Developer changelog updates for March 2026

Summary

Introduce rich text markdown widgets for custom dashboards

Summary

Introduced a new Prisma Postgres CLI group with a link command and added streaming schema parsing for extremely large files.

Summary

Fix CLI panic on invalid unsafe‑ignore‑certificate flag and improve error handling for HTTP metric OTel issues

Summary

Added protection to prevent cross‑org CRUD actions on public dashboards

Summary

Fixed multiple security vulnerabilities (CVE‑2026‑27876, CVE‑2026‑27877, CVE‑2026‑28375, CVE‑2026‑27879, CVE‑2026‑27880).

Summary

Fixed multiple security vulnerabilities (CVE‑2026‑27876, CVE‑2026‑27877, CVE‑2026‑28375, CVE‑2026‑27879, CVE‑2026‑27880)

Summary

Fixed multiple security vulnerabilities (CVE-2026-27876, CVE-2026-27877, CVE-2026-28375, CVE-2026-27879).

Summary

Fix security vulnerability CVE-2026-33375

Summary

Improved accessibility: voice‑over support in Analytics tab and prevented time‑zone menu auto‑open on focus.

Summary

Fixed various bugs reported in previous versions.

Summary

Fixed security vulnerability CVE‑2026‑33375

Summary

Fixed security vulnerability CVE‑2026‑33375

Summary

Added NodeRuntime CDP domain, new P‑521 crypto sign/verify/ECDH, NAPI object creation with named properties, and OpenTelemetry console exporter

Summary

Prevent crash when displaying relevant attributes after provider upgrades

Summary

Added support for self-hosted cloud agents

Summary

Wrapped SNICallback in try/catch and added timing‑safe HMAC/KMAC comparisons, null‑prototype header objects, and permission checks for pipe, realpath.native, and fs/promises to address several high‑severity CVEs

Summary

Fix multiple high‑ and medium‑severity CVEs (e.g., null‑prototype headers, SNICallback try/catch, array index hash collision, timing‑safe crypto comparisons, NGHTTP2 flow‑control handling, URL format crash, permission checks for fs.promi...

Summary

Wrap SNICallback invocation in a try/catch to mitigate crashes (CVE‑2026‑21637).

Summary

Fixed multiple CVE‑related vulnerabilities including array index hash collisions, timing‑side‑channel issues in Web Crypto HMAC/KMAC, and unsafe header prototypes

Summary

Fixed multiple bugs including potential use‑after‑free, crashes during command processing and ACL checks, and memory‑leak issues

Summary

Agents are now built with Go 1.25.8.

Summary

Fixed issues query for TypeScript 6.0 across beta, RC, and stable releases.

Summary

Backported bug fixes for core and Turbopack, including adapter output handling, server actions in standalone mode, and layout segment optimization.

Summary

Add LRU disk cache and images.maximumDiskCacheSize option to next/image (feature).

Summary

Fixed multiple Node.js extension bugs: added disabled process stubs, AES‑128 key/IV validation, improved DNS compatibility, robust process.title handling, async write callback fix, reserved‑device path handling, IPv6 multicast interface ...

Summary

Refer to the Kubernetes announcement for details on this release.

Summary

Refer to the Kubernetes announcement for details.

Summary

Added links to additional binary downloads in the changelog

Summary

Adds GA SAST false positive detection via GitLab Duo Agent for critical/high severity findings, improving triage confidence.

Summary

Introduces Composer 2, offering frontier-level coding performance.

Summary

Added many experimental and performance features such as strict route type checking, new routing package, CPU profiling flag, custom cache handlers, LRU cache with invocation IDs, gesturePush, and Claude Code plugin marketplace; expanded...

Summary

Add Vite 8 support and skip full reload for server‑only modules in @tailwindcss/vite

Summary

Added many new features: dd-procmgrd Rust daemon, CRD listener, logs pipeline failover, memory‑pressure metrics, Private Action Runner integration (including Windows service), Autodiscover template variables, and OTLP container‑tags v2 f...

Summary

Added cloneable resource registry for structured clone, upgraded V8 to 146.8.0 with foreground task ownership, and introduced auto‑detection of CJS vs ESM in Deno eval.

Summary

Provides Windows installation instructions for Bun v1.3.11.

Summary

Backported bug fixes from the canary branch.

Summary

Fixed multiple security vulnerabilities (CVE‑2026‑27977‑27980, CVE‑2026‑29057) and prevented request smuggling and unsafe websocket connections.

Summary

Added custom configuration options for uptime monitors

Summary

Added alert creation capability to Metrics open beta

Summary

Redesigned chart legend rendering for custom dashboards

Summary

Added nested transaction rollback support with savepoints, ensuring inner transactions roll back when an outer transaction fails.

Summary

Upgrade Go version to 1.25.8.

Summary

Added coverage data to summary and HTML reports, introduced CPU profiling flags, and ensured coverage data is flushed on Deno.exit().

Summary

Fixed critical bugs such as use‑after‑free in http, extension‑less CJS handling in ES modules, importKey argument checks, and several stream and crypto issues.

Summary

Added over 30 new plugins from partners such as Atlassian, Datadog, GitLab, and others

Summary

Updated Go runtime to version 1.25.8.

Summary

Upgrade Go runtime to version 1.25.8

Summary

Upgrade Go runtime to version 1.25.8.

Summary

Upgrade Go runtime to version 1.25.8

Summary

Added AccessControl cache invalidation on datasource deletion, upgraded Go to 1.25.8, and introduced support for custom CA certificates in the Image Renderer.

Summary

Updated circl library to remediate CVE‑2026‑1229 and patched an out‑of‑bounds memory read/DoS vulnerability in the Windows kernel driver, adding extra overflow safety checks.

Summary

Fixed issues query for TypeScript 6.0.0 (Beta).

Summary

Updated crypto root certificates to NSS 3.119/3.117 and corrected RSA‑PSS saltLength default, enhancing TLS security

Summary

Clean up UV compatibility and fix core issues

Summary

Build system now tests on Python 3.14 and adds sccache persistence improvements.

Summary

Fix: infra mode tag now correctly added to system.cpu.user on Windows when not in full mode, aligning behavior with Linux checks

Summary

Added automation support for always‑on agents

Summary

Fixed deployment subcommand to stop using the JSR API

Summary

Added Cursor support for IntelliJ IDEA, PyCharm, WebStorm, and other JetBrains IDEs.

Summary

Added a limits property to SQLite DatabaseSync, C++ support for diagnostics channels, and a permission audit API.

Summary

Bumped V8 engine to version 14.6 and added support for newer crypto algorithms and EC key handling.

Summary

Added interactive UIs for agent chats