News

Open Source Daily Briefing

EU Tech Sovereignty Package commits €2B to open source strategy, OpenCV 5.0 ships with rewritten DNN engine, BSA fights France's mandatory open-source licensing push, and more.

The European Commission put open source at the center of its digital sovereignty agenda with a €2 billion commitment, OpenCV landed its biggest release in years, and the software industry lobby clashed with France over mandatory open-source licensing. Here’s what matters.

EU Tech Sovereignty Package makes open source a pillar of European digital policy — commits €2B over seven years

On June 3, the European Commission published its European Technological Sovereignty Package, and for the first time, open source sits at the structural center of EU digital policymaking. The package bundles a full Open Source Strategy alongside the Cloud and AI Development Act (CADA) and Chips Act 2.0, explicitly framing the EU’s €264 billion annual IT spend on largely proprietary software as a strategic vulnerability rather than a mere market inefficiency. Concrete commitments include €2 billion over seven years for open-source accelerators, the Open Internet Stack, stewardship support, and skills programs; a target of 30 million active users of open-source collaboration tools by 2030; and an open-source mandate for the EU Digital Identity Wallet. The FSFE welcomed the recognition of “Public Money? Public Code!” but warned the strategy lacks binding milestones and secure funding. OpenForum Europe’s analysis was sharper: the €2 billion envelope, while welcome, is spread thin across too many activities and may not adequately fund the core maintenance challenge. Still, the political signal is unmistakable — the EU is treating open source as critical infrastructure, not a procurement preference.

OpenCV 5.0 ships with rewritten DNN engine, built-in LLM and VLM support

OpenCV 5.0 landed on June 6 as the most significant release of the open-source computer vision library in years. The headline is a completely rewritten deep neural network engine that pushes ONNX operator coverage from roughly 22% in the 4.x series to over 80%, with native support for running large language models and vision-language models directly within OpenCV — no external inference framework required. Other major additions include a new hardware abstraction layer with tuned paths for Intel IPP, Arm KleidiCV, Qualcomm FastCV, and RISC-V Vector extensions; cv::Mat finally supporting 0D and 1D arrays; NumPy 2.x integration; and up to 2x performance improvements on mathematical workloads. OpenCV is one of those foundational libraries that quietly underpins enormous amounts of production computer vision, from robotics to medical imaging to autonomous vehicles. The 5.0 release repositions it from “classical CV library that can also run some neural nets” to a first-class inference platform — a direct response to the reality that most computer vision pipelines now have a deep learning model at their core.

BSA lashes out at France’s mandatory open-source licensing proposal

The Business Software Alliance sent a pointed response to a French government consultation (which closed June 5) proposing mandatory open-source licensing as a criterion for digital sovereignty in public procurement. BSA’s Thomas Boué argued that such requirements “raise costs, reduce access to best-in-class security solutions, and risk conflicting with the EU’s international trade commitments.” The lobbying effort is part of a broader pushback from proprietary software vendors against France’s aggressive sovereignty agenda, which includes DINUM’s directive for all government ministries to produce plans eliminating non-European digital dependencies by autumn 2026. The timing is notable: BSA is fighting France’s national mandate at the same moment the European Commission is embedding open source into its own sovereignty strategy at the EU level. The tension between the EU’s open-source-friendly posture and industry pushback at the national level will be one of the defining policy battles of the next two years.

Git 2.54 released with experimental git history command for safer history rewriting

The open-source Git project shipped version 2.54 with contributions from 137 developers (66 of them new). The standout feature is git history, an experimental command that provides a more approachable way to rewrite repository history than the existing git filter-branch or git rebase -i workflows. It currently ships with two subcommands: git history reword for fixing commit messages (and automatically rewriting everything downstream) and git history split for breaking a commit into pieces using the same hunk picker from git add -p. History rewriting has always been one of Git’s most powerful but most hazardous capabilities — tools like BFG Repo-Cleaner and git-filter-repo exist precisely because the built-in options are so footgun-prone. Having a first-party, safer interface for common operations is a meaningful quality-of-life improvement for the millions of developers who use Git daily.

OpenSSF reports quarter of growth: Ambassador Program launches, Security Slam completes, AI security guide published

The OpenSSF Community Day North America recap (published June 5) captures a productive stretch for the foundation. The inaugural Ambassador Program debuted with 13 community leaders tasked with spreading security best practices across the ecosystem. Security Slam 2026 wrapped successfully, resulting in dozens of open-source projects reaching the OSPS Baseline and publishing their first formal threat models. And in collaboration with CNCF, OpenSSF released Securing Open Source in the Age of AI, a practical guide for maintainers dealing with AI-generated contributions and using AI to improve security. Meanwhile, the foundation added five new members and the new OSS-CRS project joined its sandbox. With the European Open Source Security Forum happening today in Brussels, OpenSSF is sustaining momentum on both sides of the Atlantic.