Releasesby IbisPlatform API Update: OAuth Session Resource
Update3 days agoUnverifiedAdded Oct 22, 2026
We updated the Heroku Platform API schema and reference documentation to include OAuth Session operations. Use this resource and endpoints to list and manage the active OAuth sessions for your user account. New Resource: OAuth Session : Represents a group of OAuth access and refresh tokens for an account.
Topics: Security, Developer tools
More Heroku releases
Every Heroku releasePython 3.15.1, 3.14.9 and 3.13.17 are now available
Python 3.15.1, 3.14.9 and 3.13.17 are now available for use by Python apps on Heroku. In addition, we have updated the Python 3.15, 3.14 and 3.13 major version aliases to resolve to these new Python patch versions.
PHP updates - October 2026 (CVE-2026-109618 and CVE-2026-109619)
PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 fix two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619 (see the PHP security advisory and blog post ). Redeploy your apps to pick up the fixed versions.
Node.js 26.12.1, 24.22.1, and 22.23.4 now available
Node.js versions 26.12.1, 24.22.1, and 22.23.4 have been made available for builds on Heroku. For additional information, please see our article on Node.js Support .
Python buildpacks updated to pip 26.2.2, Pipenv 2026.10.2 and uv 0.13.4
We have updated the package managers used during the build of Python apps as follows: pip updated from 26.2.1 to 26.2.2 ( changelog ) uv updated from 0.13.1 to 0.13.4 ( changelog ) And for Cedar-generation Python apps only: Pipenv updated from 2026.9.1 to 2026.10.2 ( changelog )
Heroku-22, Heroku-24 and Heroku-26 stacks updated
We have updated the heroku-22 , heroku-24 and heroku-26 stacks to pick up security and bug fixes in upstream packages. The new base images for each stack will roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces .
Ruby version 4.0.8 is now available
Ruby v4.0.8 is now available on Heroku. To run your app using this version of Ruby, add the following ruby directive to your Gemfile: ruby "4.0.8" For more information on Ruby 4.0.8, you can view the release announcement .
Heroku-22, Heroku-24 and Heroku-26 stacks updated
We have updated the heroku-22 , heroku-24 and heroku-26 stacks to pick up security and bug fixes in upstream packages. The new base images for each stack will roll out automatically to the Common Runtime over the next 48 hours, followed by Private Spaces .
Go 1.27.3 and 1.26.10 are now available
Go 1.27.3 and 1.26.10 are now available for use by Go apps on Heroku. In addition, we have updated the Go 1.27 and 1.26 version aliases to resolve to these new Go patch versions. See Go Versions for details on how to configure the Go version for your app.
Also shipped on Oct 21, 2026
Heroku in October 20262026.10.09
The voice catalog grows from about 390 to more than 1,400 voices. The 1,035 new voices span all five languages and 29 accents, for use cases from customer service to characters. Browse them in the Studio voice library or read the announcement . Also new in Studio : Preview samples: a voice can have several preview samples, each reading a different sentence.
The AI.CHUNK_DOCUMENT function is a table-valued function that splits unstructured documents into...
The AI.CHUNK_DOCUMENT function is a table-valued function that splits unstructured documents into semantically coherent text chunks optimized for vector embeddings and Retrieval-Augmented Generation (RAG) workflows. This function is generally available (GA).
Automated cataloging and ingestion of Looker (Google Cloud core) metadata with Knowledge Catalog is now...
Automated cataloging and ingestion of Looker (Google Cloud core) metadata with Knowledge Catalog is now generally available (GA). This includes support for additional granular metadata (including dimension/measure definitions, default queries, and relationships) and new asset types: LookML dashboards, LookML dashboard elements, and agents.
Screen MCP tool calls and results for jailbreaks (Beta)
You can now screen MCP tool calls and their results in Unity Gateway for jailbreak and prompt injection attempts. Apply the Jailbreak guardrail on input, output, or both. See Attach a built-in policy .
[Launched] Generally Available: Azure Cosmos DB Safe Key Rotation
Safe Key Rotation for Azure Cosmos DB is now generally available. You can view timestamp metadata showing when each account key was last used, helping you identify active keys before rotating or retiring credentials.This visibility helps reduce the risk o
OpenAI models are coming to Google Cloud
OpenAI frontier models and Codex workflows are now available in Google Cloud's Model Garden via the Google Cloud Marketplace.