. Explore the shared helper, rejection rules, regression tests, and review limits.
Latest Dispatches↓
More from the newsroom ↗
We read the code.
You get the context.
Every story starts with a source change. We explain what it does, why it matters, and what the evidence cannot yet tell us.
How we report ↗From the Project Desks
ANALYSIS / EXPLAINEDOpen Source
10 STORIESOpen Source
Ruff 0.17.3 Makes UP032 Skip Unconvertible str.format Calls
Ruff 0.17.3 narrows UP032 autofixes, correcting signed format-field parsing and skipping rewrites that could change lookup or exception behavior.
Open Source
Payload 3.92.0 Fixes MongoDB Joins With limit: 0
Payload 3.92.0 fixes MongoDB joins with limit: 0 by omitting limiting stages. See the code change, regression coverage, and remaining documentation gap.
Open Source
Jenkins 2.587 Rolls Back a Commons Codec Update That Broke SAML Logins
Jenkins 2.587 rolls back Commons Codec 1.23.0 after reported SAML login failures. Review the dependency diff, decoding behavior, and testing limits.
Open Source
Aspire 13.6.4 Restricts CLI Diagnostic Log Permissions on Unix
Aspire 13.6.4 sets Unix CLI logs to 0600, including reused files, and its dedicated directory to 0700. Learn the code change and its documented limits.
Open Source
GoldenDict-ng Fixes a Full-Text Search Freeze Caused by Unpaired Quotes
Why unmatched quotes could freeze GoldenDict-ng during result highlighting, how the scanner changed, and what the v26.11.0 release evidence confirms.
Open Source
Multica Restores OpenCode 2.x Thinking Options Through the Model API
Why Multica lost OpenCode 2.x Thinking options, how v0.6.5 restores variant discovery through /api/model, and what remains unverified.
Open Source
Windows Sandbox Closes an AppContainer Network-Fence Gap
Sandbox-runtime fixes Windows AppContainer filter matching, adds opt-in loopback access, and reports residual gaps without promising full network isolation.
Open Source
OpenHands Lets Named Agent Profiles Choose a Model Router
OpenHands adds Model Router selection to named local agent profiles. See how existing fields are saved, default behavior stays intact, and warnings work.
Open Source
MCP Servers Stop Older CI Runs from Rewriting Newer Status
MCP servers moves a newer-run check ahead of CI status reporting, preventing superseded runs from posting results. Lookup-failure coverage remains open.
Open Source
OpenHands Moves Agent Secret Requests From a Modal Into the Chat
OpenHands replaces secret-request modals with chat cards. The merged code separates pending input from completion, but real-agent behavior remains untested.
Good questions make better software.
Independent analysis for developers, teams, and curious readers.
Meet The Code Times ↗