DevOps Weekly Digest - Week 38, 2026
⚡ Curated updates from Kubernetes, cloud native tooling, CI/CD, IaC, observability, and security - handpicked for DevOps professionals!
📌 Handpicked by DevOps Daily - Your weekly dose of curated DevOps news and updates!
⚓ Kubernetes
📄 Modernizing Microsoft SQL Server: Choosing the right path with Red Hat
Modernization is often presented as a destination: Move an application to containers, adopt Kubernetes, and become cloud-native. Reality and appetite are usually more nuanced than that. They start wit
📅 Sep 14, 2026 • 📰 Red Hat Blog
📄 Kubernetes v1.37: Native Histograms Graduates to Beta
I'm excited to announce that native histogram support for Kubernetes metrics is graduating to Beta and is enabled by default in Kubernetes v1.37! Native histograms (previously introduced as Alpha in K
📅 Sep 11, 2026 • 📰 Kubernetes Blog
📄 Kubernetes v1.37: Scheduler Preemption for In-Place Pod Resize (Alpha)
In Kubernetes, resource allocation has historically been a static decision made during a Pod's initial scheduling and placement. With the graduation of the core in-Place Pod resize feature to General
📅 Sep 10, 2026 • 📰 Kubernetes Blog
📄 Kubernetes disaster recovery: Guidance from three reproducible failure scenarios
Scope This document describes three failure scenarios that separate having backups from being able to recover, and the guidance that follows from each. Every scenario is reproducible on a laptop from
📅 Sep 10, 2026 • 📰 CNCF Blog
📄 Closing the loop: From network policy intent to verified reality
Part 3 of a series on implementing zero trust security in Red Hat OpenShift with the layered zero trust validated pattern.Kubernetes NetworkPolicies are one of the most powerful—and most misunderstood
📅 Sep 10, 2026 • 📰 OpenShift Blog
📄 Kubernetes v1.37: Introducing Node Lifecycle Conditions
Kubernetes has many ways to describe what is happening on a Node. Readiness, taints, Pod state, labels, annotations, and provider-specific APIs each expose part of the picture. What has been missing i
📅 Sep 9, 2026 • 📰 Kubernetes Blog
📄 Whose GPUs are these, anyway? Secure, self-service metrics for multi-tenant Kubernetes
The question that stopped the meeting It was a routine cost review. The slide showed the month’s GPU spend, the biggest line on the whole infrastructure bill, and someone asked a five-word question: “
📅 Sep 9, 2026 • 📰 CNCF Blog
📄 Kubernetes v1.37: Advancing Workload-Aware Scheduling
AI/ML and complex batch workloads continue to push the boundaries of Kubernetes scheduling. Following the foundational workload-centric enhancements introduced in previous releases, Kubernetes v1.37 d
📅 Sep 8, 2026 • 📰 Kubernetes Blog
☁️ Cloud Native
📄 Cilium 1.20: Gateway API ExternalAuth, TCPRoute/UDPRoute, ENI IPAM for IPv6, and more
Cilium 1.20, the second major open source Cilium release of 2026 after Cilium 1.19, is finally here. Three themes stand out in this release: Thank you to every contributor, reviewer and maintainer who
📅 Sep 14, 2026 • 📰 CNCF Blog
📄 Amazon SageMaker HyperPod now supports model caching for faster inference autoscaling and reduced cold starts
Amazon SageMaker HyperPod now supports model caching, an inference optimization that pre-loads model weights and container images onto cluster nodes so pods start in seconds instead of minutes. When r
📅 Sep 11, 2026 • 📰 CloudFormation Updates
📄 Building a reliable cloud native foundation for distributed AI training
AI workloads are changing what platform teams need from infrastructure. Provisioning GPUs and standing up a cluster no longer makes a platform “AI-ready.” Once training spans more than one node, the b
📅 Sep 11, 2026 • 📰 CNCF Blog
📄 6 Benefits of Sandbox Environments (and How Docker Sandboxes Delivers Them)
Learn about the key benefits of sandbox environments with Docker including isolation, definable controls, secrets credential handling, and more.
📅 Sep 8, 2026 • 📰 Docker Blog
📄 SUSE a Leader in the 2026 Gartner® Magic Quadrant™ for Container Management
We’re proud to share that SUSE has been recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Container Management. To us, this recognition reflects a strategy built entirely around you: giv
📅 Sep 8, 2026 • 📰 SUSE Blog
📄 Red Hat named a Leader in the 2026 Gartner® Magic Quadrant™ for Container Management for the fourth consecutive year
For the fourth consecutive year, Red Hat has been recognized as a Leader in the Gartner® Magic Quadrant™ for Container Management. We’re thrilled by this recognition and believe it represents continue
📅 Sep 8, 2026 • 📰 OpenShift Blog
🔄 CI/CD
📄 GitLab’s Critical Patch Closes a Path Traversal Flaw Attackers Are Already Probing
GitLab patches two critical flaws, including a CVSS 10.0 unauthenticated file-read vulnerability, putting self-managed instances under urgent pressure to upgrade.
📅 Sep 14, 2026 • 📰 DevOps.com
📄 GitLab Dedicated: Compliance for a new regulatory era
Enforcements such as NIS2 are no longer a future planning consideration. The European Union Agency for Cybersecurity's (ENISA) NIS360 report confirms that supervisory authorities are actively assessin
📅 Sep 14, 2026 • 📰 GitLab Blog
📄 MLOps pipeline: Stages, tools, and deployment workflow
Learn how an MLOps pipeline manages data validation, feature engineering, training, evaluation, deployment, and production feedback loops.
📅 Sep 13, 2026 • 📰 LaunchDarkly Blog
📄 DevOps’ Three Ways Were Never About Tooling
Somewhere along the way, DevOps became a tooling conversation. Ask someone how mature their DevOps practice is and the answer will often involve CI/CD pipelines, automated testing, infrastructure as c
📅 Sep 11, 2026 • 📰 DevOps.com
📄 Marketing ops as code: Automating events from planning to follow-up on GitHub
If you can write down how you do your work, you can automate it. Here's what I did to support GitHub's APAC marketing team. The post Marketing ops as code: Automating events from planning to follow-up
📅 Sep 11, 2026 • 📰 GitHub Blog
📄 The AI software factory era: A five-part video series
Marek Poliks, Head of AI at LaunchDarkly, and Mirco Hering, Managing Director of AI Delivery at Accenture, discuss what it takes to automate the SDLC.
📅 Sep 11, 2026 • 📰 LaunchDarkly Blog
📄 Stories from the Factory Floor: My own private software factory
Four agents, one Jira board, and a week’s worth of bugs nobody had noticed.
📅 Sep 11, 2026 • 📰 LaunchDarkly Blog
📄 How to calculate DevOps platform total cost of ownership
There’s nothing like budget pressure to put your DevOps platform under a microscope. But subscription fees and license costs only tell one part of the story. The total cost of ownership (TCO) for a De
📅 Sep 11, 2026 • 📰 GitLab Blog
📄 GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8
📅 Sep 11, 2026 • 📰 GitLab Blog
📄 GitHub Copilot app for Beginners: Using the diff, terminal, and browser
Checking agent-generated code usually means hopping between tabs. Learn how to view diffs, run terminal commands, and preview web apps side by side in the GitHub Copilot app. The post GitHub Copilot a
📅 Sep 10, 2026 • 📰 GitHub Blog
📄 GitHub availability report: August 2026
In August, we experienced five incidents that resulted in degraded performance across GitHub services. The post GitHub availability report: August 2026 appeared first on The GitHub Blog.
📅 Sep 10, 2026 • 📰 GitHub Blog
📄 Confidence in AI Agents Don't Match Controls
A survey of 700 organizations reveals a dangerous gap between confidence in AI agents and the controls needed to test, secure, track, and roll them back. | Blog
📅 Sep 10, 2026 • 📰 Harness Blog
🏗️ IaC
📄 Red Hat is named a Leader in IDC MarketScape: Worldwide Private and Hybrid Cloud Management with Automation
Red Hat has been named a Leader in the IDC MarketScape: Worldwide Private and Hybrid Cloud Management with Automation 2026 Vendor Assessment (Doc #US54644626e, June 2026).The IDC MarketScape noted, “A
📅 Sep 14, 2026 • 📰 Red Hat Blog
📄 Set Up Cloud OIDC From the Pulumi CLI
Pulumi ESC can act as an OpenID Connect (OIDC) provider for AWS, Azure, and Google Cloud, issuing short-lived, signed tokens that these clouds exchange for temporary credentials. This eliminates hard-
📅 Sep 11, 2026 • 📰 Pulumi Blog
📊 Observability
📄 Help us stabilize environment variable context propagation
A trace does not always cross a network boundary. A workflow runner starts a shell, the shell launches a build tool, and the build tool starts test processes. Batch and data-processing systems create
📅 Sep 11, 2026 • 📰 OpenTelemetry Blog
📄 Custom labels in Grafana Cloud Synthetic Monitoring: New updates for consistency and ease-of-use
Labels are a powerful way to organize telemetry and define policies across Grafana Cloud, helping to streamline alerting, attribution, access control, and more. But traditionally, custom labels in Syn
📅 Sep 10, 2026 • 📰 Grafana Blog
📄 What’s new with Google Cloud
Want to know the latest from Google Cloud? Find it here in one handy location. Check back regularly for our newest updates, announcements, resources, events, learning opportunities, and more. Tip: Not
📅 Sep 10, 2026 • 📰 Google Cloud Blog
📄 Sweaters, Sunscreens, and Shared Purpose: What Summer Looked Like Across New Relic
Explore how New Relic's global team built community, gave back, and fostered career growth across regions this summer.
📅 Sep 10, 2026 • 📰 New Relic Blog
📄 How to monitor Cypress tests with Grafana Cloud
If your Cypress suite has tests that fail more often or run slower, you know it can be hard to figure out the pattern from a single job. It could be one spec that slowed down, or a single test that fa
📅 Sep 9, 2026 • 📰 Grafana Blog
📄 Instrumenting an LLM router: what New Relic sees, Prometheus doesn't
An LLM router instrumented end to end on New Relic: native AI Monitoring, custom routing/eval events, and an Autopilot-driven, human-approved fix.
📅 Sep 9, 2026 • 📰 New Relic Blog
🔐 Security
📄 Threats Making WAVs - Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report includes the full attack vectors, from detection, in
📅 Sep 14, 2026 • 📰 Linode Blog
📄 AI keeps finding security flaws — here’s what to fix first
A security researcher testing a 300-person B2B company with a global footprint discovered an internet-exposed database with weak authentication during The post AI keeps finding security flaws — here’s
📅 Sep 14, 2026 • 📰 The New Stack
📄 Cut bloat, not features
Accelerating software delivery with minimal OCI images For Independent Software Vendors (ISVs), delivering containerized applications to enterprise clients often means navigating a difficult trade-off
📅 Sep 11, 2026 • 📰 Ubuntu Blog
📄 Introducing automatic remediation policies with Cloudflare CASB
Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to remediate SaaS risks automatically. Security teams can now design event-driven logi
📅 Sep 11, 2026 • 📰 Cloudflare Blog
📄 Canonical and CIX Technology announce strategic collaboration for edge innovation
Canonical, the publisher of Ubuntu, and CIX Technology, a semiconductor innovator, today announced a strategic collaboration to deliver an optimized Ubuntu experience on CIX Technology’s P1 platform –
📅 Sep 11, 2026 • 📰 Canonical Blog
📄 What the Cyber Resilience Act (CRA) means for Android™ development
The CRA starts now: 24 hours to respond Picture this: a critical Android vulnerability is reportedly being exploited. Based on initial analysis, the compromised component is part of your software stac
📅 Sep 10, 2026 • 📰 Canonical Blog
📄 Is prevention essentially a solved problem?
Prevention in agent-generated code is architecturally solved—but choosing controls that protect security without slowing development remains the challenge.
📅 Sep 10, 2026 • 📰 Snyk Blog
📄 Prepare for the Cyber Resilience Act's 24-hour reporting deadline
Starting on September 11, 2026, many businesses that place software on the European Union (EU) market will have 24 hours to file a report once they learn that a vulnerability in one of their products
📅 Sep 10, 2026 • 📰 GitLab Blog
💾 Databases
📄 PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
📅 Sep 14, 2026 • 📰 Linode Blog
📄 Bringing QUIC to Seastar
We built a QUIC transport for Seastar on top of ngtcp2’s sans-I/O state machine, then adapted RPC to it twice: 1) as a one-to-one socket replacement, and 2) a QUIC-aware approach that opens a fresh st
📅 Sep 14, 2026 • 📰 ScyllaDB Blog
📄 CERN PGDay 2027: Announcement and CfP
CERN PGDay 2027 Date: Friday, February 12, 2027 swisspug.org/cern-pgday-2027 About the Event Continuing in the line of work of the past editions, CERN PGDay 2027 returns as the annual gathering for Po
📅 Sep 11, 2026 • 📰 PostgreSQL News
📄 Put Redis data and engineering guidance to work in ChatGPT Work
Redis has launched a development plugin that brings current Redis engineering guidance into ChatGPT Work and Codex. It helps teams write, review, and troubleshoot Redis code without switching between
📅 Sep 11, 2026 • 📰 Redis Blog
📄 What’s new with Google Data Cloud
September 7 - September 10 Pub/Sub SMTs can now AI Inference your Gemini Enterprise Agent Platform models! Pub/Sub AI Inference SMTs allow you to apply inference on an incoming stream of events using
📅 Sep 10, 2026 • 📰 Google Cloud Blog
📄 First-Class Databases on Railway
A guide to features of a first-class database offering, and how to enable one on Railway.
📅 Sep 10, 2026 • 📰 Railway Blog
📄 PostgreSQL Migrator 1.0 : first stable release
Paris, 7th september 2026. The Dalibo team is pleased to announce the release of PostgreSQL Migrator 1.0 stable, a free and open-source tool designed to help migrate databases from Oracle and MySQL/Ma
📅 Sep 10, 2026 • 📰 PostgreSQL News
📄 pg_vault_tde v1.7.1 : Transparent Data Encryption for PostgreSQL 17 and 18
pg_vault_tde provides Transparent Data Encryption for PostgreSQL 17 and 18. A table access method, encrypted_heap, encrypts every tuple with AES-256-GCM before it reaches the storage manager and decry
📅 Sep 10, 2026 • 📰 PostgreSQL News
📄 PostgreSQL Anonymizer 3.2 : Faster Pseudonymization
Eymoutiers, France, Septembre 4th, 2026 Dalibo is pleased to announce PostgreSQL Anonymizer 3.2 introducing a new panel of fast pseudonymization filters. Enhanced Privacy Protection for Your Data Post
📅 Sep 9, 2026 • 📰 PostgreSQL News
📄 Full-Text Search, Object Storage Backend, and More in ScyllaDB 2026.3
new updates should help you move even more workloads to ScyllaDB, at a fraction of the cost.
📅 Sep 8, 2026 • 📰 ScyllaDB Blog
📄 Delivering Real-Time Personalization with Databricks and Redis
Why real-time matters A customer is browsing an e-commerce site. They search for running shoes, open a product, read reviews, and add an item to the cart. Every one of those actions is a signal about
📅 Sep 8, 2026 • 📰 Redis Blog
🌐 Platforms
📄 The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced passwords for RDP credentials to connect to the vic
📅 Sep 14, 2026 • 📰 Linode Blog
📄 The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses originating in South-Africa and hosted by Volum
📅 Sep 14, 2026 • 📰 Linode Blog
📄 From bare metal to diverse AI revenue streams: Navigating the GPU cloud platform challenge
For the past 2 years, the GPU conversation was about supply. Could you get the hardware? How much? How fast? That conversation has shifted, and a growing number of operators now have GPUs in hand, or
📅 Sep 14, 2026 • 📰 Red Hat Blog
📄 AWS Elemental MediaLive enables frame-accurate pipeline locking for streams without timecode
AWS Elemental MediaLive now supports Video Aligned Locking, a new feature to synchronize video pipelines without requiring timecode from the source. Previously, achieving frame-accurate locking across
📅 Sep 12, 2026 • 📰 CloudFormation Updates
📄 Amazon EC2 X2idn instances are now available in Asia Pacific (Hong Kong)
Memory-optimized Amazon Elastic Compute Cloud (Amazon EC2) X2idn instances are now available in Asia Pacific (Hong Kong) Region. These instances, powered by 3rd generation Intel Xeon Scalable Processo
📅 Sep 11, 2026 • 📰 CloudFormation Updates
📄 AWS Lambda now supports direct read configuration for Amazon S3 Files
AWS Lambda now supports direct read configuration for Amazon S3 Files, letting you configure which storage your functions read from: S3 Files high-performance storage or your S3 bucket. With this laun
📅 Sep 11, 2026 • 📰 CloudFormation Updates
📄 How Standards Get Adopted: OTel and Platform Engineering
OpenTelemetry didn't win on vendor neutrality alone — it won by changing how platform teams and developers work together. Here's how.
📅 Sep 11, 2026 • 📰 New Relic Blog
📄 3 Highlights from Thomas Kurian’s Keynote at the Goldman Sachs Communicopia & Technology Conference
On Tuesday, September 8, Thomas Kurian participated in the Goldman Sachs Tech Conference, providing an update on Google Cloud’s business and strategy. Here are the highlights: Full Stack Approach: Goo
📅 Sep 11, 2026 • 📰 Google Cloud Blog
📄 Cloud Costs Are Ignored: How AI Cost Agents Help Engineers
Engineers ignore cloud costs because of broken feedback loops, not apathy. Learn what AI cost management is, why AEO matters more than ever. | Blog
📅 Sep 11, 2026 • 📰 Harness Blog
📄 Harness is a leader in WAAP evaluation
In the August 2026 SecureIQLab Cloud WAAP v5.0 CyberRisk Validation Comparative Report, Harness Web Application & API Protection (WAAP) was named a Leader. | Blog
📅 Sep 11, 2026 • 📰 Harness Blog
📄 September Patches for Azure DevOps Server
We are releasing new patches for our self‑hosted product, Azure DevOps Server. We strongly recommend that all customers stay up to date with the latest, most secure version of Azure DevOps Server. The
📅 Sep 10, 2026 • 📰 Azure DevOps Blog
📄 Introducing the Google Cloud Developer Plugin for AI Coding Agents
Agent skills fit well alongside documentation and remote MCP servers as ways of enabling the success of your AI workflows. They reduce context window usage for certain use cases, and they're straightf
📅 Sep 10, 2026 • 📰 Google Cloud Blog
📰 Misc
📄 Visual Studio Code 1.138 (Insiders)
Learn what's new in Visual Studio Code 1.138 (Insiders) Read the full article
📅 Sep 16, 2026 • 📰 VS Code Blog
📄 Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ch
📅 Sep 14, 2026 • 📰 DevOps.com
📄 Your AI coding spend bought 25% more output. Duplication rose 81%.
Since they arrived on the scene, a great swathe of the software industry has pinned its hopes on AI tools, The post Your AI coding spend bought 25% more output. Duplication rose 81%. appeared first on
📅 Sep 14, 2026 • 📰 The New Stack
📄 Chinese AI models dominate OpenRouter’s US token consumption. It can now guarantee that traffic stays entirely in the US.
Everyone knows the open-weight model pitch by now: companies can download the weights, customize them, run them on infrastructure of The post Chinese AI models dominate OpenRouter’s US token consumpti
📅 Sep 14, 2026 • 📰 The New Stack
📄 Why an old caching trick is your secret to lower LLM costs
An LLM can answer the same question a thousand times and charge you each time. Before paying for another answer, The post Why an old caching trick is your secret to lower LLM costs appeared first on T
📅 Sep 14, 2026 • 📰 The New Stack
📄 More JFrog Artifactory Bugs Are Under Attack, and All Three Have Patches
Attackers are actively exploiting three JFrog Artifactory flaws, exposing how slow patching can turn artifact repositories into software supply chain attack paths.
📅 Sep 14, 2026 • 📰 DevOps.com
📄 From fine-tuned model to cheaper and faster inference: Speculator training on Red Hat OpenShift AI with Kubeflow
Your organization spent months fine-tuning a large language model. Maybe it's a 70 billion parameter model trained on internal medical records, legal documents, or customer support transcripts. It's a
📅 Sep 14, 2026 • 📰 Red Hat Blog
📄 Join Us at the Zephyr Project Meetup in Amsterdam
Register for the Meetup On September 15, the Zephyr community is coming together for an in-person meetup at the JetBrains office in Amsterdam. The Zephyr Project is an open-source collaboration projec
📅 Sep 10, 2026 • 📰 JetBrains Blog
📄 Visual Studio Code 1.137
Learn what's new in Visual Studio Code 1.137 Read the full article
📅 Sep 9, 2026 • 📰 VS Code Blog
📄 Why Rider and ReSharper Were Slow to Start, and How Microsoft Helped Fix the Problem
When we launched ReSharper’s out-of-process (OOP) architecture, users reported slower startup times for IDEs using ReSharper on Windows. After profiling, the cause surprised us: Microsoft Defender was
📅 Sep 9, 2026 • 📰 JetBrains Blog
📄 Get Gemini 3.8 Flash With 75% Off
Google’s newest coding model, Gemini 3.8 Flash, is tuned for long jobs and comes with an incredible launch discount. Google shipped three Flash releases in six weeks, and the newest one is built for e
📅 Sep 9, 2026 • 📰 JetBrains Blog
📄 Join our live webinars: Migrating from Atlassian to YouTrack
Atlassian is discontinuing sales and support for Data Center products. If you’re exploring alternatives, join us for a live session on September 30 to see how Jira-to-YouTrack migration works, includi
📅 Sep 9, 2026 • 📰 JetBrains Blog
We earn commissions when you shop through the links below.
Svix
Webhooks as a service
Svix Dispatch sends your webhooks for you: retries with exponential backoff, signed payloads, idempotency keys, and a delivery log your customers can see.
Atomsized
AWS platform engineering and GitOps
Design and automation for reliable AWS and Kubernetes platforms, safer delivery workflows, and preview and UAT environments your engineers can understand and own.
DigitalOcean
Cloud infrastructure for developers
Simple, reliable cloud computing designed for developers
DevDojo
Developer community & tools
Join a community of developers sharing knowledge and tools
SMTPfast
Developer-first email API
Send transactional and marketing email through a clean REST API. Detailed logs, webhooks, and embeddable signup forms in one dashboard.
QuizAPI
Developer-first quiz platform
Build, generate, and embed quizzes with a powerful REST API. AI-powered question generation and live multiplayer.
Want to support DevOps Daily and reach thousands of developers?
Become a SponsorFound an issue?
Help us improve this content by reporting any errors, typos, or suggestions for enhancement.