Release Radar Ep04 | Three Vendors Put a Stop in Front of the Save

Panaya now refuses to save an AI code fix that touches 90% of your source. Panaya ScriptBuilder asks before you save over a colleague's newer version. BlazeMeter stops 2 load engines from pulling the same test accounts out of one data file. TestRail lets an admin revoke any API token without tracking down whoever made it.

Release Radar reads through enterprise release notes every two weeks, so nobody on your team has to dig through them looking for the one line that matters. Episode 04 covers September 5 to September 22, 2026 with 8 releases across 6 vendors, plus a first look at Checkmarx Fusion, on screen, one page at a time.

Last episode these vendors handed you switches. This time they put a stop in front of the save, and nearly every one of those stops comes with a way past it. All of this impacts who on your team is allowed to click through, and what they write down when they do.

Checkmarx Fusion gets the deep segment this time, ahead of general availability expected in October. It runs a rules engine and an AI engine side by side, reconciles them before anyone sees a finding, then adds a pass from frontier models looking for flaws no rule covers. Checkmarx reports an F1 of 0.74 against about 0.20 for rules only SAST, and F1 is the number worth asking every scanner vendor for, because it can't be bought by trading precision for recall. Fusion runs in Checkmarx One only, so on premises SAST customers are waiting on this one.

Panaya TestDynamix/Seemore September 2026 carries 3 stops on one page. On the S/4 code projects, an AI suggested fix that touches 90% of the existing source or more cannot be saved until a person reviews it and cuts it down. Impact analysis projects lock against the app, email links and the API while they calculate, so the result came from 1 version of the project. And AI duplicate detection catches a repeat defect while somebody is still typing it up.

Panaya Test Automation 26.09.105 checks for a newer copy of a script at the moment you save, and gives you Reload Latest or Save Anyway. It also records the Fiori transaction code or app ID a test ran through, so SAP change analysis can point at the tests that actually cover a change.

Perforce BlazeMeter 3.5 splits CSV data across browser-test engines automatically, so each engine gets its own rows of test accounts. API monitors can run every 30 seconds on eligible paid plans, and Taurus Cloud picks up a security build for the second release running.

TestRail 10.8.0 reached early access on September 10 and the default track on September 21. OAuth arrives for the API with short lived, scoped tokens, and a new access management page lists every live token and API key on the instance with its creator, its last use and its call count.

Sonatype IQ Server 207.1 fixes embedded H2 upgrades that could stop policy evaluation and SAML sign-in broken by an oversized cookie. It also carries the one dated item in the window, the September 30, 2026 sunset of the NeuVector based Container Security. And it has the one feature this month with no stop in front of it at all, where an authenticated user accepting the AI Developer terms turns it on for the whole organization.

Also covered: Rapise 9.1 bringing AI Translator and MCP Chat into Inflectra's automation tool, OpenText Fortify SAST 26.4, where the documentation catalog is ahead of the release note listing. And OpenText EPE 26.1, which adds an AI usage report across the performance engineering products and lets its MCP server build reports and manage test sets.

Every release covered in this episode is written up in full under product release updates, linked by vendor in the video description.

Somebody on your team has to decide who gets to click past the warning, and what the evidence looks like when they do. If that is the problem you are working on, that is the work we do. Book a conversation HERE.

Merito is a Value-Added Partner delivering AI-powered, secure, efficient and lasting enterprise solutions in AppSec, Quality, and DevSecOps.

New episode on the first and third Tuesday.