DevOps Weekly Digest - Week 36, 2026
⚡ Curated updates from Kubernetes, cloud native tooling, CI/CD, IaC, observability, and security - handpicked for DevOps professionals!
📌 Handpicked by DevOps Daily - Your weekly dose of curated DevOps news and updates!
⚓ Kubernetes
📄 OpenTelemetry has graduated… now what?
In case you missed it: OpenTelemetry (OTel) has officially achieved CNCF graduated status! It now stands proudly alongside amazing open source projects such as Kubernetes and Prometheus, to name just
📅 Aug 31, 2026 • 📰 CNCF Blog
📄 Optimize EKS operations with agents: Reduce MTTR with AWS DevOps Agent and a Kubernetes Operator
Introduction Running workloads on Amazon Elastic Kubernetes Service (Amazon EKS) can involve managing failures like OOMKilled or IP exhaustion. Engineers must repeatedly collect pod logs, trace events
📅 Aug 31, 2026 • 📰 AWS DevOps Blog
📄 Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles
Pod Certificate / Cluster Trust Bundles Blog Post Kubernetes brings a wealth of features that make it easy to run your production workloads securely and reliably. While aspects like scheduling, health
📅 Aug 28, 2026 • 📰 Kubernetes Blog
📄 Scale before the spike: Predictive autoscaling for GPU workloads on Kubernetes
The 3 AM Call We got paged one Tuesday morning. A critical production service had crashed under traffic—not gradually degraded, but crashed. Hundreds of pending pods. Users were seeing 15–20% error ra
📅 Aug 28, 2026 • 📰 CNCF Blog
📄 Your Kubernetes platform is ready for containers. Is it ready for AI?
Kubernetes has given platform teams a consistent way to deploy, scale, and operate containerized applications. Now, many of those same teams are being asked to support AI. The transition is already un
📅 Aug 28, 2026 • 📰 CNCF Blog
📄 Pulumi Kubernetes v4.34.0: CRDs as provider extensions
We’re really excited to bring you v4.34.0, the newest version of the Pulumi Kubernetes provider, which includes improved support for Kubernetes Custom Resource Definitions (CRDs). As with any release,
📅 Aug 28, 2026 • 📰 Pulumi Blog
📄 Kubernetes v1.37: Metrics API graduates to stable
Kubernetes v1.37 promotes the metrics.k8s.io API to stable (v1). This API provides CPU and memory usage for nodes and Pods, and is the API behind commands such as kubectl top and resource-metrics-base
📅 Aug 27, 2026 • 📰 Kubernetes Blog
📄 Building an AI factory on Kubernetes
An AI factory is not just a model or a cluster. It is a pool of GPUs that many teams draw from at once: one team fine-tuning, another serving inference, a third running evaluations, all on...
📅 Aug 27, 2026 • 📰 CNCF Blog
📄 Kubernetes 1.37, with Dipesh Rawat
Dipesh Rawat is a Software Developer at IBM, CNCF Ambassador, CNCF Kubestronaut and SIG Docs Tech Lead. A contributor across multiple Kubernetes release cycles, he serves as the Release Lead for Kuber
📅 Aug 26, 2026 • 📰 Kubernetes Podcast
📄 Break-glass access for Amazon EKS when federated identity fails
Implementing break-glass access for Amazon EKS clusters removes the circular dependency where a federated identity provider outage locks you out of the clusters you need to reach to fix it. This post
📅 Aug 26, 2026 • 📰 AWS Containers Blog
📄 Kubernetes v1.37: Garhwal
Editors: Arsh Sharma, Christopher Tineo, Kirti Goyal, Sophia Ugochukwu, Swathi Rao, Troy Connor Similar to previous releases, the release of Kubernetes v1.37 introduces new Stable, Beta, and Alpha fea
📅 Aug 26, 2026 • 📰 Kubernetes Blog
☁️ Cloud Native
📄 Secure by default is your only way forward
The newest worker on your team builds with whatever it finds and never asks what deserves your trust. Our answer is a hardened foundation and a boundary built for agents.
📅 Aug 31, 2026 • 📰 Docker Blog
📄 Friday Five — August 28, 2026
Streamlining container security: Red Hat Hardened Images now supported in AWS InspectorScan API and ECR Basic scanningAWS InspectorScan API and ECR Basic scanning now support Red Hat Hardened Images.
📅 Aug 28, 2026 • 📰 Red Hat Blog
📄 Moving from Minimus to Docker Hardened Images
The Minimus registry goes offline on October 22. Here is the migration path, the free help Docker is offering, and where to start.
📅 Aug 25, 2026 • 📰 Docker Blog
📄 Streamlining container security: Red Hat Hardened Images now supported in AWS InspectorScan API and ECR Basic scanning
Software security teams can face an overwhelming influx of vulnerability alerts, often stemming from non-essential packages bundled inside traditional container base images. When developers inherit ba
📅 Aug 25, 2026 • 📰 OpenShift Blog
🔄 CI/CD
📄 A human look at the AI future
Honest reflections on the uncertainty, excitement, and opportunities of the agentic era.
📅 Aug 28, 2026 • 📰 LaunchDarkly Blog
📄 OpenClaw went viral. Meet the maintainers building and securing it.
OpenClaw is the fastest-growing project in GitHub history. Peter Steinberger and several maintainers share what they learned in the project's first six months. The post OpenClaw went viral. Meet the m
📅 Aug 27, 2026 • 📰 GitHub Blog
📄 Stories from the Factory Floor: Running my baseball side project on an AI software factory
I turned my personal side project into a real-world testbed for our internal software factory implementation. Over a few weeks, the factory created and wired 21 flags for me—and changed how I ship.
📅 Aug 27, 2026 • 📰 LaunchDarkly Blog
📄 GitLab compliance frameworks: Adhere to SOC 2 in minutes
Compliance is the part of software delivery that everyone agrees is important, yet nobody enjoys. It often lives in spreadsheets, screenshots, and the quiet dread of an upcoming audit. GitLab's custom
📅 Aug 27, 2026 • 📰 GitLab Blog
📄 How to recognize your team with GitLab Achievements
Every team runs on people who go above and beyond. The engineer who fixes the flaky test nobody else will touch. The reviewer who turns your merge request around in an hour. The teammate who finishes
📅 Aug 27, 2026 • 📰 GitLab Blog
📄 Introducing Agent-Ready Code Repository & AI Code Review
Legacy SCMs can't handle agent-scale code volume. Learn how Harness Code Repository and built-in AI Code Review handle AI-generated code at scale using risk-bas | Blog
📅 Aug 27, 2026 • 📰 Harness Blog
📄 GitHub Copilot app for Beginners: Automate Dependabot pull request triage
Managing library updates can be tedious at times. Learn how the GitHub Copilot app can handle this type of repetitive task. The post GitHub Copilot app for Beginners: Automate Dependabot pull request
📅 Aug 26, 2026 • 📰 GitHub Blog
📄 You can't control what you can't see
What LaunchDarkly showed live on the Control Panel: how to see what's happening in production, act on it in real time, and test on data you already trust.
📅 Aug 26, 2026 • 📰 LaunchDarkly Blog
📄 Making room for what's next in the GitLab UI
Throughout this year, the product interface has been in a season of reduction. On the heels of dark mode, the tide has been moving out with a quieter application chrome, overall color reduction, and n
📅 Aug 26, 2026 • 📰 GitLab Blog
📄 Git was built for humans — agents need an upgrade
The industry is now racing to rebuild source code management for agents. We showed our answer at GitLab Transcend, but let’s reiterate why rebuilding the Git backend is only half the problem. Three th
📅 Aug 26, 2026 • 📰 GitLab Blog
📄 Developer Self-Service Pipelines with Harness IDP
Connect developer self-service to production with Harness IDP's pipeline integration. Automate deployments and boost velocity. Learn more. | Blog
📅 Aug 26, 2026 • 📰 Harness Blog
📄 How to evaluate LLMs before production
These are the lessons we learned evaluating LLMs for real-world secret scanning. The post How to evaluate LLMs before production appeared first on The GitHub Blog.
📅 Aug 25, 2026 • 📰 GitHub Blog
🏗️ IaC
📄 Amazon Bedrock AgentCore Memory now supports fine-grained access control
Amazon Bedrock AgentCore Memory now supports fine-grained access control (FGAC), enabling you to enforce per-user and per-tenant memory isolation through AgentCore Gateway without building custom auth
📅 Aug 28, 2026 • 📰 CloudFormation Updates
📄 Amazon Bedrock AgentCore Memory now supports flexible namespace variables
Amazon Bedrock AgentCore Memory now lets developers define flexible namespace variables to scope long-term memories along any application-specific dimension - such as organization, tenant, team, or en
📅 Aug 28, 2026 • 📰 CloudFormation Updates
📄 Pulumi Context API: query your infrastructure as a graph
Every platform team fields the same questions: What is running? What breaks if we change this? What can we safely delete? The answers exist, but they’re scattered across state files, cloud consoles, a
📅 Aug 26, 2026 • 📰 Pulumi Blog
📊 Observability
📄 Lunar Cyber Launches Token Exposure Monitoring as Infostealers Target Developer and AI Credentials
Bnei Brak, Israel, 31st August 2026, CyberNewswire
📅 Aug 31, 2026 • 📰 DevOps.com
📄 AWS Transform now in scope for FedRAMP Class C
AWS Transform is now in scope for FedRAMP Class C (formerly Moderate baseline) in the US East (Ohio) Region. You can now use AWS Transform to build applications and run workloads that are subject to F
📅 Aug 28, 2026 • 📰 CloudFormation Updates
📄 From one switch to a control panel: meet dataCollection
Sentry SDKs replace the sendDefaultPii boolean with dataCollection, granular options for user data, headers, bodies, GenAI data, and more.
📅 Aug 28, 2026 • 📰 Sentry Blog
📄 How to measure and improve instrumentation quality for better full-stack observability
Modern engineering teams instrument everything, with metrics, logs, traces, and profiles flowing from hundreds of services at once. But full-stack observability isn’t really about collecting more tele
📅 Aug 27, 2026 • 📰 Grafana Blog
📄 How to evaluate session replay software: a developer's guide
Compare session replay tools on recording methodology, privacy architecture, integration depth, overhead, AI-readability, and mobile support
📅 Aug 26, 2026 • 📰 Sentry Blog
📄 Learn, Connect, and Level Up at Zabbix Summit 2026
Let’s be honest. You could spend another October watching webinars at 1.5x speed while answering Slack messages, pretending you’ll “circle back” to that infrastructure project you’ve been meaning to a
📅 Aug 26, 2026 • 📰 Zabbix Blog
📄 The Grafana AI SDK for Go: a shared foundation for building AI applications
Starting an experiment with an LLM has never been easier. Keeping a growing collection of those experiments consistent is another matter. Earlier this year, as more teams began exploring AI features h
📅 Aug 25, 2026 • 📰 Grafana Blog
🔐 Security
📄 Threats Making WAVs - Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report includes the full attack vectors, from detection, in
📅 Aug 31, 2026 • 📰 Linode Blog
📄 Broadcom Launches Trusted Artifact Service for Spring Framework
Broadcom launches TrueSource Trusted Artifacts to provide hardened Spring dependencies, secure open source packages and automated vulnerability remediation.
📅 Aug 31, 2026 • 📰 DevOps.com
📄 Tide launched Raziel for AI security. It assumes hackers are inside.
Michael Loewy, co-founder of the Tide Foundation, says the security industry was already losing ground to hackers before AI. Everything The post Tide launched Raziel for AI security. It assumes hacker
📅 Aug 31, 2026 • 📰 The New Stack
📄 Gitea 1.27.3 is released
We are excited to announce the release of Gitea 1.27.3, the third patch release for the 1.27 series. It contains a large batch of security fixes covering Gitea Actions, the API, the package regist
📅 Aug 29, 2026 • 📰 Gitea Blog
📄 Gitea for VS Code 1.0.0 is released
We are happy to announce the first release of Gitea for VS Code. Gitea Actions, pull requests, and repository settings now live in the editor: workflow runs and job logs, native diffs and reviews,
📅 Aug 28, 2026 • 📰 Gitea Blog
📄 Security Incident Affecting JetBrains Cadence
We are investigating a security incident affecting JetBrains Cadence. Cadence is a JetBrains-hosted service that integrates with PyCharm through an optional plugin, and lets you run your projects on c
📅 Aug 28, 2026 • 📰 JetBrains Blog
📄 Neo Security: Securing Infrastructure in the Agentic Era
Recently, AI systems have started turning up exploitable flaws in code that survived decades of human review. The frontier labs have released useful tools to help uncover many of these flaws through a
📅 Aug 28, 2026 • 📰 Pulumi Blog
📄 Security Advisory: CVE-2026-81934
What happened? Redis identified and remediated a use-after-free vulnerability in TLS pending-data processing. Under specific conditions, an authenticated attacker could trigger the flaw and potentiall
📅 Aug 28, 2026 • 📰 Redis Blog
📄 Why Your AI Application Is Exposed Snyk
AI applications can pass security scans yet remain exploitable through chained attacks across models, tools, data, and business workflows. Learn how DAST, AI pentesting, and red teaming work together
📅 Aug 26, 2026 • 📰 Snyk Blog
📄 Preparing OpenStack for the post-quantum era: A systematic approach to crypto-agility
OpenStack powers clouds used by some of the most security-sensitive organizations on the planet: government agencies, telecommunications providers, financial institutions, and healthcare systems. Behi
📅 Aug 25, 2026 • 📰 OpenShift Blog
📄 Patching at Fleet Scale, Twice: How DigitalOcean Closed Januscape and the AMD Safe RET Issue Without Customer Impact
Setting the stakes In early July, security researcher Hyunwoo Kim discovered Januscape (CVE-2026-53359), a flaw in KVM’s handling of nested virtualization that could allow a malicious guest to escape
📅 Aug 24, 2026 • 📰 DigitalOcean Blog
💾 Databases
📄 PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
📅 Aug 31, 2026 • 📰 Linode Blog
📄 A Self-Baked Async FFI Framework for Rust C# Interop
How we got tokio and .NET's async runtime talking to each other, over the C ABI
📅 Aug 31, 2026 • 📰 ScyllaDB Blog
📄 Prisma ORM with TiDB: The Serverless Setup Guide for AI Apps
Key Takeaways Introduction Prisma is the ORM (Object-Relational Mapper) most teams use for a TypeScript project, and it connects to TiDB through the standard MySQL provider, so a schema written for My
📅 Aug 28, 2026 • 📰 TiDB Blog
📄 Building a New Rust Driver for ScyllaDB’s DynamoDB API – with 58% More Throughput
How our new Rust driver load-balances DynamoDB-style requests across a ScyllaDB cluster, and how we extended Latte to measure its performance
📅 Aug 27, 2026 • 📰 ScyllaDB Blog
📄 Modernizing database workloads on Red Hat OpenShift
As organizations continue to modernize their workloads, one of the most important questions is how to support the full range of database workloads, including SQL, NoSQL, vector, and in-memory database
📅 Aug 26, 2026 • 📰 OpenShift Blog
📄 pg_statviz 1.2 released with PostgreSQL 19 support and new features
Just in time for the PostgreSQL 19 betas, I'm excited to announce release 1.2 of pg_statviz, the minimalist extension and utility pair for time series analysis and visualization of PostgreSQL internal
📅 Aug 25, 2026 • 📰 PostgreSQL News
📄 Open Weight Models Are Chapter One. The Data Layer Is the Rest of the Book.
On July 24, Jensen Huang made the first post of his life on X. It wasn’t a product launch or a victory lap. It was a policy letter signed by 25 companies, doubling to 50 within a day, asking Washingto
📅 Aug 24, 2026 • 📰 TiDB Blog
🌐 Platforms
📄 The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced passwords for RDP credentials to connect to the vic
📅 Aug 31, 2026 • 📰 Linode Blog
📄 The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses originating in South-Africa and hosted by Volum
📅 Aug 31, 2026 • 📰 Linode Blog
📄 Introducing Adaptive Intelligence: undermining the economics of every bot attack
Bot operators have historically had the economic advantage, bypassing static, deterministic detection rules with cheap proxies and retooling. Cloudflare's new Adaptive Intelligence engine flips this d
📅 Aug 31, 2026 • 📰 Cloudflare Blog
📄 Amazon EC2 C8gn instances are now available in AWS Europe (Paris) region
Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C8gn instances, powered by the latest-generation AWS Graviton4 processors, are available in the AWS Europe (Paris) region. The C8gn instances
📅 Aug 28, 2026 • 📰 CloudFormation Updates
📄 What’s new with Google Cloud
Want to know the latest from Google Cloud? Find it here in one handy location. Check back regularly for our newest updates, announcements, resources, events, learning opportunities, and more. Tip: Not
📅 Aug 28, 2026 • 📰 Google Cloud Blog
📄 Build your own continuous modernization pipeline with AWS Transform custom
Introduction Development velocity has reached new heights with AI-driven development tools and practices. Organizations are generating code faster than ever before. But that speed carries risk. Resear
📅 Aug 28, 2026 • 📰 AWS DevOps Blog
📄 Canonical joins the Open Secure AI Alliance
Canonical is now part of the Open Secure AI Alliance, announced by NVIDIA with partners across cloud computing, cybersecurity, enterprise software, open source foundations, and AI research. The allian
📅 Aug 28, 2026 • 📰 Ubuntu Blog
📄 BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents
Bot operators now have a home in the Cloudflare dashboard to manage submissions. This update adds submission status tracking, submission editing, and a behavior model so operators can accurately decla
📅 Aug 28, 2026 • 📰 Cloudflare Blog
📄 From Stalled PoCs to Enterprise AI: Why an Open Platform Holds the Key
Like many enterprises, you have already put real time, budget and engineering attention into enterprise AI. The models have been tested, prototypes demoed and early use cases validated. And as more ti
📅 Aug 28, 2026 • 📰 SUSE Blog
📄 Celebrating excellence: Honoring the Red Hat Academy APAC award winners
The future of technology depends on a workforce equipped with practical, industry-relevant skills. As organizations accelerate their adoption of open source, cloud, automation, and enterprise technolo
📅 Aug 28, 2026 • 📰 Red Hat Blog
📄 How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet.
📅 Aug 27, 2026 • 📰 Cloudflare Blog
📄 Reimagining work: How Pythian’s internal AI playbook delivers customer ROI
When Pythian rolled out Google Cloud’s Gemini Enterprise across our 500-person company in 27 countries, the goal was simple: use our own company as a proving ground to discover how enterprise AI actua
📅 Aug 27, 2026 • 📰 Google Cloud Blog
📰 Misc
📄 Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ch
📅 Aug 31, 2026 • 📰 DevOps.com
📄 Anthropic’s Claude fixed all 10 alignment failures. Then it tried to cheat 2.4% of the time.
Anthropic is putting AI agents to work on one of the field’s hardest problems: keeping other AI systems aligned with The post Anthropic’s Claude fixed all 10 alignment failures. Then it tried to cheat
📅 Aug 31, 2026 • 📰 The New Stack
📄 Your agent context needs a development lifecycle
Skills, agent configurations, prompt instructions, and rules files. These artifacts now determine what your coding agents produce. They shape every The post Your agent context needs a development life
📅 Aug 31, 2026 • 📰 The New Stack
📄 DeepSeek’s first vision model vs. Gemini 3.7 Flash: It comes down to spend vs. speed
DeepSeek released V4 Flash Vision Exp on August 21, its first model that accepts image input. Image input means a The post DeepSeek’s first vision model vs. Gemini 3.7 Flash: It comes down to spend vs
📅 Aug 31, 2026 • 📰 The New Stack
📄 From Leaderboards to Model Profiles: A Deep Dive Evaluation of LLMs for Agentic Coding
Beyond the resolve rate Imagine plugging two LLMs from different frontier labs into the same coding agent and finding that they solve exactly the same number of benchmark tasks. If the evaluation stop
📅 Aug 31, 2026 • 📰 JetBrains Blog
📄 VS Code 1.135 Gives AI Coding Agents a Second Opinion
VS Code 1.135 adds Rubber Duck AI review, persistent agent sessions, Agent Host infrastructure and clearer token usage as Microsoft builds a more agentic IDE.
📅 Aug 31, 2026 • 📰 DevOps.com
📄 Sunsetting of the JetBrains Teacher Pack for Bootcamps
After careful consideration, we’ve decided to sunset the JetBrains Teacher Pack for Bootcamps. If you’re planning to run a bootcamp and would like support from JetBrains, you can submit one final appl
📅 Aug 31, 2026 • 📰 JetBrains Blog
📄 The State of Django 2026: Boring is so back
Welcome to the highlights from the fifth annual Django Developers Survey, a collaboration between the Django Software Foundation and PyCharm. This year’s report draws on responses from nearly 3,500 Dj
📅 Aug 28, 2026 • 📰 JetBrains Blog
📄 AI harnesses for telco autonomous networks
As the telco industry transitions toward Autonomous Networks Level 4, a fundamental architectural challenge has emerged: how do you build a secure, reliable and interoperable AI harness that bridges p
📅 Aug 28, 2026 • 📰 Ubuntu Blog
📄 Managing enterprise AI at scale: Hosting, deployment patterns, and Day 2 operations
In our previous article, Enterprise AI model selection: Balancing performance, privacy, and operational fit, we described the 4 layers that make up an effective enterprise AI architecture. In this art
📅 Aug 28, 2026 • 📰 Red Hat Blog
📄 Learning while building: How Red Hat Training accelerates technical growth
Managing complex data systems and learning new software platforms can feel like navigating a maze in the dark. Whether you’re stepping into a command-line environment for the 1st time or mapping intri
📅 Aug 28, 2026 • 📰 Red Hat Blog
📄 Arduino® VENTUNO™ Q is available for pre-order with Ubuntu pre-installed
London, UK – August 25, 2026 – Following our initial collaboration announcement in March 2026, Canonical and Arduino (a subsidiary of Qualcomm Technologies, Inc.) are excited to announce that VENTUNO
📅 Aug 25, 2026 • 📰 Ubuntu Blog
We earn commissions when you shop through the links below.
Svix
Webhooks as a service
Svix Dispatch sends your webhooks for you: retries with exponential backoff, signed payloads, idempotency keys, and a delivery log your customers can see.
DigitalOcean
Cloud infrastructure for developers
Simple, reliable cloud computing designed for developers
DevDojo
Developer community & tools
Join a community of developers sharing knowledge and tools
SMTPfast
Developer-first email API
Send transactional and marketing email through a clean REST API. Detailed logs, webhooks, and embeddable signup forms in one dashboard.
QuizAPI
Developer-first quiz platform
Build, generate, and embed quizzes with a powerful REST API. AI-powered question generation and live multiplayer.
Want to support DevOps Daily and reach thousands of developers?
Become a SponsorFound an issue?
Help us improve this content by reporting any errors, typos, or suggestions for enhancement.