A Forgejo notice dated 2 November 2026 says OpenID Authentication 2.0 support ends in v19, scheduled for 25 March 2027, with v15 LTS the last release to carry it on the LTS track and v17 and v18 on the stable track. The notice also says OIDC and OAuth are unaffected, gives no CVE or security reason, and sends readers to a discussion thread for the reasoning. No configuration keys or setup steps were collected for this note.
The minio/minio repository is archived, with its last commit in April 2026, and the README now points at AIStor instead. Existing installs keep serving unchanged, but no further upstream fixes are coming, so the question is when to migrate and to what.
The new MIT-licensed forge stores issues, discussions and patches as event commits on a repository branch so projects move between instances, serves its terminal UI over SSH, and warns that preview data is deleted before production.
GoatCounter's FAQ warns that custom domains will not prevent adblockers from recognizing it; AdGuard's DNS filter enumerates more than 230 of them, a generic ping rule catches cross-domain counting, and first-party or server-side counting is what remains.
A self-hosted Go daemon that runs untrusted code, including code an AI agent wrote, and reports the isolation tier each run actually got — process, container, kernel or vm — refusing a run below the caller's stated floor before any code executes.
Four years after Altair open-sourced its crash-simulation solver, Siemens says it is consolidating efforts into Simcenter, and the GitHub repository has simply been removed.
A self-hosted control plane for cloud coding agents: per-thread containers, one compose file, accounts you connect yourself, and an unusually honest security note about what a sandbox can reach.
A CLI plus iOS and Android apps drive pi agent sessions in remote sandboxes, with the control plane, sandbox service and both apps in one AGPL repository, installed as a single Compose project.
Nabu Casa says the old name never fit: people thought the subscription ran Home Assistant in the cloud, and it never did. The new name goes official in the December 2026.12 release.
A submission to the European Commission calls the downloader "a major problem for the music industry" and names four maintainers by GitHub handle, while asking for nothing concrete.
A new AGPL-3.0 reading platform with built-in readers, three-way Kobo and KOReader sync, metadata from 14 providers, and OIDC login, in one Docker deployment.
Mail, drive, docs, sheets, slides, drawings, kanban, calendar, contacts and chat in one server, with one codebase and per-user SQLite. It is pre-1.0, built by one person, and candid about it.
An MIT-licensed Home Assistant integration that talks to washers, fridges, ovens and more over the local network, using the appliances' own OCF and CoAP interfaces.
A new AGPL-3.0 project from Fabio Manganiello puts a streaming server and an ActivityPub social layer in one stack, with Subsonic clients, server-side outputs, and Stripe plumbing for artists and instance keepers.
One computer at home runs films, music, games, files, the household board and an AI assistant called Nox, while lights, plugs and the TV remote go through Home Assistant. It is a first release, and it knows it.
A self-hosted LaTeX collaboration platform that installs as two containers, keeps every project as a real git repository with branches and merges, syncs to GitHub, GitLab, Gitea or Forgejo, links Zotero for free, and recompiles warm documents in about two seconds.
A self-hosted analytics tool (MIT) that takes a script tag, stores events in one SQLite file, and answers questions through Claude, Cursor or any MCP client — thirty-two tools, no cookies by default, and a cockpit for when you would rather look.
Two years after the hardware program, AlmaLinux adds software certification, rewrites the alma-certify suite so most runs finish in under ten minutes, and opens a public catalog where vendors and community members both file their confirmations.
11.3k stars, one-line install on macOS, Linux or WSL, apps running beside the agent and memory kept as plain files. The modified Apache 2.0 licence is the part to read before you standardise on it.
An MIT-licensed iOS chat app with real end-to-end encryption and no service behind it. The data plane is Firebase, and the account, the rules and the console are Google's.
Exception-only error monitoring over Postgres 16: change the DSN, get grouped issues, and watch transactions, replay and profiles get dropped at the door.
Vincent Bernat replaced log analysis with self-hosted GoatCounter and a client that only counts after a real interaction, which cut a reported 2,000 daily visitors down to fewer than 200 people.