GitHub Actions workflow lockfiles reach general availability across Free, Team and Enterprise Cloud
GitHub Actions dependency lockfiles are now GA, turning the October preview into a supported workflow-integrity control across eligible plans.
Search
Search results for “agent inference cost”
Find published research by company, product, platform or technology.
Showing 321–340 of 349 dossiers
eMudhra weak CA keys were used to forge certificates within hours — Cloudflare finds many clients still accept them
Cloudflare saw roughly 22,000 weak-chain TLS handshakes, about 160 unusual forged certificates and 50 million skewed challenge-page probes. The data indicate continuing exposure, not 22,000 successful attacks.
Shopify lets theme developers bundle paid app add-ons in Theme Store listings
Shopify theme authors can now bundle one paid app add-on per theme listing, opening a new monetisation route with app review and ownership restrictions.
Bun 1.4.4 adds a built-in formatter that reads Prettier configs — but output is not always identical
Bun 1.4.4 introduces bun fmt, accelerates bun check and preserves Yarn Berry lockfiles during migration. Teams should test formatter output and unsupported plugins before replacing Prettier in CI.
Stripe Radar now bills more screened renewals and payment methods — without raising the per-screen rate
Stripe Radar Standard, Plus and Pro merchants need to recheck renewal-screening settings and invoice volume. Radar Lite remains included with standard processing, and only transactions actually screened incur paid-tier screening fees.
Google's DV360 API v5 beta breaks inventory IDs and moves Customer Match writes to Data Manager
Google released DV360 API v5 in public beta on October 22. Integrators need to remap inventory deals and auction packages, update Demand Gen/YouTube audience logic, and move Customer Match writes to the Data Manager API.
Grafana Marketplace opens a paid plugin channel for specialist observability developers
At ObservabilityCON 2026, Grafana opened paid plugin distribution to verified partners. Cloud customers can trial and subscribe to integrations on their Grafana bill; partner maintenance and security requirements are part of the model.
Apple extends App Store moderation to AI-generated content and tightens hidden-feature rules
AI image and social-app developers face clearer moderation and review obligations; hiding features can threaten an entire developer account.
Firefox Enterprise 158 puts browser policy, data controls and AI governance on customer-run infrastructure
Firefox Enterprise 158 combines a Gecko-based browser with an on-premises management console, domain-level DLP and SIEM export. Initial sales focus on four European countries; ESR support and public pricing are not yet available.
Stripe can now keep a Postgres copy of payments and subscriptions up to date — without webhook plumbing
Stripe's new Postgres destination gives SaaS teams a managed payment-data mirror, not a zero-latency replacement for every webhook.
Cloudflare Gateway can now run Workers inside web-security traffic — without a separate proxy
The October 15 Gateway/Workers integration turns a secure web gateway into an application-specific programmable proxy. Teams gain custom request/response handling, but must account for inspection order, WebSocket exclusions and standard Workers billing.
Apple’s EU payment rules are live — RevenueCat automates alternative checkout reporting
Apple’s EU payment rules are operational, not future-tense. RevenueCat reduces transaction reporting work for eligible alternative checkouts; the fees, App Review, 12-month commitment and uncertain in-app-sheet rollout remain.
Coolify 4.4 adds built-in traffic analytics, external secrets and OIDC to self-hosted deployments
Coolify 4.4.0 adds opt-in proxy traffic analytics, external secret managers, OIDC login, audit trails, Cloudflare DNS and experimental SQLite. Operators need to account for proxy restarts, Caddy redeploys and feature maturity.
Google Local Services Ads now charge some missed calls after 20 seconds
A missed call can now become a billable Google Local Services Ads lead. Advertisers should review phone routing, business hours and the 30-day credit window rather than assuming only answered calls count.
Cloudflare gives Free and Pro sites a full month of traffic and security analytics
Small sites can now compare a full month of HTTP, security and DNS activity without upgrading Cloudflare plans. The October 2 change applies to adaptive analytics, not every dataset.
Web DevelopmentSaaSMarketing & DistributionSaaS OperationsDeveloper ToolsMarketplaces & PlatformsActive dossier
Shopify makes Next Gen Events generally available — a declarative alternative to webhooks
Shopify's new Events system can send the change and the data your app needs in one delivery. It's a significant alternative to classic webhooks, but not a forced shutdown or universal replacement yet.
Rust 1.100 ends native compiler toolchains on 32-bit Windows hosts
This is a compatibility boundary for old Windows build hosts, not the end of Rust support for 32-bit Windows applications.
Indie BusinessMarketing & DistributionGEO & AI SearchContent & PublishingProduct EconomicsActive dossier
Google’s AI Contribution Pilot puts publisher payouts inside Search Console
The notable shift is not another AI visibility report. Google is testing a direct payment loop between content used to ground generative answers and the publishers that supplied it, with the payout surfaced inside Search Console.
GitHub AI Scan no longer needs CodeQL default setup
The scanner itself is not the new part. The September 16 change removes the CodeQL-default-setup gate that GitHub’s July rollout originally required, making AI-assisted vulnerability detection easier to add to repositories with different code-scanning configurations.
Fastly Object Storage can now pull S3-compatible data server-side instead of routing it through your client
The interesting change is architectural rather than another storage feature: migration becomes a server-to-server transfer initiated through an S3-compatible PutObject or UploadPart call, with range and multipart support for large objects.