OpenAI launches Patch the Planet to coordinate fixes as agents uncover critical vulnerabilities in open source
When agents find vulnerabilities faster than maintainers can fix them, coordination becomes the bottleneck. Who this program brings together.
// Key points
- Patch the Planet connects security researchers, open source maintainers and incident responders to address critical vulnerabilities across open source.
- OpenAI frames it as global response coordination for a period when agents are uncovering critical vulnerabilities.
Builder's takeExpect more, and more frequent, critical advisories for open source dependencies. I'd move dependency upgrades from "when there's time" to a fixed weekly window with Dependabot opening PRs, and pair it with the cooldown in GitHub's package firewall, in public preview since October 20, so you keep up with patches without being first to install a poisoned release.
// Background · from #OpenAI
Full timeline →- Oct 22 OpenAI's frontier models and Codex workflows are coming to Google Cloud through Model Garden and Google Cloud Marketplace
- Oct 21 OpenAI adds 12-hour prompt caching to the API, with writes at 2.5x the input price
- Oct 20 Copilot retires six models including GPT-5.5 and GPT-5.4 on October 19, pointing users to GPT-6.1 Sol and GPT-6 Luna