55 sightings logged, newest first.
Weaviate v1.39.3 (Oct 1, 2026) fixes a High CVSS 7.1 credential disclosure in text2vec-google, multi2vec-google, and generative-google. Impacted: < v1.39.3. CVE pending MITRE assignment.
Shopify (Sep 28, 2026): Checkout WebMCP tools let browser agents get, update, and complete eligible checkouts after buyer confirmation—no new card entry via tools; Web Bot Auth for verified bots.
Microsoft Teams Phone Agent begins rolling out to GA (Sep 30, 2026): AI receptionist for Q&A, appointments, contextual route with notes, after-hours, 60+ languages. Copilot Studio custom voice stays Frontier preview.
ClickHouse (Sep 29, 2026): Fabric workload in public preview; OneLake Iceberg read GA via Table APIs; Iceberg write in public preview with credential vending; Azure BYOC on the Microsoft Marketplace.
CopilotKit announced AG-UI 1.0 (Sep 30, 2026): stable behavioural spec backed by JSON Schema, with TypeScript, Python, and .NET SDKs generated from that schema. Bidirectional agent↔application events.
JetBrains opened early access for Air in JetBrains IDEs—Marketplace plugin or native in 2026.3 EAP. Bring-your-own Codex, Copilot, Claude, Junie, and ACP; multi-agent sessions. Early access, not generally available.
AssemblyAI announced Universal-3.6 Pro Realtime on 2026-09-29—streaming STT for voice agents, model id universal-3-6-pro. Drop-in versus 3.5 Pro (still available). $0.45/hr; billed by WebSocket session duration.
Sigma Agents are generally available (blog Sep 29, 2026): MCP server, REST POST /v2/workbooks/{workbookId}/agents/{agentId}, and Administration → Agents. Premium paid; access may need entitlement.
ClickHouse’s chDB Durable Layer (Sep 28, 2026): local MergeTree plus object storage via flush()/checkpoint(). chDB 4.4+ with chdb[durable]; chdb-core 26.7.3; single-writer. npm [email protected] differs from the Python package.
MySQL and MariaDB now document native vector features, PostgreSQL can use pgvector, and SQLite can add search through extensions. Here is how to choose by deployment shape and retrieval needs.
Bedrock Managed Agents powered by OpenAI entered public preview (AWS what’s-new Sep 29, 2026)—never GA. AWS-native IAM/CloudTrail/human approval/durable sessions/MCP/skills as AWS states. Preview regions us-east-1, us-west-2, us-east-2. No additional BMA charge in preview beyond underlying resources (subject to change at GA).
AI Search generally available (blog Oct 1, 2026). Billing starts November 1, 2026; free tier remains. Blog pricing: ingestion $0.75/1M + image +$0.50/1M; storage $2/GB-mo; semantic $0.75/1k · full-text $0.10/1k. Qwen3-VL-Embedding; OCR; files to 10 MiB. Video/audio = roadmap not GA.
Synthesia Sessions platform (Oct 1, 2026): Roleplay and Survey Sessions live; Expert Sessions coming soon only—not GA. Soft: 78%/83% learner stats Synthesia-stated; free try no CC per FAQ. Roleplay lineage ~July 2026—not an all-new suite invented today.
Anthropic’s Claude Sonnet 5.5 (model ID claude-sonnet-5-5): $2/$10 input/output, $0.20 cache reads, $2.50 cache writes. Anthropic claims 30%+ faster than Sonnet 5, up to 30% less per task, Terminal-Bench 70.6% / CursorBench 55.5%. Haiku 5.5 coming weeks.
Threat Signals GA free for every Cloudflare account (blog Sep 29, 2026): 1 RSS feed on free tier, private dataset up to 30 days, Threat Events access. RSS→Browser Run→IOC→Threat Events→WAF as CF describes—no latency/accuracy SLAs; review before block.
Sep 30 User Insights update for AI Gateway: model-fit Overkill/Appropriate/Underpowered, task+turns analysis, Potential Savings. Free for Gateway users (inference still billed). Distinct from Auto Router. Async ~1 day lag; log classification opt-in per gateway.
PgBouncer 1.26.0 (Sep 23, 2026) fixes CVE-2026-19888, CVE-2026-6668, and CVE-2026-6669—DoS only as advisories state (crash / infinite loop / unbounded login work). No invented RCE, CVSS, or exploit steps. Also: pool_idle_timeout, per-user/DB query_wait_timeout, search_path tracking, meson; -R removed.
A practical way to turn real user examples into graders, regression tests, and model-update reviews.
PlanetScale’s hot-shards post (Sep 28, 2026) walks multi-tenant AI SaaS through vertical scale, whale isolation, and online table-level Reshard on Neki—without taking the app offline. Do not invent a Neki GA date beyond “since the launch of Neki.” Slack Vitess analogy is third-party only—not Slack-on-Neki. Soft-attribute “fastest cloud Postgres.”
CoreWeave Forge (Fully Connected 2026 / Sep 30 news): connected run→observe→curate→improve→evaluate loop. HARD: only CoreWeave ARIA and CoreWeave Sandboxes are explicitly Generally Available—do not call all of Forge GA. Always brand CoreWeave Forge (≠ Cloudflare Forge). Soft-attribute CW claims; Agent Lens cost wording differs blog vs news.
Same-day Sep 30, 2026: Voyage ships rerank-3 and rerank-3-lite (“available today”—do not invent GA). MongoDB Atlas Native Reranking via $rerank is Preview only (docs). Soft-attribute Voyage/MongoDB lift claims. Distinct from D7 Atlas Agent Engine—not a Vector Search substitute framing either way.
Cloudflare opened Pay Per Use in beta (blog Sep 30, 2026): a content-network path where AI buyers offer prices for defined uses, publishers opt in, buyers self-report usage, Cloudflare settles monthly. HARD fence vs Monetization Gateway / x402 (API/MCP 402 rails). Distinct from Pay Per Crawl. Soft: beta/US-era trust model; no invented GA.
MongoDB launched Atlas Agent Engine in public preview (press Sep 29, 2026): unified execution, memory, and governance on Atlas with Voyage AI retrieval. Not GA—no invented GA date. Preview pricing subject to change. Not a substitute for Atlas Vector Search; fenced from Voyage/Atlas $rerank deep-dives. Framework names stay Atlas framing only.
Google Cloud’s Cloud CLI remote MCP (blog Sep 30, 2026) exposes gcloud + bq via https://cloudcli.googleapis.com/mcp—Preview / Pre-GA Terms, as is; do not call GA. Tools run_gcloud_command / run_bq_command; MCP no extra charge, pay for GCP resources. Distinct from local gcloud-mcp, BigQuery MCP (GA SQL), and Gemini Skills.
Cloudflare’s Containers rebuild for on-demand agent sandboxes (blog Sep 30, 2026): durable_object scheduling, runtime image/instance pick, FS snapshots (~30-day TTL), cloudflare/debian-trixie. Legacy Container/Sandbox classes maintained through Dec 31, 2026—deployments keep running after; classes freeze. Burst TTI / 100k figures are vendor-reported.
NaiveAI’s Naive-N0.5-Flash (Sep 27, 2026): open-weight 309B MoE / 15.5B active, native 1M hybrid SWA–DSA, MIT on HF. API ($0.10/$0.40/$0.01) and NaiveRT remain future-tense—NaiveRT GitHub still 404 as of draft (promised by Oct 12). Benches/tok/s are NaiveAI harness claims only.
Holo4 (Sep 28, 2026): 27B dense (Qwen3.8) + 35B-A3B MoE (Qwen3.6) for GUI/code/MCP/API computer-use. HARD license split—27B weights CC BY-NC 4.0; 35B-A3B Apache-2.0. Both on H Models API + HF. OSWorld/cost figures are H Company harness claims only. Prefer BF16; context 256K (config max 262,144).
Cloudflare opened Monetization Gateway in closed beta (Sep 30, 2026): HTTP 402 + x402 inline pay-per-request for sites, APIs, MCP tools, and datasets. Settlement rails as CF states (USDC on Base via Coinbase Facilitator)—not crypto advice. Distinct from Pay Per Use content metering. US buyers/sellers; API2PDF >50% drop-off is vendor soft.
Cloudflare launched cf in open beta (blog Sep 28, 2026): Forge-generated ~3k OpenAPI ops, JSON-default output, cf cli search, cloudflare.config.ts + Vite default. Distinct from AI Gateway Auto Router. Agent-usage % and ~40% config shrink are Cloudflare-reported. Wrangler kept during beta; 18 months maintenance after.
Google Skills replace Gems (Sep 30 primaries): slash-invoke, stackable, SKILL.md-shaped. Do not collapse dates—consumer blog “globally/today” vs Workspace Updates (Workspace Oct 5; Gemini app Oct 13). App↔Workspace skills do not sync. Gems sunset “no sooner than” Mar 1 / Jun 1 2027 for Workspace cohorts.
Cloudflare’s Auto Router is in public beta via AI Gateway (blog Sep 30, 2026): set model to cloudflare/auto and a classifier picks from an eligible pool. Router is free in beta; upstream inference still billed. ~30% OpenCode savings and internal benches are Cloudflare-reported only. WebSockets not yet supported.
Voice activity detection finds speech and silence; turn detection, endpointing and interruption rules decide what an agent should do with those signals.
Redis 8.4 adds optional CLAIM min-idle-time on XREADGROUP—claim idle PEL entries then read new ones in one command (shared COUNT). Idle ms + delivery count come back when CLAIM is used; XACK still required. ~22.5× vs XAUTOCLAIM is Redis-reported on their stress setup.
WebRTC is built for live media; WebSockets stream audio as ordered messages. Here is how the transport choice affects latency, loss, browser audio, and deployment.
Qdrant’s Clelia Bertelli blog (Sep 25, 2026) covers cross-encode-rs—a Rust ONNX Runtime cross-encoder for reranking. crates.io owner is AstraBert (not a Qdrant-org crate). ~1.1×/~1.4× vs Python stacks on M4 Max are vendor-reported; all three hand work to onnxruntime. Linux/macOS only.
Qdrant’s Constella research preview (Sep 29, 2026): index docs once with Stella (400M English), then query with Zero, Nano, or Stella against the same collection—no re-embedding. Research preview, not GA. Encode-speed and nDCG figures are vendor-reported.
HF (2026-09-30) launched the Open TTS Leaderboard—objective WER/CER (Qwen3 ASR), RTFx, TTFA, and WavLM SIM for open-source and multilingual TTS/voice cloning. Eval infrastructure, not a model launch: ASR/WER is a proxy for intelligibility and does not measure listener preference or naturalness. Named ranks = blog snapshot; eval scripts still “soon.”
OpenAI Codex CLI rust-v0.159.0 (2026-09-29) adds opt-in instant_interrupt, richer native Mermaid, draft/blank-session recovery, and default .aws sandbox protection—plus Windows MCP launch fixes. Chores drop prompt_suggestions and the plugin-creator skill. Jump past live 0.156; ignore 0.158 alphas.
DiskANN approximate vector indexes are GA in Azure SQL Database, Azure SQL Managed Instance (Always-up-to-date), and Fabric SQL (Hoffman Sep 29; Thota Sep 28). Vectors sit next to operational rows under the same T-SQL/security model—no separate vector store. SQL Server 2025 / MI on SQL Server 2025 policy stay preview.
Databricks GA’d Lakebase Search on AWS/Azure (blog 2026-09-28): lakebase_vector (ANN) + lakebase_text (BM25) in the same serverless Postgres OLTP—hybrid via RRF, no separate search cluster. VectorDBBench/Conexiom figures are vendor-reported.
AWS GA’d direct Iceberg/Parquet lake queries from Aurora PostgreSQL (2026-09-30) via embedded DuckDB and aurora_analytics—no ETL. Join live ops rows (incl. uncommitted) with the lake. PG 17.11+/18.6+; no extra feature fee (compute + S3).
NVIDIA announced Kumo Tabular (HF blog 2026-09-29): open tabular foundation models for cls/reg via structured-data-models. Weights OpenMDW-1.1 on HF; library code Apache-2.0. No Inference Provider—local weights path. TabArena/#1 soft-attributed.
Cohere GA’d Embed 5 (2026-09-30): embed-v5.0-pro / embed-v5.0-fast share one space (index Pro → query Fast). Blog pricing $0.12 / $0.08 per 1M text; image $0.40 both. 128K, Matryoshka dims, multimodal—ViDoRe/finance benches are Cohere-reported.
OpenAI says it disrupted a July 2026 adversarial distillation campaign that sought protected reasoning via ToS-violating interaction patterns—not a crypto/DB breach. Core cluster attributed to individuals associated with Moonshot AI (Kimi); volumes are attempted extractions.
Retrieval quality is decided by the embedding model, the dimensions and the chunking, and it is only known once you measure recall. How to choose, how to test, and where vector search earns its place.
EricLBuehler/mistral.rs (not Mistral AI) merged PR #2462 on 2026-10-01: Qwen3.8-Flash-Next from safetensors and GGUF with built-in MTP. Not a new release tag. Paged attention requires CUDA; FP8 KV / TP / GGUF MTP / external drafters unsupported.
warpfront tagged hipfire v0.4.0 (2026-09-30): Rust LLM inference over HIP kernels for AMD RDNA. Self-reported ≈5,120 tok/s pp8192 on R9700; Qwen3.8-Flash-Next full 262K on one R9700. Serve defaults to 127.0.0.1. Apache-2.0 (residual MIT files).
arXiv 2609.25008v1 is a preprint experience report (not SOTA): after a Candle/Burn failure taxonomy on a ~0.4B Bangla-first run, the author pivoted to train in PyTorch and keep Rust for serving. Self-reported $164 / 54.6h H100; weights not public.
A practical guide to server-sent events, WebSockets, provider event streams, tool calls, disconnects and buffering in AI applications.
Kling AI says Kling 4.0 Flash is live now for Ultra Yearly subscribers; full Kling 4.0 (up to 4K / 10-bit HDR / ~30s) is pitched for October 2026—not today. Tech Times: Flash is 3–20s at 720p 8-bit SDR. No Kling 4.0 on AA yet.
Utopai Studios launched PAI (production intelligence) and Utopai X on 2026-09-30. On Artificial Analysis AA-Video-T2V v2.0 With Audio (accessed 2026-10-01 ~08:58 IDT), Utopai X (based on MiniMax H3) ranks #2 at Elo 1153 (±11) behind Wan 3.0 at 1159. No API.
AWS S3 Vectors (Sep 30, 2026) adds ENHANCED index mode that filters metadata before similarity search, plus $startsWith. AWS claims up to 5× more matching vectors on highly selective filters—vendor figure, not house-verified. No extra cost; CLASSIC until you upgrade.
Perplexity published open-weight pplx-embed-v2-context-9b-preview on Hugging Face (MIT): contextual chunk embeddings for RAG. Preview may break; not on Perplexity API yet. Use encode_queries vs encode; int8 + MRL 1024/2048; transformers≥5.4 + trust_remote_code.
Google DeepMind announced Gemini 4 Argon on 2026-09-30: phased to Fairwind cyber defenders first, 1M output tokens (not full context), intro $2/$10 then $4/$20 per 1M tokens on the blog—no public model ID or ai.google.dev pricing row yet.
VS Code Stable 1.140.0 (Sep 30, 2026) ships experimental multi-folder agent sessions, remote Agent Host delegation (tools off by default), Copilot harness on Agent Host, HydraFusion research preview, and Local-only OTel identity capture.
