Updated Friday, November 6, 2026

Deadlines

Every date the briefing has flagged, merged across briefings. Closed ones stay here for 30 days.

This week · 7

Today

Fri Nov 6

CISA KEV federal patch deadline for WordPress core CVE-2026-119977 (RCE during core upgrades)

Anyone running WordPress older than 7.1.4

Update to WordPress 7.1.4

BleepingComputer ↗First flagged Nov 4

3days

Mon Nov 9

SEC roundtable on machine-understandable data and "Super Intelligence"

Public-company and data teams

Watch for stream

SEC ↗First flagged Oct 26

3days

Mon Nov 9

GitHub Actions pull_request_target brownout, 16:00-18:00 UTC: blocked runs fail in public repos

Public repos with pull_request_target workflows

Check Insights for runs the default rule would block; allow the trigger in an Actions event policy or fix the workflow

GitHub ↗First flagged Nov 3

4days

Tue Nov 10

CISA KEV federal patch deadline for Brotli CVE-2026-111497 (Node2Shell)

Anyone running Node.js, .NET, Bun, Envoy or other servers with a vulnerable Brotli decoder

Patch Brotli-dependent runtimes and proxies; confirm transitive copies

BleepingComputer ↗First flagged Oct 28

5days

Wed Nov 11

Node.js security releases for 26.x, 24.x and 22.x (highest severity HIGH)

Anyone running Node.js 22, 24 or 26 in production

Reserve a patch window and upgrade the day the release lands

Node.js ↗First flagged Nov 4

6days

Thu Nov 12

Rust 1.100 stabilizes Cargo minimum publish age (dependency cooldown, off by default; Socket, Oct 20)

Rust teams

Set a cooldown in Cargo config

Socket ↗First flagged Oct 29

6days

~Thu Nov 12

OpenAI's proposed end of model access in Cursor (official date not confirmed; Cursor may end it sooner)

Cursor users on OpenAI models

Check Cursor terms

OpenAI ↗First flagged Oct 29

This month · 7

10days

Mon Nov 16

GitHub Copilot retires Claude Opus 4.8, Claude Opus 5, GPT-5.6 Terra (replacements Opus 5.5, GPT-6.1 Sol / GPT-6 Luna)

Copilot users with pinned models

Repoint model pins

GitHub ↗First flagged Nov 2

10days

Mon Nov 16

GitHub Actions pull_request_target brownout, 16:00-18:00 UTC: blocked runs fail in public repos

Public repos with pull_request_target workflows

Check Insights for runs the default rule would block; allow the trigger in an Actions event policy or fix the workflow

GitHub ↗First flagged Nov 3

11days

Tue Nov 17

Gemini API shutdown (earliest possible): gemini-3.1-flash-tts-preview, gemini-3.1-flash-live-preview, gemini-2.5-flash-native-audio-preview-12-2025, gemini-2.5-flash/pro TTS previews

TTS and Live API callers

Move to gemini-3.8-live or gemini-3.8-flash-tts

Gemini API ↗First flagged Nov 3

11days

Tue Nov 17

Google Gemini Gems become Skills

Gems users

Review Gems

Google ↗First flagged Nov 3

13days

~Thu Nov 19

PostgreSQL 19 expected release (delayed, 8-10 features moved to 20; date not confirmed)

Postgres upgrade planners

Re-plan upgrade window

The Register ↗First flagged Nov 5

14days

Fri Nov 20

Meta updated commercial terms take effect (moved from Oct 30 after publisher objections; crawling clause now limited to advertising and business products)

Anyone with a Meta business/ads account tied to their domains

Re-read live terms; check robots.txt and staging logins

TechCrunch ↗First flagged Nov 6

14days

Fri Nov 20

Conductor Cloud shuts down after Meta acquisition (desktop app stops receiving new models in early 2027)

Teams running parallel coding agents on Conductor

Export work and move to another agent orchestrator

The Decoder ↗First flagged Nov 6

Closed · 18

2days ago

Wed Nov 4

Apple Intelligence beta with Alibaba Qwen starts in mainland China (iOS 27.3 wide release in December)

iOS developers and teams shipping in China

Test Siri, Writing Tools and Visual Intelligence flows against the Qwen-backed beta

TechNode ↗First flagged Nov 2

2days ago

Wed Nov 4

Moonshot promises Kimi K3.1 Pro full open weights (The Decoder, Oct 23)

Self-hosters of open models

Line up an eval; read the license

The Decoder ↗First flagged Oct 27

2days ago

Wed Nov 4

Moonshot promises Kimi K3.1 Pro full open weights (The Decoder, Oct 23)

Self-hosters of open models

Line up an eval; read the license

The Decoder ↗First flagged Oct 24

5days ago

Sun Nov 1

CISA KEV federal patch deadline for Cisco ASA/FTD CVE-2026-76418 (exploited reload DoS)

Anyone running Cisco ASA or FTD firewalls

Apply the Cisco fixed release

The Hacker News ↗First flagged Oct 30

5days ago

Sun Nov 1

CISA KEV federal patch deadline for GitLab CVE-2026-97229 (CVSS 10.0 RCE)

Anyone running self-managed GitLab CE/EE

Upgrade GitLab and Ruby/Onigmo; rebuild any instance that was probed

The Hacker News ↗First flagged Oct 30

6days ago

Sat Oct 31

DeepSeek free Search/Fetch tool promotion ends 4:00 PM UTC

DeepSeek API users

Budget $0.75 per 1K calls after

DeepSeek ↗First flagged Oct 25

6days ago

Sat Oct 31

Mistral retires zai-glm-5-2 (changelog Oct 22)

Callers of that model

Move to zai-glm-5-3, same price

Mistral ↗First flagged Oct 23

6days ago

Sat Oct 31

OpenAI Evals goes read-only (Evals platform, Agent Builder and v1/prompts shut down Nov 30)

Teams with saved evals

Export evals before Oct 31

OpenAI ↗First flagged Oct 17

7days ago

Fri Oct 30

Meta's revised commercial terms take effect

Meta business and ads account holders

Re-read the live terms; check robots.txt and staging logins

First flagged Oct 17

14days ago

Fri Oct 23

MiniMax M3.1 Flash open weights expected (SGLang added day-0 support Oct 22; license not stated)

Self-hosters of open models

Line up an eval

SGLang ↗First flagged Oct 20

14days ago

Fri Oct 23

Gemini API deep-research-pro-preview-12-2025 agent shuts down

Deep Research agent users

Change agent in interactions.create

Gemini API ↗First flagged Oct 15

14days ago

Thu-Fri Oct 22-23

AGNTCon + MCPCon North America

MCP and agent-protocol teams

Watch for spec and SDK news

Linux Foundation ↗First flagged Oct 15

14days ago

Fri Oct 23

OpenAI API shutdown of o1, o1-pro, o3-mini, o4-mini, gpt-4, gpt-4-turbo, gpt-4.1-nano, gpt-3.5-turbo, gpt-image-1 and matching fine-tunes

Anyone calling those models by API

Repoint per OpenAI's mapping

OpenAI ↗First flagged Oct 14

15days ago

Thu Oct 22

Gemini API shutdown of veo-3.1-generate-preview, veo-3.1-fast-generate-preview, veo-3.1-lite-generate-preview and gemini-omni-flash-preview (earliest possible date)

Veo and Omni preview callers

Move to gemini-omni-1.1-flash

First flagged Oct 19

16days ago

Wed Oct 21, 14:00 UTC

PHP out-of-cycle security release for two critical flaws

Anyone running PHP 8.2 to 8.5

Reserve a patch window; read the official advisory for fixed versions

First flagged Oct 21

18days ago

Mon Oct 19

CISA KEV due date for FortiOS CVE-2025-61624