This Week in Package Management: 25 July 2026
15 hours ago
- RubyGems and Bundler 4.0.17 fixes spec name validation, glob escaping, and Windows path-handling bugs.
- uv 0.11.31/32 adds workspace path references, malware check settings, and canonical lockfile enforcement.
- opam 2.6.0-alpha1 improves shell env hook, reduces syscalls for updates, and cuts disk usage.
- pnpm 11.11-14 introduces doctor diagnosis, access commands, and 30% lower memory usage.
- mise 2026.7.11-13 adds safe mode, structured tool definitions, and replaces external tools with built-in implementations.
- Security: RubyGems.org revokes legacy API keys due to CDN caching bug; PyPI rejects uploads to releases older than 14 days.
- EuroPython 2026 Packaging Summit covers CRA obligations, Trusted Publishing, and binary dependencies.