Enterprises can now control which plugins their users can install in GitHub Copilot CLI and VS Code. This setting is now available in public preview. Add strictKnownMarketplaces to your enterprise-managed… The post Enterprise-managed settings now support strictKnownMarketplaces in VS Code and GitHub Copilot CLI appeared first on The GitHub Blog .
Thanks to the component crisis, it's a bad time to want a new computer. But if you are waiting on a preorder for the Framework Laptop 13 Pro - which Framework's CEO has called the "MacBook Pro for Linux users" - the company shared good news on Thursday that might mean yours will cost less […]
A new LTS-144 version 144.0.7559.256 (Platform Version: 16503.88.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 519258799 High CVE-2026-12034 Insufficient validation of untrusted input 499449324 High CVE-2026-7922 Use after free in ServiceWorker 523677844 Critical CVE-2026-13033 Out of bounds read in Blink>InterestGroups 506653647 High CVE-2026-9970 Use after free in WebGL 511765713 High CVE-2026-10969 Insufficient validation of untrusted input in Extensions 513609324 High CVE-2026-10003 Use after free in Views 501575979 High CVE-2026-9933 Use after free in Input 513208588 High CVE-2026-9993 Use after free in Views 504710769 High CVE-2026-9961 Use after free in SurfaceCapture 513256572 High CVE-2026-9995 Use after free in WebXR 519728275 Critical CVE-2026-12439 Use after free in Digital Credentials 487357841 High CVE-2026-10905 Use after free in Network on Android) 502978647 High CVE-2026-8557 Use after free in Accessibility 498783665 High CVE-2026-9903 Insufficient validation of untrusted input in Site Isolation 493957495 Medium CVE-2026-7339 Heap buffer overflow in WebRTC 504629701 High CVE-2026-8559 Integer overflow in Internationalization 499891888 High CVE-2026-6920 Out of bounds read in GPU 499565267 High CVE-2026-8524 Out of bounds write in WebAudio 513754619 High CVE-2026-10007 Use after free in SVG 516942828 Critical CVE-2026-12008 Use after free 519731619 Critical CVE-2026-12440 Use after free in DigitalCredentials 497880137 High CVE-2026-6360 Use after free in FileSystem 520157118 Critical CVE-2026-12441 Use after free in File Input 500104917 High CVE-2026-7348 Use after free in Codecs Release notes for LTS-144 can be found here Want to know more about Long-term Support? Click here Andy Wu Google Chrome OS
ON Semiconductor said the deal bumps up its total addressable market by $30 billion, to $243 billion by 2030.
The Stable channel has been updated to 149.0.7827.200/201 for Windows and Mac and 149.0.7827.200 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. This update includes 3 security fixes. Please see the Chrome Security Pag e for more information. [N/A][ 513138301 ] High CVE-2026-13281: Integer overflow in Mojo. Reported by Google on 2026-05-14 [N/A][ 517522620 ] High CVE-2026-13282: Use after free in Payments. Reported by Google on 2026-05-28 [N/A][ 522561151 ] High CVE-2026-13283: Use after free in AdFilter. Reported by Google on 2026-06-11 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel. Many of our security bugs are detected using AddressSanitizer , MemorySanitizer , UndefinedBehaviorSanitizer , Control Flow Integrity , libFuzzer , or AFL . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Daniel Yip Google Chrome
Learn when, where, and how to generate SBOMs for container images. Covers build-time vs. post-build approaches, quality criteria, and CI/CD integration.
All-in-one AI assistant — chat, images, voice & market data Discussion | Link
https://runtimewire.com/article/om-malik-taught-silicon-vall... Comments URL: https://news.ycombinator.com/item?id=48678852 Points: 1040 # Comments: 123
Hugging Face Blog published: Run a vLLM Server on HF Jobs in One Command
The stock had its worst session in more than a year as management made its first official move to pass higher memory costs onto consumers.
About a quarter of PCs are still running Microsoft's previous operating system.
Agent-testing startup Patronus AI, founded by former Meta AI researchers, is experiencing nearly insatiable demand, its investor says.
Microsoft announced today that the price of all Xbox models will rise in August, the second time in less than a year as memory prices continue to wreak havoc on every industry from cars to computing. Thankfully, we’re already out looking for Prime Day deals, and we were able to find some discounts on both […]
Claude for PowerPoint, on steroids Discussion | Link
This week, Instagram launched a series of new features for its smart TV app that are all designed to get people to spend more time on the platform through the biggest screens in their homes. In addition to vertical Reels, Instagram for TV - which is currently available for Amazon Fire TV, Google TV, and […]
Carr cites screen time concerns, is accused of trying to be "the nation’s parent."
As far as prices go, Apple is kind of a reverse canary in the coal mine. With its famously generous margins and immense purchasing volume, it can afford to ride out price fluctuations in its supply chain in a way no other consumer tech company can. So when Apple raises prices across nearly all of […]
Volcano is a cloud native batch scheduler for Kubernetes, built for high-performance computing, AI/ML, and other batch workloads. Headlamp is an extensible Kubernetes web UI. With its plugin system, Headlamp can surface APIs and workflows beyond the built-in Kubernetes resources. The Volcano plugin brings core Volcano resources into Headlamp so you can inspect workload state, queue behavior, and gang scheduling details in one place. Kubernetes was originally designed around long-running services, where applications are expected to start and remain available over time. Batch, AI/ML, and HPC workloads often behave differently: jobs arrive dynamically, compete for limited resources, and may need multiple workers to start together before useful work can begin. Volcano extends Kubernetes with concepts such as queues, priorities, quotas, and gang scheduling. Instead of treating every Pod independently, Volcano schedules workloads with awareness of the job as a whole and the resources it needs to make progress. To make these workloads easier to operate and troubleshoot, the Volcano plugin brings that scheduling context directly into Headlamp. Watch this short walkthrough to see the Volcano plugin in Headlamp: Visual context helps teams understand Volcano jobs, queues, and PodGroups faster Working with Volcano often means moving across several related resources while trying to understand a batch workload. You might start with a Job, then look at the related PodGroup, inspect the Pods behind it, check the Queue, and finally return to the Job again. All of that is possible with CLI tools like kubectl and the Volcano CLI, but it can become fragmented very quickly. The Volcano plugin for Headlamp makes that workflow easier by bringing the key resources together in a single UI. Instead of reconstructing relationships manually, you can move directly between Jobs, Queues, PodGroups, Pods, and events from the same interface. Volcano introduces its own resources on top of core Kubernetes objects: Job Describes a batch workload as a set of tasks and the Pods they create. Queue Divides cluster capacity between teams or workloads using quotas and priorities. PodGroup Ties a group of Pods together so the scheduler can treat them as a single unit for gang scheduling. The plugin surfaces all three resource types directly in Headlamp, providing dedicated list and detail views for each of them under a Volcano section in the sidebar. Jobs: workload status, actions, and logs The Job view is the center of the plugin experience. In the list view, you can quickly understand the basics of a workload, including its status, queue, running versus minimum-available values, task count, and age. The detail view goes further by surfacing the information you usually need while debugging a Job: task details, Pod status, related Queue and PodGroup links, conditions, events, and more. Instead of forcing you to jump between several CLI commands, the plugin keeps that context together in a single page. The Job page also adds supported lifecycle actions for appropriate states, including Suspend and Resume , so you can act on a Job directly from the UI. Another useful addition is direct Job logs access. You can open logs for Pods created by a Volcano Job without leaving the Job detail page. The logs viewer supports both single-Pod and all-Pods views, along with container selection and common log controls such as line count, previous logs, timestamps, and follow. Queues: scheduling capacity and resource context The Queue view provides much more than a small set of top-level fields. It helps you understand how resources are being allocated and constrained by surfacing capacity, allocated resources, deserved and guaranteed resources, reservation details, child queues, and more. This makes the Queue page much more useful when trying to understand how resources are being shared and limited across queues. PodGroups: gang scheduling state and blockers PodGroups are central to understanding gang scheduling in Volcano, and the plugin makes that state easier to inspect. The PodGroup view highlights progress, conditions, minimum resource requirements, and more. This also gives you a clearer picture of whether a workload is blocked because it has not yet met the scheduling conditions required to run as a group. Map view: jobs, queues, PodGroups, and pods in one place The map view shows how Volcano resources are connected. Instead of inspecting each resource separately, you can see how Jobs, PodGroups, Queues, and Pods relate to one another. This is especially useful when a workload is pending or not progressing as expected. The map can show the Job, its related PodGroup, the Pods created for the workload, and the Queue context around it. Warning and error states also make it easier to spot resources that need attention. Why use this alongside CLI tools The plugin is not trying to replace kubectl or the Volcano CLI. Those remain important for automation, scripting, and raw object inspection. What the plugin improves is the interactive troubleshooting experience: discovering related resources more quickly, understanding structured detail pages, and moving from scheduling state to runtime output without switching tools constantly. What’s next This work brings the main Volcano workflow into Headlamp, including Jobs, Queues, PodGroups, and the map view. Possible future work includes Prometheus integration, richer scheduling insights, and more workflow-oriented visibility across Volcano workloads. Try it and share feedback To try the plugin: Install Headlamp. Open the Plugin Catalog from the Headlamp UI. Search for Volcano. Install the Volcano plugin. Connect Headlamp to a Kubernetes cluster where Volcano is already installed. If you have ideas, feature requests, or bug reports, open an issue in the Headlamp plugins repository . Feedback from real Volcano users will help shape what comes next.
Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive data or installing remote access software. [...]
Notion is "going all in on using agents to run your inbox."
A real planner for Google Tasks Discussion | Link
It took 20 years, but the Finance app arrives just in time to be packed full of AI.
Misc Changes Restore canary version 16.3.0-canary.66 after v16.3.0-preview.4 preview release Fix local fonts in statically prerendered ImageResponse metadata route: #95121 docs(root-params): generateStaticParams section and CC requirement: #95073 Surface an error for blocking routes under the Navigation Inspector: #95139 Suppress prefetch={true} warning when route opts out via instant = false: #95099 skill(cc-adoption): recommend next-dev-loop and add build-only path: #95122 docs: server actions guide x-refs: #95143 [turbopack] Create ServiceWorkerChunkingContextOptions in next-core : #94920 instant(): Only render shell, unless prefetch prop is set: #95150 [turbopack] Create ServiceWorkerEntryModule and service_worker_chunk_filename : #94921 [turbopack] Discover ServiceWorkerEntryModule s in next-api and compile + serve those service workers: #94922 [cd] Allow forcing a release without new commits: #95136 docs: clarify /_not-found failures and attribute reads under Cache Components: #95163 [PP] Reveal after ShellRuntime when simulating a Shell Prefetch in dev: #95149 Replicate production prefetch shells for instant navigations in dev: #95067 docs: expand io reference: #95147 test: Remove unnecessary dynamic timestamp from instant-validation root layouts: #95105 [next-dev-loop] Fix some papercuts: #95153 Gate the dev Cold cache badge behind an experimental flag: #95169 Credits Huge thanks to @unstubbable , @icyJoseph , @acdlite , @aurorascharff , @sampoder , @eps1lon , @lubieowoce , and @gaearon for helping!
Microsoft has quietly extended its free Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, allowing enrolled devices to continue receiving security updates until October 12, 2027. [...]