Self-hosted Supabase now defaults to Envoy instead of Kong
Supabase’s self-hosted stack now routes through Envoy by default, bringing new API-key support and hardened gateway defaults while breaking some Kong-specific assumptions.
Search
Search results for “open-model distribution”
Find published research by company, product, platform or technology.
Showing 301–320 of 448 dossiers
Astro 7.2 can skip unchanged static pages instead of rebuilding them all
Astro 7.2’s experimental incremental-build mode attacks the page-generation phase rather than only bundling speed. Large static sites can opt routes into cache-aware reuse, but teams must choose correct cache keys and persist Astro’s cache directory in CI to benefit safely.
PHP2Shell patches are out: two critical PHP core RCE flaws require immediate upgrades
The October 21 PHP emergency patches are now available. Update every web-serving runtime; temporary configuration mitigations do not fully address the flaws.
Shopify will stop storefront ScriptTags in March 2027 — new writes fail from October
The checkout ScriptTag shutdown already had an earlier deadline; this is the separate storefront cutoff. Pinning an old Admin API version will not preserve write access after October, and any feature still depending on an injected storefront script stops working in March.
Google Merchant Center adds product warranty data as Quebec's new disclosure rules take effect
Retailers can now submit warranty duration as structured product-feed data, but the new Google field does not replace Quebec's mandatory near-price disclosures or the underlying free repair guarantee.
Google Ads is replacing more manual Search controls with AI Max
Google’s September Search changes now form a broader migration story: legacy campaign-level Broad Match and standalone Automatically Created Assets settings will be converted into AI Max, while language targeting stops affecting Search delivery and related API mutations begin failing.
PIE 1.5 turns PHP extension installs into repeatable multi-package deployment steps
PHP's official extension installer can now install multiple packages in one command and select missing project extensions without prompting. PIE 1.5 also improves attestation verification for its own updates.
Microsoft Advertising makes AI Max the default starting point for new Search campaigns
Microsoft’s Search automation has moved from a limited test into a default campaign-creation path. Advertisers can still switch AI Max off, but new Search campaigns now begin with a suite that can expand queries, creative and landing-page routing beyond the manually supplied keyword-and-ad structure.
Microsoft Advertising is removing Max CPC from new standalone automated campaigns
Microsoft Advertising is taking Max CPC out of new standalone automated campaigns from October 1. Existing capped campaigns and portfolio strategies retain the control for now, but advertisers creating new campaigns will need to rely more heavily on conversion targets, budgets and portfolio bidding.
Intercom adds an eval-and-release pipeline for changing Fin safely
Fin’s new Evals and Releases features let teams test agent changes against simulated conversations before publishing, bundle configuration into a release, ramp traffic or A/B test it, and feed failures from live Monitors back into the next iteration.
PHP security release fixes an IPv6 FastCGI ACL bypass across every supported branch
The sharpest operational trap is CVE-2026-91768: PHP-FPM’s listen.allowed_clients can treat an allowed IPv6 address as an entire /96 prefix. Teams relying on that ACL should patch rather than assuming the configured address restriction is exact.
Cloudflare’s AI crawler controls can now preserve search while refusing training
Cloudflare’s crawler controls now distinguish between refusing AI training and refusing the crawler itself. The new Disallow AI Training option is designed to keep search discoverability while expressing a training opt-out to operators that meet Cloudflare’s Accountable requirements.
Gmail launches a verified political-sender deliverability program with a 0.3% spam-rate ceiling
The new program creates a specialized Gmail deliverability path for verified political senders, but it is not an inbox guarantee: recipients can still mark mail as spam, block senders or unsubscribe, and non-compliant domains can be suspended or removed.
Artificial IntelligenceSaaSMarketing & DistributionAI AgentsProduct & GrowthConversion & AnalyticsActive dossier
Mixpanel AI can now investigate why a product metric changed and return the result as a working Board
Product teams can launch a root-cause investigation from an Insights report, an alert or Mixpanel Agent instead of manually trying breakdown after breakdown. The result is operationally useful, but it remains an automated statistical diagnosis rather than proof of causation.
Postmark webhooks can now verify themselves and pause only the failing event type
The change turns webhook reliability from a mostly passive retry problem into an inspectable operational surface: configuration tests, event-specific failure state, owner alerts and health endpoints give email systems earlier warning when downstream integrations are broken.
Bun 1.4 rewrites the runtime in Rust and moves closer to Node.js 26 compatibility
Bun 1.4 combines an implementation-language rewrite with a larger built-in standard library and a substantial Node-compatibility push. For teams already running Bun, the practical task is to validate native addons, runtime behavior and workload-specific performance rather than treating this as a drop-in minor upgrade.
Effect 4.0 rebuilds the TypeScript runtime around a zero-dependency core and LTS
Effect 4's performance and LTS claims remain, but 4.0.2 explicitly marks some formerly unlabelled APIs unstable without changing their current behavior, signatures or types.
Marketing & DistributionSEO & SearchGEO & AI SearchPaid AcquisitionConversion & AnalyticsActive dossier
Google starts testing AI Mode ads for users who connect Gmail and Photos context
Google reversed its earlier ad-free approach to Personal Intelligence in AI Mode. Connected-app-derived insights may influence ads, with testing scope and advertiser controls still unclear.
Shopify Cart and Checkout MCP now carry buyer consent — and missing SMS data can block an agent purchase
Agent checkout builders using UCP 2026-08-25 can now negotiate consent options, propagate customer choices and handle missing-data warnings instead of hardcoding merchant privacy defaults.
Shopify Hydrogen 2026-10 goes GA as a framework-neutral commerce library
Hydrogen 2026-10 is generally available as a JavaScript commerce library with React Router and Next.js starters and examples for other frameworks. Existing Hydrogen storefronts still work; migration is optional.