Product Release Updates and Platform Highlights

Azure DevOps

Aug 7, 2026

Microsoft Azure DevOps July 2026: Stronger release controls and traceability

Microsoft Azure DevOps July 2026 introduces the GradleAuthenticate@0 pipeline task for authenticating Gradle builds to Azure Artifacts feeds. The update also adds guidance for pull request status checks, repository and pull request security, commit-message search, permission-performance tuning, personal access tokens, branch policies, and Azure Boards administration. Enterprise teams should use these changes to standardize release gates, reduce credential exposure, and improve auditability across delivery workflows.

DevSecOps
CI/CD
QE

Read Article

Sonatype

Aug 6, 2026

Sonatype Nexus Repository 95: Broader package control and measurable supply-chain protection

Sonatype Nexus Repository 95 adds hosted and group repositories for Composer, plus Chocolatey registry and Microsoft Symbol Server support through NuGet repositories. The release also extends cleanup policies across major package formats, improves private PyPI and Hugging Face client compatibility, supports temporary AWS credentials for ECR proxies, and introduces Firewall Success Metrics reporting. Enterprise teams should assess documented upgrade changes affecting Ansible Galaxy responses, content selectors, search indexes, and Preview UI customizations before deployment.

Sonatype
Nexus
SDLC

Read Article

Tosca Cloud

Aug 6, 2026

Tricentis Tosca Cloud August 2026: Faster governed documentation decisions and inventory cleanup

Tricentis Tosca Cloud August 2026 introduces the Tricentis Product Expert in product documentation, providing AI summaries and answers grounded across Tricentis manuals. The release also allows contributor-role users to delete assets and folders in Organize your inventory. Enterprise teams should define deletion authority, review role assignments, and validate the staged rollout in each environment.

Tricentis
Test Automaton
QA

Read Article

Semgrep

Aug 5, 2026

Semgrep July 2026: Reviewable AI Detection and Tighter Supply Chain Controls

Semgrep’s July 2026 update adds Agentic Workflows in public beta, combining program analysis, deterministic tools, and constrained AI reasoning to generate reviewable security findings. Supply Chain customers can block dependencies only when all associated licenses are prohibited and receive default incident-policy support with Slack notifications based on recent SBOM exposure. The update also strengthens operational governance through policy-tag warnings, clearer webhook failures, and fixes to manual triage and integration behavior.

AppSec
DevSecOps

Read Article

TestRail

Aug 5, 2026

TestRail 10.6.2: Restore reliable custom-field configuration changes

TestRail 10.6.2 fixes an issue in TestRail 10.6.1.1001 affecting custom fields when their configuration is edited. The Cloud hotfix helps QA and release teams make controlled changes to test metadata with greater confidence. It is a targeted maintenance release rather than a broad feature expansion.

Test Management
Enterprise Testing
QA

Read Article

Sonatype

Aug 4, 2026

Sonatype IQ Server 205.3: Reduce LDAP Disruption and SBOM Storage Risk

Sonatype IQ Server 205.3, released July 31, 2026, improves reliability during LDAP disruptions and sustained failed-login attempts by preventing excessive CPU consumption. The release also ensures SBOM scan artifacts, policy reports, and file descriptors are cleaned up after deletion, reducing avoidable storage consumption. It addresses CVE-2026-54291 affecting PostgreSQL connection security and CVE-2026-49844 affecting Log4j JSON output.

SBOM
Open Source Security
AI

Read Article

Checkmarx

Aug 4, 2026

Checkmarx CxONE 3.62: stronger audit evidence and faster risk prioritization

Checkmarx CxONE 3.62 adds detailed Audit Trail records for SAST finding triage and Analytics and Reporting activity, improving compliance evidence and forensic traceability. It introduces Risk Orchestration to consolidate results across security engines, plus generally available AI Triage & Remediation for supported SAST and SCA workflows. The release also adds AI Supply Chain scan controls, CLI and CI/CD support, AI-BOM export, and more granular SCA policy options for net-new production dependency risk.

AppSec
DevSecOps
SAST
DAST

Perforce

Aug 4, 2026

Perforce BlazeMeter 3.2: auditable virtual-service changes and faster test operations

Perforce BlazeMeter 3.2 strengthens test governance by adding version history, side-by-side comparison, and restore capability for virtual service transactions. It extends AI Log Analysis to multi-tests, increases performance-test file uploads to 100 MB, and lets ShiftLeft Converter users select output format and destination project. These changes help enterprise teams investigate test issues faster while keeping configuration changes attributable and recoverable.

BlazeMeter
Test Automaton
DevSecOps

Read Article

Perforce

Aug 3, 2026

Perforce Perfecto 26.8: Make AI Test Decisions Auditable

Perforce Perfecto 26.8 improves governance for AI-assisted testing by attaching the global knowledge used in AI test flows to execution reports. The release adds explicit API rate-limit responses, updates DevTunnel certificates for affected clouds, and supports Quantum 3.2.5/3.2.6, Playwright 1.60.0, current iOS and iPadOS versions, and new Chrome, Firefox, and Edge versions. Teams using iOS 27 simulators must explicitly set Appium 3.3, while virtual-device apps built only for Intel require ARM64 builds on iOS 26.4 or later.

Perforce
Perfecto
Enterprise Test Management
Testing

Merito Product Release Updates