Laravel 13.42 Adds Typed UUID and ULID Reads and a Failed-Migration Event
Laravel 13.42, released on November 10, 2026, adds uuid() and ulid() methods for reading request input, a MigrationFailed event, and a detailed reason for skipped scheduled tasks. Small additions that save backend teams from…
Security
Node.js Patches Fourteen Security Flaws Across Its Three LTS Lines
Node.js shipped fixes on November 11, 2026 for the 22.x, 24.x, and 26.x lines, closing fourteen vulnerabilities including seven high-severity…
GitHub Extends Secret Scanning to GitHub Actions Workflow Logs
GitHub has opened a public preview that detects secrets inside GitHub Actions workflow logs, a long-standing blind spot for secret…
Claude Code’s “Don’t Ask Again” Setting Leaked Over 1,300 Secrets on GitHub
Security firm Apiiro found more than 1,300 exploitable secrets exposed in public GitHub repositories through Claude Code's settings.local.json file. The…
Claude Code Leaked Account Email Addresses in the User-Agent Header
A report filed on the Claude Code GitHub repository describes the account's email address being included in the User-Agent header…
Postman Installs AI Agent Plugins Without Clear Consent, Vendor Promises Fixes
A GitHub report documents how Postman enables plugins for Claude Code, Codex, and Copilot during an update without the user…
Claude Code Extension on the Cursor Marketplace Shipped with an SSH Backdoor
Two versions of the official Claude Code extension distributed through the Cursor Marketplace carried malicious code that opened a remote…
AI for the web
Chrome, Edge, Firefox, and MDN Ship Modern Web Guidance 1.0 for Coding Agents
The Chrome, Edge, Firefox, and MDN teams released version 1.0 of Modern Web Guidance on November 10, 2026, a set…
Claude Fable 5.2 and Mythos 5.2: Anthropic Doubles Down on Agentic Coding
Anthropic has introduced Fable 5.2 and Mythos 5.2, two versions of the same model built for the most demanding technical…
Goldman Sachs Restricts Claude Code and GitHub Access for Traders and Bankers
Goldman Sachs has cut most traders' and bankers' access to Claude Code and GitHub, according to internal guidance revealed in…
GitHub Rolls Out Its @GitHub Agent in Slack and Microsoft Teams
GitHub announced general availability on November 6 for its @GitHub agent in Slack and Microsoft Teams, letting teams open issues…
GitHub Copilot Lands Natively in Xcode and Joins JetBrains Air’s Cloud Agent Sessions
GitHub opened Copilot to Xcode's built-in coding assistant and to JetBrains Air's agent sessions within two days. The company is…
OpenAI to Merge ChatGPT and Codex Usage Into One Shared Pool in December
OpenAI has announced that starting in December 2026, Plus, Pro and Business plans will share a single usage allowance between…
Back-end
Laravel 13.42 Adds Typed UUID and ULID Reads and a Failed-Migration Event
Laravel 13.42, released on November 10, 2026, adds uuid() and ulid() methods for reading request input, a MigrationFailed event, and…
PHP 8.6 Reaches RC5, One Step Before the November 19 Stable Release
PHP 8.6.0 RC5 shipped on November 5, twelve days ahead of the stable release planned for November 19. This release…
Laravel 13.40 Adds Queue Monitoring Hooks and Patches a Concurrency Injection Flaw
Laravel 13.40 adds alerts for slow jobs and tasks, and closes an injection flaw in the Concurrency facade. The release,…
Node.js Ditches Its Twice-a-Year Majors: Version 27’s Alpha Opens an Annual Calendar
The Node.js project has shipped the first alpha of version 27 and confirmed a shift to one major release per…
Node.js 26 Enters Long-Term Support as Lithium
Node.js 26.13.0 marks the 26.x branch's entry into Long Term Support, codenamed Lithium, with updates guaranteed through the end of…
WordPress 7.2 Beta 1 Ships a Secrets API and Reworked Notes
WordPress shipped the first beta of WordPress 7.2, opening the testing window ahead of the final release slated for December…
DevOps & servers
GitHub Actions Blocks pull_request_target by Default: Deadline Pushed to December 2
GitHub has pushed back to December 2, 2026 the default blocking of pull_request_target workflows on public repositories, originally set for…
GitHub Agentic Workflows Reaches General Availability for Reasoning Tasks in CI
The GitHub Next project that compiles markdown instructions into GitHub Actions workflows has left technical preview. It targets issue triage,…
GitHub Copilot Adds Server-to-Server Authentication for Organizations
GitHub has opened a public preview that gives organizations their own identity for GitHub Copilot, built for agents and automated…
GitHub Rolls Out Open Source License Compliance for Pull Requests
GitHub announced general availability of open source license compliance on October 16, 2026, for GitHub Enterprise Cloud. A centralized policy…
Deno Joins Cloudflare, Deno Deploy to Shut Down in Six Months
The entire Deno team is joining Cloudflare, which will shut down Deno Deploy in six months and cap open-source runtime…
Netlify Moves Edge Functions to Firecracker MicroVMs
Netlify has replaced the V8 isolates running its Edge Functions with Firecracker microVMs hosted directly on its own edge network.…
The feed
All articles
The publication
Technical news for web professionals, verified and dated
Mail Studio covers front-end and back-end development, infrastructure, security, email and deliverability, AI applied to the web, and running an independent business. Every article is dated, its sources are named, and any reported factual error is corrected visibly.