Rust 1.100 ends native compiler toolchains on 32-bit Windows hosts
This is a compatibility boundary for old Windows build hosts, not the end of Rust support for 32-bit Windows applications.
Search
Search results for “source-control server RPC”
Find published research by company, product, platform or technology.
Showing 381–400 of 446 dossiers
WordPress 7.1.3 patches seven core security flaws — including pending-comment XSS and WXR SQL injection
The October 6 release is broader than WordPress 7.1.2's single critical RCE fix: it closes seven separate core flaws, including stored XSS through pending comments, second-order SQL injection in WXR exports and unauthenticated disclosure of comments on private posts.
SaaSCloud & InfrastructureIndie BusinessMarketing & DistributionIndie SaaSEmail & LifecycleSaaS OperationsDatabases & StorageActive dossier
Buttondown cut its database from 2TB to 750GB by deleting three legacy tables
Buttondown’s 'Great Pruning' is a small-SaaS operations story about deleting architecture rather than adding it. The company removed duplicated or over-retained request and email-event data after changing how those workloads were processed.
Artificial IntelligenceCloud & InfrastructureAI AgentsCloud PlatformsDatabases & StorageActive dossier
Supabase acquires Turso as AI agents become database creators
The funding headline is less interesting than the workload signal: Supabase says agents now create most new databases on its platform, and it is buying Turso to handle higher-volume database creation for those workloads.
Paddle brings recurring Pix payments to SaaS subscriptions in Brazil
Brazilian customers can authorize Pix Automático mandates for Paddle subscriptions without a separate early-access application. The path broadens local-payment access for SaaS, while delayed renewals, fixed mandate amounts and re-authorisation requirements still create implementation caveats.
GLiNER2.5-Decide puts structured AI decisions on a 340M CPU model
GLiNER2.5-Decide attacks the same bounded-decision layer as Jev and CLM from a much smaller encoder architecture. Its strongest benchmark claims are vendor-produced, but CPU deployment and constrained joint decoding make it a materially different option for software-facing AI decisions.
Cloudflare Containers exposed previous tenants’ disk data through unzeroed blocks
This was not a Firecracker escape or access to a live victim disk. It was a storage-isolation failure underneath the sandbox: researchers recovered foreign directory structures, database pages and complete SQLite databases from reused blocks, and Cloudflare had to fix allocation plus retire existing disks and cached snapshots.
Stripe Revenue Recognition users must pick a subscription plan by August 19
Stripe says Revenue Recognition users covered by its pricing transition must select a subscription plan by August 19, 2026. If they have not switched by August 20, Stripe will automatically turn the product off until they subscribe.
Noctalia v5 replaces QML-first plugins with isolated Luau runtimes
The interesting change is not another desktop-shell release. Noctalia has moved plugin logic away from the older QML-centric model into isolated scripting runtimes, creating a clearer extension boundary while still treating plugins as trusted code.
Google Play opens lower-fee app programs — but only $1M+ developer groups can enroll for now
Approved apps can move from the standard 20%/25% non-recurring service-fee rates to 15%/20% for new/existing installs from September 30, before any applicable billing fee. Current enrollment is limited to developer account groups with at least $1 million in earnings over the previous 12 months.
Web DevelopmentMarketing & DistributionBrowsers & Web StandardsDeveloper ToolsMarketplaces & PlatformsActive dossier
Chrome removes the last Manifest V2 extensions from the Web Store, ending updates and reinstalls
Manifest V2 was already disabled for modern Chrome users. The August 31 change closes the remaining Web Store path, turning any still-pinned legacy install into an effectively frozen artifact with no Store update or reinstall route.
LinkedIn is sunsetting the Profile API `location` field in favor of `geoLocation`
This is separate from LinkedIn’s Ads Legacy Geo cutoff already tracked by BTN. Profile and compliance integrations can fail more quietly: the request may still succeed while a field the application expects simply disappears or becomes null.
Web DevelopmentCloud & InfrastructureCloud PlatformsDeployment & DevOpsDeveloper ToolsActive dossier
Google Cloud is making every Application Integration run execute under an explicit identity
The migration turns integration identity from an implicit platform detail into an operational dependency. Teams may need new run-as accounts and `Service Account User` grants not only for runtimes but also for editors, publishers, approvers and deployment automation.
Google Cloud Storage now preserves soft-deleted buckets when projects are deleted
Cloud Storage project deletion no longer necessarily destroys every soft-deleted bucket immediately. Google’s August 17 change makes bucket retention part of project-recovery behavior, affecting disaster recovery, teardown assumptions and ongoing storage cost.
Google’s August spam update coincides with a sharp rise in top-10 URLs falling beyond the top 100
Google did not announce a new spam policy with the August update, but early independent measurement shows unusually large ranking displacement across 20 industries. The data is useful for diagnosing timing and scale, not proof that any individual site was demoted for spam.
YepAPI fixed a billing bug — and raised selected API prices the same day
YepAPI corrected a platform-wide flat-rate billing defect on August 22 and left historical undercharges untouched. On the same date it also increased selected flat-rate and volume prices, making the current cost step-up larger for some endpoints than the billing fix alone would suggest.
SaaS Capital’s 2026 survey puts median private SaaS ARR per employee at $141K
Private SaaS teams now have a fresher efficiency baseline: median ARR per employee rose to $141,125, and bootstrapped businesses lead equity-backed peers on the metric across company sizes. The same survey family shows bootstrapped $3M–$20M SaaS companies growing more slowly but generally operating with stronger cost discipline.
Web DevelopmentMarketing & DistributionBrowsers & Web StandardsDeveloper ToolsMarketplaces & PlatformsActive dossier
Chrome Web Store now defaults publishers to two extension slots and is retiring Featured badges
Chrome extension publishers now face individualized publication caps, with two slots as the default for new or low-history accounts. Existing extensions remain published, increases can be requested, and Google is also retiring the Featured badge while making recent reviews more important to ratings.
Stripe adds instant currency conversion as multicurrency settlement expands to 37 markets
Stripe’s August FX update moves more global money management inside the payments stack: businesses can convert balances 24/7 without first paying out to an external bank or FX provider, and settlement coverage is expanding across more markets and currencies.
Produktly’s 464-product dataset puts median SaaS tour completion at 29%
The strongest signal in Produktly’s 2026 onboarding dataset is not a universal target but a set of usable baselines: median tour completion was 29%, 1–2-step tours completed far more often than 9+ step tours, in-app NPS response rates were low, and announcement attention was heavily front-loaded. The report explicitly discloses sample and causal limitations.