GitHub Actions' ubuntu-latest is changing to 26.04—Java 8, tsc, and webpack are disappearing, and CMake pinning is being removed

Starting October 19, 2026, GitHub Actions' ubuntu-latest will switch from Ubuntu 24.04 to 26.04. The transition is scheduled to be completed by November 19.The official announcement issue ...

Malicious npm packages evade install-script defenses at runtime

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...
InfoQ

Java 27 Delivers Post-Quantum Cryptography, Future Language Innovation, Helidon 27, JavaFX 27

Oracle has released version 27 of the Java programming language and virtual machine. As the second non-LTS release since JDK 25, the final feature set includes nine JEPs, five of which are still ...

Java 27 grows up, makes better choices

Improvements in JDK garbage collection, header sizes, data security and quantum key support all should minimize developer ...
Cyber Security News

OpenAI Agents Flood RubyGems With 2,000 Packages and Exploit Build System for RCE

A swarm of AI agents attributed by researchers to OpenAI flooded RubyGems with more than 2,000 packages in May 2026, abused RubyDoc.info’s documentation builder for remote code execution (RCE), and ...

Broadcom Strengthens Spring Security and Adds Coverage of Java, Python, and Node.js Ecosystems with TrueSource

New Offerings Expand Open Source Coverage with an Extensive Catalog of Secure, Verifiably Built, Known-good Open Source Libraries and ImagesLAS VEGAS, Aug. 31, 2026 (GLOBE NEWSWIRE) -- VMware Explore ...
Inside Higher Ed

The End of the ‘Learn to Code’ Era

Over the past few months, Meta, Coinbase and Block have each laid off at least 10 percent of their workforce—roughly 13,000 jobs combined—and each pointed, at least partly, to artificial intelligence ...
ZDNet

The ‘learn to code’ era is over – and employers are on the hook for reskilling now

When Rider Rodriguez founded Code Louisville 13 years ago, he imagined the tech skills program would eventually go away — but not like this. Funded in part by the Louisville Metro Government and ...
The Hacker News

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS ...
AppleInsider

Developer resource Swift Package Index to stay open source after Apple acquisition

The Swift Package Index is no longer independent as Apple has taken control, but it will remain an open source search engine for third-party code. The Swift Package Index gave developers one trusted ...
Forbes

Microsoft Ends Claude Code Licenses As It Shifts Developers To Copilot

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Illustration photo of a computer display with the Microsoft Copilot logo, shot in Savigny ...