Product updates and useful context
Read updates about tools and digital products, see what has changed, and find the available sources in each article. Browse the archive pages for earlier posts.
Articles and guides
Keep reading and explore a topic
Find longer articles in the blog, explore a topic through the guides, or browse earlier news.Update Shopify collection apps before 2026-07 hides new collections
Shopify's 2026-07 Collections API replaces the old ruleSet shape with composable collection sources, and older API versions can miss collections that use the new model.
Read updateRun GitHub Actions steps in parallel without losing separate logs
GitHub Actions now supports parallel steps with background, wait, wait-all, cancel, and parallel syntax. It is useful for faster CI jobs, but teams should test composite-action support before refactoring shared actions.
Read updatePatch Cisco Unified CM WebDialer Before CISA's Exploited-Flaw Deadline
CISA added CVE-2026-20230 to its Known Exploited Vulnerabilities catalog after active exploitation signals, giving defenders a short deadline to mitigate Cisco Unified CM WebDialer exposure.
Read updateFix self-hosted Supabase auth routes before SAML breaks
Supabase is changing the default self-hosted API_EXTERNAL_URL to include /auth/v1 in the next self-hosted release, with SAML SSO route changes that teams should verify before upgrading.
Read updateBlock Ivanti Sentry CVE-2026-10520 faster: Cloudflare WAF adds managed protection
Cloudflare has added a managed WAF rule for CVE-2026-10520, a critical Ivanti Sentry OS command injection flaw that CISA and NVD list as actively exploited.
Read updateHarden GitHub Repos Now That Secret Scanning Blocks More Token Leaks
GitHub expanded secret scanning in June 2026 with new partner detectors, wider default push protection, validity checks, and richer leak metadata. The practical move is to audit which repositories actually have push protection and alert triage enabled.
Read update