--- title: WebKit Igalia Periodical #79 | daily.dev description: Weekly WebKit development digest covering fixes and changes from September 21-28, including the first security advisory (WSA-2026-0006) covering the recent... canonical: https://daily.dev/posts/webkit-igalia-periodical-79-gxxxtxag6 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: WebKit Igalia Periodical #79 | daily.dev og:description: Weekly WebKit development digest covering fixes and changes from September 21-28, including the first security advisory (WSA-2026-0006) covering the recent... og:url: https://daily.dev/posts/webkit-igalia-periodical-79-gxxxtxag6 og:image: https://api.daily.dev/og/posts/gxXXtxAG6.png og:image:alt: WebKit Igalia Periodical #79 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # WebKit Igalia Periodical #79 **[Planet Igalia](https://daily.dev/sources/planet-igalia)** · 4 min read · 0 upvotes · 0 comments ## Summary Weekly WebKit development digest covering fixes and changes from September 21-28, including the first security advisory (WSA-2026-0006) covering the recent 2.54.0 stable releases, which for the first time also covers bundled ANGLE and Skia library vulnerabilities. SharedArrayBuffer has been re-enabled for WPE and GTK ports with cross-origin isolation support. Multiple graphics fixes address 3D-transform rendering bugs, damage region clipping, Skia compositor artifacts, and touch input offset issues in the GTK port. The WPE Platform API build option has been removed since it is now always enabled by default. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does WebKitGTK security advisory WSA-2026-0006 cover? WSA-2026-0006 covers security issues fixed in the WebKitGTK and WPE WebKit 2.54.0 stable releases, and for the first time also includes security issues fixed in the bundled ANGLE and Skia libraries. Updating to the latest stable release is recommended for anyone running these engines. _Track browser engine security advisories like this one on daily.dev to patch before exposure widens._ ### Is SharedArrayBuffer enabled in WebKitGTK and WPE WebKit? Yes, SharedArrayBuffer has been enabled for both the WPE and GTK ports of WebKit. It is exposed only when the origin is cross-origin isolated, matching 35 associated cross-origin isolation tests that were added alongside the change, with initialization designed to also work with Android service-launched processes. _Developers relying on SharedArrayBuffer across engines can follow port-specific rollout details on daily.dev._ ### Has the WPE Platform API replaced libwpe in WPE WebKit? Yes, the ENABLE_WPE_PLATFORM build option has been removed because the new WPE Platform API, enabled by default since version 2.54, is now always enabled. This new platform API supersedes the older libwpe and WPE backend usage entirely. _Anyone migrating off libwpe onto the WPE Platform API can follow related engine changes on daily.dev._ ## Similar posts on daily.dev - [Release Notes for Safari Technology Preview 238](https://daily.dev/posts/release-notes-for-safari-technology-preview-238-nui8ncsfj) · WebKit · 0 upvotes · 0 comments - [This Month in Ladybird](https://daily.dev/posts/this-month-in-ladybird-wmtgqhzgv) · Hacker News · 12 upvotes · 2 comments - [Skia compositor for WPE WebKit and WebKitGTK](https://daily.dev/posts/skia-compositor-for-wpe-webkit-and-webkitgtk-mgfjf2btc) · Planet Igalia · 0 upvotes · 0 comments - [New to the web platform in February](https://daily.dev/posts/new-to-the-web-platform-in-february-sbi8yurhp) · web.dev · 2 upvotes · 0 comments --- Tags: [#safari](https://daily.dev/tags/safari) [View this post on daily.dev](https://daily.dev/posts/webkit-igalia-periodical-79-gxxxtxag6) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"WebKit Igalia Periodical #79","url":"https://daily.dev/posts/webkit-igalia-periodical-79-gxxxtxag6","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/webkit-igalia-periodical-79-gxxxtxag6"},"datePublished":"2026-09-29T01:01:32.451Z","dateModified":"2026-09-29T01:01:56.665Z","description":"Weekly WebKit development digest covering fixes and changes from September 21-28, including the first security advisory (WSA-2026-0006) covering the recent...","image":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","thumbnailUrl":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","isAccessibleForFree":true,"articleSection":"Planet Igalia","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Planet Igalia","logo":"https://media.daily.dev/image/upload/s--84VSWNwZ--/f_auto,q_auto/v1789890204/logos/planet-igalia?_a=BAMAMicg0","url":"https://daily.dev/sources/planet-igalia"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/webkit-igalia-periodical-79-gxxxtxag6","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"safari","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Planet Igalia","item":"https://daily.dev/sources/planet-igalia"},{"@type":"ListItem","position":3,"name":"WebKit Igalia Periodical #79"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/webkit-igalia-periodical-79-gxxxtxag6#faq","mainEntity":[{"@type":"Question","name":"What does WebKitGTK security advisory WSA-2026-0006 cover?","acceptedAnswer":{"@type":"Answer","text":"WSA-2026-0006 covers security issues fixed in the WebKitGTK and WPE WebKit 2.54.0 stable releases, and for the first time also includes security issues fixed in the bundled ANGLE and Skia libraries. Updating to the latest stable release is recommended for anyone running these engines. Track browser engine security advisories like this one on daily.dev to patch before exposure widens."}},{"@type":"Question","name":"Is SharedArrayBuffer enabled in WebKitGTK and WPE WebKit?","acceptedAnswer":{"@type":"Answer","text":"Yes, SharedArrayBuffer has been enabled for both the WPE and GTK ports of WebKit. It is exposed only when the origin is cross-origin isolated, matching 35 associated cross-origin isolation tests that were added alongside the change, with initialization designed to also work with Android service-launched processes. Developers relying on SharedArrayBuffer across engines can follow port-specific rollout details on daily.dev."}},{"@type":"Question","name":"Has the WPE Platform API replaced libwpe in WPE WebKit?","acceptedAnswer":{"@type":"Answer","text":"Yes, the ENABLE_WPE_PLATFORM build option has been removed because the new WPE Platform API, enabled by default since version 2.54, is now always enabled. This new platform API supersedes the older libwpe and WPE backend usage entirely. Anyone migrating off libwpe onto the WPE Platform API can follow related engine changes on daily.dev."}}]} ```