Ubuntu reissues a Blazor debug proxy fix and patches .NET Brotli flaw
USN-8958-1 says the earlier fix in USN-8942-1 was incomplete; dotnet8, dotnet10 and dotnet11 packages are updated across Ubuntu 22.04 to 26.10.
News Feed
Everything we have published, newest first, from every desk.
DoorDash agrees to buy Instacart for about $17 billion, at $65 a share
At least 75% of the price is cash, the offer is a 26% premium to Instacart's 22 October close, and Instacart's board approved it unanimously; the deal still needs regulators and shareholders.
Syncfusion ships a free MIT Blazor toolkit and fixes for ASP.NET Core
The toolkit needs no licence key and is separate from Syncfusion's commercial suite; its engineers also ran more than 60 end-to-end scenarios for .NET 11 Blazor features, Microsoft says.
Quarkus Almanac diffs any two releases by config, BOM and class API
Modelled on the Java Version Almanac, it covers every Quarkus release from 0.0.1, reads the class files in every jar and updates itself from Maven Central every twelve hours.
Kubernetes AI Conformance moves to SIG Architecture at 31 platforms
The working group's leads from Google and Red Hat say it met its first goals, a shared baseline for AI workloads, and the next step is automated conformance verification.
A read-only AI reviewer invented a CVE, and no permission was broken
Docker's account of a code review bot that rejected a routine PostgreSQL bump with a fake CVE shows where agent safety stops: the agent obeyed its limits, and the risk moved to the person reading its output.
Cloudflare Q3 DDoS report: short bursts up 208%, terabit attacks down
18.2 million network-layer attacks were mitigated in July to September; CLDAP floods all but vanished while DNS amplification rose 215% and the US again tops the list of targets.
Mistral Large 4 ships as open weights: 1T MoE, 49B active, 1M context
The model announced in early October is now downloadable; Mistral pitches it at defensive security, with 82% on Artificial Analysis' Cyber Index and a licence that limits model-as-a-service use.
Spring AI 2.1 stores messages as ordered parts so model reasoning survives replay
Claude signatures, Gemini thought signatures and OpenAI encrypted reasoning are now replayed unchanged; the change is backward compatible but code that reads reasoning may need updating.
Node.js 26 becomes LTS as 'Lithium', supported until the end of April 2029
Version 26.13.0 changes only release metadata from 26.12.1; teams coming from Node 24 or 22 should note that Linux binaries link against libatomic since Node 25.