GitLab patches a CVSS 10.0 CI/CD regex RCE — and five more high-severity flaws
CVE-2026-97229 carries GitLab's maximum 10.0 CVSS score. The 19.3 patch line requires 19.3.5, not the initially issued 19.3.4, because of an Ona integration regression.
Search
Search results for “landing-page automation”
Find published research by company, product, platform or technology.
Showing 181–200 of 209 dossiers
Render cuts Key Value prices by up to 45% and adds 3GB and 50GB Valkey tiers
Redis-compatible cache and queue costs have fallen across Render's 1GB-plus Key Value plans, with two new memory tiers and automatic repricing for existing customers.
Ahrefs' 66.6-million-response study finds most free ChatGPT answers never search the web
New AI-search data highlight the value of original product information while showing why one-size-fits-all GEO advice is risky.
DNS root key rollover puts stale validating resolvers at risk after October 11
The DNS root's scheduled October 11, 2026 KSK rollover exposes old or incorrectly restored validating resolvers. Check KSK-2024 trust-anchor adoption; this is not a change to website DNS records or a confirmed global outage.
Python 3.15 makes lazy imports and UTF-8 defaults real — with a new profiler and free-threaded ABI
Python 3.15 is out: lazy imports, UTF-8 defaults, Tachyon profiling and a stable ABI for free-threaded builds. The experimental JIT is faster in Python's benchmarks but isn't a blanket production speedup.
Cloudflare opens Quicksilver-backed KV Instant — fast global reads with $100-per-MB storage
Workers KV Instant is built for hot-path flags, not general storage: Cloudflare quotes 1.62ms p99 reads, $0.20 per million reads, $0.10 per write and $100 per MB each month. Private beta limits are strict.
Flathub replaces its AI-app ban with disclosure, but keeps AI out of submission manifests
Linux app developers no longer face an outright AI-generated-code exclusion, but they must identify affected code and documentation, write manifests without AI assistance and keep agents out of the submission workflow.
Together Link puts open models behind the coding-agent harnesses developers already use
Together Link connects six existing coding-agent/desktop harnesses to open models with reversible profiles, per-session routing and cost receipts. The important shift is portability at the harness boundary, not Together's unverified savings claim.
Google Search Console now separates generative-AI and multimodal visibility from ordinary text search
Search Console now separates both generative-AI visibility and multimodal image-led searches, giving publishers a clearer first-party view of how content is discovered outside conventional typed queries.
Meta Muse turns a consumer AI assistant into a persistent agent — and its first Mac zero-day tests the containment model
Muse packages persistent autonomous execution, credentials, payments, app access and memory into a mainstream consumer product. A September macOS hotfix now provides an early real-world lesson: agent containment has to protect not only the cloud runtime but also the local control path into the agent.
Azure Document Intelligence v2.0 API retires August 31 — old integrations need a version migration
Azure Document Intelligence v2.0 reaches retirement on August 31, 2026. Microsoft recommends moving workloads to the current v4.0 API; the post-v2 REST surface was redesigned, so teams should verify the actual api-version their SDK or HTTP client sends rather than assuming a package upgrade is enough.
Artificial IntelligenceWeb DevelopmentIndie BusinessAI ModelsAI CodingProduct EconomicsActive dossier
Google has absorbed Mechanize’s coding-eval team into DeepMind after $1.5B+ deal talks
Google appears to have completed a talent-focused Mechanize deal: the startup still exists, but much of the team that builds coding-agent training environments and evaluations has moved into Google’s model-development work.
A maintainer’s infected Mac pushed XCSSET into legitimate Flutter packages on pub.dev
The important signal is the infection path. A trusted maintainer can unknowingly become the supply-chain carrier when malware modifies project and build files before a normal package publish, so publisher identity alone does not prove the artifact matches the maintainer’s intent.
Gmail launches a verified political-sender deliverability program with a 0.3% spam-rate ceiling
The new program creates a specialized Gmail deliverability path for verified political senders, but it is not an inbox guarantee: recipients can still mark mail as spam, block senders or unsubscribe, and non-compliant domains can be suspended or removed.
X has replaced Creator Revenue Sharing with Original Content Rewards — and U.S. payouts now require X Money
X’s replacement creator program is now live enough to expose a new dependency: U.S. creators must route Original Content Rewards payouts through X Money, and one X Money account can connect to only one X account. Eligibility and qualified-impression rules remain unchanged.
Omarchy turns $1.95M in pledged AI credits into an open-source development budget
The interesting part is not another sponsorship total. DHH says Omarchy Quattro is already being built heavily with coding agents, and the token pledges are intended for debugging, security work and a 1,600-plus pull-request backlog. The dollar values are foundation-reported pledged credits, not audited cash spend.
Apple puts Intel-only Mac apps on a Rosetta end-of-life path
Rosetta’s transition is now an application compatibility deadline rather than an open-ended safety net. Intel-only Mac apps need an Apple-silicon build before support ends after macOS 27, with only a narrow exception retained for older unmaintained games.
Google Play opens lower-fee app programs — but only $1M+ developer groups can enroll for now
Approved apps can move from the standard 20%/25% non-recurring service-fee rates to 15%/20% for new/existing installs from September 30, before any applicable billing fee. Current enrollment is limited to developer account groups with at least $1 million in earnings over the previous 12 months.
Azure starts charging PostgreSQL 11–13 servers for Extended Support on September 1
Azure’s old PostgreSQL versions do not switch off on September 1, but they do become a paid legacy choice. Extended Support is automatic, billed by vCore-hour for running servers, and cannot be declined while an unsupported engine version remains in use.
Google has shut down Imagen 4 API endpoints
The Imagen 4 shutdown is now effective, not merely scheduled. Builders still calling the old model IDs need to migrate to current Gemini image generation, where model names and interaction patterns differ enough to warrant explicit compatibility testing.