News

Open Source Daily Briefing

Ubuntu 26.04 LTS launches tomorrow with Rust coreutils and GNOME 50, Git 2.54 ships a new 'git history' command, Meta breaks with open-weight tradition by shipping Muse Spark as proprietary, and more.

A mix of milestone releases, a philosophical rupture at Meta, and the open source security community grappling with AI-generated noise. Here’s what matters today.

Ubuntu 26.04 LTS “Resolute Raccoon” ships tomorrow

The next long-term support release of Ubuntu arrives April 23, and it’s one of the most architecturally significant LTS releases in years. GNOME 50 goes Wayland-only (XWayland stays for legacy apps), Rust-based coreutils replace the traditional GNU versions for core file operations, systemd 259 makes cgroup v2 mandatory, and TPM-backed full disk encryption is available out of the box. The kernel is Linux 7.0, Dracut replaces initramfs-tools as the default initramfs generator, and there’s an optional x86-64-v3 package archive for newer hardware. The codename was chosen by Steve Langasek, a longtime Debian and Ubuntu release manager who passed away in early 2025 — a detail that gives this release an emotional resonance beyond the technical. With support through 2031 (and 2036 via Ubuntu Pro), this is the foundation millions of servers and desktops will run on for the rest of the decade. Landing the same week as the delayed Fedora 44, it’s a big week for Linux distributions.

Git 2.54 ships with a new experimental git history command

Released April 20 with contributions from 137 developers (66 first-timers), Git 2.54 introduces git history, an experimental command that lets you reword commit messages or split commits without a full interactive rebase. It’s a small but meaningful UX improvement for one of the most common Git pain points. Beyond the headline feature, config-based hooks now allow hook definitions in configuration files rather than just the .git/hooks directory — simplifying shared hook management across teams. The object database backend is now pluggable, geometric repacking becomes the default maintenance strategy, and gitweb gets a mobile-friendly layout. For a tool as foundational as Git, every release is infrastructure news, and this one has more user-facing improvements than most.

Meta ships Muse Spark as fully proprietary — a break with the Llama open-weight tradition

If you missed this earlier in the month, it deserves attention. On April 8, Meta unveiled Muse Spark — its first model from the new Superintelligence Labs division under Alexandr Wang — and it’s entirely proprietary. No open weights, no download, API-only access through a private partner preview. This is a sharp departure from the Llama playbook that made Meta the de facto champion of open-weight AI. The stated rationale: protecting architectural innovations from competitors, particularly Chinese labs that Meta alleges used Llama weights to accelerate their own models. Meta says future models may still be open-sourced, but promises aren’t releases. The developer community reaction has been predictably skeptical — when the company that normalized “open-weight frontier models” goes proprietary, it shifts the Overton window for everyone else. Combined with Cal.com going closed-source (covered April 20), April 2026 is shaping up as a month where the open-source movement lost ground on two fronts simultaneously.

Eclipse Foundation’s OCX 2026 opens in Brussels with AI, automotive, and compliance tracks

The Eclipse Foundation’s Open Community Experience kicked off yesterday in Brussels and runs through April 23 at The EGG conference centre, bringing together over 600 open source contributors across five collocated tracks: tooling (IDEs, AI-powered dev assistants, modeling), automotive, AI, compliance, and research. The compliance track is particularly timely given the EU Cyber Resilience Act’s looming deadlines and the ongoing conversation about how open source projects handle regulatory obligations they never signed up for. Eclipse has quietly built itself into the governance hub for European open source, and OCX is where that role becomes most visible.

OpenSSF launches survey on AI-generated vulnerability report “slop” impacting maintainers

The OpenSSF’s April newsletter, published yesterday, announced that the Vulnerability Disclosures Working Group is formally surveying open source projects about the impact of AI-generated low-quality vulnerability reports — what the community has taken to calling “AI slop.” The survey runs through May 31 and aims to quantify what maintainers have been complaining about anecdotally: a flood of AI-agent-filed bug reports that are technically formatted correctly but substantively wrong, creating a triage burden that amounts to what Linux Foundation ED Jim Zemlin called “a DDoS attack of AI slop” at KubeCon. The survey follows the $12.5M joint investment from AWS, Anthropic, Google, Microsoft, and OpenAI announced in March to help maintainers keep pace with AI-discovered vulnerabilities. Also in the newsletter: Gemara, the OpenSSF’s automated GRC framework, hit v1.0.0 — stabilizing its control and evaluation schemas for teams building compliance automation.

Update: Fedora 44 go/no-go meetings happening today — April 28 target still holds

As covered on April 20, Fedora 44 has been delayed twice from its original April 14 target. Today and tomorrow (April 22-23), the community holds its blocker review and go/no-go meetings at 1900 UTC to assess whether the remaining issues — KDE setup bugs, NVIDIA driver problems, GRUB issues, and systemd regressions — are resolved enough to ship on April 28. With Ubuntu 26.04 LTS arriving tomorrow, Fedora’s window to grab attention is narrowing. Both releases ship GNOME 50 and Linux kernel updates, so the comparison will be immediate and direct.