Tool news

This feed includes only recent releases, roughly from the last 12 months, not the full historical archive. That is why a long-established product may have only a few news items.

116 news

Datareon
Maintenance release of DATAREON Platform 3.2.1.1

The patch fixed conversion of String fields containing dates to DateTime when writing to the database, integration errors with 1C and Linux hosts, unified the authorization error message against credential guessing, and optimized event handling in the monitoring center.

Datareon
Certification of SOFROS and White Code partner specialists in the DATAREON Platform: Specialist program

Engineers from two partners have completed the vendor's official certification in operating and configuring DATAREON Platform, expanding the pool of certified implementers for the platform.

MCP
Final MCP specification release 2026-07-28: stateless protocol approved

The RC from May 21, 2026 became a stable spec with no material changes: initialize/Mcp-Session-Id were removed, a unified subscriptions/listen flow replaced HTTP GET and resources/subscribe, server/discover is mandatory, Roots/Sampling/Logging and the HTTP+SSE transport are deprecated (with a 12-month deprecation window). Multi Round-Trip Requests was added (resultType: input_required) to replace server-initiated requests, and JSON-RPC error code allocation policy was defined (-32020 to -32099 reserved for MCP).

Kafka is inherently stateful (consumer offsets, partitions); MCP removes server-side session state to enable scaling behind a standard load balancer without sticky sessions Apache Kafka →
Anthropic Claude
Anthropic's View on Open Weights

Anthropic, through Dario Amodei, denied allegations of lobbying for a ban on open-weights models: the company says it never supported a ban and is promoting three measures - chip export controls against China, countering industrial-scale distillation, and mandatory pre-release safety testing for any sufficiently powerful model regardless of weight openness. Anthropic itself does not publish weights for any model in its lineup.

Llama and Qwen publish weights; Anthropic backs mandatory testing, not a ban on open weights, while remaining fully closed itself Meta Llama →Qwen is explicitly mentioned in the context of distillation and the competition between Chinese open models and the frontier Alibaba Qwen →
Anthropic Claude
Claude Opus 5 Release

Opus 5 leads Frontier-Bench and GDPval-AA, but trails Mythos 5 on cybersecurity tasks. Pricing is unchanged: $5/$25 per million input/output tokens, the same as Opus 4.8. It is the default in Claude Max and the top model in Claude Pro. The weights are closed, with access only through the API (claude-opus-5) and cloud.

Qwen offers open weights for self-hosting; Opus 5 is available only through Anthropic's or partners' cloud Alibaba Qwen →
RAG
NVIDIA released Nemotron 3 Embed - open embedding models, No. 1 on RTEB

The 8B model scored 78.5% on RTEB and 75.5% on MMTEB Retrieval - first place overall. The 1B variant reaches 72.4% on RTEB (27% fewer errors than the previous 1B version), and NVFP4 quantization preserves 99%+ of BF16 accuracy at 2x throughput. Weights and training recipes are open and available on Hugging Face.

Claude has no open embedding weights of its own, and the retrieval layer depends on third-party Voyage AI Anthropic Claude →
RAG
LightOn released a multimodal reranker with a single relevance scale for text and scans

LightOn-rerank-LW-2B (2B, a LoRA adapter on Qwen3.5) ranks text passages and document scans with a single model and a single scale - 62.66 NDCG@10 on ViDoRe V3 versus 59.18 for Qwen3-VL-Reranker-2B and 59.40 for jina-reranker-m0. The 4B variant (64.69) beats Qwen3-VL-Reranker-8B (64.23) with half as many parameters. Weights are open on Hugging Face.

built-in hybrid retrieval in Elasticsearch (ELSER); text - scans/images on a unified relevance scale; LightOn handles this with a separate reranker layer on top Elasticsearch →
Saleor
Saleor Pulse: built-in store analytics

The new Pulse app (coming soon to Saleor Cloud) shows revenue, orders, returns, customers, products, fulfillment, period trends, and anomaly alerts (spikes in cancellations, unpaid shipments). It closes the gap with the ready-made BI dashboards of other platforms.

Built-in BI analytics (Odoo Spreadsheet/Dashboards) has been available out of the box for years; Saleor only adds it. Odoo →
Yandex YandexGPT
ISO/IEC 42001 extends to all models in the Alice AI family

Yandex was the first in CIS to receive ISO/IEC 42001 for the base YandexGPT model back in 2025; certification now covers the full Alice AI lineup (LLM, ART, VLM) - development processes and data protection passed an independent audit.

C# / .NET
July .NET servicing update closed 17 CVEs

On July 14, 2026, .NET 10.0.10, 9.0.18, and 8.0.29 were released. The scheduled update closed 17 CVEs across all three supported branches (10, 9, 8). Details for each vulnerability are linked to MSRC guidance, without exploit descriptions in the post itself.

MuleSoft
Skills for MuleSoft Vibes

MuleSoft published the @salesforce/mulesoft-vibes-skills package, reusable instructions for Mule development that can be ported between MuleSoft Vibes, Claude Code, Cursor, Cline, and Codex.

The MuleSoft Skills format is directly compatible with Claude Code, not a proprietary closed format Anthropic Claude →
OpenAI
ChatGPT Work: an agent on GPT-5.6 for multi-hour tasks

The agent carries a goal through to a finished result - spreadsheets, slides, documents, web apps - by breaking the task into steps and working for hours without intervention. Codex is integrated with it in a single desktop app. Weights are closed; OpenAI cloud/API only.

Anthropic's computer use / Claude Code solves the same autonomous multi-step task problem - both vendors layer an agent on top of a closed model Anthropic Claude →
OpenAI
GPT-5.6 Sol/Terra/Luna: three pricing tiers, ultra mode with subagents

A three-model lineup: Sol as the flagship, $5/$30 per million tokens input/output; Terra at GPT-5.5 level for half the price, $2.5/$15; Luna as the budget option, $1/$6. Ultra mode uses subagents for complex tasks, with claimed support for defensive security (threat modeling, patching, blue team). On 2026-07-30, Luna was cut by 80% and Terra by 20%. Weights are closed; access is only through API/ChatGPT.

Subagent orchestration in ultra mode — the same concept as multi-agent orchestration in Claude Code, implemented earlier at Anthropic Anthropic Claude →
Saleor
Saleor 3.23.17: Django upgraded to 5.2.16, CVE fixes

The patch release fixes three vulnerabilities through a Django upgrade (CVE-2026-48588 - private data leakage from the response cache with Set-Cookie, CVE-2026-53877 - heap buffer over-read in GDALRaster, CVE-2026-53878 - header injection via DomainNameValidator).

Sber GigaChat
GigaChat 3.5 Ultra: hybrid linear attention architecture, weights are open

432B parameters (28B active, MoE) versus 702B in the previous Ultra - a hybrid of standard attention and linear attention (GatedDeltaNet): 4x less KV-cache per token, 2.14x more context in the same memory. Sber's first model to publish not only weights but also key training stages; claimed to outperform DeepSeek V4 Flash and V3.2 on coding.

By contrast, Western flagships (GPT, Gemini, Claude) are closed-weights and available only through API/cloud - GigaChat 3.5 Ultra publishes its weights OpenAI →
Anthropic Claude
Access to Claude Fable 5 restored after jailbreak

Fable 5 and Mythos 5 (launched in June 2026) were suspended by the U.S. Department of Commerce after a jailbreak was discovered. Access was restored on 2026-07-01 with a new classifier blocking more than 99% of exploit repeats; flagged requests are routed to Opus 4.8. Anthropic, together with Amazon, Microsoft, and Google, proposed an industry jailbreak severity scale, CJS-0 through CJS-4 (Glasswing project).

A jailbreak classifier and the CJS scale - the vendor equivalent of what an independent LLM Security Gateway handles at the gateway level for any model LLM & Security Gateway →
Datareon
DATAREON Platform 3.2.1: interface redesign, DatareonDB optimization, 1C subsystem improvements

Major release: the configuration/monitoring/development center UI has been redesigned; the process handling service and message store have been moved to core cluster services; the internal DatareonDB architecture has been reworked (indexes, compression, maintenance); the 1C connector now logs delete events in information registers and exchange resilience has been improved for unstable networks; a security audit has been completed.

DATAREON integrates 1C as an external bus; native 1C logic (registers, events) is implemented within the 1C platform itself. 1C →Both are positioned as low-code integration platforms; n8n is open-source and self-hosted out of the box, while DATAREON is a commercial closed product for import substitution. n8n →Kafka is an inherently distributed open-source message broker; DATAREON only brings message storage and process handling to a core cluster service in version 3.2.1, and the platform is proprietary commercial software. Apache Kafka →
Anthropic Claude
Release of Claude Sonnet 5

Sonnet 5 replaced Sonnet 4.6 as the default for Free/Pro on 2026-07-01 and is close to Opus 4.8 on agentic tasks such as planning, tools, and browser/terminal use. Launch pricing is $2/$10 per million input/output tokens until 2026-08-31, then $3/$15. The weights are closed, with API/cloud access only.

Qwen offers open weights for self-hosting in your own environment; Sonnet 5 is cloud-only with a limited launch discount Alibaba Qwen →
n8n
OpenTelemetry tracing for workflow execution (2.22.0+)

Workflow- and node-level spans are exported via OTEL to observability systems; most features are also available in the free self-hosted community edition, while custom telemetry tags are enterprise only.

Kafka has had native OTEL instrumentation for a long time; workflow-level tracing in n8n has only just arrived. Apache Kafka →
C# / .NET
.NET 8 and .NET 9 will reach end of support on November 10, 2026

Microsoft confirmed that the .NET 8 LTS release (36 months of support from November 2023) and the .NET 9 STS release (24 months from November 2024) will both lose security patches and technical support on November 10, 2026. Migration to .NET 10 LTS, supported through November 2028, is recommended.

MCP
Beta SDK for MCP 2026-07-28: Python, TypeScript, Go, C#

Four Tier 1 SDKs have received beta releases for the new spec: Python mcp v2.0.0b1, TypeScript v2 (split packages), Go v1.7.0-pre.1, and C# v2.0.0-preview.1. They implement a stateless architecture, Multi Round-Trip Requests, routing headers Mcp-Method/Mcp-Name, and standard JSON-RPC error codes. Migration to v2 is optional, and existing servers continue to work.

beta mcp v2.0.0b1 for Python SDK Python →beta C# SDK v2.0.0-preview.1 C# / .NET →
Datareon
Programming Store delivered a project based on DATAREON Platform for an oil company

Partner Programming Store implemented an integration solution on DATAREON Platform for a customer in the oil industry; the scope and system coverage were not disclosed in the announcement.

Saleor
Saleor Dashboard: customizable home page with app widgets

The HOMEPAGE_WIDGETS mount point lets apps render as widgets in a responsive grid on the main screen, not just full-screen tabs. App Bridge actions RefreshEntity and WidgetResize were added (auto-height iframe instead of a fixed 200px).

Pimcore Studio also provides UI customization through theming, but without a plugin widget model on the home screen. Pimcore →
Claude Tag: Claude as a team member in Slack

Anthropic launched Claude Tag (beta, Enterprise/Team plans), where Claude joins a Slack channel as a regular participant and anyone can assign a task with an @ mention, without a separate bot for the channel. The work model is an agent in the team’s shared channel, not a developer’s personal CLI tool.

Python
python.org release-metadata API auth bypass disclosed and patched

Auth bypass in python.org release management API let a request with admin username + arbitrary API key process as admin, able to alter release/file metadata on python.org/downloads. Existed since 2014; reported 2026-02-23, patched within 48h; PSRT audit found no evidence of exploitation.

MCP Enterprise-Managed Authorization extension goes stable

Zero-touch OAuth via Identity Assertion JWT Grant (ID-JAG): IdP-issued token exchanged for MCP server access token, no per-server consent screen. Adopted at launch by Anthropic, Microsoft, Okta; 7 MCP providers support it (Asana, Atlassian, Canva, Figma, Granola, Linear, Supabase).

MuleSoft governs MCP/agent access centrally via Omni Gateway since Jan 2026 Agent Registry launch, same centralization goal, different mechanism MuleSoft →
1C
“Compatible!” certificate for 1C:UT and Customer Relationship Management (CRM) 3.1

Compatibility has been confirmed for the sales management suite with the built-in CRM v3.1 features and the CRM module for 1C:ERP.Holding Management.

CRM is the product core, not a separate module 1C-Bitrix →CRM is built into a unified ERP core Odoo →
Datareon
1C subsystem 3.0.6.1 for DATAREON Platform 3.2.0.5

A fix for the 1C subsystem (version 3.0.6.1) has been released to restore stability after platform patch release 3.2.0.5.

The release cycle of the integration connector depends on the 1C version, which is a typical risk for bus-based solutions on 1C. 1C →
1C
Mandatory transition to electronic transport documents (ETD) from September 1, 2026

1C launched a training program for the mandatory transition to EPD from 01.09.2026; support is being implemented in sales and ERP configurations. A regulatory requirement in CIS.

1C-Bitrix
AI audit of marketplace modules in the Safe Integrations program

The code of new and republished marketplace modules (2,000+ solutions) is now additionally checked by an AI analyzer, which classifies findings by CWE/OWASP Top 10 and CVSS; vulnerable code is blocked from publication until the author fixes it.

EDI
Saby held a nationwide EDI forum with a breakdown of the transition to electronic transport waybills

On May 27-28, 2026, Saby (formerly the SBIS brand) held an EDI industry forum with case studies on adapting businesses to the mandatory transition to electronic waybills from September 1, 2026.

MCP
MCP spec release candidate 2026-07-28: stateless core, MCP Apps, tighter authorization

RC was locked on 2026-05-21, and the spec final is 2026-07-28 (a 10-week validation window). The initialize/initialized handshake and the Mcp-Session-Id header were removed, so the server runs behind a standard round-robin load balancer without sticky sessions. Tasks were moved out of core into an optional extension. The new MCP Apps extension provides server-side UI in a sandboxed iframe with JSON-RPC. A formal deprecation policy was introduced (Active → Deprecated → Removed, minimum 12 months); Roots, Sampling, and Logging are marked for removal.

Header-based routing and OAuth/OIDC hardening without sticky sessions is a pattern long implemented in the gateway layer before MCP LLM & Security Gateway →
Riversand
Syndigo + Blue Yonder partnership: MDM data in supply chain planning

Validated GS1 data from Syndigo product MDM flows directly into Blue Yonder planning and execution workflows (space planning, network sync), removing manual data cleansing during onboarding. Riversand is not mentioned explicitly, but it is the same multi-domain MDM engine under the hood of Syndigo.

1C-Bitrix
Launch of Bitrix24 Vibecode - AI app builder

New Bitrix24 mode: the user describes the task in text, and an AI agent based on BitrixGPT 5.5 studies the documentation, writes the code, and assembles the app without a developer. It works only within the Bitrix24 cloud ecosystem, and model access is closed (API/subscription, weights are not published) - closed-weights tag.

n8n is an open, self-hosted low-code orchestrator with AI nodes; Bitrix VibeCode is a closed cloud no-code app builder, with different levels of control over code and data n8n →
Magento
Magento Open Source / Adobe Commerce 2.4.9 Release

500+ fixes; support for PHP 8.5 (PHP 8.2 has been deprecated); Symfony upgraded to 7.4 LTS; support for OpenSearch 3.x and Valkey 8.1/9 added. Laminas MVC replaced with native PHP, Zend_Cache with Symfony Cache, TinyMCE with HugeRTE, and OAuth moved to native PHP functions. Local payment methods added (BLIK, Pay Upon Invoice, ELO), Apple Pay expanded to Chrome/Firefox, Google Pay card vaulting added, and the clearCart mutation introduced in GraphQL.

Node.js 26.0.0 released: Temporal API unflagged, V8 14.6, Undici 8

Node 26 includes the Temporal API (Temporal.PlainDate, Temporal.ZonedDateTime) without flags as a replacement for the outdated mutable Date; V8 is updated to 14.6 (Chromium 146), and Undici to 8.0. Current release, entering LTS in October 2026.

Python stdlib datetime + zoneinfo has long covered timezone-aware dates; Temporal removes the historical shortcomings of JS Date Python →
MuleSoft
40 new connectors (Spring 2026)

Connectors have been added for Business, Finance, Marketing, CX, ITSM, Security, DevOps, IT, Productivity, and Media (QuickBooks GraphQL, Shippo, BoldSign, Adobe Experience Platform, and others).

n8n
Microsoft Agent 365 Trigger node (2.20.0, preview)

The node gives the n8n agent an identity in a Microsoft tenant: an email for @mentions in Teams, access to SharePoint sites, and the ability to act as a team member in Microsoft 365 apps. Early preview, available only through the Frontier program.

Elasticsearch
Elasticsearch 9.4.0: Workflows GA, Agent Builder Skills, PromQL as a source in ES|QL (tech preview)

Native workflow automation inside Elastic Security replaces a separate SOAR tool, GA for Enterprise. Agent Builder now includes Skills (on-demand instruction packages - 5 for SecOps, 5 for SRE), Attachments, Connectors, and Plugins. PromQL has been added as a source command in ES|QL (tech preview).

Native workflow automation in Elastic Security fills the niche that other stacks cover with n8n as a separate orchestrator n8n →
n8n
IdP role mapping and bootstrap via env variables (2.19.0)

IdP role mapping is now configured inside n8n instead of in an external IdP config; instance bootstrap via environment variables has been added for automated deployment, along with expression-based grouping for complex structures.

Talend ESB
Talend 7.3: paid extended support ends in December 2026 with no extension

The Talend 7.3 line reached EOL on 2024-11-30; paid extended support (Severity-1 production blockers only, with no fixes for third-party components such as ActiveMQ or Jetty) ends in December 2026 and cannot be extended. Talend 8 or Qlik Talend Cloud is the only supported migration path.

similar vendor pressure to migrate to the cloud (Anypoint) as on-prem lines are phased out MuleSoft →
Odoo
Odoo is registered as an accredited platform (PA) for e-invoicing in France

Odoo has received Plateforme Agréée status from the French tax authorities, so receiving and sending electronic invoices and VAT e-reporting go directly through the product. From September 2026, receiving e-invoices will be mandatory for all companies in France, and issuing them as well for medium and large businesses.

The same role of a mandatory electronic document exchange intermediary, but for the requirements of CIS's Federal Tax Service rather than France's DGFiP EDM →A CIS EDI/EDM platform that plays the same role for CIS regulatory requirements as Odoo's PA status does in France Datareon →
Anthropic has released Claude Opus 4.7 - API/cloud only, with closed weights

The model ships with automatic filters that block forbidden high-risk cyber requests; it is available natively on Claude Platform and through Bedrock, Vertex AI, and Microsoft Foundry. Self-hosting is unavailable, and gateway routing must keep sessions in the provider's cloud.

Qwen publishes its weights openly and can be deployed in its own environment - Opus 4.7 does not offer that option, only API calls through the gateway Alibaba Qwen →
Riversand
SynapseGo: a conversational layer on top of the Synapse agent platform

Business users (marketers, data stewards) assign tasks to agents in natural language instead of configuration; ready-made agents - Product Creation, Onboarding, Enrichment, Syndication - operate under human oversight. The AI model/provider is not disclosed (closed managed service, not downloadable weights).

The same class of tasks (agentic commands in natural language over a catalog) as Agentic Ziggy from Akeneo (07/2026) - both are closed managed services with no model disclosure Akeneo →n8n uses explicit workflow graphs, while SynapseGo uses natural-language intent and agents decide the action sequence themselves n8n →
Pimcore
Pimcore Agent SDK is announced in beta - AI agents as platform participants with permissions and governance

The SDK is built into the platform core: agents receive identity, permissions, and an audit trail on par with people (the Agentic PXM concept). LLM weights are not published: the SDK orchestrates external models and is not itself a model; the announcement does not name specific providers or models.

A similar pattern: the agent is a first-class system participant with access rights, but MCP is an open protocol standard, while Agent SDK is Pimcore's proprietary layer. MCP →
Pimcore
Data Spine - a governance layer for data, content, and AI agents

A single validated source of truth above PIM/MDM and content platforms: quality rules, workflow, permissions, and audit trail apply equally to people and agents. The article does not disclose the licensing openness of Data Spine itself, only a mention of the platform's open-core Community Edition.

A similar idea of a unified governed data layer for MDM; Riversand's solution is more mature and does not include an AI-agent framework in this form Riversand →
Yandex YandexGPT
AI agent "Find Cheaper" in Alice AI chat

An agent inside Alice AI searches products across billions of offers online and completes the purchase directly in chat: average savings of 25% (about 6,000 RUB), with search taking 5-8 minutes. Available to 30.5 million monthly chat users; no specific agent model was named.

Meta Llama
Meta releases Muse Spark, its first closed flagship model after Llama

Meta Superintelligence Labs introduced Muse Spark, a multimodal reasoning model powering Meta AI (WhatsApp, Instagram, Messenger, Ray-Ban Meta). The weights are closed: access is limited to a private API preview for select partners, with no public release. This is Meta's first flagship release since Llama 4 Maverick (April 2025) that does not open the weights, marking the effective end of Llama as an open flagship.

Qwen continues to release open weights for flagship models, moving in the opposite direction as Meta drops open weights for its new flagships Alibaba Qwen →
C# / .NET
Microsoft Agent Framework reaches version 1.0

A stable unified SDK for .NET and Python for orchestrating single-agent and multi-agent AI workflows (sequential, concurrent, handoff, group chat) with a stable API and an LTS commitment. Built-in connectors include Microsoft Foundry, Azure OpenAI, OpenAI, Anthropic Claude, Amazon Bedrock, Google Gemini, and Ollama; MCP support for calling external tools is already stable, and support for the A2A 1.0 protocol is listed as coming soon.

Agent Framework uses MCP as a stable protocol for agent discovery and calling external tools MCP →The framework includes a native first-party connector to Anthropic Claude alongside OpenAI, Gemini, and Bedrock Anthropic Claude →Google Gemini is supported as one of the primary model providers in Agent Framework Google Gemini →
Sber GigaChat
GigaChat-3.1 Ultra and Lightning: Dense-to-MoE shift, new alignment

Ultra (702B MoE) and Lightning (10B, 1.8B active parameters) were moved from a dense architecture to MoE, and the post-training stage was redesigned (DPO in FP8: higher quality than bf16 with half the memory). The weights are open under MIT on HuggingFace and GitVerse; Ultra outperforms non-reasoning Qwen3-235B-A22B and DeepSeek-V3-0324 in math and general reasoning.

Ultra is directly compared with Qwen3-235B-A22B on math and reasoning Alibaba Qwen →
Riversand
Synapse: agentic PXM platform on multi-domain MDM core (formerly Riversand)

First agentic PXM platform according to Syndigo, natively built on enterprise multi-domain MDM (Riversand historical core). Agents reason and act across domains (product, supplier, location, compliance, performance) as unified "digital twin", sequentially or in parallel. Only "machine learning + generative AI" disclosed, specific model/vendor unnamed — closed service.

different agent architecture: Pimcore Agent SDK (04/2026) embeds agents into governance/ACL of PIM platforms, Synapse builds agents over multi-domain MDM core as separate orchestration layer Pimcore →Akeneo Agentic Ziggy (07/2026) — fixed set of specialized agents within PIM; Synapse announced as MDM-native layer covering more domains than catalog alone Akeneo →
1C-Bitrix
One-Click Buy button for 1C-Bitrix online stores in Yandex services

Through the Yandex Commerce Protocol (YCP), stores on 1C-Bitrix can show product cards and accept orders directly in Yandex Search and Alice, without going to the website; order and sales management remains with the seller.

Node.js is moving to one major release per year starting with v27

With Node.js 27 (October 2026), the release model changes: Alpha 6 months -> Current 6 months -> LTS 30 months. All releases become LTS, and the odd/even split is removed. The reason is minimal adoption of odd-numbered releases over 10 years and the volunteer team being overloaded by supporting four branches at once.

Since PEP 602 (2019), Python has already followed an annual major release cadence, and Node is only now moving to the same pace Python →
Magento
Magento Open Source 2.4.8-p4 Patch

Scheduled security and quality patch for the 2.4.8.x LTS branch (Adobe moved to a monthly patch schedule in January 2026). No new features, only security fixes and bug fixes for the current stable release.

C# / .NET
Official C# SDK for MCP reaches version 1.0

The ModelContextProtocol SDK for .NET has reached v1.0 with full support for the MCP 2025-11-25 specification: Protected Resource Metadata for server authorization, icons for tools/resources/prompts, incremental scope consent based on least privilege, URL-mode elicitation for sensitive data, tool calls inside sampling requests, and experimental Tasks for long-running operations.

The official C# SDK is developed by Microsoft together with Anthropic in the modelcontextprotocol organization on GitHub, alongside the Python and TypeScript SDKs MCP →
Python
Python 3.12.13, 3.11.15, 3.10.20 security release: 4 CVEs fixed

Fixes CVE-2024-6923, CVE-2026-24515, CVE-2026-25210, CVE-2025-59375: email header injection via unsafe folding/delimiters, XML memory-amplification DoS (libexpat bumped to 2.7.4), SSL use-after-free on SSL_new() failure, plus use-after-free/OOB in concurrent list ops (3.11.15/3.10.20).

Saleor
Saleor introduces Paper - a reference storefront

Paper is a production-ready reference storefront, positioned as a foundation that both developers and AI agents can extend. It closes a long-standing Saleor gap: headless commerce without an official default frontend.

Yandex YandexGPT
Yandex AI Studio: reasoning agents on DeepSeek-V3.2, price cuts

Yandex AI Studio gave businesses a builder for reasoning agents based on DeepSeek-V3.2 (third-party, not YandexGPT) for multi-step tasks such as tender analysis, incident review, and code. Caching/tool tokens were added (4x cheaper), along with secure connectivity and no request logging in the enterprise environment.

A secure proxy with no logging and deployment in a corporate environment - a typical gateway-product pattern, here built directly into Yandex's cloud platform LLM & Security Gateway →
Apache Kafka
Kafka 4.2.0: share groups (queues, KIP-932) are production-ready, and the new Streams rebalance protocol has moved out of preview

38 KIPs. Share groups (native queues on top of topics, KIP-932) are production-ready; the new Kafka Streams rebalance protocol (KIP-848) is production-ready too. DLQ support has been added in Streams exception handlers (KIP-1034), along with Java 25 support.

ESB platforms (MuleSoft, Talend) have had built-in queue semantics and DLQ for decades; Kafka as a top-level queue over topics (share groups) reached production only in 4.2.0 (2026). MuleSoft →DLQ and error routing have been standard ESB features since the beginning; Kafka Streams only received DLQ support in exception handlers (KIP-1034) in this release. Talend ESB →
RAG
Claude Opus 4.6: leap in long-context retrieval

On MRCR v2 (8-needle, 1M tokens), Opus 4.6 scored 76% vs 18.5% for Sonnet 4.5 — better at retrieving and finding facts in large document sets without explicit RAG index. Model via API/cloud only, weights not published.

Llama open weights enable self-hosted retrieval loop without Anthropic cloud dependency Meta Llama →
Talend ESB
Talend Studio is moving from Java 17 to Java 21 starting with the 2026-06 release

Qlik has announced a mandatory move of the Talend Studio desktop IDE to Java 21 starting with version 2026-06; jobs and services themselves remain on Java 17 (Big Data Jobs on Java 8), so the requirement applies only to the development environment. Migration is available through Feature Manager, a new JDK 21 installer, or manual setup (Studio 2025-09+ required).

a similar forced Java version upgrade cycle for Mule runtime MuleSoft →
Elasticsearch
Elasticsearch 9.3.0: bfloat16 dense vectors, Agent Builder GA

dense_vector with bfloat16 elements (2 bytes instead of 4) cuts vector index size in half with minimal recall loss. Elastic Agent Builder is now GA: native chat with Elasticsearch data and a builder for custom AI agents without an external RAG stack.

Agent Builder embeds LLM tool access to data directly into the engine, a pattern that other stacks implement with an external MCP server MCP →
MuleSoft
Public MCP servers in the Agent Registry

MuleSoft Agent Fabric received a curated catalog of third-party MCP servers from the Official MCP Registry with governance; GA for adding MCP servers by URL in January 2026.

MuleSoft is building an enterprise catalog and governance layer on top of the open MCP protocol, not its own protocol MCP →
1C
Final release of the 1C:Enterprise 8.5.1 platform

The final 8.5.1 release of the 8.5 line is out, with a new interface (light/dark theme, beta status within the release) and backward compatibility with 8.3. UNF 3.0.13, Retail 3.0.13, and Cashier Workstation 1.1.1 were updated at the same time.

web-native interface and built-in themes for a long time Odoo →
n8n
n8n 2.0.0: hardening release, secure-by-default execution

Task runners are enabled by default: Code nodes run in an isolated environment, and access to env variables from Code nodes is blocked. Legacy options have been removed (in-memory binary data), new SQLite pooling delivers up to a 10x boost, and a Publish/Save flow has been added for safe production updates. Breaking changes apply, with a migration report before upgrading; 1.x is supported for another 3 months.

Runtime isolation and sandboxing in enterprise ESBs (Mule, Talend) have been the standard for years; n8n only made it the default in 2.0. MuleSoft →
OpenAI
GPT-5.2 and GPT-5.2-Codex: long context, vision, 80% SWE-bench

GPT-5.2 (Instant/Thinking/Pro) improved long-context, vision and tool calling; Thinking achieved 80% on SWE-bench Verified and 98.7% on Tau2-bench Telecom. Separate GPT-5.2-Codex — specialized for agentic coding. Weights closed, access only via API/ChatGPT.

direct competitor in agentic coding (Claude Code / Opus), also closed weights Anthropic Claude →
1C-Bitrix
1C-Bitrix has launched a public bug bounty program for Bitrix24

The program on the Standoff Bug Bounty platform is open to independent researchers to find vulnerabilities in the cloud version of Bitrix24 for a reward, expanding the earlier closed security-audit partnerships.

MCP
MCP spec 2025-11-25: async Tasks, Extensions framework, sampling with tool-calling

Protocol anniversary: experimental Tasks (polling for long-running operations), the Extensions framework for optional modules outside the core spec, OAuth Client ID Metadata Documents for simplified client registration, URL-mode elicitation, sampling with tool-calling support (server-side agent loops). The registry has grown to ~2,000 servers (+407% since September), with 2,900+ contributors in Discord.

Async processing with status tracking via polling is a pattern message queues like Kafka have used for decades Apache Kafka →
Anthropic Claude
Release of Claude Opus 4.5

The flagship completed the 4.5 line after Sonnet 4.5 (Sep. 2025) and Haiku 4.5 (Oct. 2025): 200K-token context, output up to 64K, and an effort parameter that balances quality and cost (medium effort delivers Sonnet 4.5-level SWE-bench performance with 76% less output-token usage). Weights are closed - access only through Claude.ai/Code/API and the AWS Bedrock, GCP Vertex, and Azure Foundry clouds.

Llama publishes weights for self-hosting; Opus 4.5 is a closed model available only through the vendor's cloud Meta Llama →
PHP
PHP 8.5.0: release

PHP 8.5 is out - the pipe operator |>, built-in URI extension (RFC 3986/WHATWG), clone() with syntax, and the #[\NoDiscard] attribute. Active support until 2027-12-31, security fixes until 2029-12-31.

C# / .NET
C# 14: extension members and property simplification

Main feature — extension members: extension of existing extension method syntax to properties, operators, and static members. Added field-backed properties via contextual keyword field, implicit conversions between array/Span/ReadOnlySpan, null-conditional assignment, partial events and constructors, custom compound-assignment operators.

Akeneo
Autumn Release: MCP Server, expanded Data Architect Agent, AI tagging in DAM

Akeneo added a native MCP Server ("Bring Your Own LLM") for connecting external models to catalog data while preserving governance, extended Data Architect Agent to reference entities, asset families, and variants, and added AI extraction of attributes from video, PDF, and images in DAM.

Akeneo implements the MCP server as a transport for LLM access to the catalog, not as a proprietary protocol. MCP →
C# / .NET
.NET 10 (LTS) released

On 11 November 2025, Microsoft released .NET 10 as an LTS release with three-year support until 10 November 2028. Key changes: JIT compiler improvements (inlining, method devirtualization), AVX10.2 support for modern Intel processors, extended post-quantum cryptography (PQC) with Windows CNG support, Aspire 13 for cloud-native development.

Yandex YandexGPT
Alice AI: rebrand of the flagship chat model, MoE architecture

Yandex relaunched the Alice chat on the new Alice AI LLM model - a MoE architecture with hundreds of billions of parameters, trained with online RL and built-in multi-stage web search. The YandexGPT brand for the chat flagship has effectively been replaced by Alice AI; weights are closed.

MoE architecture for flagship LLMs from Google (Gemini 1.5, 2024) and OpenAI was adopted earlier, so Yandex is following the trend rather than setting it Google Gemini →
Node.js 25.0.0 released: the permission model gained --allow-net, and Web Storage is enabled by default

Current release: the --allow-net flag gives explicit control over network access in the permission model; Web Storage (localStorage/sessionStorage) is enabled without a flag; V8 is updated to 14.1 with faster JSON.stringify and built-in Uint8Array base64/hex conversion.

Python has no built-in process-level runtime permission model; network isolation is handled by external tools (containers, seccomp), not by the interpreter itself Python →
OpenAI
AgentKit: visual agent builder and Connector Registry

At DevDay 2025, OpenAI released AgentKit — Agent Builder (visual canvas workflows, beta), ChatKit (chat widget, GA), Evals for Agents, and Connector Registry for tool integration. On 3 June 2026, OpenAI announced sunset of Agent Builder and Evals — both leaving platform by 30.11.2026.

Same visual workflow builder with integrations; AgentKit is already being partially wound down (Agent Builder discontinued 30.11.2026), n8n is a mature open-source tool without that risk n8n →Connector Registry solves the same tool integration task as MCP protocol but proprietary and only within OpenAI's platform MCP →
RAG
Hugging Face replaced MTEB with RTEB - a retrieval benchmark with hidden datasets

RTEB (beta) combines open and private datasets across 20 languages and domains (law, medicine, code, finance) on NDCG@10 metric to prevent model overfitting to public benchmarks—prior MTEB inflated scores due to public dataset memorization. Used as primary benchmark for 2026 embedding model evaluation (Nemotron 3 Embed and others).

Alibaba Qwen
Qwen3Guard

A family of safety classifiers (0.6B/4B/8B) for real-time moderation of LLM traffic: Gen (instruction-following) and Stream (token-level). Apache 2.0, open weights.

Qwen3Guard is a vendor moderation model, not a universal gateway; integration with third-party LLMs is limited LLM & Security Gateway →
Odoo
Odoo 19 release: AI is built into all apps without separate modules

AI features are natively available in every app: "Ask AI search" turns a natural-language question into Odoo filters/groupings, AI agents perform actions on request (quotes, follow-up), and fields are filled automatically by AI. ChatGPT has been added as a provider: the model is cloud-based, there are no weights, and access is only through the OpenAI API.

Ask AI search is a narrow NL-to-query use case on top of ERP data, not a full RAG pipeline with an external knowledge base RAG →AI agents for quoting/follow-up automate steps inside ERP; n8n provides a universal orchestrator outside the product n8n →
MCP
Public MCP Registry Preview

registry.modelcontextprotocol.io is now open as the central community-driven MCP server registry, API freeze v0.1, with no data-retention guarantees before GA.

n8n has had its own marketplace of community nodes and templates for a long time; MCP is only now building an equivalent for its ecosystem n8n →
Yandex YandexGPT
YandexGPT 5.1 Pro: flagship business model in AI Studio

Yandex B2B Tech opened access to YandexGPT 5.1 Pro through Yandex Cloud AI Studio: the share of good answers rose from 60% to 71%, hallucinations fell by half to 16%, and the price was cut threefold to 40 kopeks per 1,000 tokens. The model is available only via API, with closed weights.

A similar closed flagship model for business via API - both vendors on the CIS market keep their top model weights closed Sber GigaChat →
Alibaba Qwen
Qwen-Image-Edit

An image editing model based on Qwen-Image (native text rendering); open weights, self-hosting possible.

OpenAI
gpt-oss-120b and gpt-oss-20b: first open weights from OpenAI's GPT line

OpenAI released two reasoning models (117B and 21B parameters, MoE, Apache 2.0 license)—first open weights from the company since 2019. gpt-oss-120b runs on single 80GB GPU, benchmarks near o4-mini, exceeds it on AIME 2024/2025 and HealthBench. Weights published: self-host in your own infrastructure without OpenAI cloud dependency.

Also open weights for self-hosting — direct competitor in the deployment model Meta Llama →open weights, same self-hosted reasoning-model segment Alibaba Qwen →

Discuss the news and your stack

Send via: