Tootfinder

Shopware 6: The official Shopware API docs describe an API your shop doesn't actually run — plugin fields, custom entities and ERP extensions excluded. One command dumps the real spec of your shop instead, integrations included. It's mentioned in exactly one line of the docs.

We've tweaked the front page of the Museum Data Service site! You can instantly see how many millions of object records have been shared by hundreds of museums https://museumdata.uk/
And the 'Request a Search API key' form is live - if you want a search api key, try it and let us know if any tweaks wo…

Museum Data Service
A free new service that aims to bring together and share all the object records of all UK museums.

C23 support in picolibc continues to improve; I think I'm missing only a handful of math APIs now, including the fromfp family, rootn and rsqrt. Sadly, this joyous adventure will soon end.

Thanks Twitch API for returning 404 errors for literally anything. You would have saved me a whole hour of work if the error just said the method was wrong :neofox_think_woozy:

Shopware 6: "We need the admin's duplicate button, but from code, with a different name and its own SKU" — sound familiar? Delete your hand-rolled cloning code. Shopware has one call that deep-duplicates any entity with overrides, plus an API endpoint doing the same thing for free.

🇪🇺 Voxtral 3 runs via Mistral's EU, US and global API endpoints or self-deployed on-premises, with control over audio retention. Voice agent API: $0.04/min with Mistral Small 4, $0.08/min with a larger model. #DataSovereignty
https://

OpenAI makes Decisions API, its Jev competitor, generally available with new voice and visual modalities, at $0.10/1M input tokens and no output-token charges (Tim Fernholz/TechCrunch)
https://techcrunch.com/2026/10/22/open

OpenAI makes its Jev competitor widely available as decision model competition heats up | TechCrunch
OpenAI is launching its decision model to the world. Can it compete with the original Jev?

🔐 Security fixes: package names in installed.json can no longer escape vendor/, inline HTTP headers like API tokens stay out of composer.lock, distrusted eMudhra intermediate certs are rejected, bin proxies escape paths and shebangs, secure-http catches more insecure URLs, and repo headers no longer leak to lookalike hosts.

⚠️ Second advisory, same day: GHSA-5wcm-3v2w-8362 (CVSS 6.5) in the JSON:API resources added in Laravel 12.45. A crafted request to a read-only endpoint could trigger a destructive operation and empty a related table
📦 Patched in Laravel 12.68.0 and 13.29.0, both released August 25, 2026. The JSON:API issue is fixed from 13.27.0 on the 13.x branch. Patches exist only for 12.x and 13.x

🚨 Critical auth bypass in #Laravel's token API guard (CVSS 9.2): on #MySQL and #MariaDB, an unauthenticated attacker could log in as an existing user without knowing their API token