On October 22, 2026, OpenAI moved its Decisions API to general availability: a GPT-6 Luna-powered endpoint that returns a probability, a choice, or a score instead of text, priced at $0.10 per million input tokens with no output tokens charged. For teams orchestrating agents, it is the first time a typed verdict gets cheap enough to live in the hot path.
On 14 October 2026, GitHub published the engineering story behind its reworked stargazers endpoint, which took 2,511 requests to rebuild react/react’s curve and was being harvested for spam. The lesson transfers to any API: a smaller response doesn’t make a cheaper query — the order of work in the database does.
Starting October 19, 2026, GitLab.com caps requests by subscription — 60 per hour per anonymous IP, 5,000/hour on Free, up to 25,000/hour on Ultimate — to absorb load from AI agents and automation. Authenticate your scripts and agents, and check your peaks before the October 7 and 14 brownout windows.
On September 2, 2026, Alibaba shipped Qwen3.8-Max-0902, a post-trained snapshot of Qwen3.8-Max that climbs to 1,691 on CodeArena without touching its 2.4-trillion-parameter base. Teams evaluating coding agents now have to track a cadence of dated snapshots rather than model launches.
In early August 2026, Trakt began requiring a $4.99/month VIP subscription to create API applications, and existing keys are vanishing. The self-hosted ecosystem that syncs Plex, Jellyfin and Kodi with Trakt is discovering its dependence on a third-party service that is no longer free.
99% of organizations experienced an API security incident in 2025. APIs now account for 43% of actively exploited vulnerabilities in CISA’s KEV catalog. Your API gateway is your new firewall — and you probably haven’t configured it.
