Cline is an open-source coding agent that runs in IDEs, terminals, and as a native desktop app for macOS and Windows. It reads project structures, edits files, and executes terminal commands with human-in-the-loop approval. Users can switch between Plan and Act modes or use the SDK to build custom tools and coordinate multi-agent teams. The tool runs on any model and supports integrations through plugins or MCP servers.
Coding-agent harnesses such as Claude Code, Codex CLI, and Pi can produce similar task success rates while using dramatically different amounts of tokens and money. Across 21 model–harness combinations on SWE-bench Lite and Terminal-Bench 2.0, harness choice changed cost by as much as 5×, and the model provider's own harness was not consistently the most efficient option.
Runtime security protects cloud workloads while they are executing, filling gaps that posture management cannot catch, such as zero-days, privilege escalation, and compromised credentials. Falco provides cloud-native runtime detection across hosts, containers, Kubernetes, and cloud services by analyzing system calls and plugin events, adding contextual alerts, and deploying easily with Helm.
Komodor launched an Agentic Operations Platform that lets SREs deploy, customize, govern, and audit AI agents through familiar DevOps workflows, with 50+ built-in agents, integrations, guardrails, approvals, and spending controls. The platform aims to help teams manage growing fleets of production AI agents while preserving existing change management and governance practices.
Sponsored
This guide walks through how to turn a product brief and feature flag into a connected launch workflow.
Cloudflare now allows administrators to assign access controls to specific Workers, restricting users and agents to individual applications.
Sponsored
Ever wish it was someone else who scrambles to root cause an incident on a Friday evening?
Meet your new teammate. They're happy to troubleshoot while you're building what's next.
* Autonomously investigates issues and identifies root causes across AWS, multicloud, and on-premises environments * Delivers prioritized recommendations to continuously improve application reliability * Reviews code changes and runs autonomous testing so you ship to production with confidence
SEE HOW TEAMS ARE REDUCING [5]incident resolution from hours to minutes with AWS DevOps Agent →
Ready to put AWS DevOps Agent to work? GET STARTED [6]→
Memory QoS has graduated to Beta in Kubernetes v1.37 and is now enabled by default. The feature uses the memory controller on Linux nodes running cgroup v2 to guide the kernel on container memory treatment. The default memoryThrottlingFactor changed to null in this release, ensuring that upgrading clusters does not automatically throttle existing workloads.
Cilium 1.20 adds IPv6 support for AWS ENI IPAM and introduces datapath plugins to let third parties extend the eBPF datapath without forking the project. The release also promotes the Multi-Cluster Services API to a stable status and deprecates the legacy mutual authentication feature in favor of the ztunnel proxy. Other updates include a per-pod option to disable source IP verification and a new ClusterNetworkPolicy for admin-level guardrails.
Cloudflare has launched a new Disallow AI Training setting that allows website owners to block AI training while remaining indexed for search. Apple, Google, and Microsoft have committed to honoring this preference, which resolves the tradeoff created by mixed-use crawlers. Cloudflare plans to introduce more granular controls for AI summaries by early next year.
Runtime insights provide continuous visibility into live container behavior, enabling real-time threat detection, risk prioritization, faster incident response, and continuous compliance. Using technologies such as eBPF, runtime context also helps AI agents understand infrastructure and deliver more actionable security triage and remediation while reducing noise from traditional static scanning.
Native CI/CD integration transforms internal developer portals from documentation and service catalogs into scalable workflow platforms, enabling developers to create, deploy, and roll back services without manually configuring pipelines. It also lets platform teams centrally enforce golden paths, promotion policies, and governance while reducing pipeline drift and operational complexity.
Sponsored
Agentic coding means more releases, across more projects than anyone ever planned to deploy. Teams struggle to answer: where did this build come from? Can its deployer be trusted? What's inside? How do you prove it? GitLab will show you how to find answers [12] in the October
Open Code Review is an open source AI-powered code review CLI tool that originated as Alibaba Group's internal official assistant. It has served tens of thousands of developers and identified millions of code defects. The tool uses a hybrid architecture that combines deterministic engineering with an LLM agent to generate structured review comments with line-level precision.
OpenResearch is a local-first workspace that turns coding agents like Claude Code and Cursor into research agents. The platform can autonomously propose ideas, change code, launch experiments, and analyze evidence. Users can run workspaces locally, over SSH, or on platforms including Kubernetes and Hugging Face Jobs.
Infrastructure identity replaces static credentials and fragmented access controls with short-lived, cryptographically verified identities for humans, workloads, machines, and AI agents. Platform teams can embed just-in-time, policy-driven access into developer workflows, reducing security risk and operational toil while improving access times, auditability, and control over increasingly autonomous infrastructure.
2026.09.16·platformengineering.org·10 min read·TLDR DevOps Continuous Integration means merging all changes into a shared mainline at least daily, while Continuous Delivery means keeping software deployable at all times through automated pipelines. The author argues both terms are precise and well-documented, not vague, and warns against diluting their meaning as happened with Agile and DevOps.
Sponsored
1Password [17] streamlines developer secrets management, and makes sure that AI agents never see or store raw credentials.
AI-assisted development is making software creation dramatically faster, but production readiness lags as agents favor simple infrastructure over security, scalability, observability, and operational resilience.
On-demand state repartitioning is available in Public Preview on Databricks Runtime 18 and above.
New Relic Lens is now generally available, allowing users to query external data sources like Snowflake and Google Sheets within the New Relic UI.
Sponsored
They're all going to OPENSEARCHCON NORTH AMERICA [5] to share how they run search, observability, and data infrastructure at massive scale.
Are you coming? Get your ticket [6] to three days of hands-on sessions including:
* Search relevance tuning, plugin development, AI-powered observability, and vector database optimization * Build a full OPENTELEMETRY OBSERVABILITY STACK or an AGENTIC AI SEARCH APP yourself in two hands-on DEVELOPER WORKSHOPS
Attend live September 22 to 24 and claim your $250 CERTIFICATION VOUCHER toward the Linux Foundation's OpenSearch Certified Associate exam.
See the full schedule [7] and grab a seat before they fill up.
2026.09.14·events.linuxfoundation.org·Sponsor·TLDR DevOps AWS CloudFormation contract tests v2 provide deeper validation across resource handler operations, including live-state verification, schema compatibility checks, and input linting for hardcoded environment values. Local HTML and JUnit reports help developers catch implementation issues earlier, reducing iteration cycles before registry submission.
Spacelift Flows brings Day 2 infrastructure operations into a visual, auditable workflow platform, enabling teams to automate incident response, provisioning, drift handling, and routine requests without scattered scripts or credentials. Its native integration with Spacelift Deploy also gives AI agents governed access, approval gates, and end-to-end auditability under one control plane.
Native histogram support for Kubernetes metrics has graduated to Beta and is enabled by default in Kubernetes v1.37. The feature exposes latency and duration metrics with greater accuracy while reducing telemetry storage and scraping overhead. Prometheus Native Histograms replace static user-defined buckets with dynamic, exponential buckets stored as a single time series.
Harness AI Evals integrates AI agent testing into CI/CD using golden datasets, behavioral metrics, and blocking quality gates to catch regressions that traditional tests miss. Repeated evaluations expose incorrect, incomplete, or inconsistent responses, ensuring agents meet quality thresholds before production deployment.
PlanetScale's Neki router makes a sharded Postgres deployment appear as a single database by handling authentication, protocol parsing, shard-aware planning, connection pooling, and distributed execution across many Postgres nodes. Query performance depends heavily on shard-key choice: co-locating related rows can turn an expensive cross-shard join that requires scatter-gather queries and router-side hash joins into local joins executed independently on each shard.
Sponsored
Most AI agents fail confidently, not loudly. They act on stale data and produce wrong refunds, outdated quotes, and contradictory decisions. A context engine [13] computes real-time values at the moment of each decision, so your agents act on current, accurate
Claude-Red is a curated library of offensive security skills for the Claude AI system. It offers structured SKILL.md files that prime Claude with expert methodology for specific attack surfaces like SQL injection or EDR evasion. The project targets roughly 130 skills across 23 categories.
Colibrì is a pure-C inference engine for running very large Mixture-of-Experts models across VRAM, RAM, and NVMe as a single memory hierarchy. It streams routed experts on demand instead of requiring the full model to fit in fast memory, supports CPU, CUDA, Metal, NUMA, and multi-machine execution, and currently runs nine model families ranging from 7B to 2.8T parameters.
Agent optimization should use a continuous loop of trace analysis, hypothesis formation, offline evaluation, controlled production experiments, and post rollout monitoring. Connecting observability with evaluations and experiments helps teams identify specific performance issues, validate improvements against representative and difficult cases, and continuously refine datasets and evaluators.
OpenAI's Habitat storage platform now handles over 70 million requests per second and serves more than 500 petabytes of data. The team recently rewrote the service in Rust, which is 6x more CPU efficient and 15x more memory efficient than the previous Python version. Habitat first launched as a Python library at DevDay 2023 to support GPTs and evolved into a complex distributed system supporting over 1 billion weekly users across nearly 40 regions.
2026.09.14·links.tldrnewsletter.com·13 min read·TLDR DevOps Researchers investigating the May 2026 GemStuffer campaign attribute more than 2,000 malicious RubyGems package uploads to an OpenAI agent swarm based on package contents, naming patterns, and other public evidence. The agents abused RubyDoc's automatic build system for remote code execution and attempted to exploit a then-novel RubyGems vulnerability to obtain user API keys, prompting RubyGems to disable new registrations for four days and remove hundreds of packages.
Sponsored
100+ sessions, five tracks, top speakers, hands-on labs, and
2026.09.14·events.www.cloudflare.com·Sponsor·TLDR DevOps A multi-tenant Prometheus proxy can safely expose curated, namespace-isolated metrics to Kubernetes teams without opening the shared infrastructure store or creating noisy-neighbor problems.
Cloudflare CASB now supports automatic remediation policies.
Sponsored
Agents pick and update dependencies in minutes. Nothing checks them at that speed. Too many agents are flying blind.
Sonatype Guide [5]is built for your team and for today's AI SDLC. Automate agentic dependency remediation, enforce policies everywhere you and your agents build, and keep your BOM current.
Guide is how you and your development teams move at agent speed and
2026.09.11·security-us.m.mimecastprotect.com·TLDR DevOps 2026.09.11·security-us.m.mimecastprotect.com·TLDR DevOps OpenAI has introduced the Agents API in public beta, allowing developers to build and run cloud agents with the same harness and infrastructure that powers Codex. The API supports a hosted sandbox option and integrations with partners including Cloudflare, DigitalOcean, and Vercel. Developers can create production-ready agents that manage context, call tools, and coordinate subagents, paying only for the tokens and tools used.
2026.09.11·links.tldrnewsletter.com·4 min read·TLDR DevOps Cloudflare's new Automatic Key Exchange feature probes origin servers to detect supported algorithms, allowing the system to lead with the correct key agreement on the first try. The rollout reduced HelloRetryRequests from roughly 52% to 3.7% and cut connection handshake latency by more than 150 ms at p90. This automation has upgraded hundreds of thousands of domains to post-quantum encryption without manual configuration.
Kubernetes v1.37 introduces five new Node conditions to describe lifecycle states such as draining or maintenance. The release reserves these names as standard NodeConditionType constants and includes an Alpha feature gate that is disabled by default. Administrators can currently use these conditions to communicate status, though no core workload controllers change their behavior based on them yet.
GitHub found that AI coding efficiency depends on minimizing unnecessary work across the entire task, not simply reducing tokens per tool call. Copilot improved efficiency by selectively compressing repetitive output, removing unused formatting, shortening prompts while regression-testing behavior, and delivering background results directly, collectively reducing cost and latency without measurable quality regressions.
East River Source Control is building a source-control backend that speaks the Git protocol without storing Git repositories as its underlying source of truth. Its custom storage engine is designed to scale horizontally for larger repositories and agent-heavy development workloads, while preserving compatibility with existing Git clients and leaving a path toward future protocols such as Jujutsu.
Sponsored
Sonatype Guide [13] doesn't slap a dependency gate onto the AI SDLC. It gives your security team the consistent guardrails, fine-grained controls, and automated workflows that allows you to move at agentic speeds without flying blind. Sonatype has already received Forrester's