Tootfinder

⚠️ Second advisory, same day: GHSA-5wcm-3v2w-8362 (CVSS 6.5) in the JSON:API resources added in Laravel 12.45. A crafted request to a read-only endpoint could trigger a destructive operation and empty a related table
📦 Patched in Laravel 12.68.0 and 13.29.0, both released August 25, 2026. The JSON:API issue is fixed from 13.27.0 on the 13.x branch. Patches exist only for 12.x and 13.x

OpenAI makes Decisions API, its Jev competitor, generally available with new voice and visual modalities, at $0.10/1M input tokens and no output-token charges (Tim Fernholz/TechCrunch)
https://techcrunch.com/2026/10/22/open

OpenAI makes its Jev competitor widely available as decision model competition heats up | TechCrunch
OpenAI is launching its decision model to the world. Can it compete with the original Jev?

🚨 Critical auth bypass in #Laravel's token API guard (CVSS 9.2): on #MySQL and #MariaDB, an unauthenticated attacker could log in as an existing user without knowing their API token

Shopware 6: The official Shopware API docs describe an API your shop doesn't actually run — plugin fields, custom entities and ERP extensions excluded. One command dumps the real spec of your shop instead, integrations included. It's mentioned in exactly one line of the docs.

🇪🇺 Voxtral 3 runs via Mistral's EU, US and global API endpoints or self-deployed on-premises, with control over audio retention. Voice agent API: $0.04/min with Mistral Small 4, $0.08/min with a larger model. #DataSovereignty
https://

Uutta tietoa Tilastokeskuksesta - selvää nousua.
#politiikkka #hyvinvointi

Mastodon fork idea: rip out all the UI for changing anything. Keep the readonly public views, but require the operator to provide their own CSS. Keep tooting an api-first experience.
@…

This Social Spec initiative is quite interesting, very old-internet and I like it.
https://socialspec.org

🚀 Chronivaro 0.6.0 has been released!
Chronivaro is an open-source working time, absence tracking, and monthly period closing system.
📦 Release notes & downloads:
https://github.com/eitch/Chronivaro/releases/tag/v0.6.0

This post about API Context Engineering captures a lot of things I have been thinking about API descriptions, pipelines, and task-scoped interfaces "The surface you hand an agent is the surface it will use" #linkTuesday