Ahrefs' 66.6-million-response study finds most free ChatGPT answers never search the web
New AI-search data highlight the value of original product information while showing why one-size-fits-all GEO advice is risky.
Search
Search results for “open core distribution”
Find published research by company, product, platform or technology.
Showing 261–280 of 301 dossiers
Google Local Services Ads now charge some missed calls after 20 seconds
A missed call can now become a billable Google Local Services Ads lead. Advertisers should review phone routing, business hours and the 30-day credit window rather than assuming only answered calls count.
Pgpool-II patches seven watchdog and certificate-authentication vulnerabilities
Pgpool-II operators should upgrade to the October 1 security releases and review watchdog network exposure and certificate-authentication configuration.
Panda CSS 2.0 moves style extraction to Rust and makes design systems publishable
Panda CSS 2.0 keeps the familiar styling API but changes the compiler, minimum Node version and how teams can distribute design systems.
Cloudflare gives Free and Pro sites a full month of traffic and security analytics
Small sites can now compare a full month of HTTP, security and DNS activity without upgrading Cloudflare plans. The October 2 change applies to adaptive analytics, not every dataset.
Shopify 2026-10 API is now stable — with breaking customer-segment and discount-rollout changes
The October Shopify API is now production-stable. Apps adopting it must audit financial mutations, removed GraphQL fields, customer-segment filters and discount rollout schedules rather than relying on the earlier release-candidate checklist.
Google's DV360 Structured Data Files v11 changes ad targeting and requires CSV migration
DV360's new bulk-campaign file format isn't a drop-in CSV upgrade: targeting expands, YouTube vendor columns change, and API support lags the interface. Integrators should audit parsers before migrating.
Web DevelopmentSaaSMarketing & DistributionSaaS OperationsDeveloper ToolsMarketplaces & PlatformsActive dossier
Shopify makes Next Gen Events generally available — a declarative alternative to webhooks
Shopify's new Events system can send the change and the data your app needs in one delivery. It's a significant alternative to classic webhooks, but not a forced shutdown or universal replacement yet.
Shopify Global Catalog REST API shuts down November 2 — agents must migrate to UCP MCP
Shopify is turning off its old cross-merchant catalog REST API on November 2. The replacement is a UCP-compatible MCP server, not a renamed URL: agents must remap tools, payloads and saved-catalog identifiers.
Artificial IntelligenceWeb DevelopmentSaaSPricing & BillingAI AgentsAI SaaSDeveloper ToolsActive dossier
Atlassian will meter Rovo MCP and Teamwork Graph context calls from December 3
From December 3, agent workflows that ask Atlassian's Teamwork Graph for cross-product context will need a cost budget. Most enriched tool calls use 1–10 Rovo credits, with paid overages at $0.01 per credit.
Google Ads can now pull promotions from your website and put them into ads
Automated promotions make the advertiser's own website a source for ad assets. Google can find an offer, validate it and surface it without a marketer manually creating the promotion.
SaaSIndie BusinessMarketing & DistributionSEO & SearchGEO & AI SearchIndie SaaSProduct & GrowthConversion & AnalyticsActive dossier
DocsBot says better customers are barely offsetting a shrinking signup funnel
The useful small-SaaS lesson is not that SEO is dead or AI search has won. DocsBot’s own numbers show how a channel can remain the largest share of conversions while the total funnel underneath it shrinks, and how 'Direct' can conceal the discovery path that actually influenced a sale.
Paddle brings recurring Pix payments to SaaS subscriptions in Brazil
Brazilian customers can authorize Pix Automático mandates for Paddle subscriptions without a separate early-access application. The path broadens local-payment access for SaaS, while delayed renewals, fixed mandate amounts and re-authorisation requirements still create implementation caveats.
Google Search Console now separates generative-AI and multimodal visibility from ordinary text search
Search Console now separates both generative-AI visibility and multimodal image-led searches, giving publishers a clearer first-party view of how content is discovered outside conventional typed queries.
Laravel Vet puts a trust gate in front of Composer dependency updates
Vet turns dependency updates from an implicit trust decision into an explicit, reviewable one for Laravel, Symfony, WordPress and plain PHP projects, with optional local coding-agent review layered underneath the human trust decision.
Keycloak patches a critical password-reset flaw that can let unauthenticated attackers take over any account
This is an identity-system failure rather than an application bug: a vulnerable Keycloak deployment can let an attacker turn the legitimate “forgot password” flow into full account takeover without credentials or victim interaction. Upgrade is the proper fix; disabling Forgot Password in every realm is Red Hat’s temporary mitigation.
Twilio now blocks new Toll-Free messaging verifications without public privacy and terms URLs
A previously preparatory compliance field is now an operative delivery gate. Builders automating Toll-Free onboarding need to collect, validate and submit policy URLs as part of registration rather than treating them as optional metadata.
Cognition’s Fusion uses a frontier lead and cheaper sidekick to cut coding-agent task cost
Fusion is interesting less as another routing feature than as a different agent-cost architecture: two persistent model contexts divide planning, review and execution instead of making one expensive model handle every token. The practical question for builders is shifting from token price to cost per completed task.
A maintainer’s infected Mac pushed XCSSET into legitimate Flutter packages on pub.dev
The important signal is the infection path. A trusted maintainer can unknowingly become the supply-chain carrier when malware modifies project and build files before a normal package publish, so publisher identity alone does not prove the artifact matches the maintainer’s intent.
Shopify variants can now carry 20 barcodes — and single-barcode integrations can silently miss data
The migration risk is subtle: nothing breaks immediately, yet ERP, marketplace, POS and supplier integrations can become incomplete as soon as merchants start attaching multiple UPC, EAN, GTIN, ISBN or ASIN identifiers to one variant.