GitHub Apps and OAuth Apps Get Refresh Tokens: How to Migrate Off Long-Lived Access Tokens If you've built an OAuth App or a GitHub App that authenticates on behalf of users, there's a decent chance it's still handing out a gho_ or ghu_ token that never expires. On August 14, 2026, GitHub shipped token rotation for …

Terraform AzureRM Provider 5.0: Breaking Changes and Upgrade Guide HashiCorp shipped AzureRM provider 5.0 on July 27, 2026 (a 5.0.1 patch followed shortly after), and it's not a routine version bump. If your Terraform configs have been running fine against 4.x for months and you run terraform init -upgrade without …

Web Search on Amazon Bedrock: Grounding OpenAI Models Without Building a RAG Pipeline AWS shipped Web Search on Amazon Bedrock this month — a built-in tool that lets supported OpenAI models pull current information from the web mid-request and cite their sources, without you standing up a retrieval pipeline, a search …

CloudWatch Managed Prometheus Collectors: Setup Guide for EC2 and ECS If you've been running your own OpenTelemetry Collector just to get Prometheus metrics into CloudWatch, AWS shipped the fix in late July 2026: managed Prometheus collectors. You hand CloudWatch a scrape config and a VPC connection, and it provisions, …

GitHub Copilot Added Kimi K3: How to Enable It (and Why GitHub Paused the Rollout on Day One) On August 6, 2026, GitHub shipped Kimi K3 — Moonshot AI's open-weight model — as a selectable model inside GitHub Copilot. Then, the same day, GitHub added an editor's note to its own changelog post saying it had paused the …

Terraform MCP Server Had a CVSS 10.0 Bug: Patch to 1.2.0 Now If you've stood up HashiCorp's terraform-mcp-server so an AI agent can query the Terraform Registry or talk to your workspaces, go check its version right now. HashiCorp Security Advisory HCSEC-2026-23, published July 28, 2026, covers three vulnerabilities in …

AWS App Mesh Is Being Discontinued September 30, 2026: What to Migrate To (and What Breaks) On September 30, 2026, AWS discontinues AWS App Mesh entirely. This isn't a maintenance-mode freeze like Bedrock Agents Classic — after that date you lose console access and API access to your App Mesh resources completely. If …

Docker Hub OIDC for GitHub Actions: Retire Your Stored Access Tokens If your CI pipeline pushes images to Docker Hub, there's a good chance a Personal Access Token (PAT) or Organization Access Token (OAT) is sitting in your GitHub repository secrets right now — valid for months, scoped broader than you'd like, and one …

GitHub Actions Now Holds Suspicious Workflow Runs Before They Touch Your Secrets On July 28, 2026, GitHub started automatically holding workflow runs it identifies as potentially malicious before they execute. If a run gets flagged, it sits in a pending state until a repository collaborator with write access reviews …

GitHub Models Retires July 30, 2026: How to Migrate Your Code and CI Workflows If any of your code, scripts, or GitHub Actions workflows call GitHub Models, they stop working on July 30, 2026. GitHub confirmed the playground, the model catalog, the inference API, and bring-your-own-key (BYOK) support are all being …