open source – Noise

Introducing tsrs: a Port of TypeScript to Rust

Boshen Chen — Tue, 20 Oct 2026 13:00:00 +0000

Cloudflare is collaborating on tsrs, a Rust port of TypeScript that is up to 8x faster and uses 70% less memory.

DataJunction as Netflix’s answer to the missing piece of the modern data stack

Netflix Technology Blog — Wed, 14 Oct 2026 19:59:08 +0000

by Olek Gorajek, Samuel Redai, Yian ShangIntroOur Netflix journey from data to dashboards, particularly within the space of the experimentation platform, always presented a unique set of challenges. This blog post aims to illuminate these hurdles and e...

Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash

Michelle Chen — Fri, 09 Oct 2026 18:27:34 +0000

We are expanding the Clef decision model family with Clef-omni, natively processing audio, video, images, and text in a single pipeline. We’ve also lowered Clef-flash pricing and boosted Clef inference speeds by up to 2.0x.

Introducing Clef: our open-source decision models, and new RL fine-tuning platform

Michelle Chen — Thu, 01 Oct 2026 15:34:02 +0000

We are introducing Clef and Clef-flash, open-source decision models hosted on Workers AI for high-speed classification and agentic workflows. Also launching: a new reinforcement learning platform that allows developers to fine-tune decision models using their own data.

One year later: Sovereign AI and the fight for choice

Carly Ramsey — Thu, 01 Oct 2026 13:04:19 +0000

AI sovereignty is not a zero-sum game, but many governments now believe it is. Cloudflare's answer: more local open-source models, model-agnostic security tools, and a commitment to giving nations genuine choice.

Cloudflare OS: your company’s agent workspace, managed for you

Phillip Jones — Thu, 01 Oct 2026 13:00:00 +0000

Cloudflare OS gives everyone in your organization an agent workspace that knows how your company works and connects to its data and systems. We’re opening the waitlist for fully managed deployments that you’ll be able to launch in a few clicks.

Next.js applications, powered by Vite: introducing Vinext 1.0

James Anderson — Mon, 28 Sep 2026 14:51:57 +0000

Vinext 1.0 graduates from an AI experiment to a production-ready framework, letting developers run Next.js apps on Vite. This release brings advanced cache warming, broader compatibility, and an automated testing pipeline.

Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen

Guy Bedford — Mon, 28 Sep 2026 13:00:00 +0000

With the new experimental support for the Emscripten target in Rust Workers, many previously unsupported Rust libraries and applications can now be built and deployed directly to Cloudflare’s global Workers platform, including upcoming support for Tokio async.

EmDash 1.0: the stable CMS with a secure plugin registry

Scott Buscemi — Mon, 28 Sep 2026 13:00:00 +0000

EmDash 1.0 is a stable, open source CMS built for Astro, with agent-friendly workflows, secure sandboxed plugins, and a decentralized registry that keeps publishers in control.

Four months of VoidZero at Cloudflare: making the open-source JavaScript toolchain faster for all humans and agents

Evan You — Mon, 28 Sep 2026 13:00:00 +0000

Since joining Cloudflare, VoidZero has delivered more than 80 releases that drastically speed up JavaScript compilation, linting, and testing. From a 10x faster React compiler to Vite+ 1.0, here’s how we are building faster tools for developers and AI agents.

Saving another 100TB of RAM with math (and Rust)

Kevin Guthrie — Fri, 18 Sep 2026 17:23:58 +0000

Cloudflare's global network is immense but not limitless. As we look for small ways to trim our resource usage, we sometimes get lucky and we can cut significantly more. Here’s how we reduced one of our Pingora-based service's RAM usage with statistics.

AIs Compress Exploit Timeline

Bruce Schneier — Thu, 10 Sep 2026 10:40:35 +0000

Give an AI agent a mere rumor of an exploit, and it’s enough for them to find it.

What’s worse, I found I could use my own agents to find the exploit just by knowing roughly what it was about and so could have been exploiting it well before the public patch was available! Given that just the rumour of a security issue seems enough to give attackers enough info to find new exploits, we’re going to need to change the way we deal with security responses in open source.

Simon Willison comments:

Anil points out that this rate of discovery appears incompatible with existing open source embargo practices for new issues. If an issue can become an exploit this fast, we need to figure out new processes for keeping our communities safe...

The state of AI for security: Measuring what matters most for building trust

Anshumali Shrivastava — Wed, 09 Sep 2026 19:09:14 +0000

Security teams are starting to actively use AI for security work, including vulnerability triage, penetration testing, threat modeling, incident response, and code review. The promise is speed, but a security tool that moves fast and raises too many false alarms doesn’t save time. Engineers spend time on false alarms, on-call is noisier, and teams distrust […]

How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility

Logan Gatlin — Wed, 09 Sep 2026 13:00:00 +0000

Workers now enables Node.js compatibility by default, supports applications up to 64 mebibytes, and adds a URL-based module registry with import.meta, lazy compilation, shared code caches, and clearer errors.

AWS Weekly Roundup: EC2 application status checks, IAM role manager, OpenAI Daybreak on Bedrock, and more (August 17, 2026)

Channy Yun (윤석찬) — Mon, 17 Aug 2026 16:02:36 +0000

Last week, the OpenSearch and Valkey teams visited Seoul to meet open source developers and contributors in the Open Source Summit Korea 2026 and MCP DevSummit Seoul 2026. At the four-day event, community leaders and users of open source projects and emerging agent AI gathered to share knowledge, collaborate on solutions, and push the projects […]

Python Now Has a Post-Quantum Encryption Library

Bruce Schneier — Mon, 10 Aug 2026 11:02:26 +0000

This is good: Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from the Sovereign Tech Agency, we implemented support for ML-KEM, the NIST-standard key-establishment primitive, and ML-DSA, the NIST-sta...

Announcing Cloudflare Ambassadors, Community Engineers, and another $1M in open-source funding

Kristian Freeman — Fri, 07 Aug 2026 13:00:00 +0000

We are launching updated community programs, including Cloudflare Ambassadors and Community Engineers, backed by $1M in open-source funding. Learn how we are supporting maintainers and scaling our developer community.

Cloudflare OS: an open platform for agents, apps, and work

Phillip Jones — Wed, 05 Aug 2026 13:00:00 +0000

Cloudflare OS is an open-source platform that lets everyone in your company build apps, automate work, and safely access internal systems, shaped around what your organization knows and how it operates

How we built a software factory to drive Astro’s GitHub issue count to zero

Matthew Phillips — Tue, 04 Aug 2026 13:00:00 +0000

By replacing manual issue verification with isolated AI subagents running in GitHub Actions, the Astro maintainers reduced open issue count by 85%. This post explores the architecture behind automated bug reproduction, patch verification, and preview releases.

Don’t stop early: Case-folding source code at memory speed

Alexander Neubeck — Fri, 31 Jul 2026 16:00:00 +0000

How a branch-free loop and byte-space arithmetic let GitHub case-fold every byte of code search at >45 GiB/s on a single core.

The post Don’t stop early: Case-folding source code at memory speed appeared first on The GitHub Blog.