Updated the distroless Docker image base to include patched CA certificates, removing trust in compromised eMudhra intermediate CAs
Updated the distroless Docker image base to include patched CA certificates, removing trust in compromised eMudhra intermediate CAs
Security patches for Vite and Nitro, including restrictions on file reads, dev server access, and secret exposure.
Updated the distroless Docker image base to include patched CA certificates, removing trust in compromised eMudhra intermediate CAs.
Fixed crash on registry responses with excessive content encodings and upgraded to undici 7.30.1, addressing GHSA‑xjj6‑f33q‑929c.
Added a repeatable global env file flag and a no-modify-path option for pnpm setup, plus support for updating symlinked pnpm-lock.yaml via configurable target directories.
Updated the distroless Docker image to use patched CA certificates (20250419 deb12u2) addressing the eMudhra intermediate CA compromise.
Updated the distroless Docker image to use patched CA certificates (20250419 deb12u2), removing trust in compromised eMudhra intermediate CAs.
Fixed UI bugs: return button on overview, hidden Cloudflare workers options, and made machine identity, users, groups, and roles table rows real links.
GPT-6.1 Terra is now generally available in GitHub Copilot.
Service tokens now display the IP address, location, and network operator of their last use.
GPT-6.1 Terra is now generally available on Amazon Bedrock, supporting text and image inputs with a 1 million token context window.
Fixed accessibility role fallback logic for a11y checks.
Add ModifyVolume API to change volume size, type, IOPS, or throughput in place without rebuilding or restarting instances
Updated Go runtime to 1.27.3 with CVE‑2026‑111943 mitigation and refreshed key dependencies.
Updated Go runtime to 1.26.10, adding mitigation for CVE‑2026‑111943 by distrusting eMudhra intermediate certificates.
Add private v2 batch commit API route for batched secret and folder changes; introduce member-provided credential fields, bulk secret approval reviews, auto‑approvals, and variable‑type selection for Cloudflare Workers sync
Object identity is now GA and default RBAC no longer grants create on serviceaccounts/token; SPIFFE mTLS is enabled for inter‑controller communication, tightening security.
Added mobile layout for run details and updated default Dagster+ policies (only Run Exceeds 24 Hours created).
Added light mode UI option for SageMaker Unified Studio in Identity Center (IDC) based domains
Added ability to validate flow action outcomes during testing and simulation