This is the news from Sunday 8 November. Read the latest news
Daily news
WordPress 7.1.4 update gap, Shopify bulk access and Antigravity
Today in 30 seconds
- WordPress 7.1.4 fix leaves a short gap while it installs
- Shopify apps must now switch on bulk operations before using them
- OpenAI is reportedly building a “claim your business” tool for ChatGPT
- Google Maps adds a Message button for local businesses
- Google Antigravity 2.29 adds agents that keep working in the cloud
- Meta’s Muse can now build small apps for you, called Spaces
- Anthropic explains how Claude agents “dream” to remember better
- GitHub’s @GitHub in Slack and Teams is now generally available
- Vercel Tracing is now generally available on all plans
- Apple says 100,000 apps are now built for the iPhone Duo
Good morning, and happy Sunday. It was a quiet Friday in tech, so today is about small changes with real effects. There is one WordPress update tip you should read first, then lots of new tools to try.
WordPress 7.1.4 fix leaves a short gap while it installs
The WordPress core flaw CVE-2026-119977 is still under attack, and it is fixed in WordPress 7.1.4. Now a researcher at Picus Security has found a catch. The update that installs the fix still runs the old updater code. So a site can be open for a few seconds during that one update.
The flaw is a race condition in the updater’s staging folder, wp-content/upgrade. It affects WordPress 4.7 to 7.1.3. Fixes exist for every branch back to 4.7. Later updates are not affected.
Why it matters Before you update, block web access to wp-content/upgrade in your Nginx or Apache config, and check that it returns 403. Don’t put an .htaccess file inside that folder, because the old updater clears it first. WP-CLI runs the same updater, so it does not avoid the gap.
I would block the folder first and update straight after. Then look for admin accounts and plugins nobody added, and stray PHP files in that folder. My earlier news on this flaw has the background.
Shopify apps must now switch on bulk operations before using them
Since 6 November, Shopify apps need permission to run bulk operations in the GraphQL Admin API. Bulk queries need bulk query access, and bulk mutations need bulk mutation access. Without it, the call returns an access denied error.
It covers public apps and custom apps built by partners, in every API version. Apps already using bulk operations keep access. Apps that have not used one in the last 31 days lose it. To turn it on, open the app in the Partner Dashboard and go to API access requests.
Why it matters If your store relies on a custom app for big imports or exports, ask your developer to check this today. No new app version or reinstall is needed.
OpenAI is reportedly building a “claim your business” tool for ChatGPT
OpenAI is reportedly working on a Business Hub for ChatGPT. Businesses would verify they own a brand, for example by connecting a Shopify store. They would then see how often ChatGPT mentions them, with daily impressions and clicks.
The hub would also let businesses update their product and business details. A business agent could answer customer questions using information the business controls. It would not show prompts, user data or competitors. The report comes from a LinkedIn post by Juozas Kaziukėnas, and OpenAI has not commented.
Why it matters This would be the first Search Console for ChatGPT. Until then, keep your product data clean and easy for AI crawlers to read.
If it ships, I will be first in line. My guide on how AI search finds your site covers what you can do now.
Google Maps adds a Message button for local businesses
Google has added a “Message” button next to “Call” on business listings in Maps for Android and iOS. Customers can send a WhatsApp message or a text. A new “Generate hours” tool also fills in your opening hours from plain language. Both are in select regions for now.
Google also says Workspace accounts can now connect Gemini to a Business Profile. Google’s help page still says work accounts are not supported, so expect a slow rollout. A Workspace admin must turn on Gemini first.
Why it matters A message is easier than a call for many customers. Check your Business Profile for messaging options, and make sure someone answers fast.
Google Antigravity 2.29 adds agents that keep working in the cloud
Google’s AI coding tool Antigravity has reached version 2.29 with Remote Agents. These agents run in the cloud and keep working after you close your laptop. You start one from a GitHub repo or a Google Drive folder, and you can check on it from your phone.
Remote Agents are rolling out to Google AI Pro and Ultra subscribers. The update also adds a Voice Mode built on Gemini Live, an Automations page for scheduled tasks, and faster start-up.
Why it matters Long jobs like a plugin upgrade or a test run no longer need your laptop open. Start the task at your desk and check it on the train.
I like this one. It is the feature I have wanted most from coding agents.
Meta’s Muse can now build small apps for you, called Spaces
Meta has added Spaces to its Muse agent. You describe an idea in chat, and Muse builds a topic page in its sidebar. Spaces can connect to other apps and update themselves, for example to track concert dates or price changes.
Mark Zuckerberg says he built a barbecue game, an event tracker and a home control dashboard this way. Meta also says it is rolling out improved models to Muse and Meta AI users. They are better at remembering what matters and recovering when a task goes wrong.
Why it matters “describe it and get an app” is now coming to billions of people. Simple trackers and dashboards are becoming a chat feature, not a project.
Anthropic explains how Claude agents “dream” to remember better
Anthropic has published a post on how its agents use memory. It describes “dreaming”, an offline step where Claude reviews its own session logs. It fixes mistakes, writes notes, builds wiki pages and picks what to load next time.
The numbers are big. On a memory test, Claude Opus 5.5 scored 0.838 with memory and 0.655 without. On a corpus of about 350,000 files, 128 dreaming sessions lifted answers from a wiki alone from 13% to 48% correct. This is a research post, not a new product launch.
Why it matters Agents that learn from past sessions make fewer repeat mistakes. If you use Claude Code, its auto memory already loads the first 200 lines of MEMORY.md.
GitHub’s @GitHub in Slack and Teams is now generally available
You can now tag @GitHub in Slack or Microsoft Teams to look into a bug, create an issue or open a pull request. You don’t need to leave the chat. It now works out the right repository from the message.
Teams also gets a Canvas to review plans, code changes and previews next to the chat. Issues and pull requests made this way include a note about who asked for them.
Why it matters Small fixes can go from a client’s message to a pull request in minutes. Keep code review on, so a human checks the change.
My advice: try it on one small repo before you give it to the whole team.
Vercel Tracing is now generally available on all plans
Vercel Tracing has left beta and works on every plan, at the same price. Traces now stay for 3 days on Hobby and 14 days on Pro and Enterprise. A new Traces page lets you search requests and watch them live.
New CLI commands let you search and inspect traces too. From Next.js 16.5, new projects with a Node.js function get tracing turned on after the first build. By default it traces every request. You can turn it off under Settings, then Tracing.
Why it matters When a page is slow, a trace shows which step is to blame. That beats guessing.
Apple says 100,000 apps are now built for the iPhone Duo
Apple says more than 100,000 apps are now optimised for the iPhone Duo, its foldable phone. Thousands more arrive every day. New ones include Microsoft Word, Outlook, Zoom, Etsy and Goodnotes.
Apps that are not optimised show a black bar down the side. Apple also ran more than 50 workshops in 19 cities for over 2,000 developers. The Duo starts at US$1,999 and sold out within hours.
Why it matters If your business has an app, Duo owners will notice the black bar. If you only have a website, test it on the wide inner screen too.
I think foldables will push more of us to test layouts between phone and tablet sizes.
Quick hits
- Google AI Mode asks some people “Continue with this search?”, maybe to stop bots. Search Engine Roundtable
- Cloudflare CEO Matthew Prince says some customers call AI agents “a bane” to their business. The Register
- Copilot code review settings can now be managed through GitHub’s REST and GraphQL APIs. GitHub
- Vercel CLI can make a new test project delete itself after one hour to 30 days. Vercel
- WordPress 7.2 needs testers, and the November “Month in Test” lists where to start. Make WordPress
- Shopify store credit changes can now carry a private merchant note in API 2027-01. Shopify
- Android XR glasses from Gentle Monster arrive in December, and Warby Parker pre-orders open 12 November. 9to5Google
- Underdog Woof is a 32 MB speech and music model that runs in your browser. TechCrunch
- Samsung Galaxy SmartTag 3 is on sale for US$29 with about 550 days of battery. 9to5Google
- Eufy Window Camera E10 sticks inside a window and films outside in 2.5K for US$80. Engadget
You're all caught up
That's today's web, tech and SEO news. The next edition lands tomorrow morning, around 3 am Melbourne time.That was the news from Sunday 8 November. A newer edition is waiting for you.
Read the latest news → ← Saturday's news Every edition
Get the news by email
One short email every morning. Free, and you can unsubscribe any time.
That’s you caught up. Want help with the WordPress update, or a second pair of eyes on your Shopify apps? My site updates team can do it safely. Enjoy your Sunday, and see you tomorrow.
Opens in a new tab
Comments
No comments yet. Questions, fixes and better ways are all welcome.