loading
loading
Linux Foundation Newsletter: October 2026 The Linux Foundation | 21 October 2026 Welcome to the October 2026 edition of the Linux Foundation Newsletter Cybersecurity Awareness Month is ending, and LF Education is discounting training for a limited time. You can save 40% on eligible cybersecurity training and certifications, and you can save 35% on other training and certifications. A THRIVE-ONE Annual subscription is 30% off. This month's biggest announcements include a new Platinum Member and two new foundations. AWS became a Platinum Member of the Linux Foundation, after more than a decade of taking part in LF projects. The Linux Foundation launched the BUILD Foundation, which gives organizations that depend on Bazel a formal way to fund the project and help set its direction. The Linux Foundation also launched OpenGrid, which sets shared software architecture and interoperability standards so that power grid planning tools can work together. In addition, FINOS announced that OSERA is now operating, with support from Deutsche Bank, Goldman Sachs, Morgan Stanley, NatWest, and RBC. The first OSERA release includes secure updates for more than 50 widely used Spring and Java libraries. LF Research published nine reports this month. 35 Years of Linux follows the kernel from a hobby project to the software that now runs on 4 billion Android devices, more than 200 million servers, and all 500 of the world's top supercomputers. The 9th annual State of OSPOs study looks at how open source program offices are handling AI governance. The 2026 Open Data Infrastructure Report finds that openly governed data platforms are gaining ground as more organizations run AI workloads. You'll also find a recap of the Linux Foundation Member European Forum in Prague and details on the LF Education Learning Lounge at KubeCon + CloudNativeCon North America. The project news covers agentic AI, finance, energy, networking, security, and embedded systems. >> Read on for even more news, research, and opportunities from across the Linux Foundation. Contents Education Opportunities Cyber Threats Don't Wait. Neither Should You. Cybersecurity Awareness Month is wrapping up, and so are your chances to save big on your next skill. For a limited time, save 40% on eligible cybersecurity training and certifications, 35% on other training and certifications, and 30% on THRIVE-ONE Annual subscription. Whether you're strengthening your security expertise or building skills across Linux, cloud, and DevOps, there's still time to invest in what's next. The clock is ticking. Don't let these savings slip away! LF Event Highlight KubeCon + CloudNativeCon North America is just weeks away! Join the global cloud native community November 9–12 in Salt Lake City, Utah, to explore the open infrastructure powering production AI - everything else you run. Connect with maintainers, engineers, and end users tackling real-world challenges across Kubernetes, AI workloads, GPU scheduling, model serving, agentic AI, platform engineering, security, and more. Explore the schedule and don't miss your chance to connect with #TeamCloudNative! LF Research: 9 new reports! It is difficult to overstate the impact of generative AI on software engineering. In this report, LF Research, Red Hat, Futurewei, OpenSSF, and LF AI & Data investigate how AI tools are impacting open source development workflows, and how maintainers and developers are experiencing this shift. How did a hobby project evolve into the open source engine of global infrastructure? The milestone report by LF Research examines the kernel’s historic evolution and present-day impact. Today, Linux powers 4 billion Android devices, 200M+ servers, and all 500 of the world's top supercomputers. Read the report to explore 35 years of how the kernel has come to touch our day-to-day lives in technological, economic, and very human ways. The 9th annual State of OSPOs and Open Source Management Study by LF Research and TODO Group delivers key insights on the OSPO’s expanding role as organizations reckon with AI governance and agentic workflows. Read the full report to discover actionable strategies for establishing OSPOs, scaling AI governance, and securing long-term open source sustainability. Thanks to our sponsors CNCF and FinOps Foundation for their support of this research! How are AI and digital sovereignty reshaping open source governance in Europe? Marking a research milestone, LF Research and LF Europe have published the 5th annual State of Open Source in Europe, delivering crucial data on navigating these operational mandates. Read the report to discover how open governance drives ROI, mitigates regulatory risk, and secures long-term digital resilience. Thanks to our sponsor NeoNephos for their support of this research project! Is your organization’s data platform built for the AI era? The new 2026 Open Data Infrastructure Report from LF Research and the OpenSearch Software Foundation delivers data on how infrastructure is evolving. The key takeaway is that multi-purpose, openly governed data platforms are gaining rapid ground. Read the report for operational strategies on scaling data platforms securely while avoiding lock-in! What is the reality of enterprise agent adoption, as we approach the last few months of 2026? The new Enterprise Transitions to the Agentic Era report delivers qualitative insights on how open source innovators and practitioners are navigating the shift from cloud-first to agent-first. Download the full report to explore the roadmap for managing tokenomics, setting up governance control layers, and securing long-term digital sovereignty! How are issues in your development workflow impacting engineering performance? As developer friction, technical debt, and administrative overhead continue to hinder output, Dr. Ibrahim Haddad wrote a new roadmap to help enterprises optimize their developers’ experience and performance. Read the report to discover practical frameworks and metrics to build high-performing engineering teams! Ready to move from using open source to building it? Our new Getting Started with Open Source Development guide provides a practical, fundamentals-first path for new contributors. This guide lays out essential ground rules for open source participation. Download the full report to master licenses, contributor workflows, and best practices for landing your first pull request! LF Europe: Community Updates Linux Foundation Member European Forum The Linux Foundation Member European Forum 2026 brought the LF Europe community together in Prague on October 6. The day opened with welcome remarks from Thierry Carrez, General Manager of OIF and LF Europe, and the presentation of the Europe Spotlight Report. Keynotes from Otevřená města and the Netherlands Tax Administration offered candid, practical accounts of stewarding public-sector open source and building an OSPO from the ground up. Breakout sessions covered the issues shaping European open source today, including how companies can contribute upstream responsibly under the EU Cyber Resilience Act, the growing burden of AI-generated contributions on maintainers, and Zephyr’s first decade. Digital sovereignty ran through the afternoon, with a panel on balancing sovereignty with a global open source commons, a session on how the Sylva project supports European cloud and edge infrastructure, and a look at cross-project collaboration through Sovereign Cloud Stack. The program also included an “Ask LF Leadership Anything” session and closed with an attendee reception at Alma Prague, giving members time to continue the conversations over food and drinks. Linux Foundation Projects: Featured news Formations - The Linux Foundation announced that AWS is now a Platinum Member, building on more than a decade of participation across the Linux Foundation ecosystem and strengthening its role in supporting open source. Read the announcement >> - The Linux Foundation launched the BUILD Foundation to provide the leadership and sustained investment needed to tackle the Bazel ecosystem's largest challenges, giving organizations that use Bazel a way to formally join and help direct that investment. Read the announcement >> - The Linux Foundation launched OpenGrid, a new open source initiative to modernize power grid planning and help accelerate energy infrastructure deployment worldwide. The OpenGrid ecosystem establishes the shared software architecture and interoperability standards that allow diverse tools to work together and scale globally. Read the announcement >> - The Linux Foundation appointed payments veteran Michael Hursta as Executive Director of the x402 Foundation. He will lead 50+ member organizations advancing x402, an open standard for internet-native payments across AI agents, applications and APIs. Read the announcement >> Academy Software Foundation (ASWF) - ASWF Virtual Town Halls: Catch Up on Project Updates - The September Virtual Town Halls brought together maintainers and contributors from across the ASWF ecosystem, including OpenEXR, OpenColorIO, OpenRV, xSTUDIO, ACES, and more. Revisit the conversations to learn about project progress, technical developments, and what's ahead. Explore the Virtual Town Halls - Open Source Days 2026: Explore the Highlights - More than 500 in-person attendees gathered in Los Angeles for Open Source Days 2026, featuring presentations on MoonRay, open source production workflows, and cross-industry collaboration. Catch up on the event highlights and discussions shaping the future of open source in film and animation. Read the Recap Agentic AI Foundation (AAIF) - Gates Foundation Joins AAIF: The Gates Foundation became AAIF's first philanthropic member, helping bring the perspectives of underserved communities into the development of open agentic AI standards. - Open source maintainers discuss what agents need next: At AAIF's European maintainer roundtable, contributors from Anthropic, Google, OpenAI, and Solo.io discussed agent identity, shared standards, and how to measure the cost of completing a task. Read the recap >> - AAIF leadership and new Sandbox phase in the press: The Stack interviewed Executive Director Mazin Gilbert on keeping open source pace with agent adoption, noting AAIF has added about one member company per day since launch. The Stack also covered the new Sandbox phase, which gives early-stage projects 12 months to grow under AAIF, without funding or marketing support. Read the coverage: The Stack interview >> | The Stack Sandbox phase >> - Docker publishes an open specification for agent permissions: Version 3 of Docker's Sandbox Kit Spec packages an agent's access requirements inside its container image. Teams can review and version those requirements alongside the code, and check whether an update requests more access. Read the blog >> - Prosus releases an open source benchmark for AI agents: Prosus Vending Bench tests how agents manage a simulated vending business, including purchasing, pricing, inventory, and refunds. Released under Apache 2.0, it lets developers compare agents and test changes in a repeatable environment. Read the blog >> - Tracing Goose with familiar open source tools: A new AAIF tutorial connects Goose with OpenTelemetry, Jaeger, and ClickHouse to show where an agent spends its time. Developers can inspect model and tool calls, investigate slow responses, and save traces for later analysis. Read the tutorial >> - Securing AI agents with open standards: A new AAIF guide explains how teams can limit agent permissions, require human approval for sensitive actions, and record why an agent acted. It uses established open standards to show how these controls can work across vendors and services. Read the guide >> - Join the Voice Agents Forum on November 5: AAIF is bringing voice AI builders to San Francisco for a day focused on production challenges, including latency, reliability, observability, evaluation, and human handoffs. The event includes technical talks, workshops, and community networking. - MCP Dev Summit Heads to Nairobi, November 19–20: AAIF's global event series continues in Kenya, bringing developers and practitioners together to explore MCP, agent orchestration, security, interoperability, and real-world AI deployments. View the schedule and register. Alliance for OpenUSD (AOUSD) - AOUSD Out and About: Q3 2026 Community Highlights: A roundup of the quarter’s momentum, including new General Members ByteDance, Huawei, Physicl, and Unity. Physicl is joining the Physics Working Group to help develop a normative physics schema. - 2026 AOUSD Member Summit Is October 28! - Join us in San Francisco at the Autodesk Gallery on October 28th for the Alliance for OpenUSD (AOUSD) Member Summit where industry leaders and experts will advance the OpenUSD ecosystem through strategic discussions, updates, and sessions focused on expanding open 3D standards made possible by Universal Scene Description (OpenUSD). - Not an AOUSD member? Join the Alliance to attend. Alpha-Omega - Open source communities connect in Prague: Alpha-Omega’s roundtable at Open Source Summit Europe brought communities together to share ideas on supporting security engineers, identifying critical projects, and maintaining abandoned dependencies, aka “Bernies.” Read the blog. - Less AI slop, more useful security reports: Jacob Finkelman, one of Alpha-Omega’s AI Security Engineers in Residence, shares lessons from his work at the Rust Foundation. His advice: document what your project does and when it should or shouldn’t be used to help cut down on low-quality AI-generated reports. Read the blog. - Strengthening security for Hex: Alpha-Omega funded Hex’s first comprehensive external security audit, helping secure the package ecosystem used by Erlang, Elixir, and Gleam developers. Read the case study. - vLLM security audit complete: An Alpha-Omega-funded audit, coordinated by OSTIF and carried out by X41-DSec, identified five security findings and provided guidance to help maintainers strengthen this widely used AI project. Learn more. - Safer publishing for Open VSX: With Alpha-Omega’s support, Open VSX introduced trusted publishing, replacing long-lived publishing tokens with short-lived credentials tied to a project’s release workflow. Read the blog. App Defense Alliance - The App Defense Alliance is developing a VPN security extension to MASA and is looking for VPN developers and security testing labs to help shape the requirements and testing guidance. The extension will build on MASA’s existing requirements and address security considerations specific to VPN apps. Participants will join the Alliance at the free contributor level to help shape the new extension. Connect with the Alliance→ - Omdia research commissioned by the App Defense Alliance found that 58% of consumers believe developers hold responsibility for app security. Developers deserve industry support and resources to meet this expectation. Developers can participate in the Alliance and help shape future standards by joining at the free Contributor level. Explore Contributor membership → Automotive Grade Linux (AGL) - AGL All Member Meeting Europe Concludes as Community Looks Ahead to Tokyo The Automotive Grade Linux All Member Meeting Europe wrapped up after two days of technical sessions, live architecture demonstrations, and ecosystem collaboration in Berlin. Automakers, developers, and maintainers gathered to share progress on the SoDeV software-defined vehicle platform, virtualization models, and cross-industry APIs. Following the success of the European gathering, the community is invited to save the date for the next AGL All Member Meeting, taking place May 11–13, 2027, in Tokyo, Japan. CAMARA - CAMARA welcomes hayo to expand network API adoption: Digital infrastructure provider hayo joined the Linux Foundation and CAMARA (as a General member) on October 6 to accelerate standardized network APIs across Africa and the Middle East. The collaboration focuses on digital identity, fraud prevention, authentication, and enabling operators to bring network capabilities to market. Read the announcement >> - CAMARA connects with the open source community in Europe: CAMARA participated in Open Source Summit Europe in Prague, October 7–9, following its presence at API Days London, September 30–October 1. The events brought opportunities to engage developers and industry partners around open, interoperable network APIs. - CAMARA in the news: TelecomTV interviewed Vodafone's Johanna Wood, a CAMARA board member, about scaling network APIs across markets, including CAMARA-based verified calling. TelcoTitans explored the next opportunity for network APIs as AI agents increasingly require trusted network intelligence. Meanwhile, ITWeb Africa covered hayo's entry into CAMARA and its implications for network API adoption across the region. - CAMARA APIs Enable Branded Calling Expansion Across Europe: First Orion and Vodafone expanded their INFORM Branded Calling service to Ireland, following launches in Germany and the UK. Reusing an existing CAMARA-based API integration enabled expansion without additional development, demonstrating the scalability of standardized network APIs. Read more » CHIPS Alliance - CHIPS Alliance was a Silver Sponsor of ORConf 2026, held September 11–13 in Ghent, Belgium. Antmicro speakers covered expanding Verilator’s verification capabilities, radiation hardening and fault injection in VeeR and Verilator, and tools and cores hosted by CHIPS Alliance and the OpenROAD Initiative. Watch the sessions. - CHIPS Alliance projects Caliptra and VeeR were featured in sessions at the 2026 OCP Global Summit, held October 12–15 in San Jose, California. Topics included silicon roots of trust, device identity, secure key distribution, design verification, streaming boot, manageability, and attestation. Explore the session lineup, and stay tuned for session recordings. Cloud Native Computing Foundation (CNCF) - CNCF Welcomes OVHcloud, One of Europe’s Largest Independent Cloud Providers, as a Platinum Member | Upgrade builds on OVHcloud’s decade-plus commitment to open infrastructure, interoperability and cloud portability. - Meshery becomes a CNCF Incubating project | The CNCF Technical Oversight Committee (TOC) voted to accept Meshery as a CNCF incubating project. Confidential Computing Consortium (CCC) - AGNTCon + MCPCon North America Security Track: - Agent trust is a central theme at AGNTCon + MCPCon NA (October 22–23, San Jose). Sessions cover attestation for agent orchestration (Diagrid), rethinking agent sandbox architecture (Edera), zero-trust identity for autonomous execution (DataRobot and BlueFolders), and a hands-on Secure Agentic Framework workshop from Dell, Microsoft, TestifySec, and the Linux Foundation. Register now. - $91,000 in Academic Research Grants: From 35 proposals across 32 organizations, CCC awarded $45,500 each to two university projects. Durham University is studying side-channel leakage in confidential GPU LLM serving. Indiana University is building Deko, a hardware-software co-design for verifiable data provenance and privacy policy enforcement in confidential VMs. Read more. - Stay in the loop: Subscribe to the CCC newsletter and get monthly updates and messages from CCC’s Executive Director, TAC, Outreach Committee, and more! Continuous Delivery Foundation (CDF) - Open Source Project Updates - View the latest features, releases, and more from CDEvents, Jenkins, Jenkins X, Ortelius, Screwdriver, and Spinnaker. Read more - New Special Interest Groups (SIG) - AI SIG: aims to close the gap between AI innovation and production-grade delivery by developing open, vendor-neutral guidance for integrating AI systems into CI/CD pipelines. The group meets every 2 weeks. Join here - Platform Engineering SIG: exists to advance the practice of platform engineering within continuous delivery ecosystems by developing vendor-neutral guidance, reference architectures, and community resources that help organizations build Internal Developer Platforms (IDPs) grounded in open source CI/CD tooling. The group meets every 2 weeks. Join here DPDK - Robin Jarry (Red Hat) explains how two years of work made Grout, the DPDK-based graph router he maintains, production-ready: His Stockholm Summit talk covers routing control from FRR through the zebra dplane plugin, configuration over a UNIX socket API and the grcli shell, and packaging for Fedora and Debian. Several roadmap items from the talk have shipped since May, including VXLAN L3VPN and neighbor suppression. eBPF Foundation - Google Optimizes Workload Performance Using Custom eBPF Schedulers Google deployed application-tailored CPU scheduling policies using eBPF frameworks like sched_ext to overcome the constraints of general-purpose kernel schedulers. This architecture delivered a 5% QPS improvement for core RPC serving stacks and double-digit throughput gains for memory-intensive workloads. By shifting execution to eBPF, Google successfully decoupled scheduling policies from core kernel mechanisms, enabling rapid optimization without modifying base kernels or rebooting hosts. Read the case study → Enabling Linux in Safety Applications (ELISA) Project - ELISA Expands Open Source Ecosystem for Safety-Critical Software The ELISA Fund welcomes Cregit and stress-ng, bringing complementary capabilities in code analysis, testing and system reliability to its growing ecosystem. Cregit helps developers explore the history and evolution of Linux kernel code, while stress-ng provides hundreds of stress tests to evaluate Linux system behavior, reliability and performance. Read the full announcement to learn how these additions create more opportunities to collaborate on safer, more reliable systems. - ELISA at Open Source Summit Europe 2026 The ELISA Project participated as a Silver sponsor of Open Source Summit Europe 2026 in Prague, bringing together community experts, working group leads and Ambassadors at its booth. The Safety-Critical Software track covered topics including functional safety certification, hazard assessment and Linux safety qualification. ELISA also participated in the Safe Systems with Linux Microconference at Linux Plumbers Conference, focused on requirements, traceability and testing. - AI for Safety-Critical Development: Requirements, Static Analysis, and Human Oversight This ELISA Workshop recap shares insights on deriving and reviewing requirements from source code, generating tests against requirements, and an experimental AI approach to classifying Linux kernel static analysis violations as deviated, unknown or potential issues. It also examines NVIDIA’s reviewer-first approach to checking requirements for quality and consistency, with risk analysis, review gates and human approval. The key challenges include tool qualification, explainability, and false positives and negatives. FINOS - OSERA Is Operational: Global Banks Back Open Remediation Standards and Security Patches Announced at the Open Source Summit Europe in Prague, the Open Source Enterprise Resiliency Alliance (OSERA) is now live and delivering. Backed by leading financial institutions including Deutsche Bank, Goldman Sachs, Morgan Stanley, NatWest, and RBC, the initiative aims to reduce duplicated patching efforts through a shared, bank-governed remediation pipeline. Its first release includes an open framework for remediation attestations and secure package updates across more than 50 widely used Spring and Java libraries. Read the press release - New FINOS Project: SDLC Common Controls Catalog FINOS has announced the SDLC Common Controls Catalog (SDLC³), an open, community-driven reference library for software development lifecycle controls across financial services. The project aims to reduce duplicated effort and inconsistent interpretations of controls by providing shared definitions, practical implementation patterns, and a flexible, technology-agnostic catalog that institutions can adapt to their own requirements. Read the announcement blog and find out how to get involved Explore the live catalog - New CDM Training Course for Java Developers Linux Foundation Education and TradeHeader have launched a new, hands-on, one-day course that brings the FINOS Common Domain Model (CDM) specification to life in Java. Developers will work with CDM and FpML to build post-trade lifecycle applications, from ingesting financial data to executing complex state transitions. The course is designed for Java developers, integration engineers, and technical business analysts working with post-trade processes, regulatory reporting, and CDM implementations. Read the launch blog Register for training - OSFF New York: Technical Workshops on November 3 Ahead of the Open Source in Finance Forum (OSFF) New York, FINOS will host hands-on technical workshops on November 3, bringing together architects and maintainers from JPMorgan, Morgan Stanley, RBC, DataHub, and Kosli. Participants will work through practical sessions spanning CDM developer tooling, software development lifecycle controls, FDC3 AI governance, Common Cloud Controls, and CALM. Spaces are limited to 25-35 participants per room. Priority access is granted to FINOS Member organizations and regulated financial institutions. Explore the workshop schedule and save your seat - What Blocks Agentic AI in Banking? FINOS and Linux Foundation Leaders Weigh In Probabl interviewed FINOS Executive Director Gabriele Columbro and Linux Foundation SVP of Research Hilary Carter about the conditions needed to bring agentic AI into financial services. The discussion explores how open source governance, machine-readable compliance, and shared standards can help financial institutions move beyond internal AI experiments toward trusted production workflows. Read the blog High Performance Software Foundation (HPSF) - Call for Proposals Now Open: Speak at the HPSF Conference 2027: Submissions are now open for speaking proposals for HPSFCon 2027, scheduled for April 12–16, 2027, in Montreal, Quebec. - Kokkos Graduates to Become a Core Project of the HPSF: The HPSF Technical Advisory Council (TAC) voted unanimously to advance Kokkos from the Established Stage to the Core Stage, which is the highest maturity level for technical projects within the foundation. - High Performance Software Foundation Welcomes Ramble as a New Project: Ramble, an open source experimentation framework written in Python for capturing provenance information and improving experiment reproducibility, has been added to HPSF. - High Performance Software Foundation Welcomes ClusterShell as a New Project: ClusterShell, an event-driven open source Python library designed to execute local or remote commands in parallel across server farms and large Linux clusters, has officially joined HPSF. - Chapel 2.10 Released: Version 2.10 of Chapel has been released, introducing key performance improvements to make scalable parallel programming more productive, accessible, and portable. - Environment Modules 5.7: 2.7x Faster Loads, Stable Hooks, and Now Steered in the Open: The Environment Modules team released version 5.7, featuring 2.7x faster load times and stable hooks. - HPSF Highlights: Read the latest Q3 update from HPSF on LinkedIn, featuring new project announcements, community insights, and details on upcoming events like SC26. Jupyter - Jupyter Mini Summit Connects the Community in Prague - Held October 6 alongside Open Source Summit Europe, the Jupyter Mini Summit brought community members together to share technical developments, exchange ideas, and discuss the future of the Jupyter ecosystem. - Fortran Comes to JupyterLite: No Installation Required - A new integration brings the LFortran kernel to JupyterLite, allowing users to write and execute Fortran code directly in their browsers without installing software. Explore the Jupyter Blog - Jupyter Heads to Compute! Paris 2026 - Project Jupyter will be featured at Compute! Paris, November 25–26, including an opening keynote by Jupyter co-creator Fernando Pérez and a dedicated Planet Jupyter track. Read More - Introducing Notebooks-on-Demand for JupyterLab - A new open source extension makes it easier for developers to launch interactive notebooks directly from Python code, inspect variables, debug functions, and incorporate changes into their workflows. Read the Blog - JupyterHub 6.0 Released - The latest major JupyterHub release delivers updates to server management and platform capabilities, supporting shared computing environments for researchers, educators, and developers. Read the Announcement - Project Jupyter Launches a Refreshed Blog - The Jupyter Blog has a new look, with improved navigation, searchable archives, and easier access to community news, project updates, and technical content. Explore the New Blog LF AI & Data - ONNX v1.23.0 advances transformer and low-precision AI support: The release adds SwiGLU, local-window attention, and new 6-bit floating-point types, alongside improvements to model validation, conversion, and shape inference. Explore the release >>> - New Kedro user story: Harvard’s Zitnik Lab: Learn how the team built OptimusKG, an open biomedical knowledge graph, using Kedro to create reproducible, auditable data pipelines that bring diverse research sources together. Read the user story >>> - New research explores enterprise adoption of AI agents: Developed with LF AI & Data and other partners, Enterprise Transitions to the Agentic Era examines how trust, governance, cost, and human accountability shape enterprise adoption. Read the report >>> - Egeria helps keep AI context trustworthy: The latest community blog explores how Egeria’s Nanny Connectors automate metadata maintenance, trace data lineage, and improve consistency to give AI applications reliable context. Read the blog >>> - Upcoming Docling webinar: Join
Linux Foundation Newsletter: October 2026 The Linux Foundation | 21 October 2026 Welcome to the October 2026 edition of the Linux Foundation Newsletter Cybersecurity Awareness Month is ending, and LF Education is discounting training for a limited time. You can save 40% on eligible cybersecurity training and certifications, and you can save 35% on other training and certifications. A THRIVE-ONE Annual subscription is 30% off. This month's biggest announcements include a new Platinum Member and two new foundations. AWS became a Platinum Member of the Linux Foundation, after more than a decade of taking part in LF projects. The Linux Foundation launched the BUILD Foundation, which gives organizations that depend on Bazel a formal way to fund the project and help set its direction. The Linux Foundation also launched OpenGrid, which sets shared software architecture and interoperability standards so that power grid planning tools can work together. In addition, FINOS announced that OSERA is now operating, with support from Deutsche Bank, Goldman Sachs, Morgan Stanley, NatWest, and RBC. The first OSERA release includes secure updates for more than 50 widely used Spring and Java libraries. LF Research published nine reports this month. 35 Years of Linux follows the kernel from a hobby project to the software that now runs on 4 billion Android devices, more than 200 million servers, and all 500 of the world's top supercomputers. The 9th annual State of OSPOs study looks at how open source program offices are handling AI governance. The 2026 Open Data Infrastructure Report finds that openly governed data platforms are gaining ground as more organizations run AI workloads. You'll also find a recap of the Linux Foundation Member European Forum in Prague and details on the LF Education Learning Lounge at KubeCon + CloudNativeCon North America. The project news covers agentic AI, finance, energy, networking, security, and embedded systems. >> Read on for even more news, research, and opportunities from across the Linux Foundation. Contents Education Opportunities Cyber Threats Don't Wait. Neither Should You. Cybersecurity Awareness Month is wrapping up, and so are your chances to save big on your next skill. For a limited time, save 40% on eligible cybersecurity training and certifications, 35% on other training and certifications, and 30% on THRIVE-ONE Annual subscription. Whether you're strengthening your security expertise or building skills across Linux, cloud, and DevOps, there's still time to invest in what's next. The clock is ticking. Don't let these savings slip away! LF Event Highlight KubeCon + CloudNativeCon North America is just weeks away! Join the global cloud native community November 9–12 in Salt Lake City, Utah, to explore the open infrastructure powering production AI - everything else you run. Connect with maintainers, engineers, and end users tackling real-world challenges across Kubernetes, AI workloads, GPU scheduling, model serving, agentic AI, platform engineering, security, and more. Explore the schedule and don't miss your chance to connect with #TeamCloudNative! LF Research: 9 new reports! It is difficult to overstate the impact of generative AI on software engineering. In this report, LF Research, Red Hat, Futurewei, OpenSSF, and LF AI & Data investigate how AI tools are impacting open source development workflows, and how maintainers and developers are experiencing this shift. How did a hobby project evolve into the open source engine of global infrastructure? The milestone report by LF Research examines the kernel’s historic evolution and present-day impact. Today, Linux powers 4 billion Android devices, 200M+ servers, and all 500 of the world's top supercomputers. Read the report to explore 35 years of how the kernel has come to touch our day-to-day lives in technological, economic, and very human ways. The 9th annual State of OSPOs and Open Source Management Study by LF Research and TODO Group delivers key insights on the OSPO’s expanding role as organizations reckon with AI governance and agentic workflows. Read the full report to discover actionable strategies for establishing OSPOs, scaling AI governance, and securing long-term open source sustainability. Thanks to our sponsors CNCF and FinOps Foundation for their support of this research! How are AI and digital sovereignty reshaping open source governance in Europe? Marking a research milestone, LF Research and LF Europe have published the 5th annual State of Open Source in Europe, delivering crucial data on navigating these operational mandates. Read the report to discover how open governance drives ROI, mitigates regulatory risk, and secures long-term digital resilience. Thanks to our sponsor NeoNephos for their support of this research project! Is your organization’s data platform built for the AI era? The new 2026 Open Data Infrastructure Report from LF Research and the OpenSearch Software Foundation delivers data on how infrastructure is evolving. The key takeaway is that multi-purpose, openly governed data platforms are gaining rapid ground. Read the report for operational strategies on scaling data platforms securely while avoiding lock-in! What is the reality of enterprise agent adoption, as we approach the last few months of 2026? The new Enterprise Transitions to the Agentic Era report delivers qualitative insights on how open source innovators and practitioners are navigating the shift from cloud-first to agent-first. Download the full report to explore the roadmap for managing tokenomics, setting up governance control layers, and securing long-term digital sovereignty! How are issues in your development workflow impacting engineering performance? As developer friction, technical debt, and administrative overhead continue to hinder output, Dr. Ibrahim Haddad wrote a new roadmap to help enterprises optimize their developers’ experience and performance. Read the report to discover practical frameworks and metrics to build high-performing engineering teams! Ready to move from using open source to building it? Our new Getting Started with Open Source Development guide provides a practical, fundamentals-first path for new contributors. This guide lays out essential ground rules for open source participation. Download the full report to master licenses, contributor workflows, and best practices for landing your first pull request! LF Europe: Community Updates Linux Foundation Member European Forum The Linux Foundation Member European Forum 2026 brought the LF Europe community together in Prague on October 6. The day opened with welcome remarks from Thierry Carrez, General Manager of OIF and LF Europe, and the presentation of the Europe Spotlight Report. Keynotes from Otevřená města and the Netherlands Tax Administration offered candid, practical accounts of stewarding public-sector open source and building an OSPO from the ground up. Breakout sessions covered the issues shaping European open source today, including how companies can contribute upstream responsibly under the EU Cyber Resilience Act, the growing burden of AI-generated contributions on maintainers, and Zephyr’s first decade. Digital sovereignty ran through the afternoon, with a panel on balancing sovereignty with a global open source commons, a session on how the Sylva project supports European cloud and edge infrastructure, and a look at cross-project collaboration through Sovereign Cloud Stack. The program also included an “Ask LF Leadership Anything” session and closed with an attendee reception at Alma Prague, giving members time to continue the conversations over food and drinks. Linux Foundation Projects: Featured news Formations - The Linux Foundation announced that AWS is now a Platinum Member, building on more than a decade of participation across the Linux Foundation ecosystem and strengthening its role in supporting open source. Read the announcement >> - The Linux Foundation launched the BUILD Foundation to provide the leadership and sustained investment needed to tackle the Bazel ecosystem's largest challenges, giving organizations that use Bazel a way to formally join and help direct that investment. Read the announcement >> - The Linux Foundation launched OpenGrid, a new open source initiative to modernize power grid planning and help accelerate energy infrastructure deployment worldwide. The OpenGrid ecosystem establishes the shared software architecture and interoperability standards that allow diverse tools to work together and scale globally. Read the announcement >> - The Linux Foundation appointed payments veteran Michael Hursta as Executive Director of the x402 Foundation. He will lead 50+ member organizations advancing x402, an open standard for internet-native payments across AI agents, applications and APIs. Read the announcement >> Academy Software Foundation (ASWF) - ASWF Virtual Town Halls: Catch Up on Project Updates - The September Virtual Town Halls brought together maintainers and contributors from across the ASWF ecosystem, including OpenEXR, OpenColorIO, OpenRV, xSTUDIO, ACES, and more. Revisit the conversations to learn about project progress, technical developments, and what's ahead. Explore the Virtual Town Halls - Open Source Days 2026: Explore the Highlights - More than 500 in-person attendees gathered in Los Angeles for Open Source Days 2026, featuring presentations on MoonRay, open source production workflows, and cross-industry collaboration. Catch up on the event highlights and discussions shaping the future of open source in film and animation. Read the Recap Agentic AI Foundation (AAIF) - Gates Foundation Joins AAIF: The Gates Foundation became AAIF's first philanthropic member, helping bring the perspectives of underserved communities into the development of open agentic AI standards. - Open source maintainers discuss what agents need next: At AAIF's European maintainer roundtable, contributors from Anthropic, Google, OpenAI, and Solo.io discussed agent identity, shared standards, and how to measure the cost of completing a task. Read the recap >> - AAIF leadership and new Sandbox phase in the press: The Stack interviewed Executive Director Mazin Gilbert on keeping open source pace with agent adoption, noting AAIF has added about one member company per day since launch. The Stack also covered the new Sandbox phase, which gives early-stage projects 12 months to grow under AAIF, without funding or marketing support. Read the coverage: The Stack interview >> | The Stack Sandbox phase >> - Docker publishes an open specification for agent permissions: Version 3 of Docker's Sandbox Kit Spec packages an agent's access requirements inside its container image. Teams can review and version those requirements alongside the code, and check whether an update requests more access. Read the blog >> - Prosus releases an open source benchmark for AI agents: Prosus Vending Bench tests how agents manage a simulated vending business, including purchasing, pricing, inventory, and refunds. Released under Apache 2.0, it lets developers compare agents and test changes in a repeatable environment. Read the blog >> - Tracing Goose with familiar open source tools: A new AAIF tutorial connects Goose with OpenTelemetry, Jaeger, and ClickHouse to show where an agent spends its time. Developers can inspect model and tool calls, investigate slow responses, and save traces for later analysis. Read the tutorial >> - Securing AI agents with open standards: A new AAIF guide explains how teams can limit agent permissions, require human approval for sensitive actions, and record why an agent acted. It uses established open standards to show how these controls can work across vendors and services. Read the guide >> - Join the Voice Agents Forum on November 5: AAIF is bringing voice AI builders to San Francisco for a day focused on production challenges, including latency, reliability, observability, evaluation, and huma
document fetched 2026-10-24 11:26 · canonical https://linuxfoundation.org/blog/linux-foundation-newsletter-october-2026