Every major browser engine is converging on JPEG XL. Keep your fallbacks anyway
Safari already decodes JPEG XL and Firefox targets default support in version 157, but Firefox's SDR-only HDR handling, no Chrome milestone, and near-parity with lossless WebP keep fallbacks necessary.
MCP’s new roadmap names the right gaps, but the fixes are still proposals
Stateless scaling and several authorization foundations shipped in July. Workload identity, progressive discovery and server-pushed events have no delivery dates, and the groups responsible for identity and discovery are still forming.
The Rust arrayref attack turned a routine Cargo build into code execution
A poisoned dependency could execute code during compilation, so Rust teams should inspect every lockfile and Cargo cache touched on August 20.
Apple's EU per-install fee is dead. A 5 percent sales commission replaces it.
Apple's October terms replace the per-install fee with a 5 percent revenue commission, retain monthly reporting, and lock payment choices for 12 months.
Stripe’s reported OpenRouter deal is a reason to audit gateway costs and lock-in
Neither company has confirmed the reported $7B deal, and the price could still change. But the two already share billing infrastructure, which gives OpenRouter users reason to audit their routing costs, data policies, and exit path.
Grok 4.6 arrives with long-running coding agents in focus
xAI positions Grok 4.6 as a frontier competitor with $2/$6 token pricing. Repository-level tests will show whether that translates into cheaper completed tasks.
Claude Code is automating approvals because humans stopped paying attention
Claude Code will default to auto mode as Anthropic argues that automated command review is safer than permission prompts developers stop reading.
