Skip to content
TILens What matters today in tech
Theme

Daily edition

The daily ledger

TILens turns technical updates into a focused daily brief: official releases, trusted reporting, and practitioner analysis, deduplicated and organized by topic.

29 Jul 2026 edition
Django Python

DSF member of the month - Katherine "Kati" Michel

For July 2026, we welcome Katherine "Kati" Michel as our DSF member of the month! ⭐ Kati is involved in the Django community for many years. She was a DEFNA Director for 8 years and DjangoCon US Website Chair and…

Source: Django Weblog Sarah Abderemane
FastAPI GitHub Python

tiangolo/fastapi: 0.141.1

Fixes 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @tiangolo. Docs 📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @tiangolo.

Source: FastAPI Releases github-actions[bot]
JavaScript GitHub

nodejs/node: 2026-07-29, Version 24.18.1 'Krypton' (LTS), @juanarbol

This is a security release. Notable Changes (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High…

Source: Node.js Releases juanarbol
DevSec AWS

Secure your npm and pip package updates in Amazon Linux

If you use and install packages from npm or PyPI, the first hours after a package is published are the riskiest because scanners can’t analyze packages before publication. Recent supply chain events affecting NodeJS and…

Source: AWS Security Blog Norbert Manthey
FastAPI GitHub Python

tiangolo/fastapi: 0.141.0

Features ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @tiangolo.

Source: FastAPI Releases github-actions[bot]
AWS GitHub

aws/aws-cdk: v2.262.2

Bug Fixes revert "fix(core): stack.node.addDependency gets slower as stacks grow (#38314)" (#38417) (d97dd8d), closes #38406 #38406 Alpha modules (2.262.2-alpha.0)

Source: AWS CDK Releases aws-cdk-automation
JavaScript GitHub

nodejs/node: 2026-07-29, Version 26.5.1 (Current), @RafaelGSS

This is a security release. Notable Changes (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High…

Source: Node.js Releases RafaelGSS
JavaScript GitHub

nodejs/node: 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolito

This is a security release. Notable Changes (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High…

Source: Node.js Releases marco-ippolito
Hardware

ESP-IDF User Guide for ESP32-C3, SDK v5.2.7

Language English ESP32-C3The ESP-IDF Programming Guide provides an extensive overview of official development framework by Espressif for its SoCs, enabling the creation of robust and efficient embedded applications. It…

Source: Espressif News Anonymous
Hardware

ESP-IDF User Guide for ESP32-C6, SDK v5.5.3

Language English ESP32-C6The ESP-IDF Programming Guide provides an extensive overview of official development framework by Espressif for its SoCs, enabling the creation of robust and efficient embedded applications. It…

Source: Espressif News Anonymous
Java GitHub

quarkusio/quarkus: 3.38.0

Complete changelog #55401 - @RegisterForProxy is silently ignored when used more than once on the same type #55402 - Use getAnnotationsWithRepeatable for handling repeatable annotations in proxy registration logic…

Source: Quarkus Releases quarkusbot
FastAPI GitHub Python

encode/uvicorn: Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for…

Source: Uvicorn Releases Kludex
Java GitHub

quarkusio/quarkus: 3.33.3

Complete changelog #47504 - This Gauge has been already registered "mysql.queue.size" #50480 - Quarkus CLI fail if the offering is set but empty #50504 - Azure function host.json default bundle versions must be updated…

Source: Quarkus Releases quarkusbot
Java GitHub

quarkusio/quarkus: 3.27.5

Complete changelog #51230 - ContextNotActiveException in the middle of a request handler #51299 - Fix CDI request context activation race when Quarkus REST and Reactive Routes are used during the same request #51408 -…

Source: Quarkus Releases quarkusbot
AI

Hugging Face Journal Club: Kimi K3

The Hugging Face research team discusses the Kimi K3 tech report: https://huggingface.co/papers/2607.24653

Source: Hugging Face Hugging Face
DevSec

Hugging Face Hack: Lessons for Cyber Defenders

Dark Reading Confidential Episode 20: Expert Rich Mogull reflects on lessons cyber teams should pull from the OpenAI agent's attack on Hugging Face.

Source: Dark Reading AppSec Dark Reading Editorial Team
Web

The Bull And Bear Case For Digital Design In The Age Of AI

As AI reshapes product design, it could give designers greater autonomy or expose the gaps that autonomy makes harder to hide. Exploring both the bull and bear cases, Andy Budd examines what happens when designers need…

Source: Smashing Magazine hello@smashingmagazine.com (Andy Budd)
AI

The AI Hype Index: Unsexy AI

It feels bad enough when an open letter signed by leading economists warns that AI might steal your job. The fact it may soon be better than you at making dinner? Insult to injury. But that’s exactly what the company 1X…

Source: MIT Technology Review AI Charlotte Jee
OCaml

io_uring is not available (ENOMEM)

Thomas reported that ocaml-multicore/eio PRs randomly fail on ocurrent/ocaml-ci with a strange error in the documentation tests.

Source: OCaml Planet Mark Elvers
Rust

This Week in Rust 662

Hello and welcome to another issue of This Week in Rust! Rust is a programming language empowering everyone to build reliable and efficient software. This is a weekly summary of its progress and community. Want…

Source: This Week in Rust TWiR Contributors
DevSec

Stadium Summer: The Snyk Connect Fan Zone Tour

Snyk’s Fan Zone tour brought AI security workshops, networking, and friendly competition to 8 cities and 3 virtual sessions. Attendees built skills, shared ideas, and leveled up together.

Source: Snyk Blog
PostgreSQL

Three more things about Postgres 19

#​659 — July 29, 2026 Web Version Postgres Weekly PGSimCity: How Postgres Works, in 3D — A truly novel way to explore a model of Postgres internals. It's more than a visualization, you can wander around and break stuff!…

Source: PostgreSQL Weekly
Web

The amazingly versatile conic-gradient()

🚀 Frontend Focus #​752 — July 29, 2026 | Read on the web WOFF 1.0 at 16: The Format That Made Web Fonts Work — Did you know @font-face was adopted into CSS2 in 1998? But it sat largely unused amid fights over licensing,…

Source: Frontend Focus

Did Anthropic just kill the indie hacker...?

Try Blacksmith for free to run your GitHub Actions 2x faster - https://www.blacksmith.sh/ Anthropic just dropped Opus 5 and it may be killing the indie hacker dream. Let's dive in. #coding #programming Want more…

Source: Fireship Fireship