Search overlay panel for performing site-wide searches

Build Your Next Big Thing on Heroku. Sign Up Now!

Heroku Blog

Securing Your Stack: Recent PHP and eMudhra Updates on Heroku

Managing critical vulnerabilities often consumes significant engineering time. When two remote code execution flaws hit PHP alongside the eMudhra root certificate compromise, Heroku managed the heavy lifting for their managed runtimes.

Front-End Web Deep Dive: Runtime Config

Runtime configuration has been brought to the Front-End Web Cloud Native Buildpack in a way that is standard, secure, and requires zero re-builds. By revisiting Twelve-Factor principles through the lens of modern web standards, we have created a strategy that works for any framework.

Improved Static Website Support on Heroku with Front-End Web Cloud Native Buildpack

Recently, we expanded Heroku’s industry-shaping primitives, adding support for client-side browser apps, composed of HTML, CSS, and JavaScript. This built-in support for static web apps joins the existing Heroku Buildpacks: Ruby, Python, Go, Java, Clojure, Scala, Node.js, PHP, and .NET.

October 2026 Update: Heroku Innovations and New Features

Heroku’s continuous platform innovation keeps operational overhead out of your path while delivering our industry-best developer experience. We handle everything below your code, from the core infrastructure and OS maintenance to runtimes and dependencies, so developers can stay focused on building.

You can see that ongoing innovation across our latest releases in managed data services, platform access controls, and Salesforce connectivity.

A New Era for Managed Databases: Announcing Heroku Postgres Advanced

At Heroku, we’ve built a platform that allows developers to focus on their apps, not managing their infrastructure. Heroku Postgres Advanced carries forward that philosophy as our next-generation database offering, available today.

Introducing Team Authorizations

Team Authorizations let you create and manage API tokens and OAuth authorizations at the team and team’s resources level instead of tying them to one person’s account.

Until now, every API token belonged to an individual. When that person left the team, changed roles, or lost access, any integration, CI/CD pipeline, or automation built on their token could break without warning, and nobody else could easily see what was at risk. Team Authorizations fixes that. Your integrations keep running no matter who's on the team.

Subscribe to the full-text feed.