GitHub's 30 September 2026 changelog adds an opt-in Allow npm dist-tag permission on trusted publishing, so an OIDC workflow can move latest, next, or beta without a long-lived token. It defaults to off.
Neon's 2 October 2026 post adds POST /v1/embeddings on AI Gateway, with qwen3-embedding-0-6b at $0.02 and gte-large-en at $0.13 per million input tokens, for vectors stored in Lakebase Postgres.
GitHub's 30 September 2026 changelog puts the HydraFusion research preview in VS Code 1.140 and the Copilot app. It picks a Single, Cascade, or Critique workflow instead of acting as one model.
On 2 October 2026 GitHub deprecated Gemini 3.5 Flash, Gemini 3.6 Flash, Kimi K2.7 Code, and Claude Opus 4.7 across Copilot, pointing users to Gemini 3.8 Flash, Kimi K3, and Claude Opus 5.5.
GitHub's 2 October 2026 changelog says Copilot code review is requestable from REST and GraphQL, with an effort level on each call. Balanced, which took effect on 28 September, is the default.
Google's 1 October 2026 post launches Guided Vision in Gemini Live on Android 9 and newer, for spoken help while you share a camera. Google says it is not a navigation aid or a white cane.
Cloudflare's 1 October 2026 changelog says workers-oauth-provider v1 can run token issuing and an MCP resource server in separate Workers, with MCP's July 2026 client-metadata flow. npm shows 1.0.0 on 24 September.
Cloudflare's 1 October 2026 post adds ML-KEM and ML-DSA to Workers Web Crypto, off until you set webcrypto_modern_algorithms. ML-KEM-512 is absent. SHA-3 and HPKE are not in this change.
Cloudflare's 1 October 2026 post introduces Workers KV Instant, a private beta that replicates keys through Quicksilver. Reads are $0.20 per million, and a namespace tops out at 1 MB.
Cloudflare's 2 October 2026 post opens Cloudflare Traces in beta: one OpenTelemetry timeline for supported security, cache, routing, Worker, and origin steps, exported over OTLP. New ingest pricing starts 1 December.
Head sampling controls trace volume early. Tail sampling can retain runs that later fail or become slow, if the pipeline can hold and route their spans.
Cloudflare's 1 October 2026 post opens a waitlist for a managed Cloudflare OS deployment. Self-hosting remains. The same post says the workspace can now use a GitHub repo and more of Google Workspace.
Cloudflare's 2 October 2026 post adds an OHTTP Gateway in closed beta, as a paid add-on with a waitlist. The older Privacy Gateway relay is renamed OHTTP Relay. The gateway refuses Cloudflare-proxied clients.
Cloudflare's 1 October 2026 post launches K2 in public beta: an ordered event log stored as files in R2, with competing consumers or fan-out. Cloudflare says produce latency is about 1 second at p99.
Cloudflare posted Clef and Clef-flash on 1 October 2026: Apache 2.0 decision models on Workers AI that return a probability for every allowed answer, plus a hands-on fine-tuning offer.
Cloudflare's 1 October 2026 post says the data platform from Birthday Week 2025 is now Basin, and that Pipelines, Catalog, and SQL are generally available on Apache Iceberg in R2.
Cloudflare's 1 October 2026 posts put Artifacts, its Git-speaking versioned filesystem, in open beta. A contest for agent-era Git tools closes 14 October, and usage billing starts 15 October.
The Agents SDK changelog of 2 October 2026 adds PiHarness so a Pi 1.0 agent can keep a turn on a Durable Object. Cloudflare calls the API beta and says Pi Durable is still experimental.
Anthropic's 29 September 2026 note says GLM-5.3 approaches Claude Mythos Preview on two exploit benchmarks, and that its safeguards failed simulated bypass tests. NIST's September assessment agrees on the capability gap.
Anthropic is committing $100 million to Claude Frontier Academy to train 10,000 Frontier Deployed Engineers by the end of 2027. Participation is by nomination through Anthropic's account teams or partner managers.