pgAdmin 4 9.19 patches 15 security flaws — server operators must check a one-time command migration
A 15-CVE pgAdmin update also changes how server-mode password commands are migrated, with a potentially irreversible first-start consequence.
Search
Search results for “Client ID Metadata Documents”
Find published research by company, product, platform or technology.
Showing 341–360 of 420 dossiers
Reddit plans login-first browsing as search referrals fall — Q4 tests will restrict open access
Reddit's Q3 shareholder disclosures set a direction towards logged-in browsing, not an immediate worldwide login wall. Q4 non-US tests follow declining search referrals, with consequences for community discovery, advertising and access to public conversations.
Web DevelopmentCloud & InfrastructureDeployment & DevOpsDeveloper ToolsDatabases & StorageActive dossier
PostgreSQL 19's AI-discovered bug backlog helps explain its November release delay
The RC2/GA schedule has not changed. A PostgreSQL committer now explains why review and backpatch workload overwhelmed the release process, with caveats around attributing every extra bug to AI.
OpenAI adds API credits to ChatGPT Pro and Business — but grants expire and Codex is excluded
OpenAI's new API credit grants can lower the cost of prototyping apps and agents, but eligibility, expiration, API limits and excluded Codex usage matter.
Web DevelopmentMarketing & DistributionDeveloper ToolsMarketplaces & PlatformsConversion & AnalyticsActive dossier
Shopify lets apps put their own metrics inside merchant Analytics reports
Shopify apps can now expose standard and custom activity in merchant Analytics, with 30-day attribute breakdowns and 365-day aggregate metrics.
Shopify lets theme developers bundle paid app add-ons in Theme Store listings
Shopify theme authors can now bundle one paid app add-on per theme listing, opening a new monetisation route with app review and ownership restrictions.
GitLab's CVSS 10 CI regex flaw targeted Alpine Linux — custom Ruby images can remain vulnerable after GitLab upgrades
Alpine rebuilt its GitLab after attempted exploitation and warns that upgrading GitLab alone may not patch custom containers using unpatched Ruby.
GitHub Agentic Workflows goes GA: Markdown agents compile into guarded Actions jobs
GitHub's gh-aw reaches GA, making Markdown-defined agent jobs a supported Actions workflow pattern. Security boundaries, model costs and privileged triggers still matter.
GitHub Copilot SDK gains organisation-owned server-to-server authentication for agents
GitHub Apps can now authenticate Copilot SDK workloads without a user's credentials. Organisation admins control installation permissions, usage attribution and budgets.
Artificial IntelligenceCloud & InfrastructureCloud PlatformsCompute & AI InfrastructureInference & APIsActive dossier
Cloudflare's Workers AI leaked 155 cross-tenant responses through SGLang KV cache — operators should patch
Cloudflare discloses cross-tenant GLM-5.3 Workers AI responses caused by a KV-cache rejection bug; SGLang v0.5.22 is recommended for disaggregated inference operators.
Chartist 2.2 revives a mature SVG charting library with composable layers, SSR and terminal output
Chartist 2.x replaces its SVG charting internals with layers and server rendering, while retaining 1.x wrappers. New 2.1–2.2 export moves require migration checks.
OpenBSD 8.0 ships major platform changes — and urgent IPsec, DNS and kernel errata
OpenBSD 8.0 operators should apply the first signed errata or syspatch updates promptly, especially where IPsec AES-GMAC and NSD are used.
Python 3.15 makes lazy imports and UTF-8 defaults real — with a new profiler and free-threaded ABI
Python 3.15.1 supersedes the 3.15.0 launch with an urgent certificate-trust update. New installers alone do not update existing virtualenvs: update pip, uv and certifi where applicable.
OpenAI frontier models reach Google Cloud — with Marketplace billing against cloud commitments
Google Cloud customers gain a new route to OpenAI models with unified governance and cloud-commitment billing, but broad availability and some privacy features are still forthcoming.
Coolify rushes security fixes to all v4 lines after PHP2Shell and dependency vulnerabilities
Self-hosted Coolify operators need to check their exact v4 branch: patched versions are 4.0.1, 4.1.3, 4.2.1, 4.3.24 and 4.4.7, but maintainers recommend 4.4.7 for fuller coverage.
Cloudflare WAF can now correlate malicious requests with origin responses and block the reply
Request-only WAF rules cannot always tell whether an exploit succeeded. Cloudflare now correlates requests with origin responses, adds managed response blocking and permits three custom response rules.
EDG opens its industrial C++ compiler front end under Apache 2.0 after three decades
The EDG front end moved from commercial licences to a public repository and C++ Alliance stewardship on September 30. A fresh October 20 statement confirms permissive commercial reuse, experienced maintainers and work still needed on reflection, coroutines and back ends.
Cloudflare and VoidZero launch experimental Rust TypeScript checker with up to 8x vendor-reported speed
Cloudflare and VoidZero are developing tsrs under Oxc with the TypeScript team. The early Rust checker claims up to 8x speed and 70% lower memory than TypeScript 7.0 under matched worker counts, but is not a drop-in stable compiler yet.
Laravel discloses critical TokenGuard account takeover flaw and a separate data-loss bug
Laravel's built-in token guard can authenticate the wrong user when a crafted non-string credential reaches MySQL/MariaDB. A separate JSON:API relationship inclusion bug can cause data loss. Check guards and framework versions.
Google Merchant Center adds product warranty data as Quebec's new disclosure rules take effect
Retailers can now submit warranty duration as structured product-feed data, but the new Google field does not replace Quebec's mandatory near-price disclosures or the underlying free repair guarantee.