October 31 – November 6, 2026
Saturday to Friday, Brasília time.
- 3,242pieces
- 877sources
- 24new models
- 3exploited vulnerabilities
- 42major incidents
The Week's Top Stories
What mattered most, each in its maker's or first source's words.
-
1
What’s new with Google Data Cloud
November 2 - November 6 BigQuery observability for data agents is now generally available: Data teams can now monitor the performance, adoption, latency, and cost of BigQuery data agents and their multi-turn conversation…
-
2
Gemini Omni 1.2 Flash: Fast and cost-effective with longer clips
Gemini Omni 1.2 Flash brings native 15-second video generation and editing, stronger consistency, and 30% lower pricing.
Also reported by Google DeepMind · Vercel · Google Cloud · Google Workspace Updates
-
3
Into the Omniverse: How Developers Turn Ideas Into Simulations With Frontier AI Agents
Turning a simulation idea into a working application means assembling assets, connecting physics and rendering, and checking that the scene behaves as intended. Developers are combining frontier AI models with NVIDIA Omn…
-
4
Giving Back to the Open Source We Build On
LanceDB adds ASOF join support to Apache DataFusion, improving time-series joins while giving back to the open source projects we rely on.
-
5
What’s new with Google Cloud
Want to know the latest from Google Cloud? Find it here in one handy location. Check back regularly for our newest updates, announcements, resources, events, learning opportunities, and more. Tip: Not sure where to find…
-
6
DevRev delivers autonomous self-service with GPT-6.1 Sol
DevRev uses GPT-6.1 Sol to power Computer and Operator, balancing reasoning, speed, and cost for enterprise service.
-
7
Track spend by cost code with project tags (beta)
Track spend by cost code with project tags (beta)Eligible Enterprise organizations can now tag projects with the codes they already use, like a charge code or client-matter number, and see most spend in those projects by…
-
8
ToyBlocks: A controlled world for robot learning and evaluation
ToyBlocks is an open simulation framework for studying robot learning through automated task generation, training demonstrations, and evaluation in a controlled tabletop world.
Security
Vulnerabilities newly known to be exploited (CISA), then the week's most relevant advisories.
- CVE-2026-119977: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predi…
- CVE-2024-27834: Apple Multiple Products Improper Authentication Vulnerability
Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication.
- CVE-2026-19868: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful…
- ARTEX abuse expands as cybercriminals target financial sector
In October 2026, the financially motivated threat actor Storm-3358 began targeting organizations in the financial sector using the agentic AI offensive framework ARTEX. The post ARTEX abuse expands as cybercriminals targ…
- Re: "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Michael Orlitzky on Nov 06 It was easy to lose in the noise, but musl is not the only one doing this: https://github.com/besser82/libxcrypt/blob/develop/configure.ac#L322
- Stable Channel Update for ChromeOS / ChromeOS Flex
M-156, ChromeOS version 16836.32.0 (Browser version 156.0.8078.93）has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our…
- CVE-2026-123158 | OpenSSH musl Password Authentication Bypass & Remote Code Execution Vulnerability (*sshole)
CVE-2026-123158, known as *sshole, is an OpenSSH sshd authentication bypass on Linux systems that use musl libc without PAM, including Alpine Linux in its default configuration.
- CVE-2026-123158 (*sshole): OpenSSH Password Authentication Bypass on Alpine Linux
CVE-2026-123158 (*sshole) enables an OpenSSH authentication bypass on Alpine Linux. Review lab results, exposure conditions, fixes, and mitigations.
Major Incidents
Outages the providers themselves rated major or critical.
- Issues establishing voice call
- Fields missing across Jira Work Items for some users
- Fields missing across Jira Work Items for some users
- Emergency maintenance in IAD
- Data Irregularities in US Region
- Git Sync causing missing page content
- Optimization Agent shows elevated error rate
- Sentry dashboard is down
- Sync Trigger Failure
- Issue Resolving Entitlements
- GitBook services unavailable
- Delays in some video processing tasks
- Security incident impacting published sites and GitBook app
- DigiCert Alert - CertCentral Cart Services
- Outbound 10DLC MMS Delivery Incident - T-Mobile, Verizon, AT&T
- Sentry.io dashboard and API is down
- Delays in spans and transactions processing
- Data Connectivity Issues IMSI1
- Data Connectivity Issues - IMSI1
- Elevated API error rates
- Voice Authentication Incident - Pindrop
- Incident with Pull Requests, Git Operations and Issues
- Git Sync affected by GitHub disruption
- Indonesia - Issues with file processing in multiple services
- Contentstack – Azure EU – Multiple Services Disruption
- mOLTP PrivateLink connectivity issue
- Git errors for projects connected to GitHub over SSH
- Incident with Actions and Pages
- Transfer RTP Requests are Temporarily Disabled for Some Customers
- Incident with Actions
- RTMP and SRT live streams disconnection
- DigiCert Alert - Customer Support Chat and Email system outage
- Connecting issues in Azure Brazil South
- Unable to access preview deployments
- App Live is facing issues
- Problem with Cloud SIEM APIs in North America 2 (US2)
- Docs.redhat.com - Intermittent performance degradation
- Data Connectivity Issues - IMSI1
- HCP Boundary Scheduled Maintenance
- Docs search unavailable
- Bandwidth Local Market Impairment - 256 Clarksburg WV
- Intermittent failures scheduling warehouse jobs and processing Profile Syncs
Releases
Major and minor versions only — no patches.
- Anthropic Python SDK 2.4.0: api, add GA methods for analytics, spend limits and RBAC
Features api: add GA methods for analytics, spend limits and RBAC api: add named beta types for unified metrics and RBAC delete responses api: add shared analytics order and increase request actor types api: add tool_use…
- Anthropic Python SDK 2.5.0: api, add error details types and new error type values
Features api: add error details types and new error type values api: add ids filter to list workspaces client: add error classes for HTTP statuses and API error codes, and error_code, details and api_message on APIStatus…
- Anthropic Python SDK 2.6.0: api, add error code for ramp limit errors
Features api: add error code for ramp limit errors api: add error codes for External Key validation failures api: add support for signing organization members out everywhere Bug Fixes bedrock,vertex: raise error-code and…
- sdk-v1.6.0
Features api: add error code for ramp limit errors api: add error codes for External Key validation failures api: add support for signing organization members out everywhere Bug Fixes client: set the name of each error t…
- Apache Airflow 3.4.0
PyPI: https://pypi.org/project/apache-airflow/3.4.0/ Docs: https://airflow.apache.org/docs/apache-airflow/3.4.0/ 🛠 Release Notes: https://airflow.apache.org/docs/apache-airflow/3.4.0/release_notes.html Docker Image: "do…
- App Store Connect API 4.6
Download fileView release notes
- Argo CD 3.6.0: kubectl create namespace argocd
Quick Start Non-HA: kubectl create namespace argocd kubectl apply -n argocd --server-side --force-conflicts -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.6.0/manifests/install.yaml HA: kubectl create namespace…
- ComfyUI 0.44.0: [Partner Nodes] feat(Patina), add Patina texture nodes by @bigcat88 in #17384
What's Changed [Partner Nodes] feat(Patina): add Patina texture nodes by @bigcat88 in #17384 [Partner Nodes] feat(VEED): add VEED Dubbing node by @bigcat88 in #17388 Update workflow templates to v0.11.98 by @comfyui-wiki…
- v1.19.0 - Trace Your Workflows, Layer by Layer
Dify 1.19.0 brings nested workflow tracing to your observability tools. Follow a workflow into the Workflow Tools it calls, inspect the steps inside each invocation, and keep the LLM context alongside the execution tree.…
- Docker Compose 5.7.0: Heads-up for users of Compose as a library, Up now runs its Create and Start phases as a single plan over…
What's Changed Heads-up for users of Compose as a library: Up now runs its Create and Start phases as a single plan over a single daemon snapshot, for up -d ( #14290 ) and interactive up ( #14305 ), as scale, watch rebui…
- v44.11.0
v44.11.0
- Envoy 1.40.0: Summary of changes
Summary of changes Breaking changes build: Envoy has switched from WORKSPACE to bzlmod. The WORKSPACE file is removed; Envoy, the API and the docs are published as Bazel modules ( envoy, envoy_api, envoy-docs ). Downstre…
- Release v0.67.0
What's Changed Changelog for v0.65.0 by @gemini-cli-robot in #29853 chore(release): bump version to 0.67.0-nightly.20261020.gb041de017 by @gemini-cli-robot in #29854 Changelog for v0.66.0-preview.0 by @gemini-cli-robot i…
- Google Gen AI SDK 3.0.0: BREAKING CHANGES
3.0.0 (2026-11-05) BREAKING CHANGES Default Gemini Developer API version is now v1 (was v1beta ) ( 2d0f947 ) Clients targeting the Gemini Developer API now default to API version v1 instead of v1beta. No effect on Gemini…
- pkg/storage/dbproxy/v0.1.0
Release dbproxy v0.1.0
- Laravel 13.40.0: [13.x] Fix Paginator::links() return type by @dhrupo in #62226
[13.x] Fix Paginator::links() return type by @dhrupo in #62226 [13.x] Fix updating JSON paths with arrays and collections on MySQL and MariaDB by @xurshudyan in #62225 [13.x] Use the write connection in BelongsToMany cre…
- Laravel 12.71.0: Update version to v12.71.0
Update version to v12.71.0
- 1.108.0 (LTS)
Tip The lts image tag always points to the latest LTS release. Pull ghcr.io/berriai/litellm:lts to stay on the newest LTS patch Verify this release cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/…
- NestJS 12.4.0: platform-node
v12.4.0 (2026-11-06) Features platform-node #18396 feat(node): let the node adapter set locals for every view ( @thekhegay ) Bug fixes microservices #18418 fix(microservices): ignore an mqtt server's own replies under wi…
- Open WebUI 0.13.0: Tabbed workspace. The Tabs button at the top of a chat now opens a workspace for files, multiple terminal…
Added Tabbed workspace. The Tabs button at the top of a chat now opens a workspace for files, multiple terminal sessions, artifacts, previews, voice calls and comments. Add tabs from the + menu, drag to reorder them, and…
- libcap 2.75 source archive
Mirror of the unmodified libcap 2.75 source archive used to build Bubblewrap for Codex's Linux musl packages. Upstream archive SHA-256 for libcap-2.75.tar.xz is de4e7e064c9ba451d5234dd46e897d7c71c96a9ebf9a0c445bc04f4742d…
- OpenAI Codex 0.167.0: New Features
New Features Open the agent command center with codex agents --no-daemon. The command center and session picker now mark unread results ( #58238, #58239, #58263, #58264 ). Switch between connected backends from the termi…
- OpenAI Node SDK 7.47.0: api, support typed Responses WebSocket warmup (#3084) (a365b5c)
7.47.0 (2026-10-31) Features api: support typed Responses WebSocket warmup ( #3084 ) ( a365b5c )
- OpenAI Node SDK 7.49.0: api, add workload identity providers and federation rules (#3103) (47c4227)
7.49.0 (2026-11-03) Features api: add workload identity providers and federation rules ( #3103 ) ( 47c4227 )
- OpenAI Node SDK 7.50.0: api, add 12-hour Responses caching and cache-write usage (#3106) (a286400)
7.50.0 (2026-11-03) Features api: add 12-hour Responses caching and cache-write usage ( #3106 ) ( a286400 ) api: add project service tier settings ( #3105 ) ( 13abd41 ) Bug Fixes deps-dev: bump puppeteer from 25.14.0 to…
- OpenAI Node SDK 7.51.0: api, add Australia, India, and Japan residency options (#3112) (42c31dc)
7.51.0 (2026-11-05) Features api: add Australia, India, and Japan residency options ( #3112 ) ( 42c31dc ) api: add GPT-6 Rosalind to the model catalog ( #3109 ) ( 9854bd6 ) api: add image complexity and GIF and SVG outpu…
- OpenAI Node SDK 7.52.0: api, add a model option for Responses (#3116) (c05ed3e)
7.52.0 (2026-11-05) Features api: add a model option for Responses ( #3116 ) ( c05ed3e ) Bug Fixes deps-dev: bump follow-redirects from 1.16.0 to 1.16.2 in /ecosystem-tests/cloudflare-worker ( #3113 ) ( 2d5b81c )
- OpenAI Node SDK 7.53.0: agents, deliver session errors as stream events (#3120) (c48e5aa)
7.53.0 (2026-11-06) Features agents: deliver session errors as stream events ( #3120 ) ( c48e5aa ) Bug Fixes deps-dev: bump @aws-sdk/credential-provider-node from 3.972.84 to 3.972.88 ( #3099 ) ( 101175b ) deps-dev: bump…
- OpenAI Python SDK 3.43.0: api, expand Live Responses delegation tools (#4233) (f6e8480)
3.43.0 (2026-11-03) Features api: expand Live Responses delegation tools ( #4233 ) ( f6e8480 ) responses: accumulate rich WebSocket progress ( #4224 ) ( 48cdad3 ) responses: add WebSocket lane overflow isolation ( #4225…
- OpenAI Python SDK 3.44.0: api, add workload identity providers and federation rules (#4237) (12709d7)
3.44.0 (2026-11-03) Features api: add workload identity providers and federation rules ( #4237 ) ( 12709d7 )
- OpenAI Python SDK 3.45.0: api, add 12-hour Responses caching and cache-write usage (#4240) (5f717b5)
3.45.0 (2026-11-03) Features api: add 12-hour Responses caching and cache-write usage ( #4240 ) ( 5f717b5 ) api: add project service tier settings ( #4239 ) ( 1a2a3d0 ) Documentation clarify generated-file ownership ( #4…
- OpenAI Python SDK 3.46.0: api, add Australia, India, and Japan residency options (#4246) (2634b87)
3.46.0 (2026-11-05) Features api: add Australia, India, and Japan residency options ( #4246 ) ( 2634b87 ) api: add GPT-6 Rosalind to the model catalog ( #4243 ) ( 0f8e5f3 ) api: add image complexity and GIF and SVG outpu…
- OpenAI Python SDK 3.47.0: api, add a model option for Responses (#4249) (090098f)
3.47.0 (2026-11-05) Features api: add a model option for Responses ( #4249 ) ( 090098f )
- v1.71.0/v0.165.0
Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.165.0 End User Changelog Breaking changes pkg/confighttp: Remove deprecated fields IdleConnTimeout, MaxIdleConn…
- service/v0.165.0
Module set beta, Version v0.165.0
- oxc crates_v0.157.0
Features 8dd67a6 transform-react: Expose TypeScript transform options (Tomas Särnhammar) deed7dc parser: More friendly error for duplicate import attribute key ( #28262 ) (sapphi-red) Bug Fixes eaa8e90 ecmascript: Avoid…
- oxfmt v0.76.0
BREAKING CHANGES 296623d oxfmt: [ BREAKING ] Format parser:html files by oxc_formatter_htmlish ( #28273 ) (Yuji Sugiura) Features 336b2c1 oxfmt: Support html-in-js templates closing a dynamic tag name ( #28389 ) (Yuji Su…
- oxlint v1.91.0
Features 004647a track_memory_allocs: Add allocation tracking for linter rules ( #28470 ) (Cam McHenry) 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings) Bug Fixes a205cd3…
- oxlint v1.92.0
Features 4a52ba2 oxlint: Discover tsrs for type-aware linting ( #28751 ) (camc314) b7d2c75 linter/eslint/no-redeclare: Add ignoreDeclarationMerge option ( #28816 ) (Cam McHenry) Bug Fixes fa66fde oxlint,oxfmt: Resolve Vi…
- oxfmt v0.77.0
BREAKING CHANGES 00d1a67 oxfmt: [ BREAKING ] Format parser:vue files by oxc_formatter_htmlish ( #28848 ) (leaysgur) Features 9a81e58 formatter_htmlish: Format Vue templates ( #28847 ) (leaysgur) 119d82f formatter: Format…
- Playwright 1.65.0: Run tests with Bun
Run tests with Bun The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright…
- Preact 11.1.0: Add preact/compat/compiler-runtime for apps compiled with React Compiler (#5323, thanks @JoviDeCroock)
Features Add preact/compat/compiler-runtime for apps compiled with React Compiler ( #5323, thanks @JoviDeCroock ) Fixes Harden VNode recognition with a shared symbol marker ( #5335, thanks @JoviDeCroock ) Isolate layout-…
- Preact 11.2.0: Support scoped custom element registries when rendering into shadow roots (#5342, thanks @JoviDeCroock)
Features Support scoped custom element registries when rendering into shadow roots ( #5342, thanks @JoviDeCroock ) Fixes Ignore non-function values for on* props instead of registering invalid event handlers ( #5345, tha…
- v0.316.0
v0.316.0
- 3.16.0 / 2026-11-04
[CHANGE] API: The experimental search endpoints now clamp batch_size to 1000. #19731 [CHANGE] Configuration: Default --web.external-url to https when --web.config.file enables TLS. #19241 [CHANGE] PromQL: Subquery sample…
- sdk/v3.274.0
Harvest propertyDependencies from OutputValue inputs on RegisterResou…
- Pulumi 3.274.0: [cli/policy] Add pulumi policy get to show a policy pack's policies #25297
3.274.0 (2026-11-03) Features [cli/policy] Add pulumi policy get to show a policy pack's policies #25297 [cli/policy] Add --output json to pulumi policy publish, enable, disable, rm and validate-config, and print the upd…
- 8.12 RC2
This is the second Release Candidate of Redis 8.12 in Redis Open Source. Release Candidates are feature-complete pre-releases. Pre-releases are not suitable for production use. New Features #16082 Update the Search modul…
- Rolldown 1.3.0: This is a minor release. It adds experimental support for import attributes, and some changes alter default…
Important This is a minor release. It adds experimental support for import attributes, and some changes alter default behavior compared to 1.2.16. Please read Breaking changes before upgrading. Warning Vite users: Please…
- v5.0.0-2
5.0.0-2
- Rollup 4.68.0: Use the directory name instead of "index" for dynamic chunks of index.js files (#6630)
4.68.0 2026-11-06 Features Use the directory name instead of "index" for dynamic chunks of index.js files ( #6630 ) Support tree-shaking of namespace members through default exports ( #6631 ) Use cached sourcemaps if ava…
- swc_core@v83.1.0
chore: Publish crates with swc_core v83.1.0
- swc_core@v84.0.0
chore: Publish crates with swc_core v84.0.0
- Supabase CLI 3.0.0: Supabase CLI v3.0.0 — 2026-11-02
Supabase CLI v3.0.0 — 2026-11-02 v3 is a major release. Commands that can run locally now target your local stack by default, one --remote flag replaces --linked, --project-ref and --db-url, and every change to a hosted…
- @supabase/config v1.0.0
1.0.0 (2026-11-02) feat(cli)!: remove db remote commit and the low-use inspect db aliases ( #7109 ) ( 948107b ), closes #7108 feat(cli)!: remove deprecated commands and the supabase-go binary ( #6609 ) ( 6b3541d ) feat(c…
- Temporal 1.33.0-165.2: patched temporal version
patched temporal version
- Temporal 1.33.0-165.4: patched temporal version
patched temporal version
- Temporal 1.33.0-166.2: patched temporal version
patched temporal version
- 1.145.0
https://code.visualstudio.com/updates/v1_145
- Vitest 5.1.0: Add --last-failed to run only failed tests - by @sheremet-va in #11558 (82f63)
Features Add --last-failed to run only failed tests - by @sheremet-va in #11558 (82f63) Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime() - by @Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M contex…
- Zed 1.27.0: This week's release includes syntax highlighting for Go 1.27 generic methods, an option to open README files…
This week's release includes syntax highlighting for Go 1.27 generic methods, an option to open README files by default, and AI commit messages that follow your repository's recent commit style. Features AI Improved Agen…
- mise-daemons-v2026.11.0
Release mise-daemons 2026.11.0
- v2026.11.0: Task locks for shared resources, safer lockfiles, and `.agents/skills` as the default skills directory
Tasks can now declare a lock, so runs that share a resource take turns, even across worktrees and terminals. This release also adds opt-in npm provenance verification, dotfile dependencies, and mise bootstrap --update fo…
- openai 7.47.0
The official TypeScript library for the OpenAI API
- @anthropic-ai/sdk 1.4.0
The official TypeScript library for the Anthropic API
- openai 7.50.0
The official TypeScript library for the OpenAI API
- @anthropic-ai/sdk 1.5.0
The official TypeScript library for the Anthropic API
- openai 7.51.0
The official TypeScript library for the OpenAI API
- openai 7.52.0
The official TypeScript library for the OpenAI API
- @anthropic-ai/sdk 1.6.0
The official TypeScript library for the Anthropic API
- @google/genai 3.0.0
[](https://www.npmjs.com/package/@google/genai) [](https://www.npmjs.com/package/@google/ge…
- openai 7.53.0
The official TypeScript library for the OpenAI API
- process-daemon v0.5.0
opencode-pty 0.5.0 (protocol 8) from packages/process-daemon, published to npm as @opencode/pty@0.5.0.
- pnpm 12.18
pnpm 12.18.0 packs, publishes, and installs packages with platform variants on pnpr registries. It also adds per-skill approval of agent skills and pnpm store add for offline installs from downloaded tarballs. Repeat ins…
- soupsieve 4.0
4.0 BREAK : The contents of an HTML template are no longer treated as part of the document. Selectors do not descend into a template , and elements inside one can't see beyond it, which also applies to pseudo classes suc…
- vLLM 0.33.0: vLLM v0.33.0
vLLM v0.33.0
- vLLM 0.33.0: This release features 927 commits from 389 contributors (122 new)!
v0.33.0 Highlights This release features 927 commits from 389 contributors (122 new)! New models: Reflection Beam-1.0 (501B MoE, 23B active) with its DFlash2 drafter ( #62074 ), Yandex AliceAI-Foundation-80B-A3B ( #57963…
Research
The papers most useful to a developer this week.
- Enabling Retriever-LLM Connection across the Semantic Gap in Retrieval-Augmented Generation
Retrieval-augmented generation (RAG) has attracted significant attention for enhancing large language models (LLMs) in domain-specific and knowledge-intensive tasks by utilizing external documents retrieved by retrievers. However, LLMs often struggle to determine which retrieved…
- Optimization-Driven Cluster-Weighted Clusterwise Linear Regression
Clusterwise Linear Regression (CLR) integrates clustering and regression to uncover complex relationships within heterogeneous datasets by simultaneously partitioning data and fitting cluster-specific models. This dual capability offers a significant advantage over traditional re…
- A Systematic Review of Digital Twins and Security for Cyber-Physical Systems
The rapid growth of Cyber-Physical Systems (CPS) has increased interest in digital twins (DTs) as virtual representations of physical systems to improve efficiency, monitoring, and security. However, as DTs become integral components of CPS, ensuring their own security also becom…
- Critiquing AI Surveys with a Case Study on Temporal Features for Trustworthy Computer Vision
A novel, thorough manual survey is presented, focusing on the trustworthy extraction and application of temporal features in drone video feeds for object detection and tracking. Trust stems from reducing the necessary scope of opaque, deep components, and externally accounting fo…
- Supporting Optimization and Cross-compilation of Dataflow Actor Networks via an Intermediate Representation in MLIR
The actor model of computation is an attractive representation for many applications because it explicitly captures concurrency and supports compile-time analyses such as buffer sizing and static scheduling. However, descriptions of applications in this model are often tied to sp…
End of the week.← The week before · The week after →