aug 18, 2026
9 links from the engineering internet.
grafana 13.2.0 ships and patches cve-2026-17183 across five branches
grafana cut 13.2.0 alongside backported 13.1.4, 13.0.7, 12.4.9 and 12.3.11 patches, all carrying the cve-2026-17183 security fix. 13.2.0 also lands git sync webhooks, nested dashboard tabs four deep, and an alerting import tab.
workerd v1.20260818.1 fixes two gc strong-root leaks in the workers runtime
the august 18 workerd cut plugs strong-root leaks in tail event cf cycles and abandoned pipe writes, adds a wasm_memory_discard compat flag, and drops the experimental streams adapters.
llama.cpp cuts v0.1.2 while semantic versioning is still work in progress
v0.1.2 rolls up 19 commits: sha256 input hashing for multimodal, integer tokenizer scores, cuda mmvq nwarps=8 for batch-size-1 dense models on dgx spark, and a ggml bump to 0.20.2. the semver scheme itself is still being figured out.
cline ships its first desktop beta with cloud sessions in preview
cline code beta installs side by side with the stable app and previews cloud sessions, running a session on cline infrastructure with github integration, cross-device transcript sync, and mid-session model switching. ssh remote envs land as a proof of concept.
n8n 2.36.0 adds mcp tool support and per-principal agent sandboxes
the 2.36.0 pre-release adds mcp tools for workflow management, isolates agent sandboxes by principal, applies tls per proxy hop, and adds confluence cloud oauth2 plus schedule trigger handling for missed executions.
next.js 16.3.1 canary.23 traces lazy app route module loading
canary.23 adds tracing for lazy app route module loads, makes ci wait for the next version to hit npm before deploy tests, and fixes app router reference docs plus i18n base path test coverage.
carbon-lang cuts its august 18 nightly with utf-8 position negotiation
the august 18 carbon toolchain nightly decomposes ast extraction, adds interface modifiers, negotiates utf-8 positions in the language server, and teaches the vscode extension to filter on the file:// protocol.
intel publishes the 2026-08-18 daily build of its sycl llvm toolchain
nightly-2026-08-18 is intel's daily github actions build of the dpc++ sycl compiler, six assets published by the bot for teams tracking the oneapi toolchain ahead of tagged releases.
jackett v0.24.2416 adds newstudio ip filtering config and anisource ipv6
two commits in v0.24.2416: newstudio gains ip filtering info in its config, resolving issue 12602, and the anisource indexer moves to ipv6 only. thirteen platform assets ship with the build.