With PyCharm 2026.1, users can leverage a comprehensive set of editing and formatting tools for modern web languages, including basic React support with code completion and navigation.
"The pipeline had a single boolean return value that meant both 'no scanners are configured' and 'all scanners failed to run,'... So when scanners failed under load, Open VSX treated it as 'nothing to scan for' and waved the extension right through."
New overloads on TarFile.CreateFromDirectory accept a TarEntryFormat parameter, giving direct control over the archive format. Previously, CreateFromDirectory produced Pax archives. The new overloads support all four tar formats—Pax, Ustar, GNU, and V7—for compatibility with specific tools and environments.
It allows developers to test code, review pull requests, and more, but also exposes them to attacks via repository-defined configuration files, Orca says. "Codespaces is essentially VS Code running in the cloud, backed by Ubuntu containers, with built-in GitHub authentication and repository integration. This means any VS Code feature that touches execution, secrets, or extensions can potentially be abused when attackers control the repository content," the cybersecurity firm notes.
Koi Security said the extensions are functional and work as expected, but they also capture every file being opened and every source code modification to servers located in China without users' knowledge or consent. The campaign has been codenamed MaliciousCorgi. "Both contain identical malicious code -- the same spyware infrastructure running under different publisher names," security researcher Tuval Admoni said.
After streamlining our development and delivery process, we'll ship a new Stable release every week. Endgame will now be folded into our weekly activities. This acceleration is enabled by AI automation, including a one-click experience for creating test plans from feature request issues, reducing manual steps previously required.
The reason for this is Snap - a Linux application packaging format - creates a local Trash folder for each VS Code version, one that's separate from the system-managed Trash, according to a VS Code bug report dating back to November 11, 2024. Not only that, but Snap keeps older versions of VS Code after updates, potentially multiplying the number of local Trash folders and the trashed-but-not-deleted files therein. Emptying the system Trash folder doesn't affect the local instances.
Creating your theme is the fun part. After you're done, the next step is to publish your theme so you - and others - can enjoy your creation! You'd think that publishing a VS Code extension is an easy process, but it's not. (Maybe I'm used to the ease of publishing npm packages and take registries for granted.) Anyway, you have to publish your theme in two places: Visual Studio Marketplace for VS Code users Open VSX for other text editors
Open VSX is operated by the Eclipse Foundation, and provides extensions unencumbered by the restriction Microsoft places on the VS Code marketplace that "alternative products including those built on a fork of the Code-OSS Repository, are not permitted to access the Visual Studio Marketplace." Microsoft cites security and compatibility as reasons, and there is no business case to "run a full-scale global service for everyone to use."
One big change for 2026 is a move away from the Mono runtime for Android .NET applications to CoreCLR. The modern .NET platform evolved from the open source Mono project, and even though it now has its own runtime in CoreCLR, it has used the older runtime as part of its WebAssembly (Wasm) and Android implementations.
