Microsoft is investigating a breach of its open source projects on GitHub, where hackers injected password-stealing malware into the code. Access to dozens of affected projects, including those related to Azure and AI development tools, has been cut off.

VoidZero, the company behind Vite, Vitest, Rolldown, Oxc, and Vite+, is joining Cloudflare, with all team members also transitioning to the company. Vite and its related projects will remain open source, vendor-agnostic, and community-driven.

CVE-2026-31431 addresses a local privilege escalation vulnerability in Linux, introduced in version 4.14. The issue was linked to commit 72548b093ee38a6d4f2a19e6ef1948ae05c181f7 and has been fixed in subsequent releases.

Zig enforces a strict anti-LLM policy prohibiting the use of large language models for issues, pull requests, and bug tracker comments. Contributors are encouraged to communicate in their native languages and use their own translation tools.

Laravel has raised $57 million in Series A funding from Accel, marking a departure from typical open-source funding models. The framework is now integrating advertisements directly into its agent to generate revenue and create shareholder value.

FAKKU, LLC has issued a DMCA takedown notice regarding gallery-dl and 28 other repositories, requesting the removal of certain files. The recipient is considering switching platforms rather than rewriting the entire repository history to comply with the notice.

Top open-source maintainers report an increase in the usefulness of AI tools for development. Challenges remain, including legal issues and inconsistencies in AI outputs, but improvements in reliability are expected by the end of the year.

Jazzband is sunsetting, with new signups disabled and project leads to be contacted before PyCon US 2026 for transfer coordination. The initiative began over 10 years ago to ease the maintenance of Open Source software projects by allowing all members to contribute code, triage issues, and merge pull requests.

Debian has chosen not to establish a formal policy regarding AI-generated contributions. The decision reflects ongoing debates within the open-source community about the role of AI in software development.

Git has become the dominant version-control system over the past two decades, widely used by developers and open-source projects. Patrick Steinhardt addressed Git's shortcomings and proposed improvements to enhance its functionality for the next decade at FOSDEM 2026.