Granular access tokens that could bypass 2FA can no longer perform sensitive account, organization, or package management actions.
Daily archive for Jul 31, 2026: product-level counts, tags, and every published update from this date.
Granular access tokens that could bypass 2FA can no longer perform sensitive account, organization, or package management actions.
Introduces fully managed Prometheus collectors in CloudWatch, removing the need for self‑managed OpenTelemetry collectors.
Bumped multiple dependencies (acme/lego, DataDog/dd-trace-go, golang.org/x/text, etc.) to newer versions.
Fixed authentication singleflight key collision and router name collisions in Kubernetes Gateway API provider.
Updated tracing library to dd-trace-go v2.8.1 and upgraded golang.org/x/text and x/net packages
Added cosign signatures and SLSA Level 3 provenance for all Argo CD container images and CLI binaries, enabling verification of authenticity.
All Argo CD container images are now signed with cosign and SLSA‑Level 3 provenance for secure verification
Added AWS CodeDeploy support in five new regions (New Zealand, Thailand, Taipei, Malaysia, and Mexico Central).
pnpm login now works without a TTY for web‑based registry logins, printing the auth URL and polling for approval; classic username/password still requires interactivity.
C7i‑flex instances with 4th‑Gen Intel Xeon (Sapphire Rapids) are now available in the Europe (Milan) AWS region.
C7i instances (4th‑Gen Intel Xeon) are now offered in Europe (Milan) and Canada West (Calgary) regions.
Added SvelteKit 3 support