Release v2.21.5 provides updated distribution packages (wheel and source tarball) for ansible core 2.21.5.
Developer changelog updates for October 2026
Monthly archive for October 2026: product-level counts, tags, and every published update from this month.
Updates in October 2026
Release v2.20.10 provides updated built and source distribution packages for Ansible Core.
Release v2.19.14 of ansible core is now available.
Add REST and GraphQL endpoints to retrieve billable active-user counts for organizations
Allow global members to grant variable scopes to API keys (API fix)
Fixed API permission issue allowing global members to grant variable scopes to API keys.
Added preview support for external IPv6 addresses on Standard Tier for Cloud Load Balancing, Compute Engine, and Network Service Tiers.
General availability of scheduled NRQL queries for automated execution
Release v26.8.17.4 LTS version
Release version v26.7.21.2 marked as stable.
Release of version 26.3.41.4 LTS.
Stable release v26.9.10.4.
Release 6.3.102 rolled out to the first phase of regions
Fixed credential leaks: pnpm login no longer forwards credentials on redirects and error messages no longer expose credentials or URL parts.
Extracted the WebContainer WebAssembly build into a new @pnpm/wasm package, shrinking the main pnpm package from ~55 MB to ~4 MB.
Release v26.9.9.28 marked as stable.
Released LTS version v26.8.16.41.
Release v26.7.20.28 marked as stable.
Release version 26.3.40.16 with long‑term support (LTS).
Release 6.3.101 of Google SecOps SOAR is now generally available.
Fixed crashes and stream drops caused by idle timeouts in HTTP/2 reverse proxy and SSE streams, and restored empty placeholders for missing cookies/TLS.
Added automatic WebAssembly support in StackBlitz WebContainers, a per‑registry `networkConcurrency` setting, and recording of every installed project in the store.
Stateless GitHub App installation token format is now the default for all newly minted tokens.
Added CLI support for viewing and modifying Vitess keyspace parameters (VTTablet and MySQL) via pscale commands
Added RSS feeds for macOS base image releases on hosted agents, with separate stable and canary feeds.
Adds built‑in blue/green, linear, and canary deployment strategies for ECS services using Amazon VPC Lattice.
Added support for handling astral letters and allowed SourceCode.getText() to accept tokens and comments.
Added REST and GraphQL API endpoints for requesting GitHub Copilot code reviews
Deprecated specific GitHub Copilot models across all experiences (Chat, inline edits, ask, agent modes, and code completions).
Introduces the AWS Health version catalog providing a centralized view of software version lifecycles across services
Added support for partial indexes in Aurora DSQL, enabling indexes on a subset of rows via a WHERE clause.
EKS and EKS Distro now support Kubernetes v1.37, available for new clusters and upgrades via console, eksctl, or IaC.
AWS Brazil launches an automated SaaS license distribution workflow through the 2P Distribution Program
Upgrade google.golang.org/grpc to v1.83.1, fixing HTTP/2 DATA frame fragmentation memory exhaustion.
Updated golang.org/x/crypto to v0.56.0 for security improvements.
Added five new fields (e.g., cveId) to the SecurityAdvisory GraphQL type
Add ability to post confidential comments on repository security advisories
Introduce public preview of a REST API to read, add, and edit comments on repository security advisories
Fixed crash caused by tainted instance state lacking a valid status
Release v26.3.39.7 LTS version
Added support for GPT‑6 Luna and GPT‑6 Sol models for AI resource queries.
Introduce a natural‑language prompt to generate PostgreSQL schemas and corresponding REST API resources.
AgentCore Gateway now supports TLS certificates signed by private CAs for MCP, OpenAPI, and HTTP proxy targets.
Added AWS MCP Server availability in six new regions: Singapore, Sydney, Tokyo, Ireland, London, and Oregon.
Core bug fix: task runner now stays alive after an unhandled promise rejection
Ensures the task runner stays alive when an unhandled promise rejection occurs (fixes #40092).
Security updates: upgraded Apigee ingress gateway (ASM) and Prometheus library to patch multiple CVEs, added JRE 21 runtime, and other infrastructure hardening.
ElastiCache for Valkey now emits OpenTelemetry metrics to CloudWatch, with PromQL‑compatible attributes for filtering and aggregation.
Added two new Prometheus metrics that track when a shard's primary changes and the reason for the change.
GuardDuty Runtime Monitoring is now bundled with the AWS Security Hub Threat Analytics plan.
Added app‑scoped sessions from workspace personal access tokens and introduced workspace limits for ToolJet Cloud.
Increased Neon Free plan storage to 1 GB per project (up from 0.5 GB)
Add role selection to organization invitation flow
Released stable updates for self‑hosted Retool versions 4.34, 4.0, and 3.334
AWS launched preview of the AI‑powered Well‑Architected Agent, extending Trusted Advisor and the Well‑Architected Tool.
Introduce rate limits on private vulnerability report submissions per account
Introduce a structured form for private vulnerability reports
Added support for branch.schema_recommendation webhooks on Postgres databases
Adds public preview of computer use in GitHub Copilot CLI and desktop app for macOS and Windows
The macOS 14 GitHub Actions runner image will be retired on November 2 2026.
Introduced agent-driven development workflow across VS Code v1.136‑v1.140.
Added automatic detection and highlighting of ACCESSIBILITY.md files in the repository overview when placed in the root, .github/, or docs/ directories.
Updated BoringSSL to fix CVE‑2026‑35189, preventing a TLS handshake denial‑of‑service.
Redshift can now query S3 data lake tables located in a different AWS Region without copying them
Fixed MMR normalize query vector, HNSW commit‑log crashes, and several RBAC and backup security issues
Improved performance of declarative automation for partitioned assets and set the time‑partitioned asset selector to show the most recent 90 days by default
Retention settings now apply to checks, workflow runs, and statuses, aligning them with artifact and log retention
Next Gen Events (2026-10) are now GA, letting apps subscribe to specific data changes and receive GraphQL query results in the payload, reducing extra API calls
Added filtered export for DynamoDB tables to Amazon S3, allowing selection of items and attributes via key condition, filter, and projection expressions.
Patched BoringSSL to address CVE‑2026‑35189 memory allocation issue in TLS handshakes, mitigating remote DoS.
Weekly scheduled code scanning now only triggers after a push or pull request, skipping inactive repositories
Fixed CI failures when uploading code coverage on new branches without an open pull request.
Amazon DynamoDB Accelerator (DAX) is now available in 17 additional AWS Regions worldwide.
Introduces dynamic workflows to Copilot CLI, the GitHub Copilot app, and the SDK
GuardDuty now supports AWS Organizations declarative policies for centralized enablement across all accounts and Regions
Removed metafieldInteger collection source condition; replace with metafieldInt
Adds Rollouts queries to the Admin GraphQL API, allowing apps to list, search, and fetch Rollout details including schedules, traffic allocation, and resource changes.
Introduce smsMarketingConsent field on CustomerPhoneNumber for structured SMS consent
Adds a new `parseWarnings` field to `shopifyqlQuery` responses, providing a list of non-fatal warnings.
Added nullable fiscalDeviceIdentifier field to PointOfSaleDevice in the 2026-10 GraphQL Admin API
orderCancel mutation now returns a structured OrderCancelJobResult via a new jobResult field
Added read‑only `Discount.rollouts` connection in Admin GraphQL API 2026‑10; apps must request the `read_rollouts` scope.
Orders webhook payloads now include a selling_plan_id field on line items
Introduces SubscriptionContractCalculation API for managing subscription contracts via Shopify’s checkout engine, adding support for bundled products, Functions, and consistent pricing calculations.
Added URLPattern request matcher, new TLS automate‑names option, expected‑underscore/dot header controls, and HTTP/3 support on low‑MTU links.
Release version v26.9.8.3.
Patched BoringSSL to fix CVE‑2026‑35189 memory allocation issue that could cause remote DoS during TLS handshakes.
Fix MMR normalize query vector and ensure tenant is passed to re‑vectorize checks on PATCH
Backup the Metabase application database before upgrading
Backup your Metabase application database before upgrading
Added RSS feeds for macOS base image releases on Buildkite hosted agents
Release Corretto 8u504 LTS patch update
Release v26.7.19.5 stable
Patched BoringSSL to fix CVE‑2026‑35189 memory allocation issue in TLS handshakes, preventing remote denial‑of‑service.
Team plan users can now opt‑in to Retool‑provided AI models for building apps
Added S3 Object Lock variable retention with event holds in AWS GovCloud (US-East and US-West)
Stabilized C variadic naked functions and added a default lint for raw borrows via references.
LTS version 26.3.38.2 released
Adds an inventory_transfer_id field to multiple inventory_shipment webhook payloads
Added support for Claude Opus 5.5 as a new AI model option in Retool.
Fix concurrent `pulumi new` runs failing to clone the templates repository (CLI)
Segment query functions now use MATCHES/NOT MATCHES operators instead of '= true'/'= false'.
Fixes a critical stability issue in Meilisearch
Fixed CSS preload handling for URLs with queries, corrected percent‑encoded srcset URLs, and added server resilience to file‑watcher errors.
Fix important stability issue in Meilisearch
Added ability to specify a custom CloudWatch Logs group for each Transfer Family managed workflow
Security Hub adds remediation plans that group related findings by root cause, enabling a single fix to resolve multiple exposures
Helm controller no longer re-applies chart CRDs on upgrades with server-side apply and recovers HelmReleases stuck in Ready=Unknown after failed status patches.
Stability fix for Meilisearch
Added experimental delivery connections DB view and status table.
Version 2.41.5 released on 2026-10-01.
No functional changes listed in this release.
Introduced table optimization (compact, binpack, sort, z-order) for Iceberg V3 tables to improve query performance and reduce storage costs.
Added support for up to 1 TB shuffle per job, raising the previous 200 GB limit
Introduces email verification for new budget notification subscribers, requiring confirmation before alerts are sent
Added native CloudWatch integration for Route 53 Global Resolver and DNS Firewall, delivering DNS analytics and insights.
Adds GA reusable batch transcription configuration for engine, model, language, and destination.
Integrates AWS Recommended Actions into the Secrets Manager console to provide contextual, actionable security recommendations.
New GA features: updated Simba JDBC driver, conversational analytics with graph chat, and BigQuery pipelines now support automated metadata enrichment and Knowledge Catalog data quality scorecards (also extended to Dataform workflows).
Voice Insights now displays the carrier block reason header and identifies the network that blocked the call.
IAM Identity Center now supports multi‑Region replication in additional commercial, GovCloud (US) and China regions.
Added preview support for verifiable credential issuance (OID4VCI) and verification (OID4VP), including revocation, attestation, and experimental mdoc format
Add ?organization=slug to Remote MCP Server URLs to select a specific Buildkite organization per connection
Adds returnPolicyProfile and returnPolicyProfiles query fields to the GraphQL Admin API for reading structured return policy data per market
Introduces a new RequestedOrderEdit resource with create, resolve, decline mutations and a calculate query in the GraphQL Admin API.
Default limit for S3 Tables raised to 100 table buckets per AWS Region (up from 10), supporting up to 1 million tables per region.
Each Buildkite agent minor release is supported for one year from its first stable release, with the final three months serving as a deprecation period that includes upgrade warnings.
Added three new Xero-integrated apps: Bustle POS for hospitality with one‑click cash‑up sync; Synder data layer syncing sales from 30+ platforms into Xero with configurable summary or per‑transaction modes; Qoblex inventory and order man...
Refresh tokens will have increased length and entropy, exceeding the current ~45‑character baseline.