uv 0.13.7 stops treating workspace paths as globs and merges aliased OSV records
The Python package manager's 3 November release fixes six bugs, including Windows trampolines closing handles they did not inherit, and adds two preview features.
Languages
pgAdmin 4 v9.19 fixes 15 vulnerabilities, most of them in server mode
The 31 October release patches CVE-2026-116238 to CVE-2026-116252, replaces free-text password exec commands with an allowlist and adds an extended-statistics node.
Node.js 27 alpha: V8 15.6, OpenSSL 3 required, a new default heap limit
The first alpha changes the default heap ceiling, counts Buffer memory against it, switches v8.serialize to a format older releases cannot read and removes the bundled FIPS provider.
Syncfusion ships a free MIT Blazor toolkit and fixes for ASP.NET Core
The toolkit needs no licence key and is separate from Syncfusion's commercial suite; its engineers also ran more than 60 end-to-end scenarios for .NET 11 Blazor features, Microsoft says.
Node.js 26 becomes LTS as 'Lithium', supported until the end of April 2029
Version 26.13.0 changes only release metadata from 26.12.1; teams coming from Node 24 or 22 should note that Linux binaries link against libatomic since Node 25.
JEP 544 brings ahead-of-time native code to the JDK 28 AOT cache
Code compiled in a training run is stored in the AOT cache and used at startup, with the JIT taking over if the production workload drifts; x64 and AArch64 only.
A PostgreSQL extension stores HDR histograms as a first-class type for exact percentiles
pg_hdr_histogram 1.0.0 keeps a full high-dynamic-range histogram in a column, so p99 and p99.9 are measured, not estimated, and merge losslessly across hosts.
gopls 0.24 brings interactive refactoring, with a proposal to add dialogs to the LSP
The Go team's language server can now ask the user questions before editing code: struct tags, interface stubs and, soon, moving declarations, built on a proposed LSP extension.
Rust 1.99.1 fixes an FFI bool miscompilation, a missing wcslen symbol and rust-lld on macOS
The point release, announced on 15 October, repairs three regressions in 1.99.0: bool return values leaking extra bits to C callers on x86_64, UEFI link errors and a linker that could not find libLLVM.
Node.js schedules security releases for 21 October across 26.x, 24.x and 22.x
The Node.js project says new versions of all three supported lines will fix vulnerabilities whose highest severity is HIGH; details follow on release day.