Critical security patch for developers using Datasette's permission system with mixed public/private data access.
Datasette 1.0a38 fixes a SQL injection vulnerability that could expose private tables when public and private tables coexist in the same database.
Hugging Face and Voice Arena launched Monsoon benchmark datasets for Hindi and Indian English, adding the first Global South language to the Open ASR Leaderboard with speaker attribute tracking.
Hugging Face releases @huggingface/kernels with 200+ optimized WebGPU kernels and Fleet, a browser-based benchmarking tool for local AI inference performance.
datasette-mcp 0.2 adds MCP server support to Datasette instances and improves SQL result handling for better LLM compatibility.
Graham Dumpleton releases Wrapture, an AI-assisted Python library for tracing and mocking functions with OpenTelemetry support.
Rok Benko open-sourced quackd, an LLM-powered brain for Microduck robots that interprets natural language commands and plans multi-step actions.
