Jenkins weekly release jenkins-2.568 shipped on June 10, 2026 as a security focused update. The headline fix is a high severity deserialization flaw in config.xml handling that could let authenticated users impersonate others or read controller files. Operators on weekly 2.567 or earlier should plan an upgrade before the next maintenance window.
Argo Workflows v3.7.15 shipped on June 10, 2026 as a stable patch on the 3.7 line. The headline fix is semaphore and mutex initialization soundness, which matters if you run workflows that depend on sync limits across controllers.
SQLAlchemy shipped a small but important test harness update this week: class scoped pytest fixtures across the project now use @classmethod and cls instead of instance methods with self. The change tracks pytest 9.1 deprecation guidance and clears the path before pytest 10 drops the old pattern entirely.
ingestr v1.0.39 was published on June 23 2026. The release adds MongoDB change data capture support, a Twilio source, and streaming queue broker sources. It also adds an ingestr load timestamp column and updates the server UI to match CLI capabilities.
Scrapy landed 17 commits on master over the past week, touching 71 files with a net gain of about 400 lines. Most of the diff is test coverage, but a handful of changes matter if you run spiders behind proxies, pass prebuilt Crawler objects into runners, or rely on rel="nofollow" to stay off certain pages. The headline fix stops Proxy-Authorization from leaking into upstream requests when using the streaming download handlers.