New: the first 100 founders get $120 in AI credits as Founding Members.Learn more
OSS ReleasesSep 29, 2026·2 min read·By StartupCorners

OSS Releases Week of Sept 29 2026: Frameworks, AI, and Runtime

This week's stable releases bring ML-KEM/ML-DSA cryptography to Cloudflare Workers, claude-sonnet-5-5 across Anthropic's SDK family, and a wave of correctness fixes in DuckDB and Remix.

Frameworks

  • remix-run/remix ui v0.11.0, Adds data-rmx-preserve-attrs to keep client-owned attributes (class, data-theme, etc.) stable across frame reloads, fixes hash-only navigations, and sends X-Remix-Frame / X-Remix-Target headers for consistent frame identification. Release
  • remix-run/remix ui-hmr v0.1.1, Preserves hoisted component function declarations that appear after the render return, preventing broken event handler references in transformed browser components. Release
  • remix-run/remix static-middleware v0.4.17, Directory listings now omit folder size totals, limiting stat work to immediate entries only. Release

Runtime

  • cloudflare/workerd v1.20260929.1, Adds ML-KEM and ML-DSA WebCrypto support, defers in-memory alarm task cancellation, and removes a batch of rolled-out autogates. Release
  • cloudflare/workerd v1.20260928.1, Removes the C++ memory-cache implementation and the MEMORY_CACHE_V2 autogate. Release
  • cloudflare/workerd v1.20260926.1, Fixes TCP connect exception handling, settles TransformStream cancel correctly from the writable side, and updates Workers AI model reasoning types. Release
  • cloudflare/workerd v1.20260925.2, Adds configurable Durable Object retries, same-worker Workflow support, and correct native stream locking on tee. Release
  • vercel/turborepo v2.11.5, Backs off remote artifact requests during outages; the rest of the changes are test-infrastructure refactors. Release

Data

  • duckdb/duckdb v1.5.6, Bugfix release covering a TopN window elimination NULL edge case, UNNEST pushdown correctness, ICU strptime time zone state leaking between rows, LIMIT pushdown through volatile projections with OFFSET, and unified C-API symbol versioning for v1. Release

AI

  • anthropics/anthropic-sdk-typescript sdk v0.129.0, Adds between_tools thinking type, ClientToolUnion for client-executed tools, cache diagnostics GA on Message/MessageCreateParams, incremental tool-call streaming while replies stream, and claude-sonnet-5-5. ⚠ Breaking: the betas param is deprecated on GA models and completions methods. Release
  • anthropics/anthropic-sdk-typescript bedrock-sdk v0.34.0 / vertex-sdk v0.20.0 / foundry-sdk v0.5.0, All three add claude-sonnet-5-5. Bedrock | Vertex | Foundry
  • openai/openai-python v3.20.0, Adds Agents credential and session options, Cyber access programs to Responses, incremental WebSocket text and tool snapshots, and fixes live transcript grouping deadlocks. Release
  • langchain-ai/langchain langchain v1.4.3, Fixes to init_chat_model and create_agent. Release
  • BerriAI/litellm v1.103.0, Fixes reasoning-object translation to chat-completion effort, bounds tool and guardrail index creation by spend-log budgets, and requires admission for delegated OAuth in MCP. Release

Devtools

  • neovim/neovim v0.13.0-dev-1755, Nightly prerelease with ongoing fixes and features tracked in :help news; not a stable release but included for teams on nightly channels. Release

The clearest theme this week is AI surface expansion: claude-sonnet-5-5 landed across every Anthropic SDK deployment target simultaneously, while OpenAI and LiteLLM pushed WebSocket reliability and agent-credential improvements in lockstep. On the infrastructure side, Cloudflare workerd's addition of post-quantum ML-KEM and ML-DSA cryptography signals that standards-body algorithms are moving from spec to production runtime faster than most teams have planned for.

Ready for one link for your startup? Free to start, built from your website in seconds.

Founding Members get $120 in AI credits, a direct line to the team and a vote on the roadmap.

Free to start · No credit card · Work email, so we can read your website