← All digests#10 · 12 Oct 2026, 08:49 am IST · cron · success · email sent
5 Oct – 12 Oct · IST · last 7 days
22 repos checked · 22 releases · 274 lines of notes
1 security 4 breaking+ 18 still open from earlier weeks
Security first, then breaking changes. Within each, flags both the rules and the AI agree on come first, and flags only the rules raised (AI judged routine) are shown quietly at the end. Nothing is hidden: the AI can add a flag but never remove one.
Adds clients.search, anonymous session network binding, brute-force form submission mode, and DPoP strict refresh token binding. It also moves experiment and feature flag status transitions to PATCH requests.
Flagged in an earlier digest and not yet marked as reviewed, so an unread security fix can't quietly age out. Marked ones leave this list the next time the page loads.
Moves sweep-related API methods from BalanceAccountsApi to CustomPayoutSchedulesSweepsApi. Also introduces new APIs for payout schedules, top-ups, cash-outs, and updates Checkout API to v72.
Dependencies first, then the tools we're evaluating. Sub-package and pre-release streams are tucked into collapsed lines, never removed.
Pre-release update directing users to the external changelog for release details.
Release cadence and momentum for the tools we're evaluating, as of the last run.
| Repo | Releases · 90 days | Last | Median gap | Stars |
|---|---|---|---|---|
| better-auth/better-auth | 23 | 11d ago | 1.2d | ★ 30,264no earlier snapshot yet |
| drizzle-team/drizzle-orm | 3 | 3d ago | 5.9d | ★ 36,001no earlier snapshot yet |
| getlago/lago |
Tracked repos with no release in the window.
All repos were checked.
Adds Redis Sentinel support and credentials, introduces a new Dockerfile.staging, adds the LAGO_WEBHOOK_ALLOW_PRIVATE_URLS setting, and removes flat filters and enriched expanded events in events-processor.
No release notes provided.
Rules matchedmajor version bump: v4.13.13 → v5.0.0-rc.1
No release notes provided.
Rules matchedmajor version bump: v4.13.13 → v5.0.0-rc.0
Breaking Changemajor version bump: v15.0.2 → v16.0.0Removes the organizationTemplates resource and modifies beta -mcp connection enum values, while adding new endpoints for Guardian settings, experiments, and searching.
Rules matchedBreaking Change⚠️ Breaking
Introduces consent non-repudiation, Experiment Center EA, and OIDC client support, while removing Organization Templates.
Rule flagged; AI judged routine — check the notes
Release notes link to the external changelog with no details provided in the text.
Rules matchedmajor version bump: v15.6.1 → v16.0.0
Rule flagged; AI judged routine — check the notes
Release notes link to the external changelog for details on v87.0.0.
Rules matchedmajor version bump: v86.4.2 → v87.0.0
Rule flagged; AI judged routine — check the notes
Release notes refer users to the changelog for full details.
Rules matchedmajor version bump: v22.6.2 → v23.0.0
Pre-release update directing users to the external changelog for release details.
Pre-release update directing users to the external changelog for release details.
Adds agent skills and anonymous-session support to the package. Fixes enterprise login cookie handling and surfaces anonymous-session expiry errors.
Fixes a CI issue to prevent beta releases from deleting package.json and updates beta version numbering to start at .0.
Adds clients search and brute-force form submission mode in beta, and syncs API changes from version 7.3.0.
Updates defaultCliVersion to 1.9.1 and fixes SAA activity task validation routing. Includes fixes for scaler state clearing and task queue user data observation.
Fixes an issue where postgres-js did not use prepared queries when calling explicit .prepare(name).
Updates the hono peer dependency range to allow Hono v5 prereleases and keeps internal types private in the bundled type declarations.
Expands the hono peer dependency range to include Hono v5 prereleases and hides internal types in the bundled d.ts file.
Allows Hono v5 prereleases in the hono peer dependency range and ensures internal types are kept private in generated declaration files.
Allows Hono v5 prereleases in peer dependencies to resolve npm installation errors and hides internal types in the bundled d.ts file.
Updates peer dependency definitions to accept Hono v5 prereleases and restricts internal types from the bundled d.ts file.
Updates the hono peer dependency range to accept Hono v5 prereleases to prevent ERESOLVE errors. Also ensures internal types remain private in bundled type definitions.
Updates the hono peer dependency range to allow Hono v5 prereleases and avoid ERESOLVE install errors. Internal types are also kept private in the bundled type definitions.
Expands the hono peer dependency range to accept Hono v5 prereleases and resolves ERESOLVE errors. Additionally keeps internal types private within bundled type definitions.
Includes Docker build adjustments, such as increasing the Node heap size for the single-image front build, and several CI workflow improvements.
| 4d ago |
| 12d |
| ★ 10,672no earlier snapshot yet |
| honojs/hono | 30 | 1d ago | 3.2d | ★ 32,489no earlier snapshot yet |
| juspay/hyperswitch | 2 | 13d ago | 34.9d | ★ 45,309no earlier snapshot yet |
| temporalio/temporal | 4 | 3d ago | 5.9d | ★ 23,612no earlier snapshot yet |