July 2026 (apache/arrow) focused on hardening Gandiva string handling with memory-safety fixes and regression tests, addressing critical out-of-bounds risks in user-provided data paths. Delivered three targeted fixes across byte_substr, utf8_length_ignore_invalid, and translate_utf8_utf8_utf8, each accompanied by regression tests. All changes maintain API compatibility with no user-facing changes.

June 2026 monthly summary for the pypa/pip repository, focused on hardening the file downloader by validating Content-Length values. Implemented a check to ignore negative Content-Length headers to prevent misreporting truncated downloads as complete. Added unit tests to cover negative and other edge-case inputs, improving test coverage and confidence in the downloader logic. Overall, this work increases reliability and correctness of package installations across environments.