GitHub adds three webhook IP ranges — static firewall allowlists need updating
Three new GitHub webhook CIDR blocks can break deliveries to tightly firewalled endpoints unless static allowlists are updated.
Search
Search results for “GENERATE_IMAGE_EXTRACTION OPTED_OUT”
Find published research by company, product, platform or technology.
Showing 261–280 of 531 dossiers
Rust 1.98.1 and 1.99.1 fix separate compiler miscompilations — rebuild affected binaries
The October 15 Rust 1.99.1 release fixes a separate FFI bool miscompilation after September's 1.98.1 vtable bug. Check toolchain pins and rebuild artifacts produced by either affected compiler.
Web DevelopmentMarketing & DistributionDeveloper ToolsMarketplaces & PlatformsConversion & AnalyticsActive dossier
Shopify lets apps put their own metrics inside merchant Analytics reports
Shopify apps can now expose standard and custom activity in merchant Analytics, with 30-day attribute breakdowns and 365-day aggregate metrics.
Ahrefs tracks 37,500 AI citations: half vanish overnight, but most return
Ahrefs tracked roughly 37,500 cited websites for 20 days and found high daily citation churn, frequent recoveries and major differences between AI tools.
WordPress 7.1.4 patches an upgrade-window RCE — sites on 7.1.3 should update
WordPress 7.1.4 is a new security release; 7.1.3 is no longer the latest patched 7.1 build. Operators should update promptly.
Shopify lets theme developers bundle paid app add-ons in Theme Store listings
Shopify theme authors can now bundle one paid app add-on per theme listing, opening a new monetisation route with app review and ownership restrictions.
TanStack AI 1.0 stabilises its provider-neutral SDK — but the agent harness is still experimental
The three-maintainer TanStack AI project has reached stable 1.0 for its core SDK, with 23 providers; its long-running agent harness is not yet stable.
Google opens Connected Apps Platform preview for MCP tools inside Search and Gemini
Developers can submit tool integrations to Google Search and Gemini using MCP, but access is phased, users must connect apps, and Google reviews submissions.
GitHub Enterprise now offers Copilot with no extra seat fee — but no included AI credits
GitHub Enterprise customers can trade Copilot seat fees for usage-only billing. The key catch: zero included credits, staged eligibility and voluntary migration.
PostgreSQL Anonymizer 3.3 patches 12 masking bypasses — upgrades require more than a version bump
PostgreSQL Anonymizer 3.3 fixes a dozen privacy and privilege flaws. Its migration is unusually sensitive: no ALTER EXTENSION UPDATE, possible salt exposure, and new restrictions on masking functions.
GitHub Copilot SDK gains organisation-owned server-to-server authentication for agents
GitHub Apps can now authenticate Copilot SDK workloads without a user's credentials. Organisation admins control installation permissions, usage attribution and budgets.
Artificial IntelligenceWeb DevelopmentJavaScriptAI CodingBrowsers & Web StandardsDeveloper ToolsActive dossier
Google's AI bug hunter finds different V8 flaws from fuzzing — Project Zero says keep both
A six-month real-world comparison shows AI code-review agents and specialised fuzzers find substantially different V8 vulnerabilities. Replacing fuzzing with agents would leave gaps, and cost per bug remains unknown.
Shopify sets offline-token cutoff dates and adds IP restrictions for public apps
Public Shopify apps must migrate legacy offline tokens by January 1, 2027. Enforcement now has explicit stages and new developer security controls.
Artificial IntelligenceWeb DevelopmentSaaSCloud & InfrastructureAI AgentsSaaS OperationsDeveloper ToolsObservabilityActive dossier
MLflow CrewAI tracing leaked API keys into telemetry — upgrading does not remove old secrets
MLflow CrewAI autologging silently logged API keys; 3.17.0 patches it, but previously exported traces and keys still need remediation.
Artificial IntelligenceCloud & InfrastructureAI AgentsCloud PlatformsDeployment & DevOpsActive dossier
Cloudflare Computer 0.7 lets agent code survive crashes and pause for approval — but replay can repeat writes
Cloudflare Computer 0.7 makes agent code resumable and interruptible. The important catch: recovery replays code, and unrecorded external actions can be repeated even if they already succeeded.
GitHub Copilot adds model-judged permissions to its GA agent sandbox — with unattended-run traps
Copilot now offers model-reviewed action approvals between manual and Allow All. Unlike OS sandboxing, this probabilistic gate can approve unsafe operations; unattended CLI flags may leave unexpectedly broad permissions.
pg_ivm 1.17 repairs PostgreSQL incremental-view restore bugs that could duplicate maintenance triggers
pg_ivm 1.17 fixes restore state, duplicated incremental-maintenance triggers and upgrade metadata handling, plus index inference and LATERAL crash bugs.
Artificial IntelligenceCloud & InfrastructureCloud PlatformsCompute & AI InfrastructureInference & APIsActive dossier
Cloudflare's Workers AI leaked 155 cross-tenant responses through SGLang KV cache — operators should patch
Cloudflare discloses cross-tenant GLM-5.3 Workers AI responses caused by a KV-cache rejection bug; SGLang v0.5.22 is recommended for disaggregated inference operators.
Artificial IntelligenceCloud & InfrastructureCompute & AI InfrastructureOpen ModelsInference & APIsActive dossier
TorchNeuron makes AWS Trainium a native PyTorch device — with substantial beta operator gaps
TorchNeuron changes the software portability equation for Trainium, making it easier to test non-NVIDIA AI accelerators without rewriting the model stack. Beta gaps still demand model-by-model verification.
Shopify will stop storefront ScriptTags in March 2027 — new writes fail from October
With no planned installation banner, apps should identify affected merchants and handle the migration proactively; Shopify's alternative theme app embeds still require activation on the published theme.