
The Changelog: Software Development, Open Source · April 29 · 8 min
Bitwarden CLI compromised (News)
0:00 · Warp is now open-source-8:33
transcript
show notes
Bitwarden’s CLI got hit by the Checkmarx supply-chain campaign, TypeScript 7.0 beta lands with the Go-rewritten compiler running ~10x faster than 6.0, and pgBackRest lost its maintainer of thirteen years leaving anyone running production Postgres with a real dependency-trust task this week. We’ve also got Ubuntu 26.04 LTS shipping with TPM-backed full-disk encryption, and Matz dropping Spinel as an AOT path that takes Ruby to native binaries. This week was a good reminder that the tools we depend on are all moving at once. Security, performance, and maintenance aren’t isolated threads.
Changelog++ members save 2 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
- Coder.com – Secure environments where devs and agents work in parallel. Open by design. Secure by default.
Featuring:
links9

