• Improved curl resiliency in falco-driver-loader! https://github.com/falcosecurity/falco/pull/2336
• Mesos support is now being deprecated; a deprecation notice warning has been added: https://github.com/falcosecurity/falco/pull/2328
• Added a new --version-json cmdline switch to print version info in json format -> https://github.com/falcosecurity/falco/pull/2331
• Rule loading validation results has been improved: https://github.com/falcosecurity/falco/pull/2344

• added support for generic events! https://github.com/falcosecurity/libs/pull/814
• Added mlock , mlock2 , mlockall and munlockall support! https://github.com/falcosecurity/libs/pull/797
• Modern bpf framework keeps being ported to other drivers! https://github.com/falcosecurity/libs/pull/813 (and we are nearing the end!)
• Moreover, Openssl has been updated to 1.1.1q-> https://github.com/falcosecurity/libs/pull/822
• Finally, a NULL ptr dereference was fixed! https://github.com/falcosecurity/libs/pull/818

• Another take on supporting adaptive syscalls set from ruleset is being tried! https://github.com/falcosecurity/libs/pull/826
• Support for variable number of ring buffers and online CPUs is coming down fast: https://github.com/falcosecurity/libs/pull/820
• @jasondellaluce has proposed himself as a Libs maintainer  https://github.com/falcosecurity/libs/pull/829
• On Falco, a fix on grpc server shutdown was made, and needs testers! https://github.com/falcosecurity/falco/pull/2350
• About --version-json : Jason is working on superseeding it by enforcing json when json_output config is enabled: https://github.com/falcosecurity/falco/pull/2351
• Allow Falco to filter for generic events: https://github.com/falcosecurity/falco/pull/234

From the ecosystem, Falcosidekick 2.27.0 and Falcosidekick-UI v2.1.0 were also released!

Finally, we are focused on delivering Falco 0.34 for the end of January; libs will need a 0.10.1 tag, with some minor fixes, mostly to the modern bpf probe.