Releasesby GlyphAperture
Use Aperture ( beta ) to secure and manage your LLM agents with a single control plane across all your providers and models. New: Create custom guardrails with pre-LLM-call hooks to strip or block PII and restrict specific agent tools before requests reach the LLM.
Also shipped Apr 23, 2026Tailscale in April 2026 →
Plan Access Tokens (PLANTs) are now in beta
Plan Access Tokens (PLANTs) are now in beta , a new authentication method for server-to-server integrations and internal automation.
FOCUS: Standardized Cost and Usage Data
Access and analyze Grafana Cloud cost and usage data using the open FOCUS standard We’re excited to announce the general availability of FOCUS support in the Cost Management and Billing app! FOCUS (FinOps Open Cost and Usage Specification) is an open industry standard for cloud cost and usage data.
NeMo NVIDIA Neural Modules 2.7.3
Highlights This release addresses known security issues. For the latest NVIDIA Vulnerability Disclosure Information visit https://www.nvidia.com/en-us/security/ , for acknowledgement please reach out to the NVIDIA PSIRT team at PSIRT@nvidia.com Uncategorized: Changelog beep boop 🤖: Bumping nemo to v2.7.3 by @nemo-automation-bot[bot] :: PR: #15552 remove...
Weights & Biases 0.26.1
Added Api methods returning artifacts, registries, automations, and related paginators now accept an optional start argument to resume iteration from a saved cursor ( @tonyyli-wandb in #11651 ) The stop_fn setting to customize how a run is stopped ( @timoffex in #11773 ) Allows overriding the default of sending a SIGINT to the Python process Changed Unified...
Nova-3 Model Update
🌏 Nova-3 now supports Gujarati with the following language codes: Gujarati: gu , gu-IN Access this model by setting model="nova-3" and the relevant language code in your request. Learn more about Nova-3 and supported languages on the Models and Language Overview page.
Access - AAGUID restrictions and AMR matching for Access independent MFA
Independent MFA in Cloudflare Access now supports two additional organization-level controls: Restrict authenticators by AAGUID , Limit enrollment to a specific set of WebAuthn authenticators using their AAGUID ↗ . This is useful for organizations that require FIPS-validated security keys or company-issued hardware.
More from TailscaleEvery Tailscale release →
Access API-only tailnets with OAuth clients
- New: API-only tailnets can be accessed by any OAuth client with the all scope in the creating tailnet.
Seat calculator
- New: A seat calculator is available to help you understand seat consumption on your account before upgrading to a new plan.
GitOps for Tailscale with GitHub Actions v1.5.2
A new release of GitOps for Tailscale with GitHub Actions is available. You can download it from the GitHub Actions Marketplace . Fixed: Update dependencies to remove Node 20 deprecation warning.
View device posture status
- New: View the device posture status of a machine in your tailnet by using the Machines page of the admin console.
New pricing and packaging
- Changed: New tailnet plan signups are billed based on occupied user seats instead of monthly active users. Existing tailnets on a legacy plan will continue to be billed based on monthly active users. Changed: All plans can have an unlimited number of user devices in a tailnet.
Tailscale container image v1.96.5
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . New: Services are now automatically advertised on startup. This can be disabled by setting the new environment variable, TS_EXPERIMENTAL_SERVICE_AUTO_ADVERTISEMENT , to false .
Tailscale Kubernetes Operator v1.96.5
A new release of the Tailscale Kubernetes Operator is available. For guidance on installing and updating, refer to our installation instructions . New: Ingress and Egress ProxyGroup pods are able to request a new authkey when required. New: Multiple tailnet access can be enabled with the use of the new Tailnet custom resource.
Tailscale tsrecorder v1.96.5
A new release of the Tailscale tsrecorder is available. You can download it from Docker Hub . Changed: The Recorder CRD defaults to deploying a single replica StatefulSet, using the filesystem storage backend`.