UA DevOps

🚀 Multi Agent Collaboration Gets Persistent Compute in Bedrock AgentCore <img src="https://res.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/en/headerimage/generatedHeaderImage-1787061024394.jpg" /><p>Amazon Web Services has extended Amazon Bedrock AgentCore with ru 🔗 Read more: https://www.infoq.com/news/2026/08/aws-bedrock-agentcore-runtime/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global 📰 Source: InfoQ DevOps 📅 2026-08-19 08:00 UTC #DevOps #Tech #Automation #CloudNative

🚀 The Silent Cost of Fixing the Same Problem Every Week (And the Engineering Approach That Ends It) The Problem That Shows Up as Systems Grow Continue reading on Medium » 🔗 Read more: https://medium.com/@i_m_asadjan/the-silent-cost-of-fixing-the-same-problem-every-week-and-the-engineering-approach-that-ends-it-2b524a863e0d?source=rss------sre-5 📰 Source: Medium 📅 2026-08-19 07:38 UTC #DevOps #Tech #Automation #CloudNative

https://status.cloud.microsoft/ Все впало 😢

🚀 When engineering delivery problems are actually organizational problems It’s not uncommon to see companies struggling to deliver value to their business/customer in a timely manner. Sometimes they even lose the… Continue reading on Medium » 🔗 Read more: https://vicente-nvt.medium.com/when-engineering-delivery-problems-are-actually-organizational-problems-905dc434a7df?source=rss------platform_engineering-5 📰 Source: Medium 📅 2026-08-19 06:48 UTC #DevOps #Tech #Automation #CloudNative

🚀 React Router v8: A Deliberately Boring Release with ESM-Only Builds and Default Middleware <img src="https://res.infoq.com/news/2026/08/react-route-v8/en/headerimage/generatedHeaderImage-1787041418977.jpg" /><p>React Router v8 was released on June 17, 2026, with minimal breaking changes and 🔗 Read more: https://www.infoq.com/news/2026/08/react-route-v8/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global 📰 Source: InfoQ DevOps 📅 2026-08-19 06:21 UTC #DevOps #Tech #Automation #CloudNative

🚀 Online Boutique on EKS, GKE, and AKS — what stayed the same Same Online Boutique on EKS, GKE, and AKS: what stayed portable (digests, Argo) vs CI, signing, and SRE forks — three pilots, then torn… Continue reading on Medium » 🔗 Read more: https://medium.com/@btilki/online-boutique-on-eks-gke-and-aks-what-stayed-the-same-c6d4a05dbcba?source=rss------platform_engineering-5 📰 Source: Medium 📅 2026-08-19 05:28 UTC #DevOps #Tech #Automation #CloudNative

🚀 Cilium 1.19.7 released New release of Cilium in the Networking & Mesh category. 🔗 Read more: https://github.com/cilium/cilium/releases/tag/1.19.7 📰 Source: GitHub Releases (Networking & Mesh) 📅 2026-08-18 09:33 UTC #DevOps #Tech #Automation #CloudNative

🚀 Cilium 1.18.13 released New release of Cilium in the Networking & Mesh category. 🔗 Read more: https://github.com/cilium/cilium/releases/tag/1.18.13 📰 Source: GitHub Releases (Networking & Mesh) 📅 2026-08-18 09:32 UTC #DevOps #Tech #Automation #CloudNative

🔥 Prometheus 3.14.0 / 2026-08-17 released [CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all . Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major r... 🔗 Read more: https://github.com/prometheus/prometheus/releases/tag/v3.14.0 📰 Source: GitHub Releases (Observability) 📅 2026-08-18 08:49 UTC #DevOps #Tech #Automation #CloudNative

🚀 Pulumi pkg/v3.258.0: Changelog and go.mod updates for v3.258.0 (#24355) released Co-authored-by: github-actions github-actions@github.com 🔗 Read more: https://github.com/pulumi/pulumi/releases/tag/pkg%2Fv3.258.0 📰 Source: GitHub Releases (IaC & Provisioning) 📅 2026-08-18 06:42 UTC #DevOps #Tech #Automation #CloudNative

npm-пакет @7nohe/openapi-react-query-codegen був скомпрометований внаслідок недосконалої конфігурації workflow GitHub Actions. Зловмисник виявив, що workflow дозволяв фактично будь-якому учаснику Pull Request ініціювати публікацію пакета шляхом додавання коментаря npm publish. При цьому відсутня перевірка повноважень користувача на виконання релізу. Завдяки механізмам npm Trusted Publishing та OIDC, workflow мав достатній рівень привілеїв для публікації шкідливих версій пакета. Було опубліковано 10 заражених версій. Шкідливий код активувався під час встановлення пакета та намагався: • викрасти GitHub credentials / tokens; • отримати доступ до Google Cloud metadata; • виявити інструменти SSH/SCP; • переглянути список запущених процесів; • завантажити та виконати додатковий payload за допомогою Bun. Ключовий висновок для спеціалістів DevOps: механізми Trusted Publishing/OIDC не забезпечують захисту від компрометації, якщо сам CI/CD workflow дозволяє недовіреному користувачу ініціювати job із підвищеними привілеями. Необхідно перевіряти author_association та повноваження для команд, надісланих у PR, уникати виконання коду з недовірених PR у release jobs та максимально обмежувати доступ id-token: write. У разі використання пакета автори рекомендують перейти на відому безпечну версію, ізолювати потенційно уражені системи та виконати ротацию усіх credentials, до яких мав доступ runner.

#joke

🚀 OpenTelemetry Collector v1.65.0/v0.159.0 released Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.159.0 End User Changelog 💡 Enhancements 💡 pkg/exporterhelper : Add the pkg.exporterhelper.queueBatchEnabled feature gate ( #14038 , #13582 , ... 🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/v0.159.0 📰 Source: GitHub Releases (Observability) 📅 2026-08-17 17:37 UTC #DevOps #Tech #Automation #CloudNative

🚀 OpenTelemetry Collector service/v0.159.0 released Module set beta, Version v0.159.0 🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Fv0.159.0 📰 Source: GitHub Releases (Observability) 📅 2026-08-17 17:22 UTC #DevOps #Tech #Automation #CloudNative

🚀 OpenTelemetry Collector service/telemetry/telemetrytest/v0.159.0 released Module set beta, Version v0.159.0 🔗 Read more: https://github.com/open-telemetry/opentelemetry-collector/releases/tag/service%2Ftelemetry%2Ftelemetrytest%2Fv0.159.0 📰 Source: GitHub Releases (Observability) 📅 2026-08-17 17:22 UTC #DevOps #Tech #Automation #CloudNative

🚀 Managing variant drift with generic Helm templates Generic helm templates push variant drift management into values files, which are not amenable to reusable tooling. Continue reading on ITNEXT » 🔗 Read more: https://itnext.io/managing-variant-drift-with-generic-helm-templates-f7b8433dd0b8?source=rss------gitops-5 📰 Source: Medium 📅 2026-08-17 16:58 UTC #DevOps #Tech #Automation #CloudNative

#joke

🚀 Open Policy Agent v1.19.1 released This release uses the latest version of Go (1.26.6) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use: https://pkg.go.dev/vuln/GO-2026-6218 https://pkg.go.dev/vuln/GO-2026-6091 https://pkg.go.dev/vuln... 🔗 Read more: https://github.com/open-policy-agent/opa/releases/tag/v1.19.1 📰 Source: GitHub Releases (Secrets & Security) 📅 2026-08-17 16:38 UTC #DevOps #Tech #Automation #CloudNative

🚀 How canvases make agentic workflows visible, steerable, and cost-efficient Chat is great for intent, but agent work gets lost in the scroll. Here is how I use canvases with my agentic workflows—and why your workflow also deserves a canvas. The post How canvases make agentic workflows visible, steerable, and cost-efficient a... 🔗 Read more: https://github.blog/ai-and-ml/github-copilot/how-canvases-make-agentic-workflows-visible-steerable-and-cost-efficient/ 📰 Source: GitHub Blog 📅 2026-08-17 16:00 UTC #DevOps #Tech #Automation #CloudNative

🚀 GitHub Stacked PRs: A Practical Guide to Smaller, Faster Code Reviews Large pull requests are difficult to review well. Continue reading on Level Up Coding » 🔗 Read more: https://levelup.gitconnected.com/github-stacked-prs-a-practical-guide-to-smaller-faster-code-reviews-77b63dfc227d?source=rss------gitops-5 📰 Source: Medium 📅 2026-08-17 15:27 UTC #DevOps #Tech #Automation #CloudNative