Watch Changelog - Latest Updates

Visual Studio Code: Visual Studio Code 1.136 (Insiders)

Wed, 02 Sep 2026 17:00:00 GMT

Learn what's new in Visual Studio Code 1.136 (Insiders) Read the full article

Microsoft: Visual Studio Code 1.136 (Insiders)

Wed, 02 Sep 2026 17:00:00 GMT

Learn what's new in Visual Studio Code 1.136 (Insiders) Read the full article

Microsoft: Visual Studio Code 1.136 (Insiders)

Wed, 02 Sep 2026 17:00:00 GMT

Learn what's new in Visual Studio Code 1.136 (Insiders) Read the full article

Microsoft: Visual Studio Code 1.136 (Insiders)

Wed, 02 Sep 2026 17:00:00 GMT

Learn what's new in Visual Studio Code 1.136 (Insiders) Read the full article

CNCF: v1.20.0

Thu, 27 Aug 2026 19:05:32 GMT

v1.20.0 This release contains a mix of new features and bug fixes. Notably: New Rego keywords: and and or , for combining conditions inside a single rule body allow_net now restricts remote JSON Schema $ref fetching from json.match_schema and json.verify_schema Coverage reports can now explain why a range is not covered Much faster partial evaluation for dynamically composed policies New Rego keywords: and and or ( #7602 ) Rego gains two keywords for combining conditions inside a single rule body — a long-standing request, and one of the larger additions to the language in some time. and and or let control flow that previously had to be split across helper rules stay where it is read. Before, a rule body that needed to succeed on one of several conditions meant extracting a rule: package example allow if { input .method == " GET " admin_or_public_owner } admin_or_public_owner if input .user.admin admin_or_public_owner if { input .user.owner input .resource.public } Now: package example import future.keywords.and import future.keywords.or # the and groups first, so this reads as: # an admin, or an owner of a public resource allow if { input .method == " GET " input .user.admin or input .user.owner and input .resource.public } Both keywords are opt-in future keywords : import future.keywords.and , import future.keywords.or , or import future.keywords for both. An and / or expression either succeeds or fails; it never produces a value. So you can't assign one to a variable, pass one to a function, or use one as the head of a comprehension. Operands can read variables from the rule body around them, but can't create new ones for the rest of the rule to use — wrap an operand in braces to give it a body of its own, and any variables it creates stay inside those braces. Only as much is evaluated as needed: if the left side settles the outcome, the right side is skipped. And when both sides of an or succeed, you still get a single result; evaluation doesn't split in two. Further reading: Rego Keywords: and, or — the full reference Precedence and grouping — how the operators group, and where parentheses are needed Combining with not Incremental rules — the idiom when the alternatives must produce a value Try the new keywords in the Rego Playground , or in your editor with the VS Code extension or the IntelliJ IDEA plugin — see Editor and IDE Support for others. Authored by @johanfylling Behavior change: allow_net applies to remote JSON Schema $ref s ( #8979 ) The allow_net capability restricts which hosts remote JSON Schema $ref s may be fetched from, but it was only wired up on the compile-time type-checking path. Policies using neither -s schemas nor # METADATA schemas: annotations never reached it, and an unset allowlist permitted every host — so json.match_schema and json.verify_schema , which compile schemas at evaluation time, fetched $ref s from anywhere. Their schema argument can come from input , so the host was not necessarily under the policy author's control. The allowlist now travels with the schema loader and is checked per caller at any nesting depth. Every redirect hop is checked too, matching http.send , and the inter-query cache key includes the allowlist so a permissive caller cannot populate the cache for a restrictive one. Authored by @sspaink , reported by @charlesdaniels Coverage reports explain why a range is not covered ( #8937 ) Coverage reports showed that a range was uncovered, but not why: ranges skipped by rule indexing or early exit looked identical to dead code. Not-covered ranges are now tagged with a Kind — index_excluded or early_exit — determined by re-evaluating with each optimization disabled and diffing the extra coverage data. Both supplementary passes run by default when --coverage is set; the new --coverage-runs flag on opa eval and opa test selects which of them to run, and an empty list disables them. Authored by @charlieegan3 Runtime, SDK, Tooling bundle: Fix roots containing percent-encoded characters ( #6704 ) authored by @sspaink , reported by @sirpi compile: Validate plan-addons exist ( #9092 ) authored by @charlieegan3 config: Migrate server.encoding and server.decoding validation to Rego ( #8903 ) authored by @sspaink debug: Allow configuring variable value length limit ( #8907 ) authored by @oh-summy format: Add support for formatting and / or logical expressions ( #8683 ) reported and authored by @johanfylling format: Converge object comprehension layout ( #9075 ) reported and authored by @hamodywe format: Don't group rules that aren't written on one line ( #8981 ) authored by @sspaink format: Don't unwrap one-line rule body braces from a single set term ( #8972 ) authored by @johanfylling format: Honor line breaks before explicit and / or operand bodies ( #9053 ) authored by @sspaink , reported by @anderseknert format: Keep parens around a nested not operand ( #9079 ) authored by @sspaink format: Wrap set union | infix in parens when output would be re-interpreted as comprehension ( #8977 ) authored by @johanfylling format: Write added imports before rules ( #9083 ) authored by @sspaink loader: Fix loading absolute paths on Windows ( #4521 ) authored by @sspaink , reported by @lcarva oracle: Support and / or logical keywords ( #8819 ) reported and authored by @johanfylling plugins: Avoid predictable OCI temp store ( #8853 ) authored by @br0x2 plugins: Fix overly verbose return of errors ( #9090 ) authored by @anderseknert rego: Pass capabilities to the parser in (*Rego).compileModules ( #9059 ) authored by @anderseknert repl: Add support for and / or imports ( #9066 ) reported and authored by @johanfylling repl: Allow interactive ref head rule definitions ( #5498 ) authored by @sspaink , reported by @philipaconrad runtime: Allow registering hooks, and pass them to discovery ( #9064 ) authored by @srenatus server: Decouple decision logging from request context cancellation ( #9023 ) authored by @srenatus wasm: Address regression causing memory corruption ( #8995 ) authored by @charlieegan3 Compiler, Topdown and Rego ast: Allow non-infix and() / or() set built-in calls ( #9012 ) authored by @johanfylling ast: Correct regression in Ruleset Add ( #9027 ) authored by @charlieegan3 ast: Don't index away rules with a nested print call ( #9038 ) authored by @sspaink ast: Don't leak generated locals for calls in ref type errors ( #4577 ) authored by @sspaink , reported by @johanfylling ast: Don't leak generated locals in ref type errors ( #8897 ) authored by @sspaink , reported by @anderseknert ast: Don't report type errors for documents replaced by with ( #2903 ) authored by @sspaink , reported by @gshively11 ast: Fix future.keywords wildcard import not including the not keyword ( #9093 ) authored by @johanfylling ast: Fix panic for shadowed root document calls in Rego v0 ( #9067 ) reported and authored by @Sergane ast: Index rules with and / or expressions ( #8997 ) authored by @sspaink , reported by @johanfylling ast: Name the enclosing rule in unsafe var errors on shared lines ( #4967 ) authored by @sspaink , reported by @johanfylling ast: Only re-parse brace-led set terms as rule bodies ( #8974 ) authored by @johanfylling ast: Print undeclared var names ( #5624 ) authored by @sspaink , reported by @anderseknert ast: Reject print calls as and / or operands ( #9047 ) authored by @sspaink ast: Reject assignments in implicit not , and and or bodies ( #9069 ) authored by @johanfylling ast: Reject bare ambiguous { ... | ... } not operands ( #8978 ) authored by @johanfylling ir: Add end locations in plan statements ( #9007 ) authored by @charlieegan3 ir: Add list of unplanned rules to plan data ( #9031 ) authored by @charlieegan3 topdown,tester: Don't put shared interned refs into mutable ASTs ( #9048 ) authored by @sspaink topdown: A few tracing/profiling improvements ( #9010 ) authored by @anderseknert topdown: Clean up http.send implementation ( #8975 ) authored by @anderseknert topdown: Don't yield a key in both base and virtual docs twice ( #4787 ) authored by @sspaink , reported by @jeniawhite topdown: Error on built-in calls with unevaluated operands ( #3680 ) authored by @sspaink , reported by @tsandall topdown: Fix false modulo by zero for multiples of 2^64 ( #8989 ) authored by @sueun-dev topdown: Fix negation inlining limit overflowing ( #9036 ) authored by @sspaink topdown: Fix sum overflow when integer elements fit int64 but the sum does not ( #6281 ) authored by @sueun-dev , reported by @tsandall topdown: Save enumerated refs over unknown data ( #5471 ) authored by @sspaink , reported by @jaredzhou topdown: Speed up partial evaluation of dynamically composed policies ( #5216 ) authored by @sspaink , reported by @srlk topdown: Treat an empty JSON Schema enum as unsatisfiable ( #8910 ) authored by @locker95 , reported by @jwilhelm-cariad ast: Add Equal implementation for *object ( #9025 ) authored by @anderseknert ast: Add sync pool for strings.Reader ( #9016 ) authored by @anderseknert ast: Avoid excessive save/restore calls in parser ( #9018 ) authored by @anderseknert ast: Bucket built-in name lookup by ref shape ( #9034 ) authored by @srenatus ast: Fix performance regression in InterfaceToValue ( #9021 ) authored by @anderseknert ast: Remove a few unnecessary allocations ( #9009 ) authored by @anderseknert ast: Use pointer comparison in Equal methods ( #9020 ) authored by @anderseknert eval: Catch booleans trying to escape to the heap ( #8968 ) authored by @anderseknert perf: Allocate less in ast.NewObject ( #9035 ) authored by @anderseknert perf: Heap allocation hunting ( #9082 ) authored by @anderseknert perf: Improved UUID implementation ( #9039 ) authored by @anderseknert topdown: Various io.Writer improvements ( #9017 ) authored by @anderseknert Docs, Website, Ecosystem docs/ecosystem: Add Scanara to the ecosystem page ( #9094 ) authored by @ScanaraStack docs/ecosystem: Describe what GOPAL actually covers ( #9080 ) authored by @kmadan docs/policy-reference: Add examples for common built-ins ( #8913 ) authored by @locker95 docs/website: Refresh Apache APISIX ecosystem resources ( #8957 ) authored by @Yilialinn docs: Add endswith and replace built-in examples ( #8991 ) authored by @locker95 docs: Add split and lower built-in examples ( #8992 ) authored by @locker95 docs: Clarify glob.match indexing requirements ( #8209 ) authored by @lopster568 , reported by @anderseknert docs: Document and / or keywords ( #8682 ) reported and authored by @johanfylling docs: Highlight and / or keywords in Rego syntax ( #9002 ) authored by @sspaink docs: Improve to_number built-in description ( #8984 ) authored by @anderseknert docs: Keep snippets highlighted while they are edited ( #8431 ) authored by @sspaink , reported by @anderseknert Miscellaneous ast: Annotations code cleanup ( #9049 ) authored by @anderseknert ast: Enable modernize linter for golangci-lint ( #8996 ) authored by @anderseknert ast: Enable static check of consistent receiver names ( #9008 ) authored by @anderseknert ast: Move global builtin.Ref() vars to a single location ( #9040 ) authored by @anderseknert ast: Move interning experiment behind noisy tag ( #9034 ) authored by @srenatus ast: Replace use of sort package with modern alternatives ( #9013 ) authored by @anderseknert ast: Use slices.CompareFunc for imports and annotations ( #9019 ) authored by @anderseknert build/release: Create new release tool ( #8959 ) authored by @johanfylling build(go): Modernize for the Go 1.26 standard library ( #9056 ) authored by @srenatus bundle: Use util.WithPrefix ( #9005 ) authored by @anderseknert ci: Migrate proto-check to bufbuild/buf-action ( #9030 ) authored by @srenatus ci: Serialize benchmarks workflow to avoid racing writes to benchmarks branch ( #9065 ) authored by @srenatus lint: Enable all usetesting options ( #9072 ) authored by @anderseknert lint: Remove intrange linter, as it's covered by modernize ( #9014 ) authored by @anderseknert releng: Sample benchmarks from 15 processes, not 3 ( #9034 ) authored by @srenatus releng: Update post-merge benchmark regression check ( #9029 ) authored by @srenatus server_test: Adjust test to avoid flakey decision log test outcome ( #9026 ) authored by @srenatus test: Clean up irrelevant nolint directives ( #9050 ) authored by @anderseknert test: Restore print-based and / or short-circuit tests ( #9057 ) authored by @sspaink topdown: Add uri built-in compliance cases for parser edge cases ( #8980 ) authored by @sspaink topdown: Cover uuid.parse input format leniency ( #9003 ) authored by @sspaink topdown: Modernize fixes and some string building improvements ( #8993 ) authored by @anderseknert util: Don't return a nil slice from StringToByteSlice("") ( #9091 ) authored by @srenatus Dependency updates; notably: build(go): Bump the build toolchain to Go 1.27, and the go.mod language version to 1.26 ( #9051 ) authored by @srenatus build(deps): Bump github.com/dgraph-io/badger/v4 from 4.9.4 to 4.9.5 build(deps): Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 build(deps): Bump go.opentelemetry.io/proto/otlp from 1.10.0 to 1.11.0

Solo.io: v1.22.3

Thu, 27 Aug 2026 19:02:05 GMT

This release is building... Helm Changes Fix the SDS container's readinessProbe so it falls back to the default probe only when global.glooMtls.sds.readinessProbe is unset, instead of always requiring a value from values-template.yaml. This lets users fully disable the probe by explicitly setting it to null/empty, and lets a partial override apply on top of an explicit probe without silently losing the default when none is provided. ( #11389 )

Nx: 23.2.0-beta.11

Thu, 27 Aug 2026 18:44:56 GMT

23.2.0-beta.11 (2026-08-27) 🚀 Features dotnet: infer OpenApiDocumentsDirectory as a build output ( #36788 ) 🩹 Fixes core: do not allowlist the analytics domain when analytics are off ( #36663 , #36486 ) core: isolate pnpm version detection from workspace ( #36728 , #36727 ) core: key the main-worktree-root cache on the workspace root ( #36768 ) core: give pnpm a fresh cache dir per e2e run ( #36802 ) gradle: compile Kotlin in-process in the e2e fixture ( #36803 ) gradle: support builds that configure subprojects from an ancestor build file ( #36693 , #36668 ) gradle: retry nxProjectGraph on lock timeout and kill orphaned gradle builds on exit ( #36806 ) js: make pruned pnpm output installable and run its workspace modules ( #36139 , #36055 , #36066 , #36140 , #35425 , #18402 ) js: keep the deprecated-prepend warning in the task's terminal output ( #36789 ) js: detect all files changed during lock file update ( #34856 ) maven: stop writing a failing task's output three times ( #36790 ) nextjs: describe the library generator and export its server entry ( #36776 ) nextjs: stop installing unused babel-jest for generated apps ( #36765 ) repo: restore missing linux native binding entries to pnpm-lock ( #36785 ) repo: stop CI cache churn from evicting the cargo caches ( #36801 ) repo: serve nx executor schema reads from source in unit tests ( #36809 ) webpack: set optimization.minimize to its normalized object form ( #36815 ) ❤️ Thank You AI-JamesHenry @AI-JamesHenry Christopher Buss @christopher-buss Craigory Coppola @AgentEnder FrozenPandaz @FrozenPandaz Jason Jean @FrozenPandaz Jeong Seungdeok @seungdeok Leosvel Pérez Espinosa @leosvelperez leosvelperez @leosvelperez

Wails: Wails v3.0.0-beta.15

Thu, 27 Aug 2026 18:36:45 GMT

Wails v3 Beta Release - v3.0.0-beta.15 Fixed Increase WebView2 embed timeout to 60 seconds in PR by @Grantmartin2002 🤖 This is an automated nightly release generated from the latest changes on master. Installation: go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.15 ⚠️ Beta Warning: This is pre-release software. The API is stable, but you may still encounter issues before the final 3.0 release.

CrewAI: 1.15.18

Thu, 27 Aug 2026 18:07:19 GMT

What's Changed Features Promote conversational flows to stable Record a created deployment with the given UUID Enhance conversational flow documentation and APIs Let a declaration name the router's response format Let a chat flow declare its own state shape Accept crew-style LLM config in a conversational declaration Report project creation with the minted ID Record whether a run had inputs, without recording the inputs Backfill project ID from every user-invoked project command Bug Fixes Preserve tool results when the final answer is empty Map default Claude Sonnet 4.6 to its 1M context window Raise Anthropic default max_tokens for large tool calls Render message content parts as text, not as a Python repr Keep message roles when Agent.kickoff gets a conversation Skip interception hooks on crewai-internal flows Record task failures as failures, not successes Emit the flow lifecycle on a suppressed resume Open the conversational TUI for a declarative chat flow Record crew_memory as a string, not a bool Always emit project_id so absent and empty stay distinct Documentation Clarify Arize Phoenix observability docs Contributors @Vidit-Ostwal , @arizedatngo , @joaomdmoura , @lorenzejay , @lucasgomide

Istio: 1.31.0-rc.4

Thu, 27 Aug 2026 18:05:21 GMT

Istio release 1.31.0-rc.4

Google: Improving Google Calendar’s interoperability with third-party video conferencing solutions

Thu, 27 Aug 2026 18:01:47 GMT

We are introducing improvements to Google Calendar that make it easier to join third-party video meetings, including Microsoft Teams, Zoom, and Cisco Webex, when collaborating across different calendar and email clients. Specifically, users may notice: A better join experience for external recipients (for outgoing invitations): When you send a Google Calendar invitation containing a third-party video conferencing link to external recipients who use clients like Microsoft Outlook or Apple Calendar, Google Calendar now automatically includes the conferencing URL in the event's Location field. Because many external clients render links in the Location field as prominent, clickable buttons or chips in event previews, your guests can join calls with a single click without opening the full invite description. Structured "Join" button in Google Calendar (for incoming invitations): When you receive a calendar invite from an external system (such as Microsoft Outlook) containing third-party conferencing details in the event description or location, Google Calendar now automatically identifies and extracts the meeting URL, meeting ID, and passcode/PIN into structured video conferencing data. Instead of searching through text descriptions, you will see a prominent "Join video call" button directly on the event across Google Calendar on Web, Android, and iOS. In hybrid work environments, teams frequently collaborate across different organizations, calendaring platforms, and video conferencing providers. Previously, joining third-party meetings from external invitations required manually copying and pasting URLs or passcodes from text descriptions, while external recipients didn't always see conferencing links prominently in their event previews. These improvements remove friction from the scheduling and meeting-join experience. Whether you or your external collaborators use Microsoft Outlook, Apple Calendar, or Google Calendar, joining video calls is now seamless and effortless. Getting started Admins: There is no admin control for this feature. End users: This feature will be available by default for all incoming and outgoing calendar invitations containing supported third-party conferencing links (Microsoft Teams, Zoom, and Webex). No additional action is needed. Rollout pace Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on August 27, 2026 Availability Available to all Google Workspace customers, Google Workspace Individual subscribers, and users with personal Google accounts. Resources Google Workspace Learning Center: Add or remove a video conference from your Calendar event

Lightdash: 2.38.0

Thu, 27 Aug 2026 17:56:09 GMT

2.38.0 (2026-08-27) Features backend: stamp result columns with display metadata at query-write time ( #28146 ) ( 033a700 )

JetBrains: build-2.5.0-dev-6024

Thu, 27 Aug 2026 17:51:57 GMT

automatically created by TeamCity VCS labeling build feature

gRPC: Release v1.83.1

Thu, 27 Aug 2026 17:51:06 GMT

This is release gRPC Core 1.83.1 (garden). For gRPC documentation, see grpc.io . For previous releases, see Releases . This release contains refinements, improvements, and bug fixes.

Jitsi: jitsi-meet_11205

Thu, 27 Aug 2026 17:49:58 GMT

Tagged automatically by Jenkins

Confluent: v8.4.0-1079

Thu, 27 Aug 2026 17:41:51 GMT

chore: Set project version and resolve dependencies. 8.4.0-1079

PostHog: agent-v2.4.96

Thu, 27 Aug 2026 17:41:00 GMT

Agent release agent-v2.4.96

LangChain: langchain==1.3.18

Thu, 27 Aug 2026 17:33:28 GMT

Changes since langchain==1.3.17 release(langchain): 1.3.18 (#39966) fix(langchain): preserve content-block shape in PIIMiddleware redaction (#39894) fix(core): shore up indexing in genai v1 streaming content (#39964)

Lightdash: 2.37.0

Thu, 27 Aug 2026 17:27:13 GMT

2.37.0 (2026-08-27) Features chart-types: allow linking external connections ( #28136 ) ( 28acba6 ) chart-types: unlink connections from the attach picker ( #28235 ) ( 83d87a9 )

JetBrains: build-2.5.0-dev-6021

Thu, 27 Aug 2026 17:26:02 GMT

automatically created by TeamCity VCS labeling build feature

Lightdash: 2.36.1

Thu, 27 Aug 2026 17:18:23 GMT

2.36.1 (2026-08-27) Bug Fixes content-as-code: apply draft policy to bulk edits ( #28234 ) ( f59c078 )

Jitsi: 9409

Thu, 27 Aug 2026 17:11:57 GMT

Tagged automatically by Jenkins

Anchore: v1.51.1

Thu, 27 Aug 2026 17:01:15 GMT

Bug Fixes detect multi-arch ingress-nginx [PR #5179 @CAOShurong ] keep the epoch when parsing RPM manifest packages [PR #5201 @sueun-dev ] correct Apache Derby group ID in purl generation [PR #5090 @Ankush-Pathak ] move image hardlink handling upstream during image indexing [PR #5196 @wagoodman ] keep epoch-pinned requirements in the SBOM [PR #5161 @sueun-dev ] Prevent unnecessary allocations when parsing compressed ELF sections [PR #5187 @wagoodman ] honor the io.ReaderAt contract in readerAtAdapter [PR #5186 @wagoodman ] Support grafana binary various version [Issue #5059 ] [PR #5213 @pujitha24 ] Excluded paths are still scanned and cause syft to crash [Issue #3258 ] Dotnet: Incorrect relationship graph in case of using package locks [Issue #5125 ] [PR #5143 @pujitha24 ] Survive indexing not accessible files [Issue #3286 ] [PR #5170 @addielaruee ] CPE target_sw not being set consistency for Rust crates [Issue #3956 ] [PR #5167 @Xenira ] panic: nil pointer dereference in squashfs.(*File).Read when scanning snap (regression from 1.44.0) [Issue #4989 ] [PR #5119 @kzantow ] golang remote license search attempts to resolve stdlib modules [Issue #3149 ] [PR #5192 @luantaraschi ] Additional Changes gzip binary classifier reports false-positive GNU gzip from BusyBox multicall binary via applet symlink [Issue #5171 ] [PR #5202 @spiffcs ] pnpm v5 lockfile: underscore peer-dep suffixes are not stripped from package versions [Issue #5174 ] [PR #5175 @codeAnqiang-ma ] pnpm cataloger reads only the first YAML document: SBOM contains pnpm's own binaries and no project dependencies [Issue #5168 ] [PR #5188 @hamodywe ] Dependencies 72 dependency changes (70 updated, 1 added, 1 removed). 3 vulnerabilities remediated. 🟢 Remediated (3) GO-2026-5158 (Medium) — go.opentelemetry.io/otel GO-2026-6179 (High) — golang.org/x/mod GO-2026-6180 (High) — golang.org/x/mod Updated (70 packages) cel.dev/expr v0.25.1 → v0.25.2 cloud.google.com/go/auth v0.18.2 → v0.22.0 cloud.google.com/go/iam v1.5.3 → v1.11.0 cloud.google.com/go/logging v1.13.1 → v1.18.0 cloud.google.com/go/longrunning v0.8.0 → v1.2.0 cloud.google.com/go/monitoring v1.24.3 → v1.29.0 cloud.google.com/go/storage v1.61.3 → v1.64.0 cloud.google.com/go/trace v1.11.7 → v1.16.0 github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.32.0 → v1.33.0 github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 → v0.57.0 github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.55.0 → v0.57.0 github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 → v0.57.0 github.com/anchore/stereoscope v0.3.0 → v0.3.1 github.com/aws/aws-sdk-go-v2 v1.41.5 → v1.43.4 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.8 → v1.7.16 github.com/aws/aws-sdk-go-v2/config v1.32.12 → v1.32.35 github.com/aws/aws-sdk-go-v2/credentials v1.19.12 → v1.19.34 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20 → v1.18.35 github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21 → v1.4.35 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 → v2.7.35 github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.22 → v1.4.36 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 → v1.13.15 github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.13 → v1.9.28 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 → v1.13.35 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.21 → v1.19.36 github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 → v1.106.5 github.com/aws/aws-sdk-go-v2/service/signin v1.0.8 → v1.5.4 github.com/aws/aws-sdk-go-v2/service/sso v1.30.13 → v1.33.4 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17 → v1.38.4 github.com/aws/aws-sdk-go-v2/service/sts v1.41.9 → v1.45.4 github.com/aws/smithy-go v1.24.2 → v1.27.6 github.com/containerd/containerd/v2 v2.3.3 → v2.3.4 github.com/containerd/platforms v1.0.0-rc.4 → v1.0.0-rc.5 github.com/docker/cli v29.6.1+incompatible → v29.7.2+incompatible github.com/docker/go-connections v0.7.0 → v0.8.1 github.com/fatih/color v1.18.0 → v1.19.0 github.com/gabriel-vasile/mimetype v1.4.13 → v1.4.15 github.com/google/go-containerregistry v0.21.7 → v0.21.9 github.com/google/pprof v0.0.0-a4b03ec → v0.0.0-ef3492d github.com/googleapis/enterprise-certificate-proxy v0.3.14 → v0.3.19 github.com/googleapis/gax-go/v2 v2.17.0 → v2.23.0 github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.72 → v2.0.0-beta.74 github.com/hashicorp/go-getter v1.8.6 → v1.8.8 github.com/hashicorp/go-version v1.8.0 → v1.9.0 github.com/klauspost/compress v1.19.1 → v1.19.2 github.com/mattn/go-isatty v0.0.20 → v0.0.24 github.com/moby/moby/client v0.5.0 → v0.5.1 github.com/spiffe/go-spiffe/v2 v2.6.0 → v2.7.0 github.com/stretchr/objx v0.5.2 → v0.5.3 github.com/stretchr/testify v1.11.1 → v1.12.1 go.opentelemetry.io/contrib/detectors/gcp v1.43.0 → v1.44.0 go.opentelemetry.io/otel v1.43.0 → v1.44.0 (🟢 remediated GO-2026-5158 ) go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.40.0 → v1.44.0 go.opentelemetry.io/otel/metric v1.43.0 → v1.44.0 go.opentelemetry.io/otel/sdk v1.43.0 → v1.44.0 go.opentelemetry.io/otel/sdk/metric v1.43.0 → v1.44.0 go.opentelemetry.io/otel/trace v1.43.0 → v1.44.0 golang.org/x/crypto v0.54.0 → v0.55.0 golang.org/x/mod v0.38.0 → v0.40.0 (🟢 remediated GO-2026-6179 , GO-2026-6180 ) golang.org/x/net v0.57.0 → v0.58.0 golang.org/x/text v0.40.0 → v0.41.0 golang.org/x/tools v0.48.0 → v0.49.0 google.golang.org/api v0.271.0 → v0.292.0 google.golang.org/genproto v0.0.0-8636f87 → v0.0.0-aa98bba google.golang.org/genproto/googleapis/api v0.0.0-afd174a → v0.0.0-925bb5d google.golang.org/genproto/googleapis/rpc v0.0.0-afd174a → v0.0.0-6ac0973 google.golang.org/grpc v1.82.1 → v1.83.0 modernc.org/cc/v4 v4.29.0 → v4.29.1 modernc.org/libc v1.74.1 → v1.74.4 modernc.org/sqlite v1.55.0 → v1.56.0 Added (1 package) go.opentelemetry.io/otel/metric/x v0.66.0 Removed (1 package) github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6 (Full Changelog)

Anchore: v1.51.1

Thu, 27 Aug 2026 17:01:15 GMT

WordPress: WordPress Signs the Open Weights and American AI Leadership Letter

Thu, 27 Aug 2026 17:00:32 GMT

We’re proud to announce that WordPress has signed Open Weights and American AI Leadership, an open letter asking US policymakers to not place early restrictions on open weight AI models. These are artificial intelligence models that anyone can download, inspect, modify, and run on their own infrastructure. The letter was published on July 24, 2026, […]

WordPress: WordPress Signs the Open Weights and American AI Leadership Letter

Thu, 27 Aug 2026 17:00:32 GMT

JetBrains: build-2.5.0-dev-6020

Thu, 27 Aug 2026 17:00:20 GMT

automatically created by TeamCity VCS labeling build feature

Microsoft: How Uno Platform uses .NET, MCP, and AI to build high quality apps

Thu, 27 Aug 2026 17:00:00 GMT

How Uno Platform built two Model Context Protocol servers in C# so AI agents can ground themselves in real documentation and then see and drive a running cross-platform .NET app. The post How Uno Platform uses .NET, MCP, and AI to build high quality apps appeared first on .NET Blog .

OpenTofu: v1.13.0-beta1

Thu, 27 Aug 2026 16:59:04 GMT

1.13.0-beta1

Dagster: 1.13.20 (core) / 0.29.20 (libraries)

Thu, 27 Aug 2026 16:57:31 GMT

New In Dagster+, dynamic partitions can now be wiped and deleted in a single action, clearing the asset's degraded health status. Multi-partitioned assets are not yet supported. Alert policies can now notify on successful code location deploys. [ui] Filter inputs now show your recent searches in the autocomplete dropdown before you start typing. [ui] Refreshed the Dagster and Dagster+ logos and favicons to the new branding. [ui] Updated the Google kind tag icons. (Thanks, @dragos-pop !) Bugfixes [dagster-aws] Fixed an issue where an ECS run launch would fail instead of retrying when ECS reported a transient AGENT failure. (Thanks, @yishern !)

Dagster: 1.13.20 (core) / 0.29.20 (libraries)

Thu, 27 Aug 2026 16:57:31 GMT

gRPC: Release v1.82.2

Thu, 27 Aug 2026 16:55:40 GMT

This is release gRPC Core 1.82.2 (glacier). For gRPC documentation, see grpc.io . For previous releases, see Releases .

Ghost: Gift subscription improvements

Thu, 27 Aug 2026 16:46:20 GMT

Personalized delivery, more gift lengths, and gifting in Portal

Lightdash: 2.36.0

Thu, 27 Aug 2026 16:43:29 GMT

2.36.0 (2026-08-27) Features ai: group composer actions in one menu ( #28231 ) ( b369f29 )

Confluent: v8.4.0-1078

Thu, 27 Aug 2026 16:40:23 GMT

chore: Set project version and resolve dependencies. 8.4.0-1078

Lightdash: 2.35.2

Thu, 27 Aug 2026 16:39:38 GMT

2.35.2 (2026-08-27) Bug Fixes content-as-code: block managed content deletion ( #28232 ) ( 13a3a19 )

Zalando: v0.27.78

Thu, 27 Aug 2026 16:38:10 GMT

Changes valkey: make operation SetWithExpire atomic ( #4226 ) SetWithExpire previously sent separate SET and EXPIRE commands, which were not atomic and could leave a key without a TTL. It now uses a single SET ... PX command. Multiarch Docker image Multiarch Docker image is available in GitHub's docker registry: docker run -it ghcr.io/zalando/skipper:v0.27.78 skipper --help

Astral: 0.16.5

Thu, 27 Aug 2026 16:37:58 GMT

Release Notes Released on 2026-08-27. Preview features Allow rules without codes ( #28049 ) Introduce category selectors ( #27666 ) Update preview default rules and categories ( #27877 ) Bug fixes [ flake8-async ] Detect blocking generic HTTP requests ( ASYNC210 ) ( #28024 ) [ flake8-datetimez ] Allow timezone-safe strptime chains ( DTZ007 ) ( #28023 ) [ flake8-simplify ] Respect side effects in lambda defaults ( SIM401 ) ( #28000 ) Server Fix duplicated "of" in ClientOptions doc comment ( #27978 ) Documentation Document rule acceptance guidelines ( #27910 ) Document the new category selectors ( #27906 ) Contributors @AlexWaygood @sharkdp @jelle-openai @charliermarsh @ntBre @aarushkandukoori Install ruff 0.16.5 Install prebuilt binaries via shell script curl --proto ' =https ' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh Install prebuilt binaries via powershell script powershell -ExecutionPolicy Bypass -c " irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex " Download ruff 0.16.5 File Platform Checksum ruff-aarch64-apple-darwin.tar.gz Apple Silicon macOS checksum ruff-x86_64-apple-darwin.tar.gz Intel macOS checksum ruff-aarch64-pc-windows-msvc.zip ARM64 Windows checksum ruff-i686-pc-windows-msvc.zip x86 Windows checksum ruff-x86_64-pc-windows-msvc.zip x64 Windows checksum ruff-aarch64-unknown-linux-gnu.tar.gz ARM64 Linux checksum ruff-i686-unknown-linux-gnu.tar.gz x86 Linux checksum ruff-powerpc64-unknown-linux-gnu.tar.gz PPC64 Linux checksum ruff-powerpc64le-unknown-linux-gnu.tar.gz PPC64LE Linux checksum ruff-riscv64gc-unknown-linux-gnu.tar.gz RISCV Linux checksum ruff-s390x-unknown-linux-gnu.tar.gz S390x Linux checksum ruff-x86_64-unknown-linux-gnu.tar.gz x64 Linux checksum ruff-armv7-unknown-linux-gnueabihf.tar.gz ARMv7 Linux checksum ruff-aarch64-unknown-linux-musl.tar.gz ARM64 MUSL Linux checksum ruff-i686-unknown-linux-musl.tar.gz x86 MUSL Linux checksum ruff-x86_64-unknown-linux-musl.tar.gz x64 MUSL Linux checksum ruff-arm-unknown-linux-musleabihf.tar.gz ARMv6 MUSL Linux (Hardfloat) checksum ruff-armv7-unknown-linux-musleabihf.tar.gz ARMv7 MUSL Linux checksum Verifying GitHub Artifact Attestations The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI : gh attestation verify < file-path of downloaded artifact > --repo astral-sh/ruff You can also download the attestation from GitHub and verify against that directly: gh attestation verify < file-path of downloaded artifact > --bundle < file-path of downloaded attestation >

Lightdash: 2.35.1

Thu, 27 Aug 2026 16:35:22 GMT

2.35.1 (2026-08-27) Bug Fixes preserve metric formats in pivoted xlsx exports ( #28201 ) ( f823df7 )

Solo.io: v1.19.22

Thu, 27 Aug 2026 16:32:03 GMT

Helm Changes Fix the SDS container's readinessProbe so it falls back to the default probe only when global.glooMtls.sds.readinessProbe is unset, instead of always requiring a value from values-template.yaml. This lets users fully disable the probe by explicitly setting it to null/empty, and lets a partial override apply on top of an explicit probe without silently losing the default when none is provided. ( #11389 )

GitHub: Close all open contributions authored by a blocked user

Thu, 27 Aug 2026 16:30:52 GMT

You can now automatically close all open issues, discussions, and pull requests authored by a user when you block them from your personal account or organization. To use this option,… The post Close all open contributions authored by a blocked user appeared first on The GitHub Blog .

Nextcloud: v35.0.0rc2

Thu, 27 Aug 2026 16:26:41 GMT

v35.0.0rc2

Confluent: v8.2.4-44

Thu, 27 Aug 2026 16:24:42 GMT

chore: Set project version and resolve dependencies. 8.2.4-44

Casdoor: v3.161.1

Thu, 27 Aug 2026 16:23:47 GMT

3.161.1 (2026-08-27) Bug Fixes migrate the frontend from antd to shadcn/ui in web2 ( a96940f )

Nextcloud: v35.0.0RC2

Thu, 27 Aug 2026 16:22:04 GMT

https://github.com/nextcloud-releases/server/releases/tag/v35.0.0RC2

PostHog: agent-v2.4.95

Thu, 27 Aug 2026 16:21:28 GMT

Agent release agent-v2.4.95

Solo.io: v1.21.15

Thu, 27 Aug 2026 16:19:12 GMT

This release build failed. Helm Changes Fix the SDS container's readinessProbe so it falls back to the default probe only when global.glooMtls.sds.readinessProbe is unset, instead of always requiring a value from values-template.yaml. This lets users fully disable the probe by explicitly setting it to null/empty, and lets a partial override apply on top of an explicit probe without silently losing the default when none is provided. ( #11389 )

Confluent: v8.1.6-45

Thu, 27 Aug 2026 16:19:11 GMT

chore: Set project version and resolve dependencies. 8.1.6-45

Solo.io: v1.20.24

Thu, 27 Aug 2026 16:18:12 GMT

ClickHouse: Release v26.3.24.4-lts

Thu, 27 Aug 2026 16:12:56 GMT

No content.