Agents get real jobs and real guardrails: Double, Chromatic and Ably ship the same week

Apache Airflow shipped stable 1.0 SDKs for Java, Go and TypeScript on November 13. Java teams can now write whole Dags natively, including task groups, branching, triggers of other Dags and access to Variables, and publish them through Maven.

Smart Turn Detection is now generally available in Conversation Relay. A Twilio-built model reads what the caller is saying in real time to decide when they have finished, replacing fixed silence timers that made AI agents interrupt mid-sentence.

Ably shipped AI Transport 1.0, with adaptors that publish Vercel AI SDK, OpenAI Responses and AG-UI output onto a normal Ably channel. A drop-in useChat transport lets a reloaded tab or second device resume a streaming answer mid-response, and agents can join conversations between people on the same channel.

Squarespace now holds merchants' earnings instead of only passing them through. Balance gives eligible US Squarespace Payments users same-day access to sales, rewards on money left in the account and a spending card, and the same release adds SMS Campaigns with consent and opt-out handled inside Squarespace.

Double's Chrome extension can now record an accountant doing a task and turn the recording into an agent that repeats it, using Double's own tools for steps inside Double. The same release brings bank feeds for US Xero clients, per-user caps on AI credits and Always, Once or Deny permissions for agent actions.

LobeHub agents now have an address and an inbox. Mail can wake an agent, the agent works only inside its own mailbox, and it posts its conclusion back to the owner's Channel, while per-agent rules decide which messages it answers at all.

Prowler 5.49 answers the first question after a vulnerability disclosure: which machines run the affected image. Signatures describe publishers, name patterns and fixed versions, three new checks match them on AWS, Azure and Google Cloud, and Amazon Inspector clears hosts already patched. Prowler Cloud ships its own threat catalog and reports each threat as one Exploitability issue per account.

HAProxy Kubernetes Ingress Controller 3.4.0 moves to HAProxy 3.4 and removes two configuration paths at once: Gateway API support and config snippet annotations. Backend servers are now added and removed through HAProxy's runtime API, and a custom resource HAProxy rejects is set aside and reported as a metric rather than breaking the whole config.

Hatz 2.0 replaces three Auto tiers with one agent that lays out its steps, runs parts of a task at once, works inside vendor portals through a watched browser and turns a finished chat into a scheduled automation. Keys sit in a Vault the model never sees, and chats can keep working for three hours with Smart or Manual approvals.

Claude can now join a Google Meet call as a visible participant on Team and Enterprise plans. It takes notes, answers questions when asked and produces docs, whiteboards and slides before the call ends, in beta.

Rivet launched OpenOrange, which takes an unchanged Cloudflare Workers project and runs it on AWS, Google Cloud, Azure or your own servers. The announcement is one line, so limits on bindings and Durable Objects support are not yet stated.

Currents Sessions lets an agent save the browser recording or the files from any task and get back a single link. The link opens a page for people and a Markdown version that another agent can read, ready to drop into Slack, Linear or a pull request.

Zellij 0.46.0 can run as a standalone desktop terminal with `zellij terminal`, on Linux, macOS and Windows. Its sessions are the same ones the multiplexer uses, so a session opened in the window can be attached from any other terminal.

Render Sandboxes enter public beta: isolated, throwaway compute environments meant for running untrusted code, such as apps and scripts written by AI agents. An app host now offers a place to try out generated code before anyone deploys it.

Kolleno now matches incoming payments to invoices automatically and has opened early access to cash flow forecasting. AR teams get reconciliation and a forward cash view in the same tool they use to chase invoices.

Stores that process payments through someone other than Shopify can now appear on the Shop app and Shop.com and receive its referral traffic. Shopify also reset eligibility rules for every store, so some current listings may drop until they qualify.

Honeycomb made AI Ecosystem generally available: one view of every AI agent a team runs, showing failure rate, token use, latency and estimated LLM spend by agent or model. Click a number and you land on the conversation that produced it, with auto-generated notes on retry loops and slow steps.

Craft CMS 6.0 beta 1 puts an AI chat beside every control panel screen. Ask AI acts through Craft's MCP tools with the signed-in user's permissions, works on the entry being edited, and proposes changes that editors review and apply; any tool that changes data needs approval. The same beta adds a Ctrl/Cmd+K command palette and a side-by-side compare screen for drafts, revisions and sites.

LNbits 1.7.0 is labeled an urgent security update, and every operator is told to upgrade now. The same release adds TOTP two-factor login, on-chain wallets, BOLT12 offer payments, NIP-17 support and a job scheduler.

Hex 4.0 entered public beta with projects defined fully in code, building from outside Hex, observability across agents, a new UI for reviewing work and a faster execution engine. It is the product's first major-version rewrite in this changelog.