From 014a205b8bb3371647b3ec1111c31d3176d7493b Mon Sep 17 00:00:00 2001
From: "mintlify[bot]" <109931778+mintlify[bot]@users.noreply.github.com>
Date: Wed, 4 Nov 2026 16:08:55 +0000
Subject: [PATCH 1/2] docs: add changelog entries for Oct 19 - Nov 4, 2026
---
changelog.mdx | 118 ++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 118 insertions(+)
diff --git a/changelog.mdx b/changelog.mdx
index 0b1afdc..798c2ff 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -6,6 +6,124 @@ rss: true
Each entry links to the original announcement in our [changelog discussions](https://github.com/orgs/datum-cloud/discussions/categories/changelog), where you can ask questions and leave feedback. To see what is coming next, read the [roadmap](/platform/roadmap).
+
+ ## Read-only users can open VPC pages
+
+ Members with read-only access can now open the VPC pages in the [Cloud Portal](https://cloud.datum.net).
+
+ - **Fixed:** viewers no longer get a permission error when they open VPC pages.
+ - Create, edit, **Enable IPv6**, and delete controls for networks and network services are hidden when you don't have permission to use them.
+
+ See [Network services](/galactic-vpc/networks/network-services).
+
+
+
+ ## Clear status for wildcard hostnames that aren't enabled
+
+ - **Fixed:** an ALB whose only problem is a wildcard hostname that isn't enabled for your project now reports `ListenersNotValid` instead of staying `Pending` indefinitely.
+
+ Wildcard hostnames are early access. See [Wildcard hostnames](/alb/configuration/wildcard-hostnames).
+
+
+
+ ## Billing is generally available
+
+ Organization owners can now manage billing in the [Cloud Portal](https://cloud.datum.net) without a feature flag.
+
+ - **Owners only:** billing accounts, payment methods, and invoices are visible only to organization owners. Other members don't see billing pages or links.
+ - **Payment terms:** if you can't pay by card, apply for payment terms during setup or from billing settings. Datum reviews the application, and the portal shows whether it's under review, approved, or declined.
+ - **Invoice email:** each billing account sends invoices to one invoice email. If you leave it empty, invoices go to the billing contact.
+ - **Discounts:** a read-only **Discounts** section on the billing account shows any discount that applies. Discounts are applied to invoices automatically.
+ - **Cleaner invoice list:** old invoices that are no longer updated are hidden from past invoices.
+ - **CLI:** view metered usage and spend for an organization or project with `datumctl plugin install billing`.
+
+ See [Usage](/organizations/usage).
+
+
+
+ ## Network load balancers
+
+ Publish a network service on a public TCP or UDP port with a network load balancer (NLB).
+
+ - **Addresses and hostnames:** each location gets a public IPv6 address and a generated hostname you can point a CNAME at. IPv4 is available for single-port listeners where Datum has enabled it.
+ - **Health checks:** NLBs actively check backends and send new connections only to healthy ones.
+ - **UDP ports:** network services now accept UDP ports, and the create-service dialog has a TCP/UDP selector per port. A UDP listener also needs a TCP port on the backend for its health check.
+ - **Portal:** create an NLB, copy its hostname and address, and add, edit, or delete listeners in the [Cloud Portal](https://cloud.datum.net).
+
+ NLBs are early access. TLS listeners aren't supported yet, but a TCP listener forwards TLS traffic unchanged to your backend. Each route serves one backend. An ALB that points at a UDP port now reports a clear unsupported-protocol error.
+
+ See [Network services](/galactic-vpc/networks/network-services).
+
+
+
+ ## DNS status for hostnames hosted elsewhere
+
+ When a custom hostname's DNS is hosted outside Datum, the [Cloud Portal](https://cloud.datum.net) now shows whether it points at your ALB.
+
+ - **DNS Ready** appears once Datum sees the CNAME or matching IPs pointing at the ALB.
+ - **Awaiting DNS** appears until then, with a tooltip that names the record to add. The chip no longer spins indefinitely.
+ - **Fixed:** an ALB whose single backend carries the Host override can now be edited in the portal instead of showing **Managed with datumctl**.
+
+ See [Custom domains](/alb/operations/custom-domains).
+
+
+
+ ## Patch can change your load balancers
+
+ Patch, the Datum assistant, can now update Application Load Balancer settings, headers, hostnames, routes, and origins.
+
+ - Every change is previewed and validated before it's written.
+ - The change applies only if the load balancer hasn't changed since the preview.
+ - Changes made by Patch stay editable in the Cloud Portal.
+
+ See [Assistant](/datumctl/ai/assistant).
+
+
+
+ ## Activity times shown in UTC
+
+ - **Fixed:** the activity feed and the audit and events tables now print times in UTC. Previously they printed local time with a `Z` suffix.
+
+ See [Activity](/datumctl/activity/overview).
+
+
+
+ ## Private DNS for gVPC networks
+
+ Resources on a gVPC network can now reach each other by name instead of by private IP address.
+
+ - **Instance names:** each Compute Instance gets a name such as `web-default-us-central-1-0.instances.datum.internal` that resolves to its private addresses.
+ - **Private to the network:** every network has its own `datum.internal` zone. Names resolve only from that network and aren't published to public DNS.
+ - **Kept in sync:** records update when addresses change and are removed when the Instance is deleted.
+ - **Portal:** Private DNS zones show **Private** in the DNS list, along with the VPC they serve, instead of a nameserver lookup.
+
+ See [Private DNS](/domain-dns/private-dns) and [Private DNS for Compute](/compute/private-dns).
+
+
+
+ ## Guided setup for new projects
+
+ A new project's home page now walks you from your first network to a running service.
+
+ - Create the project's network from the home page.
+ - Then pick a toolbox action or ask Patch, side by side.
+ - Once resources exist, the page suggests the next useful step.
+
+ See [Projects](/projects/overview).
+
+
+
+ ## Warning for domains held by another project
+
+ When you add a domain that another project in your organization already holds, the [Cloud Portal](https://cloud.datum.net) now tells you.
+
+ - The warning names the project and its verification state, and links to the existing domain.
+ - Choose **Add here anyway** to continue.
+ - Bulk and CSV adds don't prompt. The task summary marks matching rows instead.
+
+ See [Domains](/domain-dns/domains).
+
+
## Correct version reporting for Nix installs
From 38899e37729ac95c6a58c040e8765eb7f16efcb1 Mon Sep 17 00:00:00 2001
From: felixwidjaja
Date: Wed, 4 Nov 2026 23:15:30 +0700
Subject: [PATCH 2/2] docs: sort changelog entries newest first
Co-Authored-By: Claude Sonnet 5.5
---
changelog.mdx | 46 +++++++++++++++++++++++-----------------------
1 file changed, 23 insertions(+), 23 deletions(-)
diff --git a/changelog.mdx b/changelog.mdx
index 798c2ff..a426a70 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -55,6 +55,17 @@ Each entry links to the original announcement in our [changelog discussions](htt
See [Network services](/galactic-vpc/networks/network-services).
+
+ ## Correct version reporting for Nix installs
+
+ `datumctl` installed from the Nix flake now reports a valid version.
+
+ - **Fixed:** `datumctl version` no longer crashes when `datumctl` is installed with `nix profile install` or run with `nix run`.
+ - **Fixed:** plugin compatibility checks and update checks now read a real version in Nix builds instead of a placeholder.
+
+ To pick up the fix, reinstall or upgrade `datumctl` from the flake. See [Install datumctl](/datumctl/install).
+
+
## DNS status for hostnames hosted elsewhere
@@ -112,29 +123,6 @@ Each entry links to the original announcement in our [changelog discussions](htt
See [Projects](/projects/overview).
-
- ## Warning for domains held by another project
-
- When you add a domain that another project in your organization already holds, the [Cloud Portal](https://cloud.datum.net) now tells you.
-
- - The warning names the project and its verification state, and links to the existing domain.
- - Choose **Add here anyway** to continue.
- - Bulk and CSV adds don't prompt. The task summary marks matching rows instead.
-
- See [Domains](/domain-dns/domains).
-
-
-
- ## Correct version reporting for Nix installs
-
- `datumctl` installed from the Nix flake now reports a valid version.
-
- - **Fixed:** `datumctl version` no longer crashes when `datumctl` is installed with `nix profile install` or run with `nix run`.
- - **Fixed:** plugin compatibility checks and update checks now read a real version in Nix builds instead of a placeholder.
-
- To pick up the fix, reinstall or upgrade `datumctl` from the flake. See [Install datumctl](/datumctl/install).
-
-
## Run gRPC APIs on Datum
@@ -150,6 +138,18 @@ Each entry links to the original announcement in our [changelog discussions](htt
[Read the announcement](https://github.com/orgs/datum-cloud/discussions/310)
+
+ ## Warning for domains held by another project
+
+ When you add a domain that another project in your organization already holds, the [Cloud Portal](https://cloud.datum.net) now tells you.
+
+ - The warning names the project and its verification state, and links to the existing domain.
+ - Choose **Add here anyway** to continue.
+ - Bulk and CSV adds don't prompt. The task summary marks matching rows instead.
+
+ See [Domains](/domain-dns/domains).
+
+
## New datumctl plugins and assistant capabilities