GitHub Actions adds workflow lockfiles that pin transitive dependencies
GitHub's October 14 editor's correction confirms Actions workflow lockfiles are available on Free and Team as well as Enterprise Cloud—not enterprise-only as initially reported.
Search
Search results for “Manifest V3 migration”
Find published research by company, product, platform or technology.
Showing 141–160 of 188 dossiers
FrankenPHP 1.13.1 repairs worker crashes and Symfony CLI regressions after 1.13 security update
Teams upgrading for five 1.13.0 security fixes should use 1.13.1: it repairs Nextcloud and Symfony breakage, crashes and shutdown failures while retaining the earlier Caddy/Mercure compatibility changes.
Apple’s EU payment rules are live — RevenueCat automates alternative checkout reporting
Apple’s EU payment rules are operational, not future-tense. RevenueCat reduces transaction reporting work for eligible alternative checkouts; the fees, App Review, 12-month commitment and uncertain in-app-sheet rollout remain.
Web DevelopmentCloud & InfrastructureDeployment & DevOpsDeveloper ToolsDatabases & StorageActive dossier
PostgreSQL 19 reaches RC1 but moves general availability to November 19
RC2 is scheduled for November 12, GA for November 19. New concurrent REPACK, parallel autovacuum, replication behaviour and planner changes remain pre-release; developers should test extensions, query plans and upgrades rather than deploying the RC to production.
Go 1.27 quietly makes HTTP/1 clients faster by reusing connections after early Close
Go 1.27 automatically drains up to 256 KiB or 50 ms after an HTTP/1 response body is closed, enabling reuse without custom drain code.
Google Play lets AI Studio builders run private Android apps without developer accounts
Google has separated personal app installation from public app publishing: an AI Studio-built Android app can launch through Play without a developer account, but sharing and public distribution remain restricted.
WordPress rewrites wp_kses around the HTML API — plugin sanitisation output can change
A new HTML API-backed wp_kses() changes what sanitised HTML looks like even without an API signature change. Developers should test output-sensitive plugins before a future WordPress core release.
Meta launches Muse Wonder for developers, but reserves Wonder Full for Muse Code subscribers
Two distinct access paths matter more than the benchmark headlines: Muse Wonder is available through Meta Model API and Muse Code, while Wonder Full is currently subscriber-only in Muse Code.
Meilisearch 1.55 fixes ranking-threshold slowdowns and blocks a vector-index corruption path
A search-engine maintenance release carries intentional relevance and API compatibility changes that operators should test.
Fly.io raises Machines RAM prices while nearly halving Sprites compute costs
Always-on RAM-heavy Fly Machines cost more from October, while bursty Sprites get much cheaper. CPU pricing for Machines and Managed Postgres plans stay unchanged.
Python 3.15 makes lazy imports and UTF-8 defaults real — with a new profiler and free-threaded ABI
Python 3.15 is out: lazy imports, UTF-8 defaults, Tachyon profiling and a stable ABI for free-threaded builds. The experimental JIT is faster in Python's benchmarks but isn't a blanket production speedup.
Google makes Spanner Omni production-ready outside its cloud — with a new licensing boundary
Google's distributed SQL database can now run in production beyond Google Cloud, but 'deploy anywhere' doesn't mean free or fully managed. Spanner Omni GA brings security, backup and paid commercial licensing, with important limits on its developer edition.
Woodpecker CI 3.19 moves agent trust rules to the server and fixes clone-step environment injection
Woodpecker's agent labels were self-reported and unsuitable for authorization. Version 3.19 adds server-held filters and patches a clone-step environment-variable leak; administrators should verify their worker policies.
pg_plan_filter 1.0 lets PostgreSQL reject expensive query plans — but not hostile users
PostgreSQL operators gain per-statement and per-transaction estimated-cost limits across versions 14–18, useful for runaway reports and ORMs. The guard is disabled by default and can be bypassed by users allowed to change planner cost parameters.
DeepSeek’s current API docs contradict the announced V4 Pro-to-Flash reroute
The live DeepSeek changelog and rate card still show distinct V4 Pro service after the previously announced September 14 reroute. That changes cost and model-selection assumptions.
Web DevelopmentCloud & InfrastructureCompute & AI InfrastructureDeployment & DevOpsDeveloper ToolsActive dossier
OpenSSH 10.6 turns on hybrid post-quantum signatures and disables compression to cut side-channel risk
The release is more than routine maintenance. OpenSSH is changing cryptographic defaults, sacrificing some compression effectiveness for side-channel safety, and warning that AI-assisted security reports are pushing it toward a faster release cadence.
Cloudflare Containers can now let each Durable Object choose its own runtime — and snapshot its filesystem
The architectural shift is from application-wide container configuration toward individually managed stateful compute. A Durable Object can now start its own image and size, keep an independent lifecycle and restore filesystem state without treating every instance as part of one rollout.
PHP security release fixes an IPv6 FastCGI ACL bypass across every supported branch
The sharpest operational trap is CVE-2026-91768: PHP-FPM’s listen.allowed_clients can treat an allowed IPv6 address as an entire /96 prefix. Teams relying on that ACL should patch rather than assuming the configured address restriction is exact.
Claude Opus 5.5 brings Fable-class performance into a cheaper frontier tier
The interesting change is economic as much as benchmark-driven. Anthropic is compressing capability that previously justified its larger Fable tier into Opus pricing, while cutting Opus list prices and expanding immediate availability across the major clouds.
Web DevelopmentCloud & InfrastructureCloud PlatformsDeveloper ToolsDatabases & StorageActive dossier
Cloudflare makes Python Workers GA — with Hyperdrive and first-class platform bindings
The Hyperdrive integration was the practical database unlock; the larger September 21 change is that Python Workers themselves are now GA. Cloudflare is explicitly positioning Python as a production language on Workers, with native platform bindings and framework support rather than an experimental compatibility layer.