Amazon MWAA now propagates user-defined tags to its compute resources (workers, schedulers, web servers).
Daily archive for Nov 4, 2026: product-level counts, tags, and every published update from this date.
Amazon MWAA now propagates user-defined tags to its compute resources (workers, schedulers, web servers).
Added json-file log driver support for ECS Managed Instances, letting containers write logs in Docker json-file format.
Backported fixes from upstream ANGLE, Chromium, Dawn, FFmpeg, minigbm, PDFium, Skia, and V8.
Added “Allowed Link Protocols” option to the WYSIWYG editor to preserve custom URL schemes and validate links.
CodeQL 2.27.4 released with improved query accuracy across multiple languages.
Retool 4.88 has been released.
Versions 1.0 and 2.0 of the Microsoft SQL integration have been removed.
GitHub Copilot integrated into Xcode’s built‑in coding assistant
Updated dependencies, including go-jose/v4 to v4.1.6 and parquet-go to v0.32.0.
Amazon DocumentDB (MongoDB compatible) is now available in the Asia Pacific (Taipei) and Asia Pacific (New Zealand) regions.
AWS Sign-In now supports OAuth 2.0 Token Exchange (RFC 8693) to swap third‑party OIDC tokens for short‑lived, service‑scoped AWS OAuth access tokens.
Added atomic start() that admits a run and claims a hook in one step, eliminating the getHookByToken‑then‑start race.
Adds support for copying Oracle option groups with DB snapshots across AWS Regions and accounts via the CopyOptionGroup flag.
Preview of AWS Interconnect - last mile with Equinix, providing managed private connections via Equinix Fabric One.
Kimi K3.1 Pro and Kimi K3.1 Pro Highspeed are now available on AI Gateway from multiple Zero Data Retention (ZDR) providers, expanding beyond the previous Moonshot AI‑only support.
Contact records now display associated case IDs and reference numbers.
Added automation trigger for paid subscription changes.
Upgrades Open Runtimes executor from 1.1.2 to 1.3.1, fixing symlink and secret leakage vulnerabilities.
Adds selectable stability levels for the Snyk CLI through new deployment channels (see documentation).
Vital security updates released; upgrade recommended ASAP.
Added a feedback API endpoint for agents to submit bug, documentation, feature request, or other feedback tied to request IDs or URLs.
All Argo CD container images are now signed with cosign and include SLSA Level 3 provenance.
Fixed CSPM oscap.io abort on FIPS hosts by evaluating XCCDF rules despite mlock failures
Fixed npm install to work on all platforms
Added audit logs for history restores, discarded drafts, settings updates, and media events.
Vercel now scans public sources (GitHub, GitLab, Docker, npm, PyPI, Hugging Face, Android APKs, Firefox Add-ons) for exposed tokens via partnership with Truffle Security.
Adds OIDC group synchronization with support for nested claims
Added extensive new Pulumi policy CLI commands (get, publish JSON output, stack/account rules, list, issue edit, filter/sort, closed status, group mode info) and AI agent integration.
Shared MCP connections can now be authorized with a single workspace‑level consent.
Fixed AI Agent Node deprecated type callout, improved credential resolution for node parameters, and added support for named array keys in expressions.
EC2, VPC, and Global View consoles now display related resources for all resource types (instances, volumes, subnets, route tables, etc.) via a Related Resources tab.
S3 Tables now provide managed migration of Hive tables to Iceberg, adding ACID transactions, schema evolution, and time‑travel support.
DataSync Enhanced mode adds OpenID Connect (OIDC) authentication for Google Cloud Storage and Azure Blob Storage locations.
Added Linux WorkSpaces bundles for Rocky Linux 10, RHEL 10, and Ubuntu 26.04 LTS.
Preview Direct Iceberg access and AlloyDB Express added; BigQuery sync and Cloud SQL read‑pool autoscaling now GA; Gemini Enterprise mobile app now supports team switching.
Release 12.0.2 addresses security vulnerabilities.
Added real-time supportability checks that score instance type and Availability Zone capacity without launching instances.
Twilio Data Destinations is now available in private beta.
Verify Events reaches GA, incorporating fixes for beta-reported bugs with no new functionality added.
Multiple security fixes (GHSA) address unsafe MessagePack deserialization, Inflector regex injection, HTML sanitizer handling, RemoteIp spoof detection, ImageMagick policy enforcement, and stricter Google Cloud Storage upload validation.
Fixed multiple security issues: safe_constantize regex injection, highlight XSS, required newer html sanitizer, added ImageMagick security policy, enforced content‑length and V2 signatures for GCS uploads, and restricted ffmpeg/ffprobe f...
Admins can now force all organization members to re-authenticate via SSO from Settings → Security → Require SSO sign-in again.
Security hardening and stricter config validation reject unsafe hosts, path traversal and malformed TLS settings.
The Copilot usage metrics API now includes BYOK usage data, allowing separation from Copilot‑hosted model usage.
Automatic revocation of exposed API keys found in Docker images, Hugging Face datasets, and other public sources
Introduce model aliases to represent a pool of models under a single name
All major server SDKs (Java, .NET, Elixir, Go, Ruby/Rails, PHP, Rust, Node.js) now propagate trace IDs and request context into error events and application spans.
Add experimental `mcp` feature to Rust SDK for sending tool-call data to MCP analytics.
Render adds support for separate service previews and preview environments for every PR in a GitHub stacked PR stack.
Introduces a new landing page for Kubernetes monitoring.
Updated Self‑Serve Subscription Agreement, Privacy Statement, and Acceptable Use Policy effective Dec 4 2026.
Supabase CLI v3 now runs locally by default.
Netlify publishes a JSON schema for netlify.toml, enabling pre‑deploy configuration error detection.
Autocapture can now append the value of input, textarea, or select fields when those fields are explicitly opted‑in.
Native app sessions can now have independent maximum lifetimes.
GPT Image 2.6 Sunburst and Flare models are now available through Netlify AI Gateway with zero‑configuration access via the OpenAI SDK.