Cursor opens its Origin marketplace as GitHub locks down Actions and Copilot adds HydraFusion Max
The lead
Seventy products updated their commentary in the last 24 hours, and the day's pattern is a software-delivery pipeline being rebuilt around agents. Cursor opened its Origin marketplace to public submissions, with 20+ apps across deploy, CI, code review, security and monitoring already listed. That is a code host becoming a platform, with partners filling the gaps instead of Cursor building every piece.
The same week, GitHub put workflow dependency lockfiles for Actions into public preview on every plan, so a moved tag can no longer change what a workflow runs. GitHub Copilot added a Max option to its HydraFusion multi-model layer. Trust controls and orchestration are shipping side by side.
What moved
- Agents take over the pipeline. CodeRabbit renamed Autopilot to Autofix, staking its brand on carrying a PR to completion, and now lets admins require a Security check that blocks merges. Buildkite lets agents validate pipeline YAML before commit and added spend alerts for monthly Pro plans.
- Intelligence becomes its own meter. CircleCI made Smarter Testing GA, billed per test atom evaluated, while cutting compute cost with Gen2 Arm in beta and extra fallback regions. Retool keeps bundling model access into the plan itself.
- Governance follows the agents. n8n extended credential and node-type policies to agent tools across two parallel release lines, and Infisical added Kafka dynamic secrets and moved PAM onto its shared alerting module.
- Data products become callable. Teable turned saved queries into a versioned Query Library with stable IDs and immutable revisions, built for agents to call.
Sectors today
- Devtools (19 products): CI and secrets work dominates, with CircleCI, Buildkite and Infisical each shipping several changes.
- Development (9): WeWeb redesigned its dashboard and made AI-imported HTML editable, alongside CodeRabbit's rename.
- Analytics (7): Omni extended scheduled delivery and alerts to workbooks and took AI model suggestions to GA, while Holistics moves analysis onto the dashboard and Basedash gives each connector its own page.
- Marketing automation (5): Gumloop added Gemini 4 Argon and lets triggers ask a model before waking agents; n8n continues near-daily patches.
- Customer support (3): DoneDone lets one email connection feed many Mailboxes, routed by filter priority.
- AI assistants (3): Copilot's model pool and Max tier lead the group.
Watch tomorrow
Copilot's entries don't show how HydraFusion Max is priced or metered, and GitHub's lockfiles follow the pattern of settings becoming enforceable, so policy controls for either are the next visible step. Cursor's marketplace leaves auto-remediation as the open gap in its Rollouts launch. Separately, Metricool, Moosend and Firefly III produced commentary from feeds with no actual product releases, so treat their updates as crawl noise until a real release appears.