Add role selection to organization invitation flow
Developer changelog updates for Oct 1, 2026
Daily archive for Oct 1, 2026: product-level counts, tags, and every published update from this date.
Updates in Oct 1, 2026
Released stable updates for self‑hosted Retool versions 4.34, 4.0, and 3.334
AWS launched preview of the AI‑powered Well‑Architected Agent, extending Trusted Advisor and the Well‑Architected Tool.
Introduce rate limits on private vulnerability report submissions per account
Introduce a structured form for private vulnerability reports
Added support for branch.schema_recommendation webhooks on Postgres databases
Adds public preview of computer use in GitHub Copilot CLI and desktop app for macOS and Windows
The macOS 14 GitHub Actions runner image will be retired on November 2 2026.
Introduced agent-driven development workflow across VS Code v1.136‑v1.140.
Added automatic detection and highlighting of ACCESSIBILITY.md files in the repository overview when placed in the root, .github/, or docs/ directories.
Updated BoringSSL to fix CVE‑2026‑35189, preventing a TLS handshake denial‑of‑service.
Redshift can now query S3 data lake tables located in a different AWS Region without copying them
Fixed MMR normalize query vector, HNSW commit‑log crashes, and several RBAC and backup security issues
Improved performance of declarative automation for partitioned assets and set the time‑partitioned asset selector to show the most recent 90 days by default
Retention settings now apply to checks, workflow runs, and statuses, aligning them with artifact and log retention
Next Gen Events (2026-10) are now GA, letting apps subscribe to specific data changes and receive GraphQL query results in the payload, reducing extra API calls
Added filtered export for DynamoDB tables to Amazon S3, allowing selection of items and attributes via key condition, filter, and projection expressions.
Patched BoringSSL to address CVE‑2026‑35189 memory allocation issue in TLS handshakes, mitigating remote DoS.
Weekly scheduled code scanning now only triggers after a push or pull request, skipping inactive repositories
Fixed CI failures when uploading code coverage on new branches without an open pull request.
Amazon DynamoDB Accelerator (DAX) is now available in 17 additional AWS Regions worldwide.
Introduces dynamic workflows to Copilot CLI, the GitHub Copilot app, and the SDK
GuardDuty now supports AWS Organizations declarative policies for centralized enablement across all accounts and Regions
Removed metafieldInteger collection source condition; replace with metafieldInt
Adds Rollouts queries to the Admin GraphQL API, allowing apps to list, search, and fetch Rollout details including schedules, traffic allocation, and resource changes.
Introduce smsMarketingConsent field on CustomerPhoneNumber for structured SMS consent
Adds a new `parseWarnings` field to `shopifyqlQuery` responses, providing a list of non-fatal warnings.
Added nullable fiscalDeviceIdentifier field to PointOfSaleDevice in the 2026-10 GraphQL Admin API
orderCancel mutation now returns a structured OrderCancelJobResult via a new jobResult field
Added read‑only `Discount.rollouts` connection in Admin GraphQL API 2026‑10; apps must request the `read_rollouts` scope.
Orders webhook payloads now include a selling_plan_id field on line items
Introduces SubscriptionContractCalculation API for managing subscription contracts via Shopify’s checkout engine, adding support for bundled products, Functions, and consistent pricing calculations.
Added URLPattern request matcher, new TLS automate‑names option, expected‑underscore/dot header controls, and HTTP/3 support on low‑MTU links.
Release version v26.9.8.3.
Patched BoringSSL to fix CVE‑2026‑35189 memory allocation issue that could cause remote DoS during TLS handshakes.
Fix MMR normalize query vector and ensure tenant is passed to re‑vectorize checks on PATCH
Backup the Metabase application database before upgrading
Backup your Metabase application database before upgrading
Added RSS feeds for macOS base image releases on Buildkite hosted agents
Release Corretto 8u504 LTS patch update
Release v26.7.19.5 stable
Patched BoringSSL to fix CVE‑2026‑35189 memory allocation issue in TLS handshakes, preventing remote denial‑of‑service.
Team plan users can now opt‑in to Retool‑provided AI models for building apps
Added S3 Object Lock variable retention with event holds in AWS GovCloud (US-East and US-West)
Stabilized C variadic naked functions and added a default lint for raw borrows via references.
LTS version 26.3.38.2 released
Adds an inventory_transfer_id field to multiple inventory_shipment webhook payloads
Added support for Claude Opus 5.5 as a new AI model option in Retool.
Fix concurrent `pulumi new` runs failing to clone the templates repository (CLI)
Segment query functions now use MATCHES/NOT MATCHES operators instead of '= true'/'= false'.
Fixes a critical stability issue in Meilisearch
Fixed CSS preload handling for URLs with queries, corrected percent‑encoded srcset URLs, and added server resilience to file‑watcher errors.
Fix important stability issue in Meilisearch
Added ability to specify a custom CloudWatch Logs group for each Transfer Family managed workflow
Security Hub adds remediation plans that group related findings by root cause, enabling a single fix to resolve multiple exposures
Helm controller no longer re-applies chart CRDs on upgrades with server-side apply and recovers HelmReleases stuck in Ready=Unknown after failed status patches.
Stability fix for Meilisearch
Added experimental delivery connections DB view and status table.
Version 2.41.5 released on 2026-10-01.
No functional changes listed in this release.
Introduced table optimization (compact, binpack, sort, z-order) for Iceberg V3 tables to improve query performance and reduce storage costs.
Added support for up to 1 TB shuffle per job, raising the previous 200 GB limit
Introduces email verification for new budget notification subscribers, requiring confirmation before alerts are sent
Added native CloudWatch integration for Route 53 Global Resolver and DNS Firewall, delivering DNS analytics and insights.
Adds GA reusable batch transcription configuration for engine, model, language, and destination.
Integrates AWS Recommended Actions into the Secrets Manager console to provide contextual, actionable security recommendations.
New GA features: updated Simba JDBC driver, conversational analytics with graph chat, and BigQuery pipelines now support automated metadata enrichment and Knowledge Catalog data quality scorecards (also extended to Dataform workflows).
Voice Insights now displays the carrier block reason header and identifies the network that blocked the call.
IAM Identity Center now supports multi‑Region replication in additional commercial, GovCloud (US) and China regions.
Added preview support for verifiable credential issuance (OID4VCI) and verification (OID4VP), including revocation, attestation, and experimental mdoc format
Add ?organization=slug to Remote MCP Server URLs to select a specific Buildkite organization per connection
Adds returnPolicyProfile and returnPolicyProfiles query fields to the GraphQL Admin API for reading structured return policy data per market
Introduces a new RequestedOrderEdit resource with create, resolve, decline mutations and a calculate query in the GraphQL Admin API.
Default limit for S3 Tables raised to 100 table buckets per AWS Region (up from 10), supporting up to 1 million tables per region.
Each Buildkite agent minor release is supported for one year from its first stable release, with the final three months serving as a deprecation period that includes upgrade warnings.
Added three new Xero-integrated apps: Bustle POS for hospitality with one‑click cash‑up sync; Synder data layer syncing sales from 30+ platforms into Xero with configurable summary or per‑transaction modes; Qoblex inventory and order man...
Refresh tokens will have increased length and entropy, exceeding the current ~45‑character baseline.