Changelog Master Feed · 2026-03-27 · 11 min
Astral is joining OpenAI, which says a lot about where the center of gravity is moving for developer tools, LiteLLM got hit by a nasty supply-chain attack, and OpenCode blew up as the latest serious open source swing at the coding-agent stack. We’ve also got Rust doing a very public reality check on its own pain points, WorkOS pushing AuthKit into CLI auth, Ryan Lizza using AI to build an open source TurboTax alternative, and a fresh httpx fork that turns open source maintenance drama into a real dependency story. If nothing else, this week was a good reminder that tools, trust, and control all move together. View the newsletter Join the discussion Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today! Sponsors: WorkOS - Auth for CLI with AuthKit from WorkOS - Bring secure browser-based login to your terminal apps using the OAuth Device Flow, with the same polished AuthKit experience plus SSO, MFA, and passkeys. Learn more at WorkOS.com and AuthKit.com Featuring: Adam Stacoviak - Website , GitHub , LinkedIn , Mastodon , X
From open source hits to OpenAI (Changelog Interviews #682)74 / 100MCP on Code Mode (Changelog Interviews #681)
Automation at the speed of Swamp (Changelog & Friends #130)
Bitwarden CLI compromised (Changelog News #185)Exploring with agents (Changelog Interviews #680)