devops

OpenTofu v1.12.0 lands with variable-driven prevent_destroy, a destroy=false lifecycle flag, and dual output modes — features the Terraform tracker left open since 2016.

Grafana Labs shipped version 13 at its annual conference in Barcelona, graduating dynamic dashboards and Git Sync to GA while delivering a rebuilt Loki that runs aggregation queries up to 10x faster.

Google Cloud Run Worker Pools hit general availability on April 14, 2026, shipping with Blackwell GPU support and CREMA, an open-source KEDA-based autoscaler for queue-driven workloads.

GitHub released the Enterprise Server 3.21 release candidate on May 13, making organization custom properties generally available along with Projects hierarchy views, REST API 2026-03-10, and secret scanning and Actions workflow improvements.

GitLab disclosed a reduction in force on May 11, plans to shed up to 30% of its country footprint, remove up to three management layers, and reorganize R&D into roughly 60 teams by June 1.

A malicious build of Checkmarx's Jenkins AST plugin was live on the Jenkins Marketplace from May 9 at 01:25 UTC to May 10 at 08:47 UTC, the latest TeamPCP intrusion against Checkmarx weeks after the April KICS wave.

CVE-2026-3854 let any authenticated user run code on GitHub's backend with a single git push. GitHub patched github.com in two hours on March 4; public disclosure on April 28 found most Enterprise Server instances still vulnerable.

GitHub moved custom runner images out of preview on March 26, exposing a snapshot keyword that turns a workflow run into a versioned VM image — and Copilot's own cloud agent cut another 20 percent off its cold start using it.

GitLab's April 16 release graduates a security agent that opens ready-to-merge fixes for confirmed SAST findings, ships a beta CI pipeline agent and a generally available analytics agent, and gives administrators enforceable monthly caps on Duo Agent Platform credits.

GitLab's April release adds a CI Expert Agent that generates pipelines from repository analysis, moves Agentic SAST vulnerability resolution to GA, and delivers natural-language DevOps analytics.

Kubernetes v1.36, releasing April 22, brings accelerated SELinux volume labelling to GA, expands Dynamic Resource Allocation for AI hardware, and permanently removes the insecure gitRepo volume driver.

The CNCF expanded its Kubernetes AI Conformance program from 18 to 31 certified platforms while introducing new requirements for disaggregated inference, high-performance networking, and agentic workload support.