# dev-news log, Thursday, 29 October 2026

Source: https://dev-news.anonyfox.com/log/2026-10-29/

**Elixir v1.20.5** {elixir} (2026-10-29). The first stable Elixir releases in 62 days landed on three lines within 39 minutes. v1.20.5, v1.19.7 and v1.18.6 all fix CVE-2026-109821 (port limits in `URI.parse`) and CVE-2026-115274 (integers beyond float64 range in JSON decoding). Only v1.20.5 also carries CVE-2026-97209, a checksum check for `mix deps.partition` on multi-user systems. The 1.17 line got no release; its last one, v1.17.3, is from 18 September 2024. [notes](https://github.com/elixir-lang/elixir/releases/tag/v1.20.5) · [v1.19.7](https://github.com/elixir-lang/elixir/releases/tag/v1.19.7) · [v1.18.6](https://github.com/elixir-lang/elixir/releases/tag/v1.18.6)

**Transformers v5.22.0** {transformers} (2026-10-29). One new model, Mistral Large 4, three days after v5.21. That makes 19 new model entries in the five minors since v5.18.0 on 30 September. The "Breaking changes" section lists a single item, flagged with a siren emoji: the EP logic moved into its own file (#49679). v5.21.1 shipped the same morning. [notes](https://github.com/huggingface/transformers/releases/tag/v5.22.0)