1
GitLab发布紧急安全更新 修复高危XSS与API拒绝服务漏洞
GitLab紧急修复四项高危漏洞，XSS与API拒绝服务风险需立即升级
2
Faster physics in Python
OpenAI开源基于MuJoCo的高性能Python机器人模拟库，加速你的研究开发。
We’re open-sourcing a high-performance Python library for robotic simulation using the MuJoCo engine, developed over our past year of robotics researc…
3
Show HN: LibreOffice-rs – I built a pure-Rust LibreOffice using autoresearch
纯Rust、零依赖实现LibreOffice核心功能，文档读写转换渲染速度提升100倍，支持多种格式
Hey HN, I built libreoffice-rs: a pure-Rust, std-only library + CLI for reading, writing, converting, and rendering office documents — with *zero* Lib…
4
Roboschool
OpenAI开源机器人模拟软件，与Gym无缝集成，快速上手强化学习研究。
We are releasing Roboschool: open-source software for robot simulation, integrated with OpenAI Gym.
5
The Zulip Foundation
知名开源团队聊天工具Zulip宣布转型为独立非营利基金会，创始人加入Anthropic，确保项目长期稳定发展。
Article URL: https://blog.zulip.com/2026/05/15/announcing-zulip-foundation/ Comments URL: https://news.ycombinator.com/item?id=48152168 Points: 281 # …
6
Radicle: Sovereign {code forge} built on Git
去中心化的Git代码协作平台，赋予开发者完全的数据主权。
Article URL: https://radicle.dev/ Comments URL: https://news.ycombinator.com/item?id=48147603 Points: 247 # Comments: 87
7
Stera: Open-Source Infra That Turns iPhones into Spatial Data for World Models
开源项目Stera将普通iPhone升级为研究级空间数据采集系统，并开源10M帧数据集，为具身AI世界模型提供高质量训练数据。
We are releasing Project Stera - an open source, end-to-end pipeline that turns a commodity iPhone into a research-grade capture system for embodied A…
8
Unlock New Possibilities with Hybrid Rendering
Astro 2.0 混合渲染，为每个页面自由切换静态或服务器渲染，兼得性能与灵活性。
New in Astro 2.0: Hybrid rendering unlocks the best of both worlds—choose between the performance of static pages or the full flexibility of server re…
9
Introducing Nuxt 3 Beta
历时一年多开发，Nuxt 3 Beta 正式发布，集成 Vue 3、Vite 及全新服务器引擎，开启全栈能力。
468 days after the first commit, the Nuxt 3 beta has finally arrived. Discover what's inside and what to expect from it. Yes, it includes Vue 3 and Vi…
10
Changes to WebAssembly targets and handling undefined symbols
Rust WebAssembly目标即将移除--allow-undefined标志，现有项目可能受影响，需及时了解变更细节与应对策略。
Rust's WebAssembly targets are soon going to experience a change which has a risk of breaking existing projects, and this post is intended to notify u…
11
Node.js 19 is now available!
Node.js 19 正式发布，亮点包括 V8 引擎更新至 10.7、HTTP(s)/1.1 KeepAlive 默认开启，以及实验性 node --watch 功能。
12
pyforce-1.0.0: Python Framework for data-driven model Order Reduction of multi-physiCs problEms
pyforce-1.0.0 发布，专为多物理问题数据驱动降阶设计的Python框架
arXiv:2605.18082v1 Announce Type: new Abstract: pyforce is a Python package implementing Data-Driven Reduced Order Modelling techniques for applicatio…
13
Temporal Decay of Co-Citation Predictability: A 20-Year Statute Retrieval Benchmark from 396M Ukrainian Court Citations
基于3.96亿乌克兰法院引用，揭示20年间共引预测能力随时间衰减的规律。
arXiv:2605.17639v1 Announce Type: new Abstract: Co-citation structure is widely assumed to provide stable retrieval signal in legal information system…
14
Single-Sample Black-Box Membership Inference Attack against Vision-Language Models via Cross-modal Semantic Alignment
针对视觉语言模型的单样本黑盒成员推理攻击，利用跨模态语义对齐检测模型记忆风险，为数据隐私安全提供新评估方法。
arXiv:2605.17341v1 Announce Type: new Abstract: Vision-Language Models (VLMs) have achieved remarkable success, yet their reliance on massive datasets…
15
Show HN: Resilient, A composable async resilience toolkit for rust
为Rust应用提供限流、熔断、超时等组合弹性策略，轻松实现异步容错处理。
Resilient is an async toolkit for rust that handles fault tolerance for your rust Apps that often call other services or database queries frequently. …
16
US cyber agency CISA exposed reams of passwords and cloud keys to the open web
安全研究员发现CISA承包商员工竟在GitHub上公开了明文凭证，包括云密钥和访问令牌，差点引发重大数据泄露。
The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repository, per a report by independent journal…
17
Show HN: Codeep – Open-source terminal AI coding agent, multi-provider
开源终端AI编码代理Codeep，支持GLM、GPT、Claude、DeepSeek等多模型提供商，升级2.0版本。
Article URL: https://github.com/VladoIvankovic/Codeep Comments URL: https://news.ycombinator.com/item?id=48196569 Points: 1 # Comments: 0
18
Show HN: Llama-dash – local LLM operators dashboard and proxy
本地LLM运维仪表板，集成路由、日志、监控，轻松管理多个模型上游。
Article URL: https://github.com/ndom91/llama-dash Comments URL: https://news.ycombinator.com/item?id=48196202 Points: 1 # Comments: 0
19
Echoform – unlimited LLM memory via a single 64 KB hypervector
单64KB超向量承载无限LLM记忆，支持离线可验证与GDPR遗忘，AI代理记忆的突破性方案。
Article URL: https://github.com/OpenAgentic-Labs/echoform-ghost-memory Comments URL: https://news.ycombinator.com/item?id=48192963 Points: 1 # Comment…
20
Show HN: Sentilis – a folder of Markdown files becomes your bio, blog, store
用Markdown文件夹轻松打造个人主页、博客甚至商城，一个命令行工具搞定多合一发布。
Article URL: https://github.com/sentilis/cli Comments URL: https://news.ycombinator.com/item?id=48195585 Points: 1 # Comments: 0