Stripe can now keep a Postgres copy of payments and subscriptions up to date — without webhook plumbing
Stripe's new Postgres destination gives SaaS teams a managed payment-data mirror, not a zero-latency replacement for every webhook.
Search
Search results for “publisher distribution”
Find published research by company, product, platform or technology.
Showing 101–120 of 471 dossiers
Google is moving Local Services Ads into Performance Max pay-per-lead campaigns
The August migration continues, and October's Google Ads API v26 lets eligible integrators create Local Services Performance Max campaigns and link leads. This adds a concrete API path but does not restore old LSA reports or bidding controls.
Google Ads gives advertisers channel spending priorities — and a February 2027 Display deadline
Google Ads' new channel-priority controls offer a way to test Search partners and Display without giving them unrestricted budget, but the limits are not guarantees and Demand Gen has no allocation caps.
Bing Webmaster Tools now measures AI-search citation share, intent and topic visibility
Microsoft's October 13 Topics Portfolio beta shows AI-grounding queries that cite rivals but not your site, grouped by theme with approximate demand and competition measures; access depends on sufficient site data.
PostgreSQL JDBC 42.7.14 closes authentication and SQL-data leakage flaws
Two pgJDBC vulnerabilities affect different older driver ranges and only specific connection or binary-write configurations. Upgrade and verify the affected paths rather than treating this as a PostgreSQL server vulnerability.
Artificial IntelligenceWeb DevelopmentSaaSPricing & BillingAI AgentsAI SaaSDeveloper ToolsActive dossier
Atlassian will meter Rovo MCP and Teamwork Graph context calls from December 3
From December 3, agent workflows that ask Atlassian's Teamwork Graph for cross-product context will need a cost budget. Most enriched tool calls use 1–10 Rovo credits, with paid overages at $0.01 per credit.
beehiiv raises paid-plan prices as newsletters expand into an all-in-one creator platform
The pricing change is also a packaging change: beehiiv is charging more for paid tiers while putting newsletters, websites, podcasts, community and digital products across the plan family and extending self-serve scale.
Keycloak patches a critical password-reset flaw that can let unauthenticated attackers take over any account
This is an identity-system failure rather than an application bug: a vulnerable Keycloak deployment can let an attacker turn the legitimate “forgot password” flow into full account takeover without credentials or victim interaction. Upgrade is the proper fix; disabling Forgot Password in every realm is Red Hat’s temporary mitigation.
Reddit Ads API is changing campaign objectives and retiring onsite lead forms in September
The technical migration is unchanged, but Reddit's documentation has proven unusually volatile. Integrations should now treat September 21 as the current objective/form readiness date and December 8 as the current published cutoff for HOUR reports longer than seven days—while continuing to recheck the live docs before each deadline.
Gmail will stop sending as third-party addresses in January 2027
From January 2027, Gmail will no longer send mail as non-Google addresses or fetch third-party accounts through Gmailify/POP on the web. Forwarding into Gmail and third-party accounts in the mobile app remain available, so small-business and custom-domain users need to distinguish the affected desktop workflow from Gmail’s broader mail protocols.
Postmark webhooks can now verify themselves and pause only the failing event type
The change turns webhook reliability from a mostly passive retry problem into an inspectable operational surface: configuration tests, event-specific failure state, owner alerts and health endpoints give email systems earlier warning when downstream integrations are broken.
Eight eMudhra CA keys compromised: browsers block forged TLS chains as operators face certificate migration
The incident affects certificate validation, not TLS encryption. Website operators with certificates under the affected root and developers shipping custom trust stores must assess and migrate; disabling verification is not a fix.
EDG opens its industrial C++ compiler front end under Apache 2.0 after three decades
The EDG front end moved from commercial licences to a public repository and C++ Alliance stewardship on September 30. A fresh October 20 statement confirms permissive commercial reuse, experienced maintainers and work still needed on reflection, coroutines and back ends.
WordPress 7.2 Beta 1 adds a Secrets API so plugins can stop storing API keys as plaintext options
WordPress 7.2 Beta 1 landed October 20 with wp_set_secret and wp_get_secret, encrypted storage, current/previous versions and pluggable back ends. Existing plugin credentials do not migrate automatically; the final release is scheduled for December 8.
Stripe's 200-platform survey finds AI pushing SaaS beyond seats — but vertical businesses favour embedded finance
The interesting signal is segmentation, not 'seat pricing is dead': vertical SaaS operators expect payments and finance to become a larger part of revenue, while horizontal platforms expect usage and hybrid software charges to lead. The survey is vendor-produced and forward-looking.
Scaleway Serverless Containers now support private-only ingress inside a VPC
Private ingress joins existing private egress for Scaleway Serverless Containers. The new option can isolate services inside a VPC, but private DNS, TLS, authentication, cold-start and network-scope constraints still matter.
GitHub Actions adds workflow lockfiles that pin transitive dependencies
GitHub's October 14 editor's correction confirms Actions workflow lockfiles are available on Free and Team as well as Enterprise Cloud—not enterprise-only as initially reported.
WordPress 7.2 will disable MySQL NO_BACKSLASH_ESCAPES for its own connections
WordPress 7.2 adds NO_BACKSLASH_ESCAPES to wpdb's incompatible SQL modes. It's a targeted fix for escaping failures, not a server-wide setting or blanket SQL injection cure.
pgBackRest 2.60 makes corrupt-page checks block restores and backup expiry by default
A safer default can surprise an incident-response runbook: pgBackRest 2.60 aborts restores with invalid page checksums and refuses certain backup expirations. Here's what operators should test.
Artificial IntelligenceWeb DevelopmentAI CodingBrowsers & Web StandardsDeveloper ToolsActive dossier
Safari 27 gives coding agents a local MCP path into live browser debugging
WebKit's Safari MCP server is available in stable Safari 27.0 as well as Technology Preview. It runs locally, but captured page data passes to the connected agent; remote automation must be enabled explicitly.