jun 20, 2026
8 links from the engineering internet.
jq 1.8.2 patches cve-2026-32316 heap buffer overflow
the json processor's patch release fixes a heap buffer overflow in jvp_string_append and the bad-utf8 replace path (cve-2026-32316), along with other bug fixes. it also adds new builds for windows arm64 and docker arm/v7.
bottom 0.14.0 fixes a cgroup v1 memory misreport on linux
the terminal system monitor stops ram collection from reading the cgroup v1 sentinel max as the total, which produced bizarre memory values, and adds freebsd i/o data collection. the minor bump is because it raises the minimum rust to 1.95.0.
tldr-pages client spec v2.3 adds shortform vs longform options
the tldr client specification gains syntax letting clients show either shortform or longform command options, cutting clutter while letting power users opt into longform. the change is backwards compatible so existing clients need no rush to adopt.
crush v0.79.1 refines bang mode in charm's coding agent
charmbracelet's terminal ai coding agent ships ux fixes for bang mode, including activating it when ! follows whitespace. a small patch on top of the same-day v0.79.0 bang mode release.
helm v3.21.2 bumps kubernetes client libraries to v1.36
the kubernetes package manager updates client-go and the related client libraries to match the expected kubernetes v1.36 release. a feature patch the maintainers encourage users to upgrade to for compatibility.
casdoor v3.98.0 adds stable telegram username fallback
the open-source identity and access management server now generates a stable username fallback for telegram accounts that have no public username, so the telegram idp can onboard those users reliably.
ffmpeg ships 7.1.5 point release on the 7.1 branch
the multimedia framework tags 7.1.5, a stable maintenance release on the 7.1 branch carrying backported fixes. recommended for users tracking the stable 7.1 line rather than the development branch.
appflowy 0.12.4 revamps row page comments
the open-source notion alternative revamps row page comments with notification support and adds comments in full row page mode. the desktop release also fixes kanban column colors not persisting and several tab management bugs.