API Key Management is now GA to all customers, regardless of plan. As before, only users with Manager or Admin roles will have access to these pages. A newly added Rotate function allows customers to self-serve legacy API key rotation. Secret Key support remains in closed beta, and its GA release will be announced at a future date.
We are pleased to announce that __API Access Policies for Applications__ is now Generally Available (GA) for all Auth0 customers. This feature allows you to specifically control which applications can request access tokens for your APIs, covering __both user and machine-to-machine access__.
Magic WAN and Magic Transit customers can use the Cloudflare dashboard to configure and manage BGP peering between their networks and their Magic routing table when using IPsec and GRE tunnel on-ramps (beta). Using BGP peering allows customers to: Automate the process of adding or removing networks and subnets.
AI Documentation MCP server available (Beta) If you use AI tools to work with Sigma and want to enrich agent behavior or questions with context about officially supported Sigma functionality, the Sigma documentation can now be accessed using the model context protocol (MCP) server at https://help.sigmacomputing.com/mcp .
Bug Fixes 🐞 Fix PrefectCloudEventsClient auth handshake breaking Cloud connections Cap concurrency limit retry-after to prevent excessive delays from burst traffic
The Hydrogen October 2025 release (v2025.10.0) is out. This release updates the Storefront API and Customer Account API to 2025-10 and adds new cart mutations that simplify multi-gift-card and multi-address checkout flows.
New device frames are now available for the latest iPhone models, making it easier to design and prototype for current devices.
Replay filters (events, tags, URLs, CSS selectors, etc.) can now be saved and reused later.
- New: Workload identity federation supports provider-native identity token authentication for GitOps for Tailscale with GitHub Actions and GitOps for Tailscale with GitLab CI . New: Token exchange error details for a federated identity can be found in the Trust credentials page of the admin console.
In case you missed it, an [open-source personal AI assistant](http://openclaw.ai/) went viral this week. It runs on your own machine and you can connect it to WhatsApp, Telegram, Discord, or whatever chat app you already use.
Neon Auth SDK simplified. We've released a major update to the server side Neon Auth SDK (@neondatabase/auth/next/server) for Next.js applications. Unified entr...
Added __CLI authentication:__ Added Vercel AI Gateway and Cline API key provider support for headless CI/automation workflows __New model:__ Added Kimi-K2.5 model to Moonshot provider (262K context, image support, prompt caching) __Prompt variant:__ Added Trinity Large prompt variant for improved tool-calling support __OpenTelemetry:__ Added support for...
PostHog Logs is now generally available, providing a centralized destination for logs alongside errors, session replays, and product data.
Enhancements ➕➕ - Support parsing TOML 1.0 on Python 3.11+ - Make runner cancellation observing critical to runner health - Reload root settings after running plugins to enable environment variable updates to take effect - Support IPv6 addresses in prefect server start - Add authentication to /api/events/in WebSocket endpoint Bug Fixes 🐞 - Add polling...
Out-of-the-Box Widgets let marketers and product managers add prebuilt elements like banners, CTAs, and messages directly from the Visual Editor, no code or deploys required. This removes engineering bottlenecks and accelerates website experimentation cycles.
We’re discouraging use of OrderTransaction.receiptJson . You should stop relying on receiptJson in production apps. receiptJson is gateway-defined , inconsistently shaped , and may change without notice . Because its structure isn’t stable or typed, changes can lead to unexpected app failures.
Time spent in individual statuses is now tracked and available throughout Linear. Hover over any issue's status indicator to see the cumulative time it's spent in each status. You can use this to spot where things are getting stuck, identify bottlenecks, and optimize your development process.
Here are some Agent Runners improvements that all people with Credit-based pricing plans can enjoy: Shareable agent run links You can now link directly to an agent run to share it with your team or bookmark for later review.
- quay.io/deepgram/self-hosted-api:release-260129 Equivalent image to: quay.io/deepgram/self-hosted-api:1.177.3 quay.io/deepgram/self-hosted-engine:release-260129 Equivalent image to: quay.io/deepgram/self-hosted-engine:3.107.0-1 Minimum required NVIDIA driver version: >=570.172.08 quay.io/deepgram/self-hosted-license-proxy:release-260129 Equivalent image...
- DuckDB 1.4.4: MotherDuck supports DuckDB 1.4.4, a bugfix release. Learn more in the official DuckDB Labs 1.4.4 announcement and changelog .
Admin UI extensions for Discount Functions can now interact with the selected discount method and manage discount classes, letting you customize the discount configuration experience directly within the Shopify admin. This is a non-breaking change that adds new functionality to existing discount UI extensions.
Create dashboard widgets directly from your Metrics queries
Instances & Networking MVP The console now includes a complete instances and networking workflow. Create and manage instances with full security group support, storage side panels, and quota visibility. Features Instances + networking MVP. Full instance actions and security group management Storage create side panel.
Description: Experiment Reports automatically generate a structured, AI-powered writeup of your experiment directly inside an Amplitude Notebook with a single click from the new Reports tab on an experiment.
We’re excited to introduce __Universal Custom Password Hash__ in Limited Early Access (EA), enabling user migrations into Auth0 without disrupting sign-ins - even when your existing system uses custom or legacy password formats.
Protect your data and control access to your New Relic organization by enabling multi-factor authentication (MFA). This feature allows administrators to add an essential layer of security to authentication domains, ensuring that users provide two or more verification factors to gain access.
The Figma for Google Workspace add-on now works with Google Chat, so you can stay on top of your Figma and FigJam work.
We have partnered with Black Forest Labs (BFL) again to bring their optimized FLUX.2 [klein] 9B model to Workers AI. This distilled model offers enhanced quality compared to the 4B variant, while maintaining cost-effective pricing.
12.33.0 (2026-01-28) Features oauth2: add EMAIL_ATTRIBUTE_PATH for configurable email extraction (90ab5ca) Bug Fixes move namespace package discovery before imports (e12fa87) Documentation updating phoenix nav (1e2ae4d)
- Add new model: Arcee Trinity Large Preview Add new model: Moonshot Kimi K2.5 Add MCP prompts support - prompts from connected MCP servers now appear in slash command autocomplete as /mcp: :
Devstral 2.0 has transitioned to paid API access.
As we continue to scale with large enterprise customers, we’re excited to announce GA for RBAC, giving admins more clarity, flexibility, and control over feature access across Amplitude.
The Glass effect is now generally available, with new updates that let you do more with Glass in Figma.
- Changed: Use Tailscale Services to decouple applications and services from the devices that host them ( generally available ).
A new Beta release for the macOS WARP client is now available on the beta releases downloads page . This release contains minor fixes and improvements. Changes and improvements Fixed an issue causing failure of the local network exclusion feature when configured with a timeout of 0 .
Supabase PrivateLink is now available, allowing users to connect to their Supabase database without using the public internet.
Starting with POS 10.19.0 , unhandled errors in extension callbacks trigger an error page instead of failing silently. This change ensures a more stable and predictable experience for merchants and helps developers identify issues proactively.
We are excited to offer a new alert enrichment feature for Grafana Cloud. Alert enrichments significantly enhance your experience by providing richer context directly within the alert notification.
Key Information for Users Action Required: None. These updates are purely cosmetic and will be applied automatically to your workspace. Operational Continuity: Your existing alert conditions, workflows, and account permissions will continue to function without interruption.
Seer AI debugger now catches issues in PRs, explains what broke in prod, and fixes what you missed.
🌐 Nova-3 Now Supports Arabic and all major Arabic dialects We're excited to announce the release of the Nova-3 Arabic monolingual model , which now brings industry-leading speech-to-text support for Arabic and its major dialects!
12.32.0 (2026-01-27) Features add phoenix-ci/SKILL.md (3686228) add tool invocation accuracy metric (d1c89bf) evals skill (68ac6fb) tracing skill (d91a52b) Bug Fixes cost: update built-in model token prices (422250a) keyboard form submission of dataset creation (7b5b680) update links to typescript documentation (5c7664d) Documentation coding agents...
Added Native tool calls support for Ollama provider Sonnet 4.5 is now the default Amazon Bedrock model id Fixed Prevent infinite retry loops when replace_in_file fails repeatedly. The system now detects repeated failures and provides better guidance to break out of retry cycles. Skip diff error UI handling during streaming to prevent flickering.
A denial-of-service (DoS) vulnerability (CVE-2026-23864, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause memory exhaustion or excessive CPU consumption.
pg_graphql will be disabled by default on new Supabase projects and on existing projects older than 30 days with zero GraphQL traffic. It can be re-enabled via Database Extensions.
Dedicated ISP Proxies are now available in the self-service dashboard. This new proxy type provides fully dedicated, static IPs sourced from premium ISP providers and the ability to freely choose your preferred ASNs. Dedicated ISP proxies offer top-tier speed, stable connections, maximum customizability, and unlimited-duration sessions.
Description: We replaced the single CTA 'required' tooltip with per-input error messages and borders, so forms with multiple survey inputs now clearly show which specific fields are required. This makes validation much clearer and harder to miss. Where: G&S builder page -> add survey input -> make required Available in EUDC: Yes When: Available now
As of January 26, 2026, Checkout UI extensions that support blocking now default to non-blocking behavior. To enable blocking, merchants must explicitly activate the Allow app to block checkout setting in the checkout and accounts editor.
A self-hosted solution to store all your Resend webhook events in your own database.
Control build caching behavior on EAS with environment variables to speed up subsequent builds by up to 30%.
Prompt to turn conversations, documents, and images into visual diagrams to break down complexity and visualize the bigger picture.
This week’s release introduces new detections for denial-of-service attempts targeting React CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ). Key Findings CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ) affects react-server-dom-parcel , react-server-dom-turbopack , and react-server-dom-webpack packages.
We have made the following changes to open-instruct: Added - Added OLMo-core based DPO training script (). - Added SLURM scripts for OLMo SFT training with checkpoint resume support and configurable shuffle seed. - Added retry logic with exponential backoff to make_api_request for tool API calls (retries on timeouts, connection errors, 429, and 5xx).
Admin Use other supported IdPs for Databricks OAuth via OAuth token federation Using OAuth token federation, you can now use other supported identity providers to authenticate to Databricks. Previously, you could only authenticate with Databricks as your identity provider. See Configure Databricks OAuth token federation for more information.
- Expanded MCP Server support: The MotherDuck remote MCP Server now supports Warp , PearAI , Trae , Void , Positron , Supermaven , Aider , and JetBrains IDEs . Use your favorite AI assistant to answer questions about your data through natural conversation. See the MCP Server documentation to get started.
Enhancements ➕➕ - Add FlowRunFilterCreatedBy - Add retry logic for PrefectEventsClient.__aenter__() initial connection Bug Fixes 🐞 - Move flow run heartbeat event emission to flow run engine - Fix websocket cleanup AttributeError in event clients - Add warning when sync task with timeout runs in worker thread - Prevent GitHub token leakage in git error...
There has been a long running edge-case in our analytics browser SDK where user data is erroneously being written to one cookie and read from another (e.g.: being written to example.com and then being read from .example.com ).
As of Shopify CLI 3.89, you now have more control over the types of extension and configuration updates that should be allowed in your automated app releases. This allows developers to be more confident in the safety of CI/CD pipelines and other app deployment automation.
Shopify26
Fastly1
Releasesby Glyph