> ## Documentation Index
> Fetch the complete documentation index at: https://docs.endorlabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# August 2026

We are excited to introduce the latest features and enhancements in Endor Labs.

### Allow safe versions in Package Firewall

<Badge icon="star" color="green" shape="pill">New</Badge>

You can now configure Package Firewall to install a safe version automatically instead of blocking the request, when a package is flagged for malware or doesn't meet the minimum package age. Select **Allow safe versions only (curate)** for these conditions so the package manager resolves and installs a safe version instead of failing — developers get a working install without seeing a block. This action is available for the npm and PyPI ecosystems.

For more information, see [Allow safe versions](/package-firewall/policy#allow-safe-versions).

### Block Azure DevOps merges on PR scan findings

<Badge icon="check" color="blue" shape="pill">Enhancement</Badge>

You can now block pull requests from merging in Azure DevOps when a PR scan detects findings that match an action policy. Configure an action policy that breaks the build to choose which findings gate a merge, and an Azure DevOps branch policy that requires the Endor Labs status check. This ensures that the findings your action policy targets are resolved before code reaches your default branch.

For more information, see [Block pull requests on findings](/scan/pr-scans#block-pull-requests-on-findings).

### OpenCode support for the MCP server

<Badge icon="check" color="blue" shape="pill">Enhancement</Badge>

The Endor Labs MCP server now supports OpenCode, so you can scan dependencies, detect vulnerabilities, find leaked secrets, and review code for security issues directly inside OpenCode.

For more information, see [Endor Labs MCP server in OpenCode](/setup-deployment/mcp/opencode).