PostgreSQL 19, expected in late September 2026, will not ship until around November 19: AI-assisted code review surfaced roughly forty defects the committers could not absorb in time, and eight to ten features are being sent back to version 20. If you adopt LLM review mid-release, budget for this revert tax instead of eating it.
On 11 October 2026, the disclosure dashboard behind Anthropic’s free open-source scanner showed its models surfaced more than 29,000 candidate vulnerabilities in six months, with just 516 patched upstream. If you maintain a critical project, the new “fast-track” now ships raw, unvalidated findings straight to you: sorting them is your job.
At Linux Plumbers Conference 2026, Google detailed Sashiko, its agentic code-review system for the Linux kernel: 191,000 patches reviewed across 99 lists, and 1,277 upstream commits and 463 CVEs citing it in one year. Those numbers make automated review a credible complement for overloaded maintainers — not a replacement.
GitHub announced general availability for stacked pull requests, which split a large change into small, independently reviewed pull requests that merge together at the end. If your branches keep blocking each other, GitHub’s numbers — 9% more merged code and 5% faster time-to-merge — justify adopting them now.
On September 8, 2026, systemd 262-rc2 shipped an AI canary in its AGENTS.md file: a trap instruction that forces AI coding agents to mark the patches they produce, and whose manual removal proves a human actually reviewed the code. A simple, copyable mechanism for any project receiving AI-generated contributions.
