Signal
43 articles covering "devops"
Cloudflare open-sourced @cloudflare/ci, a CI/CD SDK that replaces YAML pipelines with TypeScript running on Cloudflare Workflows.
Docker's self-built container hypervisor replaces libkrun on Mac and Hyper-V/WSL2 on Windows, with general availability targeted for the end of October.
Podman 6.1 ships volume renaming, a machine restart command, Quadlet ImageVolume support, and IPv6 rootless port forwarding.
Kubernetes 1.37, due August 26, graduates the Metrics API, KYAML output, and Pod Certificates to stable, moves rootless kubelet to beta, and keeps phasing out kube-proxy's ipvs mode.
CNCF graduated Cloud Native Buildpacks on August 11, formalizing a build model that shifts base-image patching from Dockerfiles to a centralized builder.
GitHub detailed a technical-preview Actions network firewall and rounded up npm and Actions defaults changed since February, drawing sharp Hacker News debate over delay-based defenses versus package signing.
GitLab's 19.2.1, 19.1.3, and 19.0.5 patch release fixes 13 vulnerabilities, including three high-severity flaws and a prompt-injection bug in Duo Code Review.
A GitHub Actions failure on August 6 knocked out workflows, Pages, and Copilot for over eight hours, extending a run of dozens of monthly incidents this year.
Dependabot now waits three days before proposing new dependency versions by default. GitHub says the delay keeps freshly compromised releases out of update pull requests; security updates are exempt and repositories can opt out.
npm v12 disables install scripts, Git dependencies, and remote-URL dependencies by default, closing the execution path several npm worms exploited over the past year.
AWS added an Express mode to CloudFormation that ends deployments once configuration is applied instead of waiting for resources to stabilize, available in all commercial Regions at no extra cost.
GitLab's next-generation source code management, shown at its Transcend event, keeps the Git protocol but rebuilds the backend so agents query repos server-side instead of cloning them.