Today’s GitHub trending picks: agent skills, Claude quickstarts, a Home Assistant MCP server, Tokio’s Topcoat, plus Dependabot and Copilot updates.
From 2 Dec 2026 GitHub Actions blocks pull_request_target by default in public repos. Find affected workflows and migrate them safely, step by step.
Chrome 158 beta adds ::highlight(*), :playing and :paused media pseudo-classes, object-fit for embedded SVG and an install element. Hands-on examples.
Hugging Face Transformers 5.22 adds Mistral Large 4, LoRA training on FP8 weights and a security patch. Learn the FP8 KV cache and how to upgrade safely.
Redux Toolkit 2.14 adds RTK Query cache entry selectors, a DevTools action sanitizer, removeMany({ where }) and faster dispatch. Examples for React apps.
Node.js 27.0.0-alpha.0.0.0 brings V8 15.6, new heap defaults, OpenSSL 4.1 and npm 12.1. Learn what may break and how to test your app on it safely.
TypeScript 7.1 Beta brings import attributes in ambient modules, source phase imports, a stable es2026 target and a new compiler API. Try each one here.
Symfony 8.2 adds a native HTTP recorder: record real API calls once into HAR files and replay them in tests. Setup, modes, and secret redaction.
pandas 3.1 adds DataFrame.select(), boolean-mask filter(), and parallel read_csv(). Hands-on examples plus the deprecations to fix before upgrading.
Laravel 12.72.0 shipped on 10 Nov 2026 with a fix for a temporary signed URL expiration bypass. Here’s what changed, how to upgrade and how to test it.
