Security updates

Expert-scoped sessions and identity context in Copilot backend; Experts marketplace section, team page, and per-expert threads; Compact wallet popover for the new layout; Replace S…

Add an opt-in parallel upload mode for personalnew; Add CSTCloud Capsule (数据胶囊) driver; Make ranged download concurrency and part size configurable for quarkuc; Add optional User-A…

Added validation for Tor bridge list; Fixed Widevine install prompt

Disallow dict and non-valid GEOSGeometry str values in spatial lookups to prevent server-side file-write, remote code execution, and request forgery via spatial lookups (CVE-2026-1…

Disallow dict and non-GEOSGeometry str types in spatial lookups to prevent server-side file-write, remote code execution, and request forgery via spatial lookups (CVE-2026-15307);…

Fix for security issue CVE-2026-59792

Update vendored lodash to 4.17.23 to fix CVE-2025-13465; Fix invalid HTML response for route-level RSC requests in deployment adapter; Normalize encoded dynamic placeholders in app…

cifs: fix timelastwrite stamp placement in setattr/truncate paths; KVM: SVM: Bump asidgeneration on CPU online to avoid ASID collision after hotplug; bootconfig: fix NULL-pointer a…

Fix package-substitution vulnerability in projects using namedRegistries where packages from different registries could be confused; packages resolved from named registries are now…

Add getCurrentEventLoop to ffi; Add context.log() and test:log event to test runner; Report entryFile in TestStream events; Fix TypeError on Maps with null keys in assert and util;…

Fix for security issue CVE-2026-59792

AI Chat is now accessible via keyboard with added shortcuts; Add ability to always open AI-generated scripts in a new SQL console; Fixed models that do not support temperature dyna…

Store history db, tee logs and audit log owner-only; Tighten data dirs that already exist; Quote recovery hint paths with spaces

SVG uploads from resellers and end users are now explicitly checked for Javascript content which might be executed if the SVG file were opened directly in the browser; Customer sti…

npm granular access tokens configured to bypass 2FA can no longer perform sensitive account, org, and package management actions and now require an interactive 2FA challenge

Apply Date method defaults in @formatjs/intl-datetimeformat; Parse module ids with queries in @formatjs/unplugin; Repair corrupted patches/typescript@7.0.2.patch; Stop enabling JSX…

apply Date method defaults in @formatjs/intl-datetimeformat; parse module ids with queries in @formatjs/unplugin; repair corrupted patches/typescript@7.0.2.patch; stop enabling JSX…

Add an experimental embedded-containerd feature that runs containerd inside the daemon process instead of as a separate managed process; Mount type image is no longer experimental;…

Add AgentDbRetrievalGuard to filter HNSW retrieval results through ToolOutputGuardrail's OWASP LLM01/LLM08 pattern scan before context assembly, controlled by CLAUDEFLOWRETRIEVALGU…

Prevent loading components with UnityEvents connected to static methods to block exploitation of restricted methods such as Application.OpenURL; Fix an error when a component is mi…

ruflo security scan now validates --depth, --type, and --target flags before scanning, rejecting unrecognized values instead of silently reducing scans and reporting false negative…

Tighten Skill installation from GitHub repository with zip-slip and path traversal protections and archive size limits; Close credential leakage in Gemini universal configuration a…

Fix security issue CVE-2026-59792

Fix security vulnerability CVE-2026-59792

HDR output support on Vulkan and Direct3D 12 for brighter highlights, wider color ranges, and improved display accuracy on HDR-capable monitors; Volumetric clouds in the sky system…

Retain header memory in session accounting in http2; Defer rst stream while in scope in http2; Avoid granting radix split nodes in permission; Distinguish PFX object-array agent ke…

Fixed a vulnerability disclosed responsibly by Jorge Escabias; Many areas across the map received substantial overhauls with new tiles, buildings, and locations; Implemented perfor…

Ranked Series stickers are now available for purchase with 50% of royalties shared with players, teams, and the tournament organizer; Fixed a bug where scripts would fail to load i…

Included security fixes for CVE-2026-116 and other vulnerabilities

Fix path-traversal vulnerability in project workspace ID handling (CVE-2026-59792)

Fix CVE-2026-59792 security vulnerability

Fix for security issue CVE-2026-59792

Fixed CVE-2026-59792

Fix for security issue CVE-2026-59792

Fix for security issue CVE-2026-59792

Fixed CVE-2026-59792 security vulnerability

Fixed security issue CVE-2026-59792

Group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request errors; Implement LLM triage orchestrator and container build for caretaker-triage; Align m…

Projects created with uv init now declare a build system using uvbuild and are packaged by default, with source code placed in src/ and a project.scripts entry included; Reject uns…

GitHub Actions now holds potentially malicious workflows for approval to protect against supply chain attacks that use compromised credentials to push malicious workflows and steal…

Tailscale SSH Unix socket forwarding respects symlink permissions; Fixed security vulnerability TS-2026-004

Fixed code execution vulnerability via path traversal in project workspace ID handling (CVE-2026-59792)

Fix security issue CVE-2026-59792

Plan Canvas feature to review agent plans visually in the browser with the ability to click elements, select text, attach numbered annotations, and approve or request changes; Kimi…

Resolved a security advisory in a transitive dependency of Prisma CLI

Addressed a high-severity server-side remote code execution vulnerability in Nuxt; Released Nuxt 4.5.1 and 3.21.10 to address eight security advisories; Released @nuxt/devtools 3.3…

Fixed stack buffer overflow in odhcpd DHCPv6 IA reply serialization (CVE-2026-53921); Fixed Reconfigure-Accept stack buffer overflow in odhcpd; Fixed use-after-free through danglin…

GitHub/GitLab/Forgejo release backend now accepts additionalassetpatterns to overlay multiple release archives from the same tag into one installation directory; npm tool option al…

Applied security fixes from Mozilla security advisory MFSA2026-68; Updated Firefox to 153.0; High Dynamic Range (HDR) video playback is now available on Windows with HDR mode enabl…

Upgrade to ONNX 1.22.0 and protobuf 6.33.5; Make cuDNN and cuFFT optional at runtime for the CUDA execution provider; Remove nvrtc linking from CUDA execution provider to reduce re…

Update Intake Review Governance preset to v0.1.1; Update Verify Review Ship extension to v0.3.0; Update Architecture Guard extension to v1.13.1; Install commands under .kilo/comman…

Add toggle switch for bookshelf recent reading and quantity statistics, disabled by default; Add persistent scheduled tasks support with five-segment Cron, JavaScript editing and d…

perf/x86/amd/core: Always use the NMI latency mitigation; ALSA: seq: Fix uninitialised heap leak in sndseqeventdup(); iio: imu: invicm42600: fix timestamp clock period by using low…

Fixed crafted RESTORE payloads in RedisBloom and TDigest that may trigger out-of-bounds writes, potentially leading to remote code execution

Fix a crafted stream RESTORE payload that could make two consumers share the same NACK, leading to a use-after-free and potential Remote Code Execution; Fix crafted RESTORE payload…

Add a new setting update.githubActionsServer for specifying the base URL of the GitHub server that hosts the repositories of the GitHub Actions referenced by the workflow files; pn…

Disable unresolved Cargo artifact caching; Surface create-turbo Git failures; Resolve exact cargo profile outputs; Prune Bun production workspace dev dependencies; Resolve Cargo ta…

Visual direction now follows the format of the thing you are making with previews suited to each format including documents, posters, images, videos, Web Clones, wireframes, mobile…

Lambda self-managed code storage with provider.deploymentBucket.codeStorageMode: reference to run function and layer code directly from deployment bucket instead of copying to Lamb…

Fixed security fixes