October 29, 2026

📰 EVENING NEWSLETTER DIGEST

Thursday, October 29, 2026, ~7:05 PM PDT — covers Wed Oct 28, 7:02 PM → Thu Oct 29, 7:02 PM PDT (24 hours, since the last digest on Wednesday evening)

NEWSLETTERS REVIEWED THIS PERIOD (18 emails): The New York Times — Breaking News ×2 (Patrick Stewart, 4:50 PM ET; Israel final results, 8:33 PM ET) and The Evening (5:56 PM ET); The Globe and Mail — Breaking News ×6 (Brewers World Series, Wed night; national-security plan; Ontario deficit; Cohere stake; McCarthy Tétrault breach; Patrick Stewart), Morning Update, On Money; Capital Daily; TLDR; TLDR Dev; 1440 Daily Digest; The Economist — This Week; Node Weekly #645. (One Globe travel promo — a Mediterranean cruise — skipped.)

Timing guide: 1440, Globe Morning Update, TLDR, TLDR Dev and Capital Daily recap Wednesday and overnight; the Globe breaking alerts, The Evening and NYT alerts report Thursday. The Economist and Node Weekly are weekly. Last night's digest ended about 7:02 PM Wednesday.

🗞️ GENERAL SUMMARY & TOP HIGHLIGHTS

Picking up from last night's digest (Wed Oct 28, ~7:05 PM), which led with the Bank of Canada hike, the Spain train crash, Israel's election deadlock and midterm angles.

↻ Israel: the count is final and there is no winner. Last night had the vote still being tallied. The Times' evening alert now says final results give Netanyahu's party and allies 53 seats, short of a majority, with the Eisenkot-led opposition bloc on 48 — setting up weeks of coalition uncertainty. The Economist's leader urges Israel's Jewish and Arab opposition parties to work together and move fast to dislodge Netanyahu.

↻ Brazil: Trump aides helped Flávio Bolsonaro flee. Last night he was reported in Miami with U.S. visas; the Times now reports Trump and aides helped him leave Brazil after he lost Sunday's runoff to Lula by about 4.4M votes (1440). The Bolsonaro camp has not conceded, and Brazil's Supreme Court had ordered his passport surrendered. The Economist's most-read list includes "Markets dismayed by Lula's surprise win."

New today — Canada. Ottawa released its first national-security strategy in 20+ years, the 13-page "Plan for a Stronger Canada", vowing to prepare for all contingencies "including war" and naming eight sectors from critical minerals to defence; a new foreign policy is due in about a month. Ottawa also bought a $1.6B stake in Cohere as the AI firm closed most of a $7B round at a $35.7B valuation, led by Germany's Schwarz Group. Ontario's fall statement projects a $16.9B deficit for 2026-27 (up from $13.8B in March), blaming U.S. tariffs and higher oil prices, with balance now pushed to 2029-30. And a major data breach at McCarthy Tétrault reportedly exposed client files — one source says 31,000 were stolen.

↻ Continuing from last night. Bank of Canada: the 2.5% hike (covered last night) is now the personal-finance story — the Globe's On Money warns lines of credit are fair-weather friends (a quarter-point adds ~$12/month on a $60K balance), and the Morning Update repeats that oil-driven inflation could force more hikes. Canada–EU: the Montreal summit began; the Morning Update confirms the "associate member" label was dropped in favour of "ever closer association," and Carney says it launches more negotiations over the coming year. Stelco/Cliffs: the Morning Update adds that Minister Joly threatens a forced sale over alleged 2024 job-commitment breaches, while Cliffs' CEO says Stelco isn't for sale for at least a year (the 175-worker recall pledge was in last night's digest).

↻ Spain rail crash. The toll now stands at at least 69 dead, and The Evening says investigators are focusing on train traffic controllers; 1440 adds a computer malfunction took down the safety system over ~39 miles of the Madrid–Seville line (last night: 68).

US economy and midterms (Nov. 3). The Evening: Q3 GDP grew at 3.4%, the fastest in a year, on AI spending and consumers, with the saving rate down to 4.1% — and Christine Lagarde will step down as ECB head. 1440 recaps the Fed holding at 3.75%–4% with two dissenters wanting a hike (Wed). On the campaign: the Justice Dept. issued grand jury subpoenas to LA County voting officials for a proceeding the morning after Election Day; ↻ on the Alaska story from last night, Alaska's governor ordered a criminal investigation into Mary Peltola's campaign; the Times says the mood at the White House is grim. The Economist's cover package: Latino and Asian swing voters may decide the midterms; its forecast is here.

Business and tech. DoorDash will buy Instacart for $17B; Google shares fell 10% as Q3 search ad growth slowed; Apple's touchscreen OLED MacBook Pro (↻ last night had the M6 refresh) and Google's Gemini 4 Carbon (88.2% SEC-bench Pro, limited access) dominate TLDR. A Times exclusive says Nvidia's CEO was the target of a Chinese spy plot.

Culture and sport. ↻ The World Series ended: the Brewers won their first title, beating the Rays 4–1 in Game 5 Wednesday night (last night they led 3–1). Patrick Stewart died at 86 — announced Thursday, died Wednesday of Alzheimer's and Lewy body dementia. Dolores Huerta's death (covered last night) is repeated in 1440.

⚡ UNUSUAL & OVERLOOKED STORIES

• A possible new dwarf planet beyond Pluto, 2026 ED138 — roughly 370–930 miles wide on a ~281-year orbit, possibly among the largest in the solar system. 🔗 Read more
• Your 9-bit AES key: PDF encryption randomness is often so weak that protected PDFs can be decrypted without the password. 🔗 Read more
• A fingerprinting script hides "bioweapon" prompts to trip LLM safety filters while it quietly harvests ordinary browser and WebGL signals. 🔗 Read more
• An AI agent ran the same successful SQL query 254 times — Funnel's cautionary tale about bounds on repetition. 🔗 Read more
• Stone Age caves suggest cannibalism of cadavers as food (three caves). 🔗 Read more
• After 28 years and 31,000 miles, Karl Bushby is almost home — he expects to reach his mother's house in England next week. 🔗 Read more
• Comets probably didn't deliver life's molecules — too fast, too steep an angle, says a new study. 🔗 Read more
• Flash memory prices have quintupled as AI demand squeezes Apple, which used to pay pennies. 🔗 Read more
• Victoria turns down a bequeathed $2.7M waterfront home meant to become a park; conversion would cost ~$3.5M. 🔗 Read more
• CTE likely in 3 of 4 deceased ex-NFL players studied (75% vs 0.6% of the general population). 🔗 Read more
• Virgin Galactic's Apeiron rolled onto a runway in Arizona; first commercial flight now eyed for early Q2 2027. 🔗 Read more
• African politics through music: The Economist on how artists have captured a continental spirit of revolt. 🔗 Read more

🌲 NATURAL RESOURCE SECTOR & WEB DEV SPOTLIGHT

Resources, energy & policy

• NEW — Canada's national-security strategy (Thu Oct 29): the plan targets eight sectors including critical minerals, which matters for mining and resource clients; five sub-policies (defence, foreign affairs, economic security, public safety, intelligence) are to follow. 🔗 Read more
• NEW — Ontario deficit widens to $16.9B (Thu): U.S. tariffs and higher oil prices halve expected growth; balance slips to 2029-30 (fourth delay since 2024). 🔗 Read more
• ↻ Stelco/Cliffs: Joly threatens a forced sale over 2024 job commitments; Cliffs' CEO says not for sale for at least a year. 🔗 Read more
• ↻ Oil-price inflation: the Bank of Canada warns high oil prices could force more hikes; On Money notes the Iran war is coming for heating-oil bills via high diesel prices. 🔗 Read more
• NEW — Louisiana shrimping industry struggles (cheap imports, rising costs) — an agriculture/fisheries data point. 🔗 Read more
• NEW — Ottawa takes a $1.6B equity stake in Cohere: a signal of government appetite for sovereign AI, relevant to digital-transformation pitches. 🔗 Read more
• ↻ Canada–EU summit (critical minerals and digital-trade cooperation continues despite the dropped label). 🔗 Read more

Web dev & tech

• Node.js 26 'Lithium' is now Active LTS (support through April 2029); Node 24 moves to maintenance; Node 27's first alpha is imminent. 🔗 Read more
• October Node security releases fix ten CVEs including a Brotli decoder flaw ("Node2Shell") that can allow remote code execution — patch 26.12.1 / 24.22.1 / 22.23.4. 🔗 Read more
• body-parser denial of service: trailing bytes after a gzipped body can crash an Express process; fixed in 2.4.0 and 1.20.9. 🔗 Read more
• Ship less JavaScript with Next.js 16.4's agent skill — Vercel cut nearly 2 MB compressed across v0 and vercel.com. 🔗 Read more
• The AI cost of JavaScript frameworks: Hono+htmx, Astro and Nuxt are cheapest for agents to build with, though variance limits the ranking. 🔗 Read more
• Tooling: GitHub Actions workflow lockfiles are now GA; Verdaccio 7.0 adds staged publishing and 2FA. 🔗 Actions · Releases
• OpenTelemetry JS 3.0 (dual ESM/CJS builds) — useful for environmental-monitoring backends. 🔗 Read more
• Slack Code API lets agents start code channels and post updates with visible approvals. 🔗 Read more
• Website migration costs are heading to zero as AI agents take over migrations; lock-in shifts to contracts and agent memory. 🔗 Read more
• Local-first means three different things (offline, optimistic UI, data ownership) — relevant to field-data apps with poor connectivity. 🔗 Read more
• Nuxt DevTools v4 and Vercel CI beta (2–6× faster push-to-passed-check). 🔗 Nuxt · Vercel CI