This is the news from Sunday 4 October. Read the latest news
Daily news
Google’s main content rule, Cloudflare for all and GPT-6 prices
Today in 30 seconds
- Google says main content is the key to page quality
- Cloudflare brings Enterprise tools to Free, Pro and Business plans
- Cloudflare Traces follows each request from edge to origin
- Cloudflare launches a Web Search API for AI agents
- Apple will tighten Mac Full Disk Access because of AI agents
- OpenAI’s GPT-6 guide puts all its API prices in one place
- GitLab fixes a critical flaw in its self-hosted AI Gateway
- Shopify lets you test discounts on part of your traffic
- WordPress.com’s AI agent can now install plugins from chat
- Google Ads will pull promotions from your website from 12 October
Good morning, and happy Sunday. Google has spelled out what it means by good content, and Cloudflare had a very generous Friday. Nothing critical needs patching on your laptop or phone today, so enjoy your coffee.
Google says main content is the key to page quality
Google updated its help page on creating helpful, people-first content on 2 October. It now says “one of the most critical factors for assessing page quality is the quality of the main content.” There was no formal announcement.
Google defines main content widely. It includes your text, images, audio and video, tools like calculators, user reviews, tabbed or expandable sections, and titles and headings. The page also explains that search quality raters judge it on four things: effort, originality, talent or skill, and accuracy. It calls mass AI text “without manual oversight” little to no effort.
Why it matters Ads, menus and sidebars don’t earn you rankings. The part of the page that answers the question does. Check your top pages and ask if the main content shows real effort.
This lines up with Google’s fact-check message from yesterday. If you want a plan, start with my five SEO fixes you can start this week.
Cloudflare brings Enterprise tools to Free, Pro and Business plans
Cloudflare’s “Enterprise for All” update on 2 October moves several big features to every plan. Logpush now works on Free, Pro and Business with pay-as-you-go pricing. Custom dashboards, Terraform and resource tagging are on all tiers too. Role-based access now covers nearly every product.
Workers limits also went up a lot. Startup time is now 1 second, up from 400 ms. WebSocket messages can be 32 MiB, up from 1 MiB. One request can make up to 1 million subrequests, up from 1,000. Cloudflare also promises “no new Enterprise-only features.”
Why it matters Small sites now get tools that used to need a big contract. Bigger Workers limits also mean fewer odd errors on heavy apps.
Cloudflare Traces follows each request from edge to origin
Cloudflare announced eight updates to logs, analytics and alerts on 2 October. The headline is Cloudflare Traces, now in open beta. It follows a request through security rules, cache, Workers and your origin. It needs no setup and exports with OTLP.
All plans also get 30 days of domain analytics, custom dashboards and custom alerts with webhooks. New volume pricing starts on 1 December 2026. The Free plan includes 0.5 GB of logs a day with 7 days of storage. Paid plans include 50 GB, then US$0.25 per GB.
Why it matters When a page is slow, Traces can show you which step is to blame. Check the new pricing before December if you send a lot of logs.
Cloudflare launches a Web Search API for AI agents
Cloudflare released a Web Search API in AI Gateway on 2 October. It lets AI agents search the live web and base their answers on fresh results. Launch providers are Ceramic.ai, Exa and Linkup. It is generally available now.
You call it as a REST API or through a one-line Workers binding. It uses your AI Gateway credits at each provider’s list price, with no Cloudflare markup. Providers must respect robots.txt and give a source link for every result.
Why it matters More AI tools will read the live web through providers that follow your robots.txt. Your crawl rules matter more than ever. My guide on how AI search finds your site covers the basics.
Apple will tighten Mac Full Disk Access because of AI agents
Apple said on 2 October that it will make Full Disk Access on macOS harder to grant. Apps will need “very explicit user action” before they can read files, messages, mail and browsing history. Apple gave no macOS version or date.
Apple warned that as AI agents grow more capable, “the risks associated with this level of access will grow substantially”. The move follows recent worries about AI agents reading private data on Macs.
Why it matters If you build or use AI agent apps on a Mac, expect more permission prompts. I think that’s a good trade. Check which apps already have Full Disk Access in System Settings, under Privacy & Security.
OpenAI’s GPT-6 guide puts all its API prices in one place
OpenAI published “A practical guide to building with GPT-6” on 2 October. It lists current API prices per million tokens. GPT-6.1 Sol costs US$2 for input and US$10 for output. GPT-6 Luna costs US$0.10 and US$0.50. GPT-6 Astra costs US$10 and US$50.
Cached input costs up to 95% less. The guide also covers steering a model mid-turn, async tool calls, Sol handing work to subagents in beta, and computer use.
Why it matters It is not a launch, but it is a handy price sheet. Use Luna for routine jobs like tagging or short summaries, and save Sol for the hard parts.
GitLab fixes a critical flaw in its self-hosted AI Gateway
GitLab patched CVE-2026-90970, rated CVSS 9.9, in its AI Gateway on 2 October. A logged-in user with Duo Agent Platform access can escape a sandbox with a crafted flow setting. They can then run any command on the gateway.
Affected versions run from 18.1.6 to 19.4.0. The fixed versions are 19.2.4, 19.3.2 and 19.4.1. Gateways hosted by GitLab are already safe. No attacks have been reported.
Why it matters If you run your own AI Gateway, update the Docker image today. If you use GitLab.com, you don’t need to do anything.
Shopify lets you test discounts on part of your traffic
Shopify added discounts to Rollouts on 2 October. You can launch an offer to part of your store traffic, then expand it. You can also test a new offer against an old one using conversion data.
You can schedule a discount to go live with theme and checkout changes in one rollout. It works in the New Admin. The same day, Shopify added Arabic, Urdu and Hebrew to the admin, checkout and Horizon themes.
Why it matters You no longer have to guess if 15% off beats free shipping. Test it on a slice of shoppers first, then roll out the winner.
WordPress.com’s AI agent can now install plugins from chat
The WordPress.com changelog on 2 October says the WordPress Agent can now install, activate and update plugins from chat. A WordPress.com plugin is also in Cursor’s marketplace.
Personal and Premium plans now get PHP error logs and web server logs in the Hosting Dashboard. You can also buy .es domains now.
Why it matters Error logs on cheaper plans make fixing a broken site much faster. For the AI agent, my advice is to check what it installs. Every plugin is code you now have to keep updated.
Google Ads will pull promotions from your website from 12 October
From 12 October 2026, Google Ads will scan advertisers’ websites for valid offers. It will turn them into promotion assets on its own. This covers Search and Performance Max campaigns that have linked location assets and no promotion assets yet.
Advertisers are opted in by default. To opt out, open the account-level automated asset settings. Then turn off “Automated Promotions.”
Why it matters An old sale banner on your site could end up in your ads. Clean up expired offers this week, or opt out.
Quick hits
- No new critical fixes came out for browsers, Apple, Windows or WordPress core in the last 36 hours. Chrome Releases
- Fortinet FortiMail CVE-2026-104286 still has no patch, so keep IBE turned off. SecurityWeek
- Dell Container Storage Modules has six critical flaws, so update to 1.18.0 and rotate JWT secrets. The Hacker News
- Fake Zoom installers for Mac carry a backdoor, so only download Zoom from zoom.us or the App Store. SecurityWeek
- Cloudflare dashboard cache purges failed for 11 minutes on 2 October, but API purges worked. Cloudflare Status
- Protected Quick Tunnels put a free email PIN in front of a cloudflared tunnel, no account needed. Cloudflare
- Google AI Overviews links with st_source=ai_overview come from a Chrome extension, not Google. Search Engine Roundtable
- YouTube will cut the reach of unoriginal Shorts that just re-upload other people’s clips. 9to5Google
- GitHub Copilot retired Claude Opus 4.7 and older Gemini Flash models, so check your replacements. GitHub
- WordPress Presence API 0.14.0 shows an “Agent” badge when AI agents save posts. Make WordPress
You're all caught up
That's today's web, tech and SEO news. The next edition lands tomorrow morning, around 3 am Melbourne time.That was the news from Sunday 4 October. A newer edition is waiting for you.
Read the latest news → ← Saturday's news Every edition
Get Riksi News by email
One short email each morning with every headline. Free, and you can leave any time.
That’s you caught up. If Google’s main content message has you worried about your pages, I can review them with you. See my SEO services. Enjoy the rest of your weekend.
Opens in a new tab
Comments
No comments yet. Questions, fixes and better ways are all welcome.