Open Source News: Sovereign Tech Fellowship, $12.5M Security Grant, GNOME 50, and the OpenAI–Astral Acquisition · April 1, 2026

The Sovereign Tech Fellowship is now open for applications, the Linux Foundation raised $12.5M to help maintainers handle AI-generated security reports, GNOME 50 dropped X11 entirely, and OpenAI acquired Astral: the company behind uv and ruff. Here is this week’s open source roundup.


Open Source News This Week

Apply now for the Sovereign Tech Fellowship: deadline April 6

The Sovereign Tech Fellowship is becoming permanent and expanding after a successful pilot last year. Six open source maintainers completed the inaugural cohort, working on critical infrastructure with more focus and better conditions for a full year. For 2026 the program opens up further: community managers and tech writers can now apply alongside maintainers. The deadline is Monday, April 6. If you or someone you know maintains critical open source infrastructure, this is worth sharing.

Linux Foundation raises $12.5M to help maintainers handle AI-generated security reports

Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft, and OpenAI have joined forces to fund Alpha-Omega and OpenSSF with $12.5M specifically to tackle the growing flood of AI-generated vulnerability reports overwhelming open source security teams. Greg Kroah-Hartman of the Linux kernel project, who has spoken publicly about this problem before, noted that funding alone is not enough: what is needed are active resources to help maintainers triage and process the increased load. The investment will go directly toward maintainer-facing tooling and support.

GNOME 50 released: X11 sessions are gone

GNOME 50 “Tokyo” shipped on March 18, marking one of the most significant changes in Linux desktop history: the X11 session has been removed entirely. You can still run X11 apps via XWayland, but GNOME itself is now Wayland-only. The release also brings variable refresh rate support enabled by default, improved parental controls with screen time limits, accessibility improvements to the Orca screen reader, and a faster GNOME Files. Ubuntu 26.04 LTS, due this month, will ship GNOME 50, meaning the majority of Ubuntu desktop users will be on this release for years. The Register has a good overview.

OpenAI acquired Astral: the company behind uv and ruff

Announced March 19, OpenAI has agreed to acquire Astral, the company behind uv (Python package manager, 126M downloads per month) and ruff (Python linter and formatter, 1000x faster than traditional tools). Both tools are MIT-licensed and will remain open source. OpenAI’s stated goal is to integrate them more deeply with Codex. Simon Willison noted that OpenAI lacks a track record of open source acquisitions, and the Python community is watching closely for any roadmap shifts. For now, both tools continue operating under existing governance. A clear breakdown of what this means in practice.

PHP is voting to switch to the BSD 3-Clause license

The PHP community is currently voting on an RFC to replace the PHP License and Zend Engine License with the BSD 3-Clause license. The vote runs until April 4, 2026 and currently has strong support. This is a long-overdue simplification: the existing licenses created confusion because only one was OSI-approved, neither was GPL-compatible, and they had been intertwined in the same codebase for 25 years. The change does not affect any rights of existing users or contributors. Heise has a clear explainer.

React is now owned by the React Foundation, not Meta

As of February 24, React, React Native, and supporting projects including JSX have moved to the React Foundation, a neutral body under the Linux Foundation. Founding Platinum members include Amazon, Callstack, Expo, Huawei, Meta, Microsoft, Software Mansion, and Vercel. Meta is committing $3M and dedicated engineering support over five years. Technical governance remains independent from the foundation board. If you have been waiting for React to move to neutral stewardship, it has now happened.


Open Source Tools Worth Checking Out

uv and ruff

Both built by Charlie Marsh and the Astral team. uv is a Python package and project manager written in Rust that replaces pip, virtualenv, and pip-tools in a single tool running 10–100x faster. ruff is a Python linter and formatter, also in Rust, running up to 1000x faster than flake8 and black combined. Nick Schrock (co-creator of GraphQL) said ruff was so fast he adds intentional bugs to confirm it is actually running. Bryan Van de Ven (co-creator of Bokeh, original author of Conda) called it “an enormous quality of life improvement.” GitHub’s Octoverse 2025 report named uv one of the fastest-growing open source projects globally by contributor count, alongside VS Code. These are now the default recommendation for new Python projects in 2026. Timely to highlight given the Astral acquisition news this week. uv docs and ruff docs.

pdf-crawler

Built by Mike Gifford, a long-time open source accessibility advocate and former Drupal core accessibility maintainer. Free PDF accessibility scanning with no deployment or infrastructure needed. Give it a website URL and it crawls for up to one hour, finds every PDF, and flags common accessibility issues. It works by creating a GitHub issue, running the scan, and posting a public report as a comment on that issue. The issue closes automatically when the report is ready and can be reopened at any time to re-run. A practical tool for anyone responsible for making public-facing content accessible. Try it directly on the project page.

Datasette

Built by Simon Willison (Django co-creator, PSF board member). An open source multi-tool for exploring and publishing data on top of SQLite. Give it a CSV, a SQLite database, or almost any structured data and it turns it into a browsable, searchable, queryable website with an API. Used widely by data journalists, researchers, local governments, and anyone who needs to share data without standing up a full database server. Over 10,000 GitHub stars and actively maintained, with a new plugin ecosystem growing around it. Willison has been shipping new features steadily through March 2026. Official docs and demo.

Zellij

A terminal workspace and multiplexer written in Rust, actively recommended across the cloud native and platform engineering communities as a modern alternative to tmux. It ships with a built-in layout system, floating panes, session management, and a plugin system, all with a discoverable interface that does not require memorizing a prefix key. Aram Drevekenin, the creator, has built it entirely in the open with a strong community around it. If you spend serious time in the terminal and have bounced off tmux’s learning curve, Zellij is worth an hour of your time. Official docs and the GitHub repo.


This Week in the Community

We launched a leaderboard, now visible to all logged-in members. It tracks top challenge solvers, challenge grand builders, top contributors, most liked members, most replies, most supportive members (likes given), and top problem solvers. Look for it to the right of the topics list when you are logged in. Who is on the board this week?

Check the Community Events and Talks page for what is coming up.


Question of the Week: How do you support Open Source

Last week @MaciejNeu reminded us why open source matters beyond the toolchain. He recommended OpenMRS, an open source Electronic Medical Record system supporting over 22 million patients worldwide, with a focus on the communities that need it most. Worth checking out, and worth sharing. Read last week’s post and responses here.

How do you support open source projects? Whether through financial contributions, sponsorships, code, documentation, advocacy, or other means: which projects have earned your support, and what motivated you to get involved? If you haven’t started yet, what would make it feel like the right moment? The right project, a simpler way to contribute, or seeing the real-world impact it creates?

1 Like

Although I started with code contributions, my main contribution to open source since switching roles has been organizing in-person events for Drupal. I believe open source wouldn’t exist without people contributing code, ideas, and energy. Community events create the perfect space for that collaboration to happen and for contributors to feel valued. Drupal Mountain Camp is my favorite event that I’ve been helping organize since 2024.

I also make financial contributions, including a monthly donation to Wikimedia and support Drupal in a Day events whenever they occur. I think even small contributions, in whatever form, make a real impact.

I wish more people understood that contributions don’t have to be code. Everyone can find a way to contribute. Check out this guide on how you can contribute without writing code.