Kindtech

Python 3.12.14, 3.11.16 and 3.10.21 fix security issues in webbrowser, HTTP headers, archives, XML parsing and more. These source only releases are recommended for users on the affected maintenance branches.

Oracle JDK 25.0.4.1 is an August security update with new baselines and vulnerability fixes. It also adds a default 20 MiB limit for downloaded certificate revocation lists. Review runtime updates before production rollout.

Microsoft Edge 152 is phasing out the unload event. In Edge 152 and 153, handlers stop firing on 60 percent of page loads unless allowed by Permissions Policy. Web apps should use page lifecycle APIs for saving state and cleanup.

Spring AI 2.0.1 adds a configurable tool call limit and improves streaming tool calls. It also includes security fixes and upgrade notes, including a change that makes OpenAI strict tool calling opt in. Review schemas before updating.

Spring Boot 4.1.1 is available from Maven Central with 98 bug fixes, documentation improvements, and dependency upgrades. Teams maintaining Spring services should review the release notes and test the update before deploying.

TypeScript 6.0 introduces support for Node style subpath imports beginning with hash slash and allows bundler module resolution with CommonJS. It also adds stable type ordering to help teams prepare for TypeScript 7. Review compiler settings before upgrading.

Expo SDK 57 is now the current upgrade target. Expo recommends moving one SDK at a time, then running expo install --fix and expo-doctor. Check the SDK release notes for native changes before rebuilding iOS or Android projects.

Firebase JS SDK 12.18.0 removes Imagen methods after model shutdown and improves several web APIs. It also fixes LanguageModel detection in Chrome Extensions and adds richer FunctionsError details with HTTP status and URL.

Astro 7.2 adds experimental incremental static builds. Routes can reuse prerendered HTML when code and data are unchanged, which can shorten builds on large content sites. Opt in with experimental incrementalBuild and provide a cacheKey per path.

Apple will require new responses when developers submit new apps or updates to the App Store or submit apps for notarization starting in September 2026. Teams should review release workflows and prepare the required submission details early.

MySQL 8.4.12 is a critical security patch update for the MySQL Server Docker image only. Teams using the official image should review the Oracle advisory, refresh pinned images, and test container startup before deployment.

PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 fix 28 security vulnerabilities and more than 110 bugs. PostgreSQL 19 Beta 3 is also available, while PostgreSQL 14 support ends on November 12 2026.

Apache Tomcat 9.0.121 improves HTTP 2 upgrade handling, adds Unix Domain Socket permission controls, and limits WebSocket upgrade response headers to 8KB by default. It also strengthens authentication and rewrite processing for web applications.

React Native 0.87 makes the Strict TypeScript API the default and updates Metro to 0.87. It adds experimental Swift Package Manager support for iOS. Upgrade planning should check deep imports and the new Node.js 22 toolchain requirement.

Swift 6.4 expands Embedded Swift with broader any type support, untyped throws, metatypes, floating point parsing, and throwing concurrency operations. The subset keeps binaries small for constrained devices while making more Swift code portable.

Home Assistant 2026.8 gives new Home Assistant OS installs a normal web address without the default port suffix. Existing setups stay unchanged, while web server settings can now be managed in the interface with automatic rollback if a change fails.

Android Gradle Plugin 9.3 supports API level 37 and adds a standalone R8 Configuration Analyzer task. The new optimization DSL also simplifies keep rules and supports variant based keep rule source sets for apps and libraries.

Kotlin 2.4.0 stabilizes the common UUID API, adds isSorted checks, supports Java 26 on Kotlin JVM, enables incremental Kotlin Wasm compilation, and works with Gradle 9.5. Review compiler and build tool compatibility before upgrading.

Django 6.1 adds model field fetch modes that can reduce many N plus 1 query cases, database level ForeignKey delete options, and dictionary based email settings. It supports Python 3.12 through 3.14, so review upgrade notes first.

Oracle released 943 new security patches in its August 2026 Critical Security Patch Update. Several Oracle Database issues can be exploited remotely without authentication. Apply patches on supported versions and test changes before production rollout.

Apache Struts 7.3.0 is generally available and fixes several JSON plugin security issues, including shared parsing state and unbounded request reads. Teams on Struts 7.2.1 should review the migration guide and upgrade promptly.

Django 6.1 adds model field fetch modes that can reduce many N plus 1 query cases, database level ForeignKey delete options, and dictionary based email settings. It supports Python 3.12 through 3.14, so review upgrade notes first.

The August .NET Framework update fixes elevation of privilege, remote code execution, and information disclosure vulnerabilities. On Windows 11 version 26H1, the .NET Framework 3.5 update is delivered as a complete standalone product.

Android security patch levels of 2026-08-05 or later address issues in the August bulletin. Teams shipping Android devices should verify the patch string and coordinate fixes across partner components before release.

Jetpack Compose UI 1.13.0 alpha01 adds configurable blur and scrim properties for dialogs and popups, improves text state restoration, and introduces custom failure handlers for UI tests. Check input mode changes before upgrading existing tests.

AndroidX WebKit 1.17.0 adds richer WebView navigation, HTTP cache quota controls, preconnection queueing, favicon download settings, and prerender management. It also adds a lint check for unhandled renderer crashes.

Node.js 24.20.0 is now LTS with package maps, permission audit support, AsyncLocalStorage using scopes, and JSPI for WebAssembly. The release also upgrades npm to 11.19.0, so review runtime and dependency changes before rollout.

Oracle plans to place Java 21 updates released after September 2026 under the Java SE OTN license. Teams that need permissively licensed updates should plan a move to Oracle JDK 25 or later.

Microsoft Power Platform 2026 wave 1 adds refreshed Power Apps interfaces, offline first Dataverse access, smarter search, and generative pages. Power Pages gains security agents while Power Automate adds AI agent capabilities.

Apple will issue new Sign in with Apple relay addresses on private.icloud.com later this year. Apps and websites should accept both private.icloud.com and privaterelay.appleid.com to keep account email flows working.

Google Search Console platform properties are now global. They let teams compare how Instagram, TikTok, X, and YouTube content performs across Google Search, Discover, and News, with exports for cross platform analysis.

The EU Cyber Resilience Act requires reporting of actively exploited vulnerabilities from September 11, 2026. Software teams should document vulnerability handling and update processes now, ahead of broader obligations in 2027.

Power BI August 2026 adds modern visual defaults, finer semantic model refresh controls, and faster PBIP reloads with a direct VS Code entry point. These changes can make report development and maintenance more predictable.

Apple published migration guidance for iPad apps using the deprecated UIRequiresFullScreen key. Review supported multitasking behavior and update app configuration before submitting the next release.

The MSVC Build Tools v14.52 preview improves C++ modules, ARM64 code generation, diagnostics, optimization, and AddressSanitizer support. Test the preview in a separate build lane before adopting it for production releases.

GitHub now offers a Windows 11 arm64 image with Visual Studio 2026 for hosted runners. The older windows-11-arm image begins migrating on September 21, so test workflows with runs-on windows-11-vs2026-arm first.

MariaDB 12.3.3 became generally available on August 24. This long term release includes InnoDB reliability fixes, improved lock handling, and security corrections. Teams should review the upgrade notes before deployment.

Cloud SQL for MySQL 9.7 is now generally available with vector search, JSON Duality Views, and a new hypergraph optimizer. It also supports in place upgrades from MySQL 8.4, giving teams a clearer migration path.

Visual Studio 2026 now lets developers tune Copilot thinking effort from Low to High. The August update also adds Git worktrees and first class Git submodule support, making branch based workflows easier to manage.

Adobe Commerce August 2026 security fixes use isolated patches rather than Composer packages. The new Commerce Version Tool helps confirm installed patches and the vulnerabilities they address.

Oracle released its August 2026 Critical Security Patch Update across Database Server, MySQL, Java, Commerce, and other product families. Review the advisory and prioritize fixes for exposed systems.

Gemini 3.7 Flash is now available for coding and agent workflows. Google reports stronger debugging, issue resolution, first pass code accuracy, and web app generation compared with 3.6 Flash.

Chrome plans to move from a four week to a two week release cycle starting with Chrome 153 in September 2026. Teams managing browser updates should review testing and deployment capacity.

Microsoft Edge 151.0.4129.107 shipped on August 24. Edge 151 adds enterprise passkey sync and clipboard suggestions in the address bar, while macOS support now requires Ventura or later.

A new npm supply chain advisory affects Keyv and related package versions. Remove affected releases, rebuild systems that installed them, rotate exposed credentials, and review CI environments for unauthorized access.

The August 2026 Oracle Java security update covers Java 26, 25, 21, 17, 11, and 8. Teams should review the matching runtime patch for each supported application before the next deployment.

Chrome UX Report published its July 2026 dataset on August 11. It continues tracking LCP, CLS, and INP, giving teams field data to compare real user performance across web origins.

GitHub Enterprise Server 3.17 support ended on August 25, 2026. Teams still running it should plan an upgrade to a supported release and verify their CodeQL and self hosted Actions Runner versions first.

Node.js plans to move to one major release per year starting with the 27.x line. The change aims to reduce concurrent release lines while preserving a predictable testing and migration window for users.

Laravel LSP brings Laravel autocomplete and navigation to any editor that supports the Language Server Protocol, including NeoVim, Zed, and Sublime Text. It gives teams more freedom to choose their development environment.