{"version":"https://jsonfeed.org/version/1.1","title":"opensource.fyi — news","home_page_url":"https://opensource.fyi/news/","feed_url":"https://opensource.fyi/news/feed.json","language":"en","items":[{"id":"https://opensource.fyi/news/2026-11-10-opensource-fyi-opens/","url":"https://opensource.fyi/news/2026-11-10-opensource-fyi-opens/","title":"opensource.fyi opens with 50 open source projects","summary":"The index launches with 50 projects, one page each, browsable by category, language and the products each project can replace, with feeds and a JSON API.","content_text":"opensource.fyi is an index of open source software. Every project gets a single page that answers the same questions in the same order: what it is, how it is licensed, what it replaces and how to start using it.\n\n## What is here today\n\nThe index opens with 50 projects across 17 categories, from databases to photo libraries. Each one can be reached by category, by programming language, by tag, or from the product it is an alternative to.\n\n## For readers and for machines\n\nEverything published here is also available as an RSS feed, a JSON feed and a read-only JSON API, so the index can be followed or reused without scraping.\n\n## What comes next\n\nMore projects, added continuously, and this news section: releases, briefings and stories from across open source, filed by day.","image":"https://opensource.fyi/og/news/2026-11-10-opensource-fyi-opens.png","date_published":"2026-11-10T11:30:00.000Z","date_modified":"2026-11-10T11:30:00.000Z","tags":["news","site-news","launch"]},{"id":"https://opensource.fyi/news/2026-11-10-daily-briefing/","url":"https://opensource.fyi/news/2026-11-10-daily-briefing/","title":"Daily briefing, 10 November: Ghost, Penpot, Ollama and Traefik ship","summary":"The releases worth knowing about from the past 24 hours, from a members feature in Ghost to a breaking change for self-hosted Penpot.","content_text":"Nine projects in the index shipped releases between the morning of 9 November and the morning of 10 November (UTC). Here is what changed and who needs to act.\n\n## Upgrade now\n\n- **[Meilisearch 1.56.2](/news/2026-11-10-meilisearch-1-56-2-performance-regression/)** removes a leftover debug statement that could slow searches, a regression from 1.56.1. The maintainers strongly recommend upgrading.\n- **[Medusa 2.22.6](/news/2026-11-10-medusa-2-22-6-corrected-security-release/)** replaces 2.22.5, which carried a security hardening fix but was published with missing package files.\n\n## Read before upgrading\n\n- **[Penpot 2.19.0](/news/2026-11-10-penpot-2-19-configurable-shortcuts-admin-console/)** enables the Admin Console by default; self-hosted instances must now deploy an extra service.\n- **[Traefik 3.7.18](/news/2026-11-10-traefik-3-7-18-hardening-release/)** comes with a migration note about how request paths containing dot-segments are resolved.\n\n## Also out\n\n- **[Ghost 6.76.0](/news/2026-11-10-ghost-6-76-custom-member-fields/)** adds custom fields for members.\n- **[Ollama 0.40.16](/news/2026-11-10-ollama-0-40-16-ripple-preview/)** adds the Ripple Preview coding model and reduces memory use for Qwen3.8 Flash Next on Apple silicon.\n- **[Coolify 4.7.3](/projects/coolify/)** can export a resource's vulnerability list as Markdown, CSV or JSON, and lets you set time and CPU limits for image scans.\n- **[Next.js 16.4.6](/projects/nextjs/)** backports fixes to the active LTS line, including automatic compression of route handler responses.\n- **[Home Assistant 2026.11.1](/projects/home-assistant/)** is the first patch release of the November cycle, including a fix for HomeKit camera motion events.","image":"https://opensource.fyi/og/news/2026-11-10-daily-briefing.png","date_published":"2026-11-10T11:15:00.000Z","date_modified":"2026-11-10T11:15:00.000Z","tags":["briefing","briefing","releases"]},{"id":"https://opensource.fyi/news/2026-11-10-ghost-6-76-custom-member-fields/","url":"https://opensource.fyi/news/2026-11-10-ghost-6-76-custom-member-fields/","title":"Ghost 6.76 lets publishers keep their own details about members","summary":"Ghost 6.76.0 adds custom member fields, opts posts into large images in Google Discover, and fixes save deadlocks under concurrent editing.","content_text":"Ghost, the open source publishing and newsletter platform, released version 6.76.0 on 10 November.\n\n## Custom fields for members\n\nThe headline feature is custom fields on member records. Publishers can now store their own information about subscribers, beyond the built-in name, email and labels, directly in Ghost rather than in a separate spreadsheet or CRM.\n\n## Better reach in Google Discover\n\nPosts are now marked so that Google can show large images for them in Discover, which typically makes cards in the feed more prominent.\n\n## Editor and reliability fixes\n\n- Typing a backtick over selected text now formats it as inline code.\n- Saving posts no longer fails with database deadlocks when several people edit at once, and saving tiers no longer deadlocks either.\n- Font setting dropdowns are no longer clipped in Safari, and the offer context is kept when a reader signs in.\n\nThe release also raises the minimum supported Node.js versions to the October security releases, which matters for self-hosted installs.","image":"https://opensource.fyi/og/news/2026-11-10-ghost-6-76-custom-member-fields.png","date_published":"2026-11-10T11:00:00.000Z","date_modified":"2026-11-10T11:00:00.000Z","tags":["release","releases","publishing"]},{"id":"https://opensource.fyi/news/2026-11-10-penpot-2-19-configurable-shortcuts-admin-console/","url":"https://opensource.fyi/news/2026-11-10-penpot-2-19-configurable-shortcuts-admin-console/","title":"Penpot 2.19 adds configurable shortcuts and per-side strokes, and changes self-hosting","summary":"Penpot 2.19.0 brings custom keyboard shortcuts, a better path editor and design-token library sync. Self-hosters must now deploy the Admin Console service.","content_text":"Penpot, the open source design and prototyping platform, released version 2.19.0 on 9 November. It is a feature release with two breaking changes for people who run their own instance.\n\n## New for designers\n\n- **Configurable keyboard shortcuts.** Shortcuts can now be reassigned, searched by key combination, and exported.\n- **A better path editor**, with improved path operations and editing.\n- **Stroke widths per side.** Top, right, bottom and left strokes can now be set individually.\n- **Design tokens across files.** Tokens can live in internal libraries and stay in sync between files.\n\n## Breaking changes for self-hosted instances\n\nThe Admin Console is now enabled by default and the old `enable-admin-console` flag is gone. Self-hosted deployments must run the `penpot-admin-console` service and set `PENPOT_ADMIN_CONSOLE_URI` for the frontend.\n\nPenpot also moves all file payloads into a single `file_data` store and deletes orphaned revision rows. Small and medium instances migrate automatically on boot. The release notes advise operators of very large instances to run the migration separately, because it will not fit in the startup transaction.\n\n## Fixes\n\nThe release fixes a long list of bugs, among them copying text to the clipboard on Windows, and a case where the `disable-registration` flag did not stop new accounts being created from shared prototype pages.","image":"https://opensource.fyi/og/news/2026-11-10-penpot-2-19-configurable-shortcuts-admin-console.png","date_published":"2026-11-10T09:45:00.000Z","date_modified":"2026-11-10T09:45:00.000Z","tags":["release","releases","design","self-hosting"]},{"id":"https://opensource.fyi/news/2026-11-10-traefik-3-7-18-hardening-release/","url":"https://opensource.fyi/news/2026-11-10-traefik-3-7-18-hardening-release/","title":"Traefik 3.7.18 tightens authentication and path handling","summary":"A patch release for the Traefik reverse proxy limits BasicAuth password length, validates Host matchers and changes dot-segment path resolution. Read the migration note first.","content_text":"Traefik, the open source reverse proxy and load balancer, released version 3.7.18 on 10 November. The release notes open with a request to read the migration guide before upgrading.\n\n## What changed in request handling\n\n- **Paths.** Dot-segments and empty segments in paths that carry path parameters are now resolved. This is the change the migration note covers, because it can affect how existing routes match.\n- **Host matchers.** Traefik now validates the values in HTTP Host matchers.\n- **Authentication.** BasicAuth password length is now limited, and connection-bound authentication schemes are supported in `Proxy-Authorization`.\n\n## Other fixes\n\n- The Compress middleware now caps zstd encoder memory and accepts an uppercase `Q` weight in `Accept-Encoding`.\n- The Ingress NGINX compatibility provider applies CORS before redirect annotations and fixes client-certificate headers when Ingresses share a host.\n- WASM plugins no longer get deterministic randomness, and the SPIFFE configuration for the TCP servers transport is fixed.","image":"https://opensource.fyi/og/news/2026-11-10-traefik-3-7-18-hardening-release.png","date_published":"2026-11-10T08:50:00.000Z","date_modified":"2026-11-10T08:50:00.000Z","tags":["release","releases","networking","security"]},{"id":"https://opensource.fyi/news/2026-11-10-ollama-0-40-16-ripple-preview/","url":"https://opensource.fyi/news/2026-11-10-ollama-0-40-16-ripple-preview/","title":"Ollama 0.40.16 adds Ripple Preview, a 65B model for agentic coding","summary":"The latest Ollama release adds Ripple Preview, cuts Qwen3.8 Flash Next memory use on Apple silicon by about 27 GiB, and adds CUDA 13.5 for Windows on ARM.","content_text":"Ollama, the tool for running language models locally, released version 0.40.16 on 9 November.\n\n## A new coding model\n\nThe release adds **Ripple Preview** from Ricursive Intelligence to the model library. It is a 65-billion-parameter dense model built for agentic coding:\n\n```sh\nollama run ripple-preview\n```\n\n## Lower memory use and API fixes\n\n- **Qwen3.8 Flash Next** uses about 27 GiB less memory on Apple silicon.\n- The `/v1/responses` endpoint now respects the `truncation` setting and no longer truncates silently by default.\n- `/v1/models` returns an empty list instead of `null` when no models are installed.\n- `ollama launch claude` always routes Claude Code to the selected model, and `ollama launch` now explains when a cloud model has been retired.\n\n## Platforms\n\nThe release adds CUDA 13.5 support for Windows on ARM and updates the bundled llama.cpp.","image":"https://opensource.fyi/og/news/2026-11-10-ollama-0-40-16-ripple-preview.png","date_published":"2026-11-10T08:30:00.000Z","date_modified":"2026-11-10T08:30:00.000Z","tags":["release","releases","ai","local-ai"]},{"id":"https://opensource.fyi/news/2026-11-10-meilisearch-1-56-2-performance-regression/","url":"https://opensource.fyi/news/2026-11-10-meilisearch-1-56-2-performance-regression/","title":"Meilisearch 1.56.2 fixes a performance regression; upgrade recommended","summary":"Meilisearch 1.56.2 removes a leftover debug statement introduced in 1.56.1 that could slow the engine down. The maintainers strongly recommend upgrading.","content_text":"Meilisearch released version 1.56.2 on 9 November to undo a regression in the previous patch.\n\n## What happened\n\nVersion 1.56.1 shipped with a leftover debug statement that could impede performance. Version 1.56.2 removes it and adds a warning to catch similar statements in future. The maintainers \"strongly\" recommend upgrading from earlier versions.\n\n## Also in this release\n\nThe Docker images get updated CA certificates, and several build and CI dependencies were bumped. There are no API or index-format changes, so the upgrade should be a drop-in replacement.","image":"https://opensource.fyi/og/news/2026-11-10-meilisearch-1-56-2-performance-regression.png","date_published":"2026-11-10T07:20:00.000Z","date_modified":"2026-11-10T07:20:00.000Z","tags":["release","releases","search"]},{"id":"https://opensource.fyi/news/2026-11-10-medusa-2-22-6-corrected-security-release/","url":"https://opensource.fyi/news/2026-11-10-medusa-2-22-6-corrected-security-release/","title":"Medusa reissues its security release after 2.22.5 shipped incomplete","summary":"Medusa 2.22.6 supersedes 2.22.5, which included a security hardening fix but was published with missing package files. Stores on 2.22.5 should move to 2.22.6.","content_text":"Medusa, the open source commerce platform, published version 2.22.6 on 9 November as a corrected re-release of 2.22.5.\n\n## Why there are two releases\n\nVersion 2.22.5 contained a security hardening fix, but some of its packages were published without their build output. Version 2.22.6 supersedes it with complete packages. Medusa points to the 2.22.5 notes for details of the security fix itself.\n\n## What to do\n\nIf you upgraded to 2.22.5, move to 2.22.6. If you are on an earlier version, skip 2.22.5 and go directly to 2.22.6.\n\n## Other fixes\n\n- The draft-order and loyalty plugins now include their build output when packed with Yarn.\n- The dev server restarts on Windows after a failed boot.\n- The orders list no longer returns order items unless they are requested.","image":"https://opensource.fyi/og/news/2026-11-10-medusa-2-22-6-corrected-security-release.png","date_published":"2026-11-10T06:40:00.000Z","date_modified":"2026-11-10T06:40:00.000Z","tags":["news","releases","security","e-commerce"]},{"id":"https://opensource.fyi/news/2026-11-09-how-to-read-a-project-page/","url":"https://opensource.fyi/news/2026-11-09-how-to-read-a-project-page/","title":"How to read a project page","summary":"Every page in the index follows the same layout. Here is what each part means, and why star counts and versions are shown as dated snapshots.","content_text":"Project pages are built from the same parts so that two projects can be compared at a glance.\n\n## The header and the numbers\n\nThe name, a one-sentence summary and links to the source code, website and documentation come first. Below them is a strip of facts: stars, forks, licence, primary language and the date the entry was last updated.\n\nStars, forks and versions are **snapshots**. They were correct on the \"Updated\" date and are not live.\n\n## At a glance and Get started\n\n\"At a glance\" is a short list of what makes the project distinct. \"Get started\" holds the commands to install or run it, each with a copy button.\n\n## The sidebar\n\nThe sidebar lists the category, languages, platforms and maintainer, the products the project is an alternative to, and its tags. Each of those is a link to every other project that shares it.","image":"https://opensource.fyi/og/news/2026-11-09-how-to-read-a-project-page.png","date_published":"2026-11-09T12:00:00.000Z","date_modified":"2026-11-09T12:00:00.000Z","tags":["news","site-news","guides"]}]}