Cores are absorbing their own ecosystems: webpack's loaders, Atlassian's Connect, Ingress CRDs
The lead
webpack 5.109 flipped experiments.typescript, experiments.css and experiments.html to "auto". On Node 22.6+ a project now compiles TypeScript, CSS and HTML with no loader registered at all — the ts-loader, css-loader and html-webpack-plugin chain that made webpack configs notorious is simply no longer required. The same window, Atlassian published Connect's end of support with over 95% of paid app seats already on Forge, making its own runtime the only sanctioned extension path and shipping the Forge LLMs API to make that path attractive rather than merely mandatory.
An ecosystem is a list of things the core chose not to do. Several cores changed their minds at once. Kubernetes' Gateway API v1.6 promoted TCPRoute and UDPRoute to the standard channel, pulling layer-4 traffic into the API that Ingress and an assortment of vendor CRDs used to split between them. Laravel absorbed image processing, long package territory, while rerouting managed queue jobs through Laravel Cloud. CakePHP 5.4 added a dependency-injection container and a distributed Lock package. Capacitor 9's alpha cut Cordova loose. In none of these is the plugin deprecated; it is redundant, which is a harder thing to argue with.
What moved
- Cores eating their own plugin layer. Beyond webpack and Laravel, Biome's patch train is a type-aware linting project in disguise, Zed is moving code review inside the editor, and Jaeger merged its MCP extension into the query extension so the machine-readable surface ships wherever query ships. Sanity is promoting apps, media and roles to first-class surfaces outside the Studio.
- MCP arrived as core, not as an install. Appwrite now hosts its MCP server at mcp.appwrite.io behind OAuth instead of asking for a local install. Frill took its server to general availability with ten tools on every plan rather than the Growth tier. Document360 extended MCP to full lifecycle control including publishing and workflow, and 3CX put native MCP plus a self-hosted AI server inside the PBX itself. Timeneye — now Lucen Track — lets assistants write time entries, and Webflow's MCP 2.0 ships with governance attached.
- The paywall moved to new capability, not installed usage. ApexCharts stood up commercial licensing in three steps — trial watermark, then one premium chart type, then a required entitled plan — and took nothing away at any step. Prowler keeps its CLI and Hub open while Lighthouse AI and the MCP server are subscription-only, betting RBAC is a sufficient safety boundary for an agent. ComfyUI added a Teams tier, Untitled UI gated SAML, SCIM and audit logs to paid teams, and Countly leaves its core in maintenance while real features land in the enterprise journey engine.
- Two vendors went the other way. Windmill moved BigQuery and Snowflake out from behind the Enterprise license into community builds, and Frill's every-plan decision reads the same — adoption volume over pricing lever. Appwrite is trimming from the other end in steps: dev keys paused, dormant free projects deleted at 90 days, build storage billed from September.
- Buyers who will not be absorbed. Rocket.Chat 8.7 pairs AI Search with FIPS-compliant images and an offline license flag that suppresses every outbound call, keeping model choice with the operator. Converse.js 14 landed OMEMO:2 and spent the rest of the release on encryption failure modes users previously had to guess at.
Sectors today
Development (17) and devtools (16) carried both volume and argument. Project management (12) split between real platform work — Atlassian, NocoBase's parallel 2.2 and 3.0 trains, Bonsai's rebuild into a CRM — and content-mill feeds. Design (9) ran on monetization: ComfyUI, Untitled UI, Webflow. Communication (7) and customer support (5) were agent-operations stories, with Chatwoot's Captain mining FAQs out of already-resolved tickets and Xurrent shipping its measurement surface before its agents. Analytics (4), finance (6) and LMS (5) were thin; marketing (4), CRM (3) and most of HR (5) were SEO feeds with no releases behind them.
Watch tomorrow
ApexCharts is the case worth following: its sequencing has been careful precisely because nothing users already depended on moved behind the license, so the next paywalled item tests whether that discipline holds. Appwrite's September storage billing is a dated event on the same axis, and whether Windmill's un-paywalling is a one-off or a second data point is the counter-signal to watch. Separately, Fiber's v3 has sat in release candidate while v2 receives security fixes only — the same stall shows in Thanos' Receive rework and Apereo CAS, six candidates deep with notes that describe nothing. Feed quality is the standing problem: Constant Contact, Everhour, Recruiterflow, Metricool and Process Street published only marketing content, and Firefly III emitted six identical nightly builds in a day.