Search the archive

highest scores for SCA and AI component analysis. Try Guide free

COLIBRI

Colibrì is an inference engine written in pure C that runs large Mixture-of-Experts models on consumer hardware. It treats storage, RAM, and VRAM as a single memory hierarchy to run models ranging from 744 billion to 2.8 trillion parameters without dependencies like BLAS or Python. The engine supports eight model families, including GLM-5.2 and Kimi K3.

LLMFIT

llmfit is a terminal tool that recommends open-source large language models based on a user's specific hardware. The software inspects system components like CPU, RAM, and GPU configuration to score models on memory fit, speed, and quality. Users can also benchmark models on their own machines and share those results back to the project. It supports local runtime providers including Ollama, llama.cpp, and LM Studio.

MONITOR PROMPT CACHING TO OPTIMIZE YOUR TOKEN USAGE

Prompt caching can significantly reduce LLM cost and latency as agent systems accumulate large, repetitive system prompts, tool definitions, guardrails, and context. Datadog recommends keeping cached prefixes stable, placing breakpoints around static context and conversation history, and monitoring cache hit rates, writes, token usage, and traces to identify cache-busting changes such as tool reordering, compaction, and dynamic metadata.

PD AUTOMATION RUNNER: AUTOMATION THAT FINALLY REACHES YOUR ON-PREM STACK

PD Automation Runner extends PagerDuty automation to on-premises and self-hosted infrastructure through outbound-only connectivity, allowing Workflow Actions and SRE Agent to diagnose and remediate Kubernetes incidents without opening inbound network access. Early Access currently supports Kubernetes, with Splunk, Grafana, and Prometheus planned.

decision your devs and agents make, automatically. Try it free

GET SHIP DONE: EVERYTHING WE SHIPPED IN AUGUST 2026

Harness shipped 58 features in August focused on removing software delivery bottlenecks caused by AI-generated code.

OBSERVABILITY IN KUBERNETES: FROM METRICS TO MEANING

Kubernetes observability combines metrics, logs, traces, and profiling to move teams from detecting symptoms to understanding root causes.

HOW WE REBUILT CLOUDFLARE WORKERS' MODULE REGISTRY FOR NODE.JS COMPATIBILITY

Cloudflare has rewritten the module registry in workerd to improve standards compliance and alignment with Node.js.

Read the blog

KUBERNETES PROMOTES KYAML AS A SAFER, MORE CONSISTENT WAY TO WORK WITH MANIFESTS

KYAML is a stricter YAML dialect for Kubernetes that reduces syntactic and type ambiguity while remaining valid YAML and compatible with existing tooling. By standardizing configuration into a more explicit format, KYAML can improve consistency, validation, diffs, and machine-generated manifests, making it particularly relevant as Helm, GitOps systems, infrastructure tooling, and AI agents increasingly generate Kubernetes configuration.

CLOUD NATIVE COMPUTING FOUNDATION ANNOUNCES KARMADA GRADUATION

The Cloud Native Computing Foundation (CNCF) announced the graduation of Karmada, an open source project for running applications across multiple Kubernetes clusters and clouds. The project has attracted more than 1,214 contributors and is used in production by companies including Bloomberg, Wellhub, and Alibaba Cloud. Karmada reached production maturity with its v1.19 release, which improves scheduling for distributed AI training jobs. To graduate, the project completed a third-party security audit and established a formal steering committee.

HOW YAHOO OPTIMIZES RESOURCES WITH FLEXIBLE VMS IN MANAGED SERVICE FOR APACHE SPARK

Flexible VMs in Google Cloud's Managed Service for Apache Spark allow Yahoo to maintain reliable analytics pipeline provisioning by ranking acceptable VM shapes and automatically searching across regional zones when preferred capacity is unavailable. This approach reduced Yahoo's cluster provisioning failures caused by regional capacity stockouts by 85% while improving infrastructure resilience and reducing manual intervention.

FROM CHAOS TO CONTROL: ADDRESSING SHARD DISTRIBUTION CHALLENGES IN M3DB WITH SUBCLUSTERS

Uber redesigned M3DB's shard placement for large clusters by partitioning nodes into self-contained subclusters that own non-overlapping portions of the shard space. The approach reduces failure and maintenance blast radius, allows operations on separate subclusters to run in parallel, and uses a greedy migration algorithm to keep shard distribution balanced during scaling.

HOW TUBULAR LABS RECLAIMED 50% OF ENGINEERING CAPACITY BY REBUILDING THEIR 70TB PIPELINE ON APACHE ICEBERG AND AMAZON S3 TABLES

Tubular Labs rebuilt a 70TB analytics pipeline handling roughly 2 billion row updates per day around Apache Spark, Iceberg, and Amazon S3 Tables. Infrastructure-related recovery time fell from 12–16 hours to about 40 minutes, while multi-billion-row pipelines that previously required 6–8 hours now finish end-to-end in under two hours.

vector search and agentic AI at OpenSearchCon North America,

September 22-24 in San Jose. Come for the talks, leave with real production patterns you can use.

VIEW THE AGENDA

LIGHTPANDA BROWSER

Lightpanda is a new headless browser written in the Zig programming language and designed for AI agents. It is not a Chromium fork, allowing it to use significantly less memory and CPU than existing browsers while executing JavaScript. Users can run the browser with Puppeteer or Playwright scripts.

CONTEXT MODE

Context Mode is an MCP server that reduces tool output size by 98% and preserves session memory when AI coding agents compact conversations. It tracks file edits, git operations, and user decisions in SQLite, allowing agents to resume work without repeating context. The tool supports 17 clients including Claude Code, VS Code Copilot, Cursor, and Gemini CLI.

PROJECT HYDRAFUSION: FRONTIER QUALITY VIA MULTI-MODEL ORCHESTRATION

HydraFusion is GitHub's runtime orchestration system that dynamically combines models from multiple providers using single-model, cascade, or critique workflows to balance coding quality, cost, and latency. In offline benchmarks, it matched or exceeded Claude Opus 5 quality while reducing estimated costs by 36% to 67%, demonstrating the potential of adaptive multi-model routing for agentic software development.

CLICKHOUSE AS A STREAMING HTTP API

ClickHouse 26.8 can expose controlled database queries directly as streaming HTTP endpoints using named handlers, typed URL parameters, result transformations, and framing formats. Simple data APIs can therefore stream query results and progress without a separate pass-through application service, while SQL security controls can restrict access to underlying data.

Get the Playbook.

INVESTIGATE DMS MIGRATION ISSUES WITH AWS DEVOPS AGENT

AWS DevOps Agent can be extended with a read-only MCP server specialized for AWS DMS, giving it migration-specific tools and runbooks to autonomously investigate validation failures, CDC latency, connectivity, replication health, and post-cutover database issues.

AWS CONFIG NOW SUPPORTS 60 NEW RESOURCE TYPES

AWS Config now supports 60 additional AWS resource types across services, expanding coverage for discovery, compliance assessment, auditing, and remediation.

INTRODUCING CHDB POSTGRES EXTENSION: HIGH-PERFORMANCE IMPORTS FROM CLOUD STORAGE

The new chdb PostgreSQL extension uses an in-process ClickHouse engine to import and export data between Postgres and S3, Google Cloud Storage, Azure Blob Storage, HDFS, HTTP endpoints, and local files across formats including Parquet, Arrow, JSON, Avro, and ORC.

* Talk through my storage use case

* Talk to us about moving your data

A VISION FOR BUILT-IN LINTING

OpenTofu is developing built-in linting that unifies pre-plan static checks and post-plan policy enforcement, allowing rules to be evaluated repeatedly as more information becomes available during validation, planning, and application. OpenTofu v1.13 introduces experimental built-in rules, with future plans for custom plugins, reusable rulesets, and broader policy support.

INTRODUCING CONTEXT-AWARE VULNERABILITY DISCOVERY AND REMEDIATION WITH CLOUDFLARE MANAGED DEFENSE AND OPENAI DAYBREAK MODELS

Cloudflare is launching early access to a service called Vulnerability Discovery and Remediation, which scans customer codebases for security flaws and proposes patches and firewall rules to fix them. The service uses OpenAI's GPT-5.6 Cyber model for reconnaissance, hunting, and validation, with model prompts routed through Cloudflare AI Gateway to OpenAI's servers. Cloudflare combines those findings with production traffic data and Web Application Firewall activity to help teams prioritize which vulnerabilities are actually exposed and under active attack. Access is invitation-only through Cloudflare's Managed Defense team, and customers must approve any proposed changes before they are deployed.

PIPELINED SQL IN CLICKHOUSE 26.8

ClickHouse 26.8 adds pipelined SQL with a new |> operator that lets queries be written as an explicit sequence of transformations instead of relying on nested subqueries or CTEs. Each stage passes its result to the next, making multi-step filtering, aggregation, sorting, and limiting easier to read and compose.

HOW TO CARRY USER IDENTITY ACROSS FEDERATED KUBERNETES AND AI PLATFORMS

Centralized identity gateways solve the limitations of SSO in federated AI and data platforms by making one service responsible for session creation, validation, refresh, and logout while regional gateways enforce local access policies. The pattern reduces duplicated authentication flows and upstream IdP load while enabling consistent identity propagation and delegated user authorization across Kubernetes clusters, data tools, and AI assistants.

ZGATEWAY: LEARNINGS FROM PUTTING A PROXY IN FRONT OF ZIPPYDB

ZGateway is a proxy tier that sits between clients and ZippyDB, Meta's most widely used key-value store. The system handles more than 1 billion operations per second and carries about 40% of ZippyDB traffic, adding roughly 6% computational overhead. The core problem it solves is connection sprawl: under direct access, a million-plus client hosts each maintained tens of thousands of TLS connections to database hosts, creating a many-to-many mesh that caused file-descriptor exhaustion and reboot loops during reconnection storms. By routing all traffic through a controlled proxy fleet, Meta reduced total persistent connections by roughly 19x and made fan-in independent of client population size.

IMPROVING INFRASTRUCTURE EFFICIENCY FOR GROWING DEMAND IN THE AGE OF AI

Dropbox treats compute, storage, networking, power, cooling, rack density, and capacity planning as one interconnected optimization problem rather than independent infrastructure layers. The approach focuses on extracting more usable capacity from existing data centers through workload placement, fleet optimization, denser hardware, and lifecycle planning before expanding the physical footprint.

DIAGRAM DESIGN

Diagram Design is a Claude Code skill that generates editorial-quality diagrams as self-contained HTML and SVG files. The skill works with Claude Code, Codex, Factory Droid, Pi, and Agent Skills-compatible hosts, and can also redraw existing draw.io or Mermaid diagrams in the same design system. Each diagram ships in three static variants (minimal light, minimal dark, and full-editorial) with no build step, no JavaScript dependencies, and no external images.

ALIEN

Alien is an open-source platform for deploying and operating software inside customer-owned AWS, GCP, and Azure environments while retaining centralized control over releases, monitoring, and lifecycle management. It supports push- and pull-based deployment models, automatic updates and rollbacks, remote commands without inbound networking, cross-cloud resource abstractions, and least-privilege IAM derived from an application's declared infrastructure.

AUTOMATING THE EXPERIMENTATION LIFECYCLE WITH KIRO, AWS DEVOPS AGENT, AND LAUNCHDARKLY

AWS DevOps Agent, Kiro CLI, and LaunchDarkly form an autonomous experimentation loop that turns business goals into feature-flagged code changes, measured A/B tests, guarded rollouts, and iterative improvements. The system reduces planning and measurement overhead while using automated release reviews, runtime rollback, and recorded outcomes to safely optimize toward defined metrics.

INTRODUCING YUGABYTEDB RESOURCE GOVERNANCE

YugabyteDB Resource Governance adds CPU controls for multi-tenant database clusters so a runaway query or traffic spike in one database does not starve other workloads sharing the same infrastructure. The system combines per-database CPU limits with fair sharing of unused capacity, allowing denser consolidation while maintaining workload isolation and predictable performance.

YOLO MODE: AGENT AUTONOMY WITHOUT THE GUARDRAILS

YOLO mode lets AI coding agents execute actions without approval prompts, improving productivity but increasing security risks when agents run directly on a host with access to files, credentials, and networks.

BUILDING FOR THE MODEL HARDWARE STANDARD

Anthropic's Model Hardware Standard (MHS) extends MCP-style agent interoperability from software into physical devices, creating new safety challenges where unreliable or repeated commands can cause real-world damage.

YOU DESERVE BETTER CI. START WITH OUR 30-DAY TRIAL. KICK THE TIRES →

KUBERNETES V1.37: SCALE WORKLOADS TO ZERO WITH HORIZONTALPODAUTOSCALER

Kubernetes v1.37 makes horizontal pod autoscaling to zero replicas a Beta feature, enabled by default. A HorizontalPodAutoscaler can now scale a workload all the way down to zero pods and bring it back up based on object or external metrics, without requiring an add-on or Alpha feature gate as previous versions did. The feature works for queue consumers and batch processors but requires at least one object or external metric, since CPU and memory metrics disappear once no pods are running. The first Alpha version shipped in Kubernetes v1.16, and SIG Autoscaling plans to collect operational feedback before considering a GA graduation.

SECURITY INCIDENT - BGP HIJACKING

An unauthorized BGP announcement diverted traffic for a Softaculous-owned /24 for roughly 33 hours, allowing the attacker to intercept requests and obtain valid Let's Encrypt certificates because ACME validation traffic was hijacked too. A small number of Virtualizor systems later downloaded a malicious update package, showing how routing attacks can cascade into software supply-chain compromise.

MANAGED POSTGRESQL VS. SELF-HOSTED POSTGRESQL: KEY BENEFITS AND TRADE-OFFS

Managed PostgreSQL services reduce the operational tax of self-hosting by transferring infrastructure, patching, backups, high availability, and platform security responsibilities to the provider. Self-managed PostgreSQL remains preferable when organizations need deep control, specialized configurations, unsupported extensions, or have mature platform engineering and operational capabilities.

METAL3 MEETS KUBEVIRTBMC: PROVISIONING KUBEVIRT VMS LIKE BARE METAL

KubeVirtBMC can be paired with Metal3, a CNCF incubating project, to provision KubeVirt virtual machines as if they were physical bare-metal servers. Metal3 uses OpenStack Ironic under the hood to handle hardware inspection, boot device control, and OS image writing via standard IPMI or Redfish interfaces. KubeVirtBMC creates virtual BMC endpoints for KubeVirt VMs, so Metal3 has no way to distinguish them from real hardware. This post walks through a full end-to-end setup that configures Redfish virtual media boot without PXE or DHCP and provisions a VM with a live ISO image.