# dev-news log, Friday, 23 October 2026

Source: https://dev-news.anonyfox.com/log/2026-10-23/

**OCaml 5.5.2** {ocaml} (2026-10-23). Six security fixes, OSEC-2026-21 to OSEC-2026-26, covering `Str.string_partial_match`, demarshaling, Windows command quoting and the runtime events library. Also two miscompilation fixes. First release since 5.5.1 on 4 September. [notes](https://github.com/ocaml/ocaml/releases/tag/5.5.2)

**Rocket 0.5.2** {rocket} (2026-10-23). The first Rocket release in 883 days, since 0.5.1 on 23 May 2024. It is a security release: rustls-webpki 0.103.16 for RUSTSEC-2026-0382 (distrusted intermediates, the eMudhra case) and tokio 1.54.1 for the `Interval` race. Multipart fields without a `Content-Type` no longer get text-decoded. [changelog](https://github.com/rwf2/Rocket/blob/v0.5.2/CHANGELOG.md)

**anthropic 2.2.0 and 2.3.0** {anthropic} (2026-10-23). 2.2.0 adds message threads and usage and cost reports by dimension, marking the older reports legacy. 2.3.0 adds Claude Tag endpoints for Enterprise organizations. That makes six stable releases between 20 and 23 October. [2.2.0](https://github.com/anthropics/anthropic-sdk-python/releases/tag/v2.2.0) · [2.3.0](https://github.com/anthropics/anthropic-sdk-python/releases/tag/v2.3.0)

**Zed v1.25.3** {zed} (2026-10-23). The notes say dependencies were updated "to address recent software ecosystem vulnerabilities". They don't say which ones. [notes](https://github.com/zed-industries/zed/releases/tag/v1.25.3)