May 13, 2026
4 links from the engineering internet.
openproject 17.3.2 patches six security vulnerabilities
openproject 17.3.2 fixes six security issues including default docker container keys, user enumeration in the meetings filter, unauthorized api writes, password validation flaws, and access control gaps in cost reports and the shares api. also resolves a performance regression with large markdown templates.
pytorch 2.12.0 ships with experimental cuda 13.2 support
pytorch 2.12.0 lands on pypi with experimental cuda 13.2 builds for blackwell gpu architecture, while cuda 12.8 enters deprecation. the release removes several long-deprecated apis and includes distributed training improvements.
matplotlib 3.11.0rc2 ships text rendering rewrite via harfbuzz and libraqm
the second release candidate for matplotlib 3.11 rewrites all text and font processing using libraqm, harfbuzz, sheenbidi, and an updated freetype, enabling full unicode internationalization. also adds free-threaded cpython 3.13 support and dark-mode diverging colormaps.
puppeteer 25 goes esm-only, requires node 22 and typescript 5
puppeteer v25.0.1 follows the v25.0.0 major with a quick patch. the v25 line ships esm-only packages, requires node 22+, and bumps minimum typescript to 5.0.1, breaking projects using commonjs or older node.