Open Source Summit North America 2025

InnerSource involves much more than just opening up the codebase for reuse & contribution. So much nuanced, time sensitive work is done by maintainers behind the scenes to nurture a community around an InnerSource project - answering queries from the community in a timely manner, finding & promoting project to right customers (potential contributors), maintaining regular communication & creating a safe space for community to provide feedback, to name a few. These activities require commitment by the maintainers. It may come naturally for those who are familiar with inclusive, open source ways of working. For teams new to InnerSource and/or not familiar with open source development models, there is a need for a mindset shift to open development models. What can prevent teams within the company from reusing and contributing to an InnerSource project? Will inclusivity matter while building an internal community? What factors in an InnerSource project affect this inclusiveness? Is there a difference in community building strategy between InnerSource and open source projects? In this talk, I will share my learnings on what works and what does not, while building internal communities.

The EU Cyber Resilience Act (CRA) aims to safeguard European consumers and at first glance it targets only the EU market. But in fact the entire OSS ecosystem falls under its scope, which could be scary not only for Manufacturers or Stewards, but also is seen harmful for Individual Developers. Let’s debunk some of those myths! To preserve CRA’s positive intention, we as a community work hard to make sure its implementation incentivizes contributors to become good Open-Source citizens.

During this session we will explore how CRA impacts all players in the OSS ecosystem and why Maintainers MUST keep going with their brilliant work and shouldn’t be afraid. We will discuss what we at foundations and various expert groups are doing to help the open-source community navigate the actual requirements, as well as what standards and tools are available right now, followed by useful examples. They will include samples, checklists, good practices and ideas how YOU can leverage: open-source tools like Security Scorecard, GUAC, Trustify, Minder, a few others; frameworks like Security Base Line; standards like OSCAL; collaborations like Global Cyber Policy WG.

The traditional view of open source sustainability often frames it as a choice: business value OR public good. We argue that this is a false dichotomy. Bloomberg's Open Source Program Office and Corporate Philanthropy team have partnered to develop a new template – one built on the power of "AND."

This presentation will explore how combining business value AND philanthropic impact creates a transformative approach to open source leadership. We'll share our strategic framework for achieving this "AND," demonstrating how it benefits companies, individuals, open source projects, and the world around us.

Join us to learn how to build similar partnerships within your organization and why corporate engagement in open source sustainability is more important now than ever to ensure the long-term health of the critical digital infrastructure underpinning our modern world.

This Birds of a Feather (BoF) session will focus on the growing intersection of open source and the automotive industry, highlighting the latest advancements, challenges, and opportunities for collaboration. As the automotive sector increasingly adopts open-source software, it is driving innovation in areas such as in-vehicle systems, autonomous driving, and vehicle connectivity. Key projects like Automotive Grade Linux (AGL) and the ELISA (Enabling Linux in Safety Applications) initiative are at the forefront of this transformation, providing open-source frameworks for developing scalable, secure, and reliable automotive software. This session will bring together developers, engineers, and enthusiasts to discuss how these initiatives are shaping the future of mobility and explore how open-source communities can work together to solve the unique challenges of the automotive domain.

Attendees will have the opportunity to share experiences, discuss key technical topics such as real-time operating systems, safety-critical systems, and compliance with automotive standards (e.g., ISO 26262), and explore potential new collaborations. The session will delve into the importance of open standards, the growing need for security in connected vehicles, and how projects like AGL and ELISA enable safer, more efficient automotive software development. By fostering cross-industry dialogue and strengthening the automotive open-source ecosystem, this session aims to inspire future collaborations that can help define the next generation of smart, connected, and autonomous vehicles.

Over the past decade, open source and developer education have evolved dramatically. This talk explores key trends shaping the landscape, from shifts in bootcamp models and messaging to the role of open source in learning pathways. We'll examine what has persisted, what has transformed, and what these changes mean for educators, industry leaders, and learners. Whether you're building developer education programs, contributing to open source learning initiatives, or navigating the intersection of both, this session will provide valuable insights into the forces driving the future of developer education.

Key Themes:
- The enduring role of open source as both a learning tool and a career accelerant
- The impact of AI on developer education and skills acquisition