JetBrains Releases Ktor 3.6.0 with HTTP/3 and OpenID Connect Support

·3 views

JetBrains launched Ktor 3.6.0 on September 18, 2026, delivering a significant update to its open-source Kotlin web framework. The release introduces experimental HTTP/3 support via the QUIC protocol on the Netty engine, promising lower latency and improved performance on unreliable networks. A new type-safe OpenID Connect authentication module is also included, aimed at reducing boilerplate code and minimizing security vulnerabilities in identity-aware services. Additional improvements cover routing DSL enhancements, multiplatform client defaults for JVM, JavaScript, and native targets, and various bug fixes including duplicate-cookie parsing. JetBrains has indicated a 4.0 release is planned for early 2027, expected to bring production-grade HTTP/3 stability and deeper Kotlin integration.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

OpenAI Reinstates 5-Hour Usage Cap for Plus Users, Frustrating Coders Mid-Sprint

OpenAI has reinstated a five-hour rolling usage cap for Plus subscribers on its Work and Codex surfaces, reversing a removal it had made earlier in the summer. The return of the limit drew sharp criticism from users, particularly developers who had structured their workflows around the assumption of consistent access. A recurring complaint was not simply that limits exist, but that they shift unpredictably, making it impossible to plan or budget usage across a workday or week. Anthropic users reported similar frustrations, with weekly quotas resetting at irregular intervals and uncertainty over which AI models would remain accessible. The episode highlights a broader tension in AI subscription services: paying customers increasingly find that the usage they are paying for is subject to conditions that can change without reliable notice.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

CoreShroud Platform Aims to Harden Android APKs Against Reverse Engineering

A developer has built CoreShroud, an Android APK protection platform designed to make applications significantly harder to reverse engineer through multiple layered security mechanisms. Rather than relying solely on obfuscation, the platform combines techniques such as string protection, DEX transformations, anti-debugging, runtime integrity checks, and native library protection. The goal is not to make apps impossible to crack, but to substantially raise the effort and cost required for an attacker to analyze or modify them. A key engineering challenge during development has been ensuring that security measures do not break app functionality or introduce excessive performance overhead across different Android versions. CoreShroud is currently under active development, with the creator planning ongoing improvements to its protection capabilities, compatibility, and developer experience.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Critical Magento RCE Flaw CVE-2026-75650 Exploited via Payment-Failure Emails

Adobe Commerce and Magento Open Source versions 2.4.4 through 2.4.9 are affected by an unauthenticated remote code execution vulnerability, CVE-2026-75650, which exploits the platform's payment-failure email rendering engine. Dutch security firm Sansec, which dubbed the campaign StyleSmuggler, recorded active exploitation beginning September 4, 2026, with CISA adding the flaw to its Known Exploited Vulnerabilities catalog on September 8. Adobe issued emergency hotfix VULN-39341 on September 7 under advisory APSB26-146, noting that stores already patched with the August 2026 monthly update remained exposed. Attackers inject malicious data into error reports and payment records, then trigger the standard payment-failure reminder email, causing the template engine to execute arbitrary PHP code with web-server privileges. Observed post-compromise payloads include a Rust backdoor disguised as system processes and PHP web shells, with remediation requiring the hotfix, credential rotation, and a targeted malware scan.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Coding Tools Boost Junior Devs but Slow Down Experienced Ones, Studies Find

Recent research presents a mixed picture of AI coding assistants' impact on developer productivity. A multi-company field study involving 4,867 developers found that those using GitHub Copilot completed 26% more tasks, with less experienced developers seeing the greatest gains. However, a July 2025 randomised controlled trial by METR found that 16 experienced open-source developers took 19% longer to complete tasks when AI tools were available, despite expecting a 24% speed improvement. The gap between perceived and actual productivity was notable — developers believed AI had made them faster even when measurements showed the opposite. Researchers suggest the two studies are not contradictory, as outcomes appear to depend heavily on developer experience, task type, and the familiarity of the codebase.

0 comments Read more at DEV Community