Mon, Oct 57 items
0 of 7 readGitHub launched ReviewBench, an open benchmark for AI code-review agents, while Cloudflare disclosed and fixed a cross-tenant data exposure in its Containers and Sandboxes. Microsoft shipped Aspire 13.6 and the Linux kernel reached 7.3-rc6.
GitHub launches ReviewBench, an open benchmark for AI code review
GitHub introduced ReviewBench, a benchmark for code-review agents built on representative GitHub pull requests, multi-source ground truth, calibrated evaluation and production-aligned metrics.
Why it mattersGives teams a shared, production-aligned yardstick to compare AI review tools instead of vendor claims.
Cloudflare fixes cross-tenant data exposure in Containers and Sandboxes
Cloudflare disclosed a cross-tenant data exposure flaw in Containers and Sandboxes caused by thin-provisioned storage pools skipping block zeroing; researchers recovered directory structures and full SQLite databases across four continents. Cloudflare remediated it and found no evidence of exploitation.
Why it mattersShows how storage-layer defaults can leak data between tenants, a risk for anyone running multi-tenant container platforms.
Microsoft releases Aspire 13.6 with persistent dashboard telemetry
Aspire 13.6 stores dashboard telemetry in SQLite and keeps up to ten completed runs per application. It adds prerelease Java and Rust hosting packages, portable volume paths and new CLI options, with breaking changes to local MongoDB TLS and the default Cosmos DB emulator image.
Why it mattersAdds first-party Java and Rust hosting and durable telemetry, but the breaking changes require migration checks.
Java roundup: JobRunr 9 and OpenXava 8 reach GA
The week's Java news includes GA releases of JobRunr 9.0 and OpenXava 8.0, point releases for Quarkus, Micronaut, LangChain4j and Eclipse JNoSQL, ADK for Java and Kotlin, and a new Java language server called Lathe.
Why it mattersA quick scan of which Java frameworks and tooling moved this week, useful for upgrade planning.
Linux 7.3-rc6 prepatch released for testing
The 7.3-rc6 kernel prepatch is out. Linus Torvalds noted the annual maintainer summit and Linux Plumbers Conference may affect -rc7 statistics but are unlikely to change the release schedule.
Why it mattersSignals the 7.3 cycle is on track, so downstream distributions and driver maintainers can plan around it.
Sashiko LLM patch-review system update published
LWN reports an update on Sashiko, an LLM-based system that automatically generates kernel patch reviews, which has become an important part of kernel development as reviewer capacity remains a bottleneck.
Why it mattersAutomated review could ease the chronic shortage of kernel reviewers, a constraint affecting most large projects.
AlmaLinux, Debian and Fedora issue Monday security updates
Security updates were issued by AlmaLinux (ghostscript, libvirt, osbuild-composer), Debian (linux-6.12, php8.2, wireshark, xen and more) and Fedora (chromium, curl, openssl, flatpak and others).
Why it mattersAdministrators running these distributions should schedule patching for the listed packages.