Canonical, dated answers for coding agents — every entry states when it was true and which versions it applies to, so your context never goes stale.
High severity. Affects pydantic-ai >= 2.10.0, < 2.53.0. Upgrade to 2.53.0 or later.
Medium severity. Affects pydantic-ai >= 1.77.0, < 1.107.7; pydantic-ai >= 2.0.0b1, < 2.52.0. Upgrade to 1.107.7 / 2.52.0 or later.
Medium severity. Affects pydantic-ai >= 1.34.0, < 1.107.5; pydantic-ai >= 2.0.0b1, < 2.30.0. Upgrade to 1.107.5 / 2.30.0 or later.
High severity. Affects pydantic-ai >= 1.34.0, < 1.107.4; pydantic-ai >= 2.0.0b1, < 2.28.0. Upgrade to 1.107.4 / 2.28.0 or later.
Low severity. Affects pydantic-ai >= 0.3.4, < 1.107.4; pydantic-ai >= 2.0.0b1, < 2.27.1. Upgrade to 1.107.4 / 2.27.1 or later.
Medium severity. Affects pydantic-ai >= 1.77.0, < 1.107.2; pydantic-ai >= 2.0.0b1, <= 2.23.0. Upgrade to 1.107.2 / 2.24.0 or later.
Medium severity. Affects pydantic-ai >= 1.77.0, < 1.107.6; pydantic-ai >= 2.0.0b1, < 2.44.0. Upgrade to 1.107.6 / 2.44.0 or later.
Low severity. Affects pydantic-ai >= 0.3.4, < 1.107.6; pydantic-ai >= 2.0.0b1, < 2.44.0. Upgrade to 1.107.6 / 2.44.0 or later.
Medium severity. Affects pydantic-ai >= 1.56.0, < 1.107.6; pydantic-ai >= 2.0.0b1, < 2.44.0. Upgrade to 1.107.6 / 2.44.0 or later.
Electron 44 (2026-08-25, Chromium 152, Node 24.18.1) is the latest stable; 44/43/42 are supported. It drops macOS 12 and 32-bit builds and removes renderer access to `clipboard`. Since 42 the npm package no longer downloads the binary in postinstall.
SQLAlchemy 2.1.0 was released 2026-09-24 (2.1.4 on 2026-10-07). It needs Python 3.11+, requires sqlalchemy[asyncio] for async use, changes Session autoflush and filter_by() semantics, and changes Select/Row typing.
Mongoose 9.0.0 (2025-11-21) removes callback-style pre middleware, requires updatePipeline for pipeline updates, returns bson UUIDs, throws on findOne(null), and uses MongoDB driver v7. Current release is 9.11.1 (2026-10-07); 8.x is still patched.
The `shadcn` CLI is at 4.21.4 (2026-10-07). The current setup is Tailwind v4 + React 19 components without forwardRef, `tw-animate-css`, sonner instead of toast, a single `radix-ui` package or Base UI, and `cn` imported from the `cn` package (since 4.21.0, Sept 2026).
High severity. Affects @modelcontextprotocol/sdk >= 1.12.0, < 1.31.0; @modelcontextprotocol/client >= 2.0.0, < 2.2.0. Upgrade to 1.31.0 / 2.2.0 or later.
Expo SDK 57 (RN 0.86, React 19.2) is the stable SDK. SDK 58 (RN 0.88) is in beta. SDK 55 removed the Legacy Architecture and expo-av, and SDK 56 set min iOS 16.4, made Hermes v1 the default and decoupled expo-router from React Navigation.
Laravel 13 (2026-03-17, PHP 8.3+, now v13.35) adds an AI SDK, vector queries, JSON:API resources and attributes. CSRF middleware is renamed PreventRequestForgery and cache object unserialization is off by default.
SvelteKit 3.0.0 shipped 2026-10-01 (3.0.1 on 10-06): Node 22.17+, Vite 8, Svelte 5.57.1+, TS 6. Config moves from `svelte.config.js` into the `sveltekit()` Vite plugin, `$lib` becomes `#lib`, `$app/stores` is removed. Run `npx sv migrate sveltekit-3`.
graphql 17.0.0 shipped 2026-06-15 (Node 22+, opt-in dev mode, positional GraphQLError removed). Apollo Server 5 still peers on graphql ^16.11.0 and AS4 is EOL since 2026-01-26. Apollo Client 4 needs rxjs and moved hooks to @apollo/client/react.