Sandbox SDK 1.0 adds direct Durable Object control of containers
The release lets developers manage container startup and shutdown, run commands, and save sandbox snapshots.
Guth Labs News · page 3
UTC
Repository administrators can choose runner types, labels and groups for Dependabot updates in eligible repositories.
The preview lets external systems supply read-only repository context that can feed GitHub’s existing views, filters and ruleset targeting.
The feature checks passwords against Have I Been Pwned and lets teams choose whether to reject matches or block sign-ins.

The approach makes a past database state queryable by creating a branch, rather than rebuilding a database from a snapshot first.
Artificial Analysis says Sonnet 5.5 reaches near-Opus performance at maximum effort, with the highest output-token use it has measured.
PostgreSQL 19 Beta 4 is available for download, and the project is asking users to test it with typical application workloads.
OpenAI has not said what will launch, but Altman and an OpenAI developer describe an event packed with work pulled forward by six months.
The new counter and termination-reason gauge replace a deprecated restart metric that could misreport restart rates.
Matt von Hippel’s guest post describes an AI challenge in theoretical physics and explains why the N=4 super Yang-Mills target is demanding.
As assistant and agent apps take on scheduled work, Apple's developer documentation sets a hard limit: background tasks on iOS and iPadOS run when the system chooses, not at a requested clock time. An app that promises otherwise is describing something the platform does not guarantee.
OpenAI said it has configured its GPT-6 Astra model for legal work, pairing it with a search index over U.S. case law, statutes and regulations. Selected law firms get access first through a trusted-access program, with an API version promised later.
Mistral and Mozilla announced a partnership on Sept. 16 under which Mistral models will help run Smart Window, the AI assistant Firefox is testing in beta. Mozilla said Mistral Small 4 is being added for users in the U.S. and Canada, while France gains beta access with French-language support.
GitHub said on Sept. 16 that AI Scan, its AI-based vulnerability check for pull requests, now runs on repositories that have not enabled CodeQL default setup. The change is in public preview for GitHub Advanced Security customers on github.com and does not cover GitHub Enterprise Server.
Forever Security researcher Gal Weizman showed that a single malicious browser extension could take over the AI assistants in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension. The technique, named BragJack, requires the extension to be installed first, and no real-world attacks are known.
Cloudflare on Sept. 15 introduced a Disallow AI Training setting that lets site owners opt out of model training without blocking the search crawlers of Google, Microsoft and Apple. The company also created an Accountable designation for crawler operators that meet four opt-out and transparency conditions.
Apple released iOS 27 on Sept. 14 with Siri AI, a rebuilt version of its voice assistant, available as an English-language beta. CNBC and MacRumors reported that users must opt in and may be put on a waitlist. The update arrived days before iPhone 18 Pro models reach stores on Sept. 18.
GitHub began a public preview on Sept. 1 that lets Copilot code review submit approvals counting toward a repository's required reviews. The option is off by default, and administrators can limit it by enterprise, organization, repository and file path.
Browse the source snapshot and run a publication-time filter on the dedicated Research page.