Developer changelog updates for May 2026

Summary

Added inbox placement metrics showing spam‑folder rates per sending domain and campaign using industry sample data

Summary

Adds AI adoption cohorts to the Copilot usage metrics API, classifying each engaged user by how they use Copilot

Summary

Codecov integration removed from Sentry

Summary

Adds RCS for Business messaging support in 20 new countries, bringing total coverage to 22.

Summary

Adds native support for CMS Interoperability and Prior Authorization Final Rule with new FHIR‑based Patient, Provider, Payer‑to‑Payer, and Prior Authorization APIs.

Summary

Adds ability to schedule tasks up to 90 days in advance via API, flows, or agent workspace

Summary

Adds DDoS attack flow logs to Shield Advanced, providing packet‑level visibility during attacks

Summary

Introduces a free 500 Mbps AWS Interconnect‑multicloud tier, giving customers a fully managed private connection to another CSP at no AWS charge.

Summary

Adds a 4‑RPU minimum capacity option for Redshift Serverless in 7 additional AWS regions, down from the previous 8‑RPU minimum.

Summary

Introduce Auto-review run mode, allowing Cursor to operate longer with fewer approval prompts

Summary

Updates CodeQL to version 2.25.5.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Claude Opus 4.8 model is now generally available in GitHub Copilot

Summary

Upgrade Prometheus library to v0.311.4, addressing CVE‑2026‑42151 and CVE‑2026‑42154.

Summary

Adds preview support for additional charts in Slack integration

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Added support for module version evaluating to null in dynamic module sources.

Summary

Reverted the earlier polyfill change for module.enableCompileCache and related code.

Summary

Added granular deletion controls for Copilot Memory entries

Summary

Adds a public preview Repository Enablement API for GitHub Code Quality.

Summary

Enterprise owners can now define model rules to restrict which GitHub Copilot models are accessible per organization.

Summary

Dependabot now supports the sbt ecosystem for version updates

Summary

Added ability to sort secret scanning approval requests by order (ascending/descending) in the UI.

Summary

New sign-ups for GitHub Classroom are disabled as the service transitions to partner solutions.

Summary

Added new Array data structure and subkey notifications for hash fields, plus INCREX window counter rate limiter and XNACK stream command

Summary

Added many new Deno commands/flags (watch, bump version, why, ci, pack, transpile) and extended core APIs, node compatibility (module.registerHooks, inspector events, OTLP, structured clone, OffscreenCanvas)

Summary

Introduces the Conversations feature in open beta for all Sentry users.

Summary

Implemented crypto.randomUUIDv7() and added Ed25519 context support along with key usage deduplication;

Summary

Group‑level custom review instructions for GitLab Duo and configurable work item types, plus new Duo Developer trigger methods for merge requests.

Summary

Add Linux s390x (zLinux) build generation

Summary

Fix regression that prevented scrubbing of http.query, url.query, and url.full span attributes

Summary

Added new minor features: Temporal.Instant support in fs Stats/BigIntStats, writeInformation for arbitrary 1xx HTTP status codes, and marked stream.compose as stable

Summary

macOS Agent now installs system‑wide as a LaunchDaemon under a dedicated dd‑agent user; existing per‑user installations must be removed and re‑installed (breaking change for macOS users).

Summary

Added the ability to share canvases directly from Cursor with your team.

Summary

Add Cursor Automations panel to the Agents Window.

Summary

Introduces a new cursor feature for Jira integration

Summary

Composer 2.5 added to Cursor

Summary

Improved controls for tool-calling and structured output flows.

Summary

Console workflows now make prompt comparison easier for app teams.

Summary

Deployment views now surface slow routes and cold-start patterns.

Summary

Added ability for Seer to send bug root‑cause information to GitHub Copilot for automated fixes

Summary

Upgraded github.com/moby/spdystream to v0.5.1 to patch CVE‑2026‑35469, fixing unchecked memory allocations in SPDY/3 frame parsing.

Summary

Auth docs now include clearer examples for user-owned rows.

Summary

Fixed multiple security issues including a crypto null‑pointer dereference, URL parsing crash for malformed UNC hostnames, a zlib use‑after‑free on reset, HTTP keep‑alive socket reuse race, and an HTTP/2 file‑handle leak

Summary

Added revision history tracking for dashboards

Summary

General availability of Seer’s Claude integration

Summary

Workers requests can be inspected with more trace context.

Summary

Fixed migration of resources in deeply nested modules with implicit provider configurations.

Summary

Provides Windows installation instructions for Bun v1.3.14.

Summary

Adds cloud agents a full development environment mirroring local laptop setups.

Summary

Adds full‑screen mode for tabs within the Agents Window

Summary

Added links to additional binary downloads in the CHANGELOG.

Summary

Refer to the Kubernetes announcement for release details

Summary

Added links to additional binary downloads in the changelog.

Summary

Announces new Kubernetes release v1.33.12

Summary

Fix error when updating Alertmanager config with autogenerated receivers

Summary

Fix multiple security vulnerabilities by addressing CVE‑2026‑28374, CVE‑2026‑28376, CVE‑2026‑28383, CVE‑2026‑28380, CVE‑2026‑33376, CVE‑2026‑28379, CVE‑2026‑33377, CVE‑2026‑33378, CVE‑2026‑33381, and CVE‑2026‑33380.

Summary

Fixed multiple high‑severity CVEs (CVE‑2026‑28374, CVE‑2026‑28376, CVE‑2026‑28379, CVE‑2026‑28380, CVE‑2026‑28383).

Summary

Patch multiple security vulnerabilities (CVE-2026-28374, 28376, 28379, 28380, 28383)

Summary

Patched multiple security vulnerabilities (CVE-2026-28374, -28376, -28383, -28380, -28379, -33376, -33377, -33378, -33380, -33381, -33382).

Summary

Cache access is tightened for workflows triggered by forked pull requests.

Summary

Adds cursor support for Microsoft Teams

Summary

Multi-platform builds can reuse cache layers more predictably.

Summary

Adds customizable effort levels for Bugbot’s PR review process

Summary

Docs now explain more cases where compiler adoption should be incremental.

Summary

Production build fixes target route generation and CSS ordering.

Summary

Incremental rebuilds are faster in projects with many imported CSS files.

Summary

Added new utilities: container size, scrollbar (width, colors, gutter), zoom, tab, and expanded @variant support for stacked and compound variants.

Summary

The beta includes narrower inference for common conditional patterns.

Summary

Security release updates bundled dependencies and runtime patches.

Summary

Introduced GA release separating alerts into Monitors and Alerts for finer-grained tracking.

Summary

Patched high‑severity vulnerabilities including DoS via server components, middleware/proxy bypasses, SSRF in WebSocket upgrades, and cache poisoning in React Server Component responses.

Summary

Address multiple high, moderate, and low severity security advisories (DoS, SSRF, XSS, cache poisoning, and middleware proxy bypass)

Summary

Client generation handles workspace output paths more consistently.

Summary

Upgraded OpenTelemetry Go SDK to v1.43.0 to remediate CVE‑2026‑39883 (PATH hijacking on BSD/Solaris).

Summary

Add experimental node:ffi module for loading native libraries (requires --experimental-ffi flag and appropriate permission; API is unsafe).

Summary

Introduce a new PR review experience

Summary

Patched multiple high‑severity security vulnerabilities (DoS, SSRF, proxy bypass, cache poisoning, XSS) across Server Components, Middleware, and Image Optimization.

Summary

Patched high‑severity vulnerabilities such as denial‑of‑service, proxy bypass, SSRF, and cache exhaustion across server components, middleware, and caching layers.

Summary

Enhanced type safety (hardening) for React Server Components.

Summary

Strengthen type safety for React Server Components.

Summary

Hardens TypeScript types for React Server Components.

Summary

Added output values to plan component instance change description for stacks.

Summary

Patch release includes planner fixes and replication reliability updates.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Application Metrics reach General Availability with high‑cardinality, trace‑connected data.

Summary

Introduces Snapshots in Early Access for image storage, diffing, and CI integration

Summary

Updated docs call out persistence settings that can surprise small teams.

Summary

Temporal API is now enabled by default, providing a modern date‑time API;

Summary

Patched several remote‑code‑execution vulnerabilities (CVE‑2026‑23479, ‑25243, ‑23631, ‑25588, ‑25589) affecting unblock client flow, RESTORE, Lua, and Time‑Series modules.

Summary

Patched multiple critical Use‑After‑Free and invalid memory access vulnerabilities (CVE‑2026‑23479,‑25243,‑23631,‑25588‑25589) that could lead to remote code execution.

Summary

Patched multiple remote code execution vulnerabilities (CVE‑2026‑23479, 25243, 23631, 25588, 25589) affecting client flow, Lua, and RESTORE across modules.

Summary

Security patches address multiple RCE vulnerabilities (CVE‑2026‑23479, CVE‑2026‑25243, CVE‑2026‑23631) related to use‑after‑free and invalid memory access.

Summary

Fixed multiple remote code execution vulnerabilities (CVE‑2026‑23479, CVE‑2026‑25243, CVE‑2026‑23631) related to use‑after‑free and memory errors.

Summary

Fixed CVE‑2026‑25243: corrected invalid memory access in RESTORE to prevent remote code execution.

Summary

Checkout recovery flows expose more controls for abandoned sessions.