devops

CNCF graduated Cloud Native Buildpacks on August 11, formalizing a build model that shifts base-image patching from Dockerfiles to a centralized builder.

GitHub detailed a technical-preview Actions network firewall and rounded up npm and Actions defaults changed since February, drawing sharp Hacker News debate over delay-based defenses versus package signing.

GitLab's 19.2.1, 19.1.3, and 19.0.5 patch release fixes 13 vulnerabilities, including three high-severity flaws and a prompt-injection bug in Duo Code Review.

A GitHub Actions failure on August 6 knocked out workflows, Pages, and Copilot for over eight hours, extending a run of dozens of monthly incidents this year.

Dependabot now waits three days before proposing new dependency versions by default. GitHub says the delay keeps freshly compromised releases out of update pull requests; security updates are exempt and repositories can opt out.

npm v12 disables install scripts, Git dependencies, and remote-URL dependencies by default, closing the execution path several npm worms exploited over the past year.

AWS added an Express mode to CloudFormation that ends deployments once configuration is applied instead of waiting for resources to stabilize, available in all commercial Regions at no extra cost.

GitLab's next-generation source code management, shown at its Transcend event, keeps the Git protocol but rebuilds the backend so agents query repos server-side instead of cloning them.

OpenTofu v1.12.0 lands with variable-driven prevent_destroy, a destroy=false lifecycle flag, and dual output modes — features the Terraform tracker left open since 2016.

Grafana Labs shipped version 13 at its annual conference in Barcelona, graduating dynamic dashboards and Git Sync to GA while delivering a rebuilt Loki that runs aggregation queries up to 10x faster.

Google Cloud Run Worker Pools hit general availability on April 14, 2026, shipping with Blackwell GPU support and CREMA, an open-source KEDA-based autoscaler for queue-driven workloads.

GitHub released the Enterprise Server 3.21 release candidate on May 13, making organization custom properties generally available along with Projects hierarchy views, REST API 2026-03-10, and secret scanning and Actions workflow improvements.