Release log /
Monday, 26 October 2026
4 items across 4 nodes. Each one links its primary source.
-
01
Docker Desktop release history
Docker Desktop 4.97.0
Fixes CVE-2026-114409: Docker Desktop wrote third-party API keys and OAuth access tokens in cleartext to its logs and diagnostics bundles. The release cleans the host logs, but bundles already shared from 4.96.x or earlier are yours to delete or sanitize. By our count of the notes it is the 11th Docker Desktop release this year with a CVE fix, 14 CVE ids across 51 releases since 1 January.
-
02
Go release history
Go's eMudhra post
Go 1.27.3 and 1.26.10 on 19 October were Go's first URGENT track security release, shipped about seven and a half hours after the team was told. Their notes said "security fixes to the crypto/x509 package" and nothing else. The same revoked intermediates reached Docker Desktop 4.96.1 to 4.96.3 on 21 and 22 October and Rocket 0.5.2 on 23 October.
-
03
Wrangler release history
Wrangler 4.153.0
A minor that changes how existing
--secrets-filedotenv files are read:$VARand${VAR}now expand, so an unset reference becomes empty andPASSWORD=pa$wordturns intopa. Escape the dollar sign or switch to a JSON secrets file. It also moves to Undici 7.30.1 for GHSA-xjj6-f33q-929c. -
04
Transformers release history
Transformers v5.21
Six new model entries, which makes 18 in the four minors since v5.18.0 on 30 September (4, 1, 7 and 6). The notes carry a "Breaking changes" heading. Its one item is an import fix for which "no user action is needed".