Reporting period: Monday, October 12, 2026 to Friday, October 16, 2026 — 5 working days, 5 daily issues; plus a release-day (October 17) verification covering mainline and toolchain changes from 10-16 08:00 to 10-17 16:30 Sources: 5 issues of this publication’s daily RT-Thread updates (10-12, 10-13, 10-14, 10-15, 10-16), totaling an effective window from 10-10 10:30 to 10-16 08:00 (the Monday issue covers a weekend-spanning window; the Thursday issue is a fault-recovery rerun of about 29 hours); the release-day verification is based on measured commit streams, PR status, release pages, and tag pages of the GitHub main repository and the Env and packages repositories Editorial note: Covers five dimensions — kernel and versions, toolchain, ecosystem and vendor adaptations, official and community activities, and industry applications; facts and dates in the body are taken item by item from the original text of the corresponding daily issues; release-day supplementary entries are separately marked with date and verification method

I. Weekly Highlights

  • Next RISC-V major refactor merged into mainline, kernel version bumped to v5.4.0 (10-17): The RISC-V architecture refactor proposal (#10320, author GuEe-GUI) tracked for nearly five months was merged into master by maintainer Rbb666 on 10-17 at 09:44 — 4 commits, 165 files, +15134/-2617. One minute before the merge (09:43), another commit (#11875) had already bumped the kernel version to v5.4.0 (version macro 5.4.0). The official Release and tag have not yet landed; the releases page still shows v5.3.0 from 09-10, and the latest ChangeLog chapter also remains v5.3.0. This item occurred after the Friday daily cutoff (10-16 08:00) and is a release-day verification addendum.

  • 15 merges this week, 8 landed within 64 minutes on the morning of 10-14 (10-12 ~ 10-16): 2 on Monday (#11863, #11787), zero on Tuesday (master silent for about 46 hours), 8 on Wednesday (09:13 to 10:17), 4 on Thursday, 1 on Friday (#11846, after the daily cutoff). Merge topics cluster into three groups — network stack robustness, memory and bounds safety, and vendor BSPs — reflecting a batch-closure pattern by maintainers.

  • Two defects exposed in the 9PFS filesystem, one rated CVSS 3.1 7.5 (10-15): New defect ticket #11868 points out that the 64-bit load macro on the receive path dereferences the buffer via a plain pointer (struct size 292 and protocol constant 42 make rx_buffer+42 always 6 mod 8); under ARMv7-A, GCC-generated LDRD requires 8-byte alignment, so any valid Tstat reply triggers a data abort in dfs_9pfs_open and dfs_9pfs_stat. The report traces back to the commit that introduced 9PFS in 2025-12, gives a remote denial-of-service rating with a full reproduction chain on QEMU vexpress-a9, and includes disassembly and addr2line evidence. The other ticket, #11289 (out-of-bounds read on the getdents path), opened in March, was confirmed by the community reproducing it on master (bsp/simulator with ASan). Both remain open.

  • Network stack robustness closed out: two ping cases and lwip macro control settled in succession (10-14 ~ 10-15): #11853 fixes a shell crash caused by division by zero in ping statistics when the target is unreachable; defect ticket #11852 was closed the same day. #11866 corrects the last-packet delay logic (the original loop condition was always false, so a delay was still added after the final packet, and the delay interface was called with a 0 argument); #11865 was closed the same day. An earlier proposal in the same direction, #11862, was closed without merging. The lwip section content macro control in #11815 was merged on 10-15 at 13:28 after several rounds of expansion — 6 files, +188/-28.

  • Memory and bounds hardening became a parallel mainline (10-12 ~ 10-15): Kernel calloc integer overflow fix (#11848), legacy USB host interface count upper bound and enumeration cleanup (#11822, defect ticket #11288 closed), two out-of-bounds fixes in the device tree ofw phandle hash table (#11845), and DHCP server option bounds checking (#11858, carried over from the start of the period) were merged in succession; the heap memory AddressSanitizer proposal (#11772) added range checks for rt_memcpy, rt_memset, and rt_memmove plus boundary test cases, with the latest CI reported all passing.

  • High-density interaction in the review queue, new contributors take on multiple threads (10-13 ~ 10-16): The ESP32-C6 SPI proposal (#11846) received three line-level comments from the maintainer (single-transfer 64-byte limit after disabling DMA requires segmentation, C3 and C6 sharing IDF causes build overwrites, bit-width validation needs to be moved earlier); the author addressed each and it was merged on 10-16 at 11:31. The efm32 menuconfig newcomer task (#7530) was claimed by a contributor who opened a proposal (#11867, 2 files, +408) one minute later. A disambiguation proposal (#11869) was opened for the DFS layer where F_GETFL and F_SETFL collide with device control command codes. The aarch64 GIC acknowledge-path discussion provided hundreds of thousands of inference-level measured data points.

  • Ecosystem and toolchain: hpm_sdk v1.13.0 completes the “tag, index, BSP” loop (10-13 ~ 10-17): The upstream package repository released the v1.13.0 tag on 10-13 (adding the HPM5100 series); the packages index proposal #2045 was merged on 10-14 at 18:41, the first merge in the index repository in half a month; on the main repository BSP side, 10-17 upgraded to v1.13.0 and added hpm5100evk support (#11871). In the same period, the Env tool merged PR #302 on 10-17 (built-in documentation navigation in WebUI) and bumped the version to v2.0.3; the releases page still shows v2.0.2 from 09-16 as the latest.

  • Community content holds at two posts per day, with dual tracks of competition and teaching output (10-12 ~ 10-15): 5 posts this week on 2026 embedded competition projects (portable debugger, Muyu Xinsheng, GD32H759IM USB secondary display, environmental monitoring logger, Shuheng Zhiyang physiotherapy robotic arm), all using GD32H7 series MCUs; the CIIF AI car Workshop retrospective (10-15) and the RK3588 virtualization hybrid deployment teaching platform (10-13) were published in succession; the official news feed has remained silent through its fifty-seventh day.

II. Kernel and Version Dynamics

Versions and Mainline

Date: 2026-10-12 ~ 2026-10-17　Source: Main repository releases page

  • Official releases: No new releases or tags this week; the latest official version remains v5.3.0, released on 09-10. A check on the release date shows the mainline has bumped the version macro to v5.4.0 (#11875), but the ChangeLog, tags, and release announcement have not followed suit, so this week it is not described as “released.”
  • Total merges: 15 merges from 10-12 to 10-16, plus 5 weekend merges from 10-10 to 10-11 carried over from Monday’s daily report.
  • Cadence characteristics: master went silent for about 46 hours after 11:06 on 10-12; 8 merges landed in a concentrated 64-minute window from 09:13 to 10:17 on 10-14, followed by 3 more between 13:28 and 13:50 on 10-15 — maintainers close out work in batch windows rather than advancing at a steady daily pace.
  • Release-day changes: #11846 merged at 11:31 on 10-16; on 10-17, #11875 (version bump), #10320 (Next RISC-V), #11871 (hpm_sdk and hpm5100evk), and #11872 (removal of redundant global CPPPATH paths in the touch driver) merged in sequence from 09:43 to 16:42.

This Week’s Merge List (10-12 ~ 10-16, 15 merges)

Date: 2026-10-12 ~ 2026-10-16　Source: Main repository master commit stream

  • 10-12 (2 merges): #11863 changed the build entry point from setting a local exit flag to exiting directly with a non-zero code when the toolchain directory is missing, merging about 36 minutes after opening; #11787 added SCM metadata directory lists (.git, .svn, .hg) to Eclipse target generation so these directories are no longer scanned recursively.
  • 10-14 (8 merges, 09:13 to 10:17): #11861 restores vstart state after RISC-V vector configuration; #11855 fixes a build error when reset and ulog are enabled simultaneously; #11851 adds SPI6 BDMA support for STM32H723-DM-MC02; #11848 fixes an integer overflow in kernel calloc; #11853 fixes a divide-by-zero in ping statistics; #11847 fixes IRAM wildcard and Bluetooth linker script mismatches under Windows paths on ESP32-C3; #11814 optimizes ra6w1 system resource allocation (main thread stack adjusted to 4096); #11822 tightens the upper bound on legacy USB host interface count and the enumeration and cleanup paths.
  • 10-15 (4 merges): #11866 corrects ping last-packet latency and zero-latency calls; #11815 adds macro control for lwip section contents (6 files, +188/-28); #11812 completes timers for N32H47x_48x and H49x (39 files, +3956/-105; LPTIM tick derived from the real LSI, with accompanying ci-attach build coverage); #11845 fixes an out-of-bounds access in the ofw phandle hash table (allocation count changed to max-min+1, expansion clearing counted from the old table entry count).
  • 10-16 (1 merge): #11846 adds ESP32-C6 SPI support (segmented transfers capped at 64 bytes, both call paths retained per target macro with bidirectional build verification, bit-width validation moved earlier).

Carried Over from the Start of the Period: Five Merges from 10-10 ~ 10-11

Date: 2026-10-10 ~ 2026-10-11　Source: PR #11858

  • #11858 adds bounds checking before DHCP server option parsing, eliminating an out-of-bounds read path; defect ticket #11323, reported by a security researcher, was closed as a result.
  • #11841 changes stack alignment across all STM32 BSPs from ALIGN(4) to ALIGN(8) uniformly, 110 files, +220/-220, meeting the AAPCS requirement for stack pointer alignment at public function boundaries; the cited May 2023 defect ticket #7527 remains open.
  • #11813 removes the utest performance test’s dependency on fixed-clock timing and hardens the test build guard.
  • #11856 routes C++ global construction through __init_array_start and __init_array_end (weak symbol declarations) and skips duplicate entries already within the ctors range; defect ticket #11778 closed.
  • #11770 fixes an aliasing defect in the USB CDC VCOM ring buffer (switched to canonical attachment and added polled receive support); defect ticket #11739 closed.

Security and Defects

Date: 2026-10-12 ~ 2026-10-15　Source: Issue #11868

  • A new component enters a concentrated audit period: the two 9PFS defects this week (remote denial of service #11868, out-of-bounds read #11289) are the most serious security issues of the week; the former comes with a reproduction chain, disassembly, and addr2line evidence, while the latter was confirmed with an ASan reproduction on master.
  • Boundary-class fixes land as a group: four in total — calloc integer overflow, USB host interface count upper bound, ofw phandle hash table out-of-bounds, and DHCP option out-of-bounds read — covering four layers: memory allocation, peripheral enumeration, device tree, and network protocol parsing.
  • Old tickets picked up by the community: #5073 (serial POSIX ioctl cannot set underlying parameters; verification confirms the issue still exists in dfs_v1), #6568 (DAC documentation example; the fix has merged, documentation formatting still needs correction), #5913 (at_gethostbyname overflow report created in 2022; the community is asking for a clear disposition direction and owner).
  • Defect tickets closed alongside fixes: six tickets closed this week — #11852, #11865, #11288, #11323, #11778, #11739 (including two long-pending items carried over from the start of the period).

Review Queue Observations

Date: 2026-10-13 ~ 2026-10-16　Source: PR #10320

  • RISC-V is the most active area: #10320 went through multiple rounds of iteration all week — on 10-13 a test report on five QEMU configurations was submitted (the S-Mode device-model-disabled combination failed to link due to missing common startup and multicore scheduling symbols); maintainers set the adaptation rule of “choose either device model or no device model”; that evening the contributor verified two companion patches on ESP32-C3 hardware, with both C3 and C6 compiling cleanly with zero warnings; on 10-15 at 11:51 a libcpu-level refactoring commit (6bf3686) was pushed, and tracking ticket #11246 was refreshed in sync.
  • Technical scope of the refactoring commit: introduces an optional unified RISC-V common layer (RV32 and RV64), using ARCH_RISCV and ARCH_CPU_64BIT for architecture and bit-width selection, unifying context, trap, MMU, cache, timer, SBI, SMP, and ISA handling, adding PLIC, CLIC, ACLINT, APLIC, and IMSIC support, establishing a mapping table from physical HART ID to logical CPU ID while retaining T-Head vendor override branches; qemu-virt64-riscv becomes the first BSP to adopt the new common layer (the same directory supports both RV32 and RV64 S-mode), while existing BSPs that do not select the RT_USING_RISCV_NEW_COMMON macro continue to use the legacy_common and common64 paths.
  • Networking and memory: #11815 expanded from macro control to four submission groups — DNS cleanup, DHCP startup, buffer options, and WLAN lifecycle — before merging; #11772’s ASan proposal adds libc interface wrappers and boundary test cases on top of existing heap instrumentation and QEMU CI coverage.
  • Board-level and peripherals: #11844 (ESP32-S3 board support) completed automated review remediation (mutex macro expansion, UART0 interrupt allocation level); the remaining build failure was judged to be a pre-existing upstream issue, and manual re-review has been requested; #11860 (aarch64 GIC) saw in-depth discussion on removing the redundant GICD_ICPENDR write before EOI, with the author providing measurements showing that keeping it causes a completion interrupt loss in roughly 19 to 33 inferences, while removing it yields zero failures across 480,000 inferences.
  • Tooling and conventions: the author of #11743 (automatic Keil and IAR target selection) responded to two re-review comments; #11859 (clang-format rule consolidation) added two more commits and demonstrated the actual effect using thread.c; #11812 was reopened by a maintainer and then merged; #11869 (DFS code collision disambiguation) was newly opened, distinguishing commands by parameter form and synchronously reworking both dfs_v1 and dfs_v2 implementations.
  • Beginner tasks activated: the menuconfig task in #7530 was claimed by a contributor for the efm32 subtask (adding Kconfig and .config), and #11867 was opened just 1 minute after the claim.

Release-Day Check: Next RISC-V and v5.4.0 (10-16 ~ 10-17)

Date: 2026-10-17 09:43 to 16:42　Source: PR #10320

  • Merge facts: #10320 was merged by maintainer Rbb666 at 10-17 09:44:27, with base master and head next_riscv, 4 commits, 165 files, +15134/-2617; the merge commit is 8d8dc96, titled “[ARCH/RISC-V] Next RISC-V (#10320)”.
  • Version action: one minute before the merge, at 09:43:51, #11875 “[kernel] Bump version to v5.4.0” landed, with the version macro in include/rtdef.h set to 5.4.0; the releases and tags pages still show v5.3.0 (09-10) as latest, and the ChangeLog still stops at v5.3.0.
  • Migration path: the unified common layer is introduced as an optional feature, with qemu-virt64-riscv the first BSP to adopt it; existing BSPs remain on the legacy path, so migration can proceed platform by platform.
  • Also finalized in the same period: #11871 upgrades hpm_sdk to v1.13.0 and adds hpm5100evk support; #11872 removes redundant paths from the touch driver’s global CPPPATH.
  • Toolchain: the Env repository merged PR #302 on 10-17 (built-in documentation navigation in WebUI), then bumped the version number to v2.0.3; the Release page still shows v2.0.2 (09-16) as latest.

III. Ecosystem and Vendor Adaptation

Vendor BSPs and Drivers

Date: 2026-10-12 ~ 2026-10-17　Source: PR #11851

  • Renesas: ra6w1 system resource allocation optimization merged (#11814), main thread stack adjusted to 4096.
  • Espressif ESP32 family: ESP32-C3 fixed IRAM wildcard matching under Windows paths and Bluetooth linker script mismatching (#11847); ESP32-C6 SPI support merged (#11846, 10-16); ESP32-S3 board support (#11844) completed automated review remediation, awaiting manual re-review.
  • STMicroelectronics STM32: STM32H723-DM-MC02 added SPI6 BDMA support (#11851); stack alignment across all BSPs changed to ALIGN(8) (#11841, carried over from the start of the period, 110 files).
  • Nations N32: N32H47x_48x and N32H49x timer completion merged (#11812, 39 files +3956/-105, with PWM and quadrature encoder extended in sync); n32h7xx_std_driver fixed ECC status reading in the FEMC driver on 10-14, switching to the standard FEMC_ECC_LAST_ constant family.
  • GigaDevice GD32: GD32G553 DMA proposal (downstream PR #72) completed review response, 4 commits, 13 files, +1082/-167; the build bot reported full compilation passing across 32 GD32 BSPs (carried over from the start of the period).
  • XHSC: Studio SDK index added BSP entries for three evaluation boards — HC32F467, HC32F4A2, HC32F4A8 (submitted 10-10, carried over from the start of the period).
  • HPMicro: hpm_sdk v1.13.0 index merged on the packages side (#2045); the main repository BSP was upgraded to v1.13.0 on 10-17 with added hpm5100evk support (#11871).

Packages and Middleware

Date: 2026-10-13 ~ 2026-10-15　Source: PR #2045

  • lwip segment content macro control merged (10-15, 6 files +188/-28): WLAN AP lifecycle synchronized with the direct-receive path, buffer option configuration and PBUF tailroom reservation, DHCP startup logic optimization, DNS configuration cleanup on disconnect in STA mode, and compile macro cleanup.
  • Package index: hpm_sdk v1.13.0 proposal #2045 merged on 10-14 at 18:41, the first entry in the index repository in half a month (the previous was 09-24); added the PKG_USING_HPM_SDK_V113 configuration, with the default version remaining v1.10.0 and requiring explicit selection; upstream rtt-pkg-hpm-sdk was tagged v1.13.0 on 10-13 at 16:05, adding HPM5151 and HPM5100EVK support.
  • Debugging ecosystem: third-party GDB framework GDR released 2026.04 (10-13), adding adapter auto-detection (reporting exact, range, or undetected confidence based on matching symbols, version source, and layout fingerprints) and gdr init auto; supports interpretation of 3.1.x, 4.0.x, and 4.1.x kernel objects, with RV64 supported since 4.0.4 and Cortex-A9 verified on hardware.

Toolchain and Development Environment

Date: 2026-10-12 ~ 2026-10-17　Source: Env PR #302

  • Build tools: builds now exit non-zero when the toolchain directory is missing (#11863); Eclipse target generation introduced an SCM metadata directory manifest (#11787).
  • Env: quiet in the first half of the week (most recent commit 10-09); PR #302 (built-in documentation navigation in WebUI) merged on 10-17 and the version bumped to v2.0.3, while the latest on the Releases page remains v2.0.2.
  • RT-Thread Studio: no pushes in the sdk-index window, most recent still the three XHSC board entries from 10-10; no pushes in the other component repositories.
  • N32 device drivers: n32h7xx_std_driver merged the FEMC ECC constant usage fix on 10-14.

Verification Notes

  • env, packages, the Studio SDK index, and GD32 downstream had no pushes in the 10-12 to 10-16 window; their most recent activity was 10-09, 10-14, 10-10, and 09-28 respectively; pushes within the window to Zephyr-oriented repositories in the GD32 organization are outside the scope of this issue.
  • topic:rt-thread ecosystem search: zlgopen/awtk is a general GUI improvement (not dedicated), and h120d-protocol only has README updates with a questionable repository form; neither is included.
  • No new versions on the main repository’s Releases or Tags pages this week; the official website’s news list page is dynamically rendered on the frontend and cannot be directly verified.

IV. Official and Community Activities

Industry Monthly Reports and Expo Recaps

Dates: 2026-10-11, 10-15　Source: Community September Retrospective Monthly Report

  • Community September Retrospective Monthly Report (10-11): Two main threads — the v5.3.0 release and the hardware ecosystem. On the release side, it records Rust components, device tree (DM), DVFS and VirtIO 1.2 support, plus new BSPs for Raspberry Pi 5 and DAMO XuanTie C908X. On the hardware side, it tracks the three-stage progression of Gino Pi (GD32H77D) from teaser to launch to adaptation, and the OpenMV 5.0.1 update for Titan Mini (RA8P1). Project data: 57 commits and 20 contributors in September; mainline development version v5.3.1.
  • CIIF AI Car Workshop Recap (10-15): The 10-13 Shanghai session had participants working in pairs with dozens of smart car teaching kits, completing hardware checks, system boot, peripheral debugging, real-time control, SLAM mapping, autonomous navigation, camera calibration, multimodal visual following and a comprehensive AR exercise. The article explains the AIOS hybrid deployment concept (AI inference runs on the Linux side, high-reliability real-time control is handled by the RT-Thread kernel); the event also showcased robots, drones and industrial control equipment built on the same foundation, and cites cumulative installations exceeding 2.5 billion units.

Teaching Platforms and Competition Projects

Dates: 2026-10-12 ~ 2026-10-15　Source: Virtualization Hybrid Deployment Teaching Platform

  • Virtualization Hybrid Deployment Teaching Platform (10-13): Rockchip HyperCar runs Linux with ROS 2 and RT-Thread dual domains simultaneously on a single RK3588 chip; HyperBoot handles boot, isolation and resource allocation, and the two domains cooperate via a virtual network and micro-ROS — the Linux side carries perception, decision-making and application orchestration, while the RT-Thread side handles hard real-time chassis execution. It ships with four module categories — basic control, mapping and navigation, vision services and robotic arm — totaling 16 cases and a three-stage training path.
  • 2026 Embedded Competition Project Posts (5 this week): Portable debugger (GD32H759IM, 7-inch touchscreen, serial, CAN, dual-channel oscilloscope and DDS signal generator); Muyu Xinsheng smart assistive device for elderly Alzheimer’s patients (GD32H759I-EVAL plus K230 vision, closed loop of watching, remembering, protecting and accompanying); GD32H759IM USB secondary display plus OV2640 camera two-in-one (RT-Thread 4.1.1 plus LVGL 9.5); GD32H7-based multifunctional environmental monitoring and local data logger (RT-Thread 5.3.0 plus LVGL 8.3.11); Shuheng Zhiyang adaptive multi-mode physiotherapy robotic arm (GD32H759I-EVAL plus K230 acupoint solving).

Forum and Official Channels

  • Forum discussion: “Can rtthread borrow some features from zephyr” continued to receive interaction throughout the week. The poster started from Studio usage experience and suggested referencing Zephyr’s lightweight approach to reduce the maintenance burden of graphical configuration; the forum API does not provide reply bodies, so only activity is recorded this week.
  • Official news API: No new items for the 53rd through 57th consecutive days; the latest archived post remains 2026-06-17. Product and event information continues to debut via the WeChat official account, community forum and GitHub channels.

Device-Edge Collaboration and Elderly-Care Robotics

Dates: 2026-10-12, 10-15　Source: Device-Edge Collaborative Dexterous Robotic Arm Tech Talk

  • Device-Edge Collaborative Dexterous Robotic Arm (10-12): Open-sourced project that won an RT-Thread AIoT Competition award — using Titan Board (Renesas RA8P1, Cortex-M85 plus Ethos-U55 NPU) as the sole control core, a 17-class gesture recognition model is quantized to INT8 and compiled via RUHMI and Vela into a single all-NPU subgraph (all 107 operators mapped to Ethos-U55), with a single inference taking about 77 to 78 ms. The author shares engineering lessons on staged startup of D-cache and OSPI clocks, merging WiFi and NPU projects, and low-bandwidth streaming with TinyJPEG.
  • Shuheng Zhiyang Physiotherapy Robotic Arm (10-15): The K230 vision side extracts 17 skeletal keypoints in real time and solves for 3D acupoint coordinates; GD32H759I-EVAL performs inverse kinematics and drives four-DOF bus servos for bionic massage, with adaptive following of subtle body movement. The cloud side runs SpringBoot services with intelligent consultation, and safety mechanisms include angle limits, parameter validation, state machine management and emergency stop.

Board-Level Porting and Industry Narrative

Dates: 2026-10-15 ~ 2026-10-16　Source: sf8086 project repository

  • SiFli SF32LB525 Board FreeDOS Port (10-15 to 10-16): A community developer ported the 8086tiny emulator to the RT-Thread-based Huangshan Pi (Cortex-M33) development board, with the BIOS, boot floppy and Turbo C 2.01 toolchain all resident in firmware; drive A is a RAM disk (about 144 KB) rebuilt from flash on each boot and can run DOS tools such as EDIT, DEBUG and ZIP; the RT-Thread shell and DOS console share UART1, with serial arbitration and terminal key mapping adaptations; 13 commits were pushed within the window.
  • Business trends: No new reports of commercial deployments, funding or orders this week; the industry narrative centers on AIOS hybrid deployment (Linux-side inference plus RT-Thread real-time control) and expanding board-level support for domestic MCUs (GD32H7, N32, HC32, HPM5100, SF32LB525).

VI. Trend Observations

  • RISC-V completes the leap from proposal to mainline: #10320, under review for five months, was merged as an optional common layer, with qemu-virt64-riscv onboarded first and existing BSPs retaining the legacy path — migration will proceed platform by platform, with no risk of a full switch in the short term, but the RISC-V architecture stack now enters a period of parallel old and new tracks. Version numbers landed ahead of releases (both v5.4.0 and Env v2.0.3 were only bumped, not released); the next issue should verify official releases against the release page and ChangeLog.
  • Merges arrive in batch windows: 8 of this week’s 15 merges landed within 64 minutes on 10-14, following roughly 46 hours of silence — maintainers are draining the review queue in windows, so single-day merge counts are no longer a suitable sole indicator of activity; interaction density on pending proposals should also be considered.
  • Security audit focus shifts to new components: 9PFS, introduced in 2025-12, exposed a remote denial of service and an out-of-bounds read for the first time, alongside the ASan proposal and boundary fixes in calloc, USB host, ofw and DHCP — memory and protocol-parsing security became the week’s most concentrated technical theme.
  • Contributor pipeline expands and response chains shorten: the ping divide-by-zero defect took about 9 days from report to merge, and a second case was claimed by a new contributor the same day; a menuconfig newcomer task was claimed and a proposal produced within 1 minute after months of inactivity; the 9PFS audit was completed independently by a community researcher with disassembly evidence — review burden is shifting from a single maintainer to community division of labor.
  • Domestic MCU ecosystem density continues to rise: all 5 competition projects this week are based on GD32H7; N32 timer completion and FEMC fixes, three XHSC boards entering Studio, and hpm_sdk v1.13.0’s index and BSP landing in both directions — domestic platforms have moved from “it runs” to competition over toolchain completeness.
  • Official channels silent for the 57th day; community channels are the only external window: the news API has been dormant since 06-17, with external information carried by the forum, competition projects and industry media; monthly reports and CIIF recaps still use third-party media as their publishing vehicle, and the absence of official first-party channels continues to lengthen.

Appendix: Sources and Verification

Source Inventory

Issue Date Effective Window Items Included
Issue 1 2026-10-12 (Mon) 10-10 10:30 to 10-12 08:00 (~45.5 hours) 17
Issue 2 2026-10-13 (Tue) 10-12 08:00 to 10-13 08:00 (24 hours) 12
Issue 3 2026-10-14 (Wed) 10-13 08:00 to 10-14 08:00 (24 hours) 14
Issue 4 2026-10-15 (Thu) 10-14 08:00 to 10-15 13:30 (~29 hours, failure re-run) 14
Issue 5 2026-10-16 (Fri) 10-15 13:30 to 10-16 08:00 (~18.5 hours) 11
  • All five daily issues are present with no missing dates; the Thursday issue was generated late because both the scheduled run and the manual re-run aborted in sequence, so its window was extended accordingly; the Friday issue starts from that delayed cutoff, hence is shorter than 24 hours.
  • The weekly report body merges same-topic items from the five daily issues; the total item count differs from the table above, which is normal consolidation.

Verification Notes

  • Publish-date verification: On 2026-10-17, item-by-item live checks were performed on the GitHub main repository master commit stream, PR statuses (#10320, #11846, #11847, #11855, #11875, #11871, #11872), the releases and tags pages, and the commit streams of the Env and packages repositories; verification cutoff was before 17:00 on 10-17.
  • Version basis: v5.4.0 is the measured value of the version macro in include/rtdef.h (5.4.0); the official Release, tags, and ChangeLog have not been updated, so the text consistently states “version number bumped, not yet released”; the same applies to Env v2.0.3.
  • Items not included: the re-promotion article for the six-city tour offline event (a continuation of the 09-27 announcement, no new information), the x86 vs. Arm vs. RISC-V industrial edge architecture comparison article (off-topic), the Bokente industrial expo new-product article (core reading contained no substantive RT-Thread content), zlgopen/awtk and h120d-protocol, and the riscv.org DAMO interview article (RISC-V topic).
  • Channel limitations: direct access to the EET-China original site was restricted; related articles were read and compiled via search services and the site’s list channel; the official website news list page is front-end dynamically rendered, so data is based on the official news API; multiple Google News queries in Chinese and English and HN Algolia searches found no new valid English articles this week.

Complete Source List

Data sources: Daily RT-Thread intelligence briefings (five issues from 2026-10-12 to 2026-10-16) and publish-date verification for this period; reporting period is 2026-10-12 to 2026-10-16. Suggested next weekly report period: 2026-10-19 ~ 2026-10-23.