47 articles tagged
Lambda full IAM resource-based policies shipped on 25 August 2026 at no extra charge. The launch adds three APIs on a new 2026-07-09 path, keeps the old 20 KB ceiling, and leaves two AWS pages in conflict.
Azure App Service published its Node 22 LTS retirement on 24 August 2026 and named Node 24 LTS as the target. The Node.js schedule puts Node 24 into maintenance 57 days later and ends it in April 2028.
Azure Application Gateway WAF can now return a custom status code and body instead of a bare 403. The announcement claims parity with Front Door, but only Front Door publishes the five permitted codes.
Cloudflare announced dashboard editing for Cloudflare Tunnel origin parameters on 18 August 2026. Its reference doc is dated 7 May, omits a fourth category, and locks two proxy parameters to config files.
Cloudflare announced five WAF managed rules on 17 August 2026 for release on 24 August in Log mode. Its own override documentation contradicts that: ruleset and tag overrides apply to future rules.
Vercel's 21 August 2026 CLI update added dns, domains and project subcommands and says all of them support JSON for scripts and agents. The reference docs say eight have no flag to skip confirmation.
Vercel's comments CLI landed on 20 August 2026 with a JSON mode aimed at agents. The reference page carries a last_updated date of 20 October 2018, truncates its permissions callout, and removes the delete confirmation
AWS gave CloudShell an "edit" command on 17 August 2026 and aimed it at IaC and agentic work. VPC environments have no persistent storage, and sessions idle out in 20 to 30 minutes.
AWS raised the Amazon ECR replication rule limit to 25 per registry on 17 August 2026. The quota table shows ap-east-2 still capped at 10, and the 25 unique-destination ceiling is unchanged.
The 17 August 2026 announcement says recordings now survive across browser tabs. The Amazon Q Developer guide, live on the same day, says the session ends when the tab closes.
DynamoDB Streams ABAC went live 19 August 2026: 50 tags per stream, a 10 KB cap, existing accounts disabled by default, and a seven-calendar-day opt-out window.
The 21 August 2026 AWS announcement names custom health checks, UI banners and watch/compare tuning. The EKS user guide lists exactly one supported argocd-cm field, and says unsupported keys are ignored without an error.
AWS IAM role manager reached general availability on 12 August 2026 across six service consoles. Four of them attach PowerUserAccess by default, and AWS's published lockdown SCP denies an action role reuse needs.
AWS added the denying policy ARN to S3 403 messages on 13 August 2026. It appears only on explicit deny, covers five policy types, and skips bucket policies, VPC endpoint policies and directory buckets.
AWS Secrets Manager now rotates Jenkins and SonarQube tokens with no Lambda code. The user guide adds a condition the 11 August 2026 announcement omits: the controller must answer on the public internet.
Vercel started metering Deployment Storage and Functions Storage at $0.10 per GB-month on 21 August 2026. The Pro retention default keeps production deployments for one year, and nobody set it.
GitHub announced on 11 June 2026 that the windows-11-arm runner label migrates to the Visual Studio 2026 image in early September. The live runner-images READMEs show four component groups the new image does not carry
GitHub published two Copilot launch posts on 21 August 2026 and two docs pages to match. They disagree on which plans qualify, what a session costs and whether the extra merge approval is on by default.
Vercel's new vcr command group landed on 20 August 2026. Two live Vercel pages disagree on repository limits, and the 500 MB layer ceiling stops fat images before the 15 GB total does.
Amazon EKS charges $0.60 per cluster hour once a Kubernetes version leaves standard support, six times the $0.10 base rate. That number, not a job title, is what a DevOps hire is really being asked to prevent.
Buying DevOps services in 2026 is mostly a decision about who owns the upgrade treadmill. Kubernetes ships a minor version every four months with 14 months of support, and AWS, Google and Microsoft all charge
CNCF's Q1 2026 Technology Radar places Backstage, Helm and kro in Adopt, and just 28% of surveyed organisations run a dedicated platform team. Here is how to build an internal developer platform that engineers use
Terraform 1.16.0-beta1 (23 July 2026) adds destroy = false to resource lifecycle blocks, on_failure modes for action triggers, import blocks inside modules and Mermaid graph output. A working guide to each, with
Terraform AzureRM provider 5.0 landed on 27 July 2026. It registers no Azure Resource Providers by default, turns enhanced validation off, and deletes the legacy App Service resources. Here is the HCL that keeps your
GitHub Enterprise Importer reached general availability for GitLab sources on 3 August 2026, with a gh gl2gh CLI extension. It moves repositories, issues and merge requests. It does not move your pipelines.
GoDaddy, Cloudflare and AWS now all register domains over an API, and coding agents can call them. The three purchase contracts differ in ways that decide whether a retry costs you nothing or charges you twice.
Between 31 August 2026 and 17 August 2027, seven upstream deadlines land on the same engineering team. A release platform that absorbs them beats a quarterly scramble, and the difference is mostly plumbing.
GitHub resumes minimum version enforcement for self-hosted runners on 25 September 2026, with brownouts from 24 August. How to inventory a fleet, fix each runner type, and avoid the 30-day trap.
AWS marked Step Functions Local unsupported and LocalStack made its auth token mandatory in 2026.03.0. Here are the three local integration-testing setups that still work, with commands, licence costs and gaps.
Terraform moved to the BUSL license in 2023 and IBM now owns HashiCorp. OpenTofu, the MPL 2.0 fork under the Linux Foundation, has diverged. A 2026 decision guide: pricing, feature gaps and migration steps.
Docker Compose 5.3.0 (2 July 2026) adds pre_start init containers that run migrations, fix permissions, and generate config before a service boots, gating startup on exit 0. Four copy-paste patterns inside.
On July 27, 2026, Node.js patched HIGH-severity flaws across the 26.x, 24.x and 22.x lines, days after Next.js shipped its own. Here is which version to run and how to patch fast without breaking production.
CloudNativePG 1.30, released July 6, 2026, adds a DatabaseRole CRD for GitOps-friendly roles, a Lease-based primary election for safer failover, and three security fixes. Here is what changed, the config that matters
AI agents are long-running, stateful and GPU-hungry, and standard Deployments fight them. Here is how Agent Sandbox, warm pools and Kubernetes DRA change the design in 2026, with configs and comparison tables.
PostgreSQL 19 beta 2 landed on 16 July 2026 with online REPACK, native SQL/PGQ graph queries, self-scaling async I/O, parallel autovacuum and controllable query plans. Here are the five changes production teams should
Cursor Automations, live since March 2026, run cloud agents on a timer or on events from Slack, GitHub, Linear and PagerDuty. This guide covers setup, six useful workflows, costs on Pro and Ultra, and guardrails.
Kubernetes 1.35 is the last version to support containerd 1.x; from 1.36 containerd 2.0 is the floor. Here is what breaks in your node config, how to find at-risk nodes, and how GKE, EKS and AKS differ.
Amazon Bedrock's new Mantle console connects Claude Code, Codex, Cursor and more to GPT, Claude and open-weight models with IAM or a Bedrock API key. Here is how to wire each coding agent through Bedrock.
TanStack's release pipeline authenticated 84 malicious npm versions in six minutes using a valid OIDC token. No token was stolen. Here is the chain, and the controls that close it as of July 2026.
LangChain's June 2026 survey of 1,340 practitioners found 89% run observability but only 52.4% run offline evals. Here is the four-gate CI setup that closes the gap.
GitHub reduced hosted runner prices by up to 39% on 1 January 2026, yet a macOS minute still costs $0.062 against $0.006 for Linux. Google found 84% of pass-to-fail transitions were flaky tests. Seven rules for a suite
Ingress-NGINX reached end of life in March 2026, and about half of cloud native environments ran it. A tested migration path to Gateway API using ingress2gateway 1.0, including what it cannot translate.
Ingress NGINX maintenance ended in March 2026: no releases, no bugfixes, no security updates. ingress2gateway v1.1.0 maps 34 ingress-nginx annotations to Gateway API, refuses 7 more, and there are two NGINX providers
Kubernetes v1.35 introduced the Workload API and native gang scheduling. Four months later v1.36 replaced the API version entirely. Here is the current shape, the migration, and the GPU maths that justifies it.
In-place pod resize graduated to stable in Kubernetes v1.35, and pod-level resize reached beta in v1.36. What changed, what still forces a restart, and how to wire it to the Vertical Pod Autoscaler.
npm 12 is generally available and tagged latest. Lifecycle scripts, git dependencies and remote tarballs are now opt-in, node-gyp builds are blocked, and the failure shows up in CI first. Here is the migration.
AWS removed its advanced-instances tier on June 30, 2026, so you can manage Azure VMs from AWS Systems Manager at no per-node charge. A setup walkthrough, an honest SSM versus Azure Arc comparison, and the App Manager
