Terraform MCP Server Had a CVSS 10.0 Bug: Patch to 1.2.0 Now If you've stood up HashiCorp's terraform-mcp-server so an AI agent can query the Terraform Registry or talk to your workspaces, go check its version right now. HashiCorp Security Advisory HCSEC-2026-23, published July 28, 2026, covers three vulnerabilities in …

AWS App Mesh Is Being Discontinued September 30, 2026: What to Migrate To (and What Breaks) On September 30, 2026, AWS discontinues AWS App Mesh entirely. This isn't a maintenance-mode freeze like Bedrock Agents Classic — after that date you lose console access and API access to your App Mesh resources completely. If …

Docker Hub OIDC for GitHub Actions: Retire Your Stored Access Tokens If your CI pipeline pushes images to Docker Hub, there's a good chance a Personal Access Token (PAT) or Organization Access Token (OAT) is sitting in your GitHub repository secrets right now — valid for months, scoped broader than you'd like, and one …

GitHub Actions Now Holds Suspicious Workflow Runs Before They Touch Your Secrets On July 28, 2026, GitHub started automatically holding workflow runs it identifies as potentially malicious before they execute. If a run gets flagged, it sits in a pending state until a repository collaborator with write access reviews …

GitHub Models Retires July 30, 2026: How to Migrate Your Code and CI Workflows If any of your code, scripts, or GitHub Actions workflows call GitHub Models, they stop working on July 30, 2026. GitHub confirmed the playground, the model catalog, the inference API, and bring-your-own-key (BYOK) support are all being …

MCP Goes Stateless on July 28, 2026: What Breaks and How to Migrate Your Server If you're running an MCP server in production, July 28, 2026 is the date the protocol's biggest revision since launch ships as final. The core change: MCP drops session state entirely. No more initialize/initialized handshake, no more …

Amazon Bedrock Agents Classic Enters Maintenance Mode: What to Do Before July 30, 2026 On July 30, 2026, AWS closes new-customer access to Amazon Bedrock Agents — the managed agent orchestration service that launched in November 2023. AWS has renamed it Bedrock Agents Classic and put it into maintenance mode. If you …

AWS CloudFormation Express Mode: 4x Faster Deploys and What It Actually Changes If you've ever sat through a create-stack that takes two minutes to provision an SQS queue with a dead-letter queue, or watched a delete-stack hang for 20+ minutes because a Lambda function still has an ENI attached, you already know …

GitHub Actions Checkout v7: Fixing the Pwn Request Vulnerability Before July 16 If your CI pipeline uses pull_request_target and checks out the pull request's head commit, actions/checkout@v7 will now refuse to do it. That's not a bug — it's GitHub closing one of the most common CI/CD attack patterns in the ecosystem, …

Amazon EKS Kubernetes Version Rollback: How to Undo a Bad Cluster Upgrade On July 1, 2026, AWS shipped something EKS operators have wanted for years: the ability to actually undo a Kubernetes control plane upgrade. Until now, aws eks update-cluster-version was a one-way door — if you upgraded from 1.32 to 1.33 and …