Browsers, standards, languages, platforms and developer tools.
Showing 21–40 of 41 dossiers
Cursor is moving its cloud agents beyond manually started coding tasks. Event subscriptions can now trigger work from pull requests, Slack and schedules; agents can retain a goal across runs and delegate to isolated subagents. Cursor is also beta-testing Origin, its own code-hosting layer, tightening the loop between repository events and autonomous coding work.
Codex 0.149.0 includes the async-message tool, delivery metadata and removal of the client-side feature gate that BTN previously tracked only on main. Parallel human-agent work is now in a stable client, but late replies can still race with decisions and model capability metadata remains the final exposure gate.
GitHub Copilot for JetBrains now honors enterprise-managed settings for MCP allowlists, plugin marketplaces, OpenTelemetry routing and bypass/autopilot restrictions, giving security and platform teams enforceable controls across another major IDE family.
GitHub’s new token-type controls let responders revoke PATs, SSH keys, OAuth app tokens or GitHub App user tokens selectively instead of invalidating every credential belonging to a user.
Vercel KMS moves asymmetric signing into a managed service with per-environment grants, claim constraints and public JWKS endpoints, reducing secret-handling risk for apps issuing JWTs from serverless code.
Adobe Commerce and Magento merchants should treat CVE-2026-71362 as an urgent patch: independent security telemetry reports exploitation attempts even though Adobe’s bulletin still says it has not observed exploitation in the wild.
Vercel KMS gives Functions OIDC-authenticated access to managed RSA, ECDSA and EdDSA signing keys. Builders can scope grants by project and environment, constrain JWT claims with JSON Schema, rotate keys centrally and publish standard OIDC/JWKS metadata for verification outside Vercel.
The new tracing path gives Supabase requests a shared trace_id across browser or app spans and backend logs, with support for OpenTelemetry-compatible tooling. For JavaScript users, the practical detail is a required upgrade to supabase-js 2.112.0 or later because 2.106.0 through 2.111.x silently failed to propagate headers in bundled applications.
WordPress 7.1 is now generally available. Its always-iframed post editor removes a long-standing split between iframe and non-iframe contexts, while browser-side image processing moves more media work out of PHP and into WebAssembly.
Chrome starts a two-week stable cadence with Chrome 153 in September 2026, while Firefox begins its transition with Firefox 155 Beta. Web teams should expect faster browser-version turnover and adjust CI, beta testing and enterprise support assumptions accordingly.
Shopify’s August 26 deadline is a concrete compatibility cutoff for non-Plus stores. Legacy Thank you and Order status customizations must be rebuilt with supported blocks, web pixels or app pixels, or the automatic upgrade can break analytics and post-purchase behavior.
GitHub Spark stops being available to existing users on August 31, 2026. Deployed apps are meant to keep running, but owners should export code to a repository now; Spark apps using `llm()` need a separate inference provider because the underlying GitHub Models service retired July 30.
Agent Plugins 1.0 now has documented support across VS Code, Cursor, GitHub Copilot, ChatGPT/Codex, Kiro and several open-source agents. That makes the format materially more useful for cross-client distribution, but portable components remain limited to Agent Skills and MCP servers while permissions, hooks, commands and host UX stay client-specific.
GitHub OAuth apps can now use eight-hour access tokens with rotating refresh tokens, register up to 10 callback URLs, and explicitly control wildcard callback matching. New apps default to expiring tokens, while existing single-callback apps should review a legacy wildcard setting GitHub has now made visible.
WordPress 7.0.4 fixes CVE-2026-65640, a CVSS 8.8 remote code execution flaw affecting installations that process malicious PostScript uploads through Imagick and Ghostscript. Fixes have also been backported to branches as old as 4.7.
npm v12 disables dependency lifecycle scripts, Git dependencies and remote-URL dependencies by default unless projects explicitly allow them; sensitive npm account and package changes can no longer use bypass-2FA granular access tokens.
Gemini 3.7 Flash is now generally available with a 1M-token context window, tunable reasoning, stronger coding and agentic performance, and introductory API pricing of $0.75 per million input tokens and $3.75 per million output tokens through December 31, 2026.
GitHub Issues now gives agent automations confidence levels, rationales and optional approvals, letting teams automate routine triage while holding uncertain changes for review.
Vercel Agent can now investigate production issues, reason over logs and deployments, and take approved actions such as opening a PR or rolling back a deployment.
Gemini API Managed Agents now combine Gemini 3.7 Flash by default with environment hooks, token budgets, scheduled triggers and persistent sandboxes — a much more production-shaped agent runtime.
The web platform moves through browser releases, standards work, frameworks, hosting changes and the tools developers use every day. This beat covers browsers, JavaScript, PHP, WordPress, developer tooling and AI-assisted development when the change has a practical effect on shipping websites and products.
BTN looks past release-note volume to find the developments that change capability, compatibility, security, cost or workflow. The aim is a clear explanation a working developer or small product team can use, with direct links to the documentation and announcements behind it.