DevOps Weekly Digest - Week 39, 2026
⚡ Curated updates from Kubernetes, cloud native tooling, CI/CD, IaC, observability, and security - handpicked for DevOps professionals!
📌 Handpicked by DevOps Daily - Your weekly dose of curated DevOps news and updates!
⚓ Kubernetes
📄 Beyond OCR: Achieving 98% billing accuracy with GroundX and Red Hat OpenShift AI
In the enterprise world, document extraction has been stuck in a 20-year rut. For decades, companies have relied on a fragile assembly line: OCR to convert pixels to text, templates to find fields, an
📅 Sep 18, 2026 • 📰 OpenShift Blog
📄 Friday Five — September 18, 2026 | Red Hat
Red Hat Recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Server Virtualization PlatformsRed Hat is recognized as a Leader in the 2026 Gartner® Magic Quadrant™ for Server Virtualization
📅 Sep 18, 2026 • 📰 Red Hat Blog
📄 Kubernetes v1.37: Hardening Container Storage with Bind Mount Options and EmptyDir Permissions
Kubernetes v1.37 brings important storage security features: emptyDir permission modes and bind mount options. They help application programmers and security professionals implement rigorous security
📅 Sep 16, 2026 • 📰 Kubernetes Blog
📄 Kubernetes Monitoring Metrics: What to Track, How to Collect, & Best Practices
Learn how effectively monitoring Kubernetes metrics provides clarity, improves incident response, and helps you troubleshoot faster in complex environments.
📅 Sep 16, 2026 • 📰 New Relic Blog
📄 Running OpenBao on Kubernetes with a CloudNativePG PostgreSQL backend
Managing infrastructure secrets on Kubernetes needs a backend that is self-healing and free of vendor lock-in, and that is exactly what OpenBao (the Linux Foundation’s open-source fork of HashiCorp Va
📅 Sep 16, 2026 • 📰 CNCF Blog
📄 Kubernetes attributes processor reaches v1.0.0 milestone
The Kubernetes attributes processor, which enriches your telemetry with Kubernetes metadata, has officially moved to v1.0.0! You can try it out on your custom distro, and it is also available as part
📅 Sep 16, 2026 • 📰 OpenTelemetry Blog
📄 Sovereign AI and data services with Duality and Red Hat
Enterprise AI adoption is hitting a regulatory wall. Organizations in highly regulated sectors—from global banking to defense and life sciences—possess petabytes of valuable data. But privacy regulati
📅 Sep 16, 2026 • 📰 OpenShift Blog
📄 Red Hat OpenShift: Where strategic vision meets enterprise execution
Enterprise technology leaders face a defining operational challenge: rapid digital transformation isn’t enough on its own. Teams are under relentless pressure to maintain a continuous, highly secure i
📅 Sep 16, 2026 • 📰 OpenShift Blog
📄 Retirement of Kubernetes integration jobs for unsupported Kubernetes versions
The Istio Test and Release Working Group is retiring CI integration tests for older Kubernetes versions from the master branch, affecting Istio versions 1.32 and newer. What’s changing Previously, Ist
📅 Sep 16, 2026 • 📰 Istio Blog
📄 Kubernetes Observability: Metrics, Alerts, and Best Practices
Kubernetes observability lets you collect and correlate logs, metrics, and traces, configure actionable alerts, and improve production incident response.
📅 Sep 15, 2026 • 📰 LaunchDarkly Blog
📄 Kubernetes v1.37: Pod-Level Resource Managers graduated to Beta
With the release of Kubernetes v1.37, the Pod-Level Resource Managers feature has graduated to Beta status (disabled by default)! First introduced as an Alpha feature in Kubernetes v1.36, this enhance
📅 Sep 15, 2026 • 📰 Kubernetes Blog
📄 What I learned organizing KCD Lima 2026
On July 18, 2026, we held the third edition of Kubernetes Community Days Lima at UTEC in Barranco. By now, we have already sent the Transparency Report to the CNCF, thanked our sponsors, and processed
📅 Sep 15, 2026 • 📰 CNCF Blog
☁️ Cloud Native
📄 Amazon ECS Express Mode now supports AWS Graviton (ARM64) workloads
Amazon Elastic Container Service Express Mode now supports specifying ARM64 as the CPU architecture for your service, making it easy to deploy ARM-based container images on AWS Graviton-powered comput
📅 Sep 18, 2026 • 📰 CloudFormation Updates
📄 Dual-exporting .NET metrics with OTLP and Prometheus
Many applications export their metrics directly to Prometheus. If you’re unfamiliar with Prometheus, in a nutshell it’s a time-series database for storing metrics, like counters and histograms. Applic
📅 Sep 18, 2026 • 📰 OpenTelemetry Blog
📄 NATS Server 2.15 Release
Previous NATS Server releases, like 2.12 in September of last year and 2.14 in April of this year, focused primarily on the addition of new and exciting features: atomic & fast batch publishing, count
📅 Sep 17, 2026 • 📰 NATS Blog
🔄 CI/CD
📄 GitHub Separates Who Writes Code From Who Runs Your CI
GitHub’s new workflow execution protections let teams control who and what can trigger Actions workflows, reducing CI/CD attack paths and tightening pipeline security.
📅 Sep 21, 2026 • 📰 DevOps.com
📄 Should you read the code, is RAG dead, and did Skills kill MCP?
We dive into these questions and other AI hot takes on the latest episode of the GitHub Podcast. The post Should you read the code, is RAG dead, and did Skills kill MCP? appeared first on The GitHub B
📅 Sep 18, 2026 • 📰 GitHub Blog
📄 Securing the software factory at machine speed
I joined GitLab at a moment when the way teams build and secure software has been changing rapidly. GitLab CEO Bill Staples recently framed that shift in When Code Is Abundant. When code is no longer
📅 Sep 18, 2026 • 📰 GitLab Blog
📄 AI DevSecOps: How Machine Learning Reshapes the SDLC
See how machine learning is changing secure SDLC practices, from AI-assisted code review and finding triage to new risks like model supply chain attacks. | Blog
📅 Sep 18, 2026 • 📰 Harness Blog
📄 AI Cost Visibility: Why Policies Don't Stop Surprise Bills
Organizations are writing AI spend policies but still getting surprise bills. Learn why governance alone fails without real policies. | Blog
📅 Sep 17, 2026 • 📰 Harness Blog
📄 Govern AI Behavior Like You Govern Releases
Learn why leading engineering teams are managing prompts and models as AI Configs — governed, testable, and changeable without a redeploy. | Blog
📅 Sep 17, 2026 • 📰 Harness Blog
📄 Migrating the GitHub Copilot runtime to Rust, using Copilot
A rewrite this size wasn't affordable before agents. Here's what porting the Copilot agent runtime to 800,000 lines of production Rust actually took. The post Migrating the GitHub Copilot runtime to R
📅 Sep 17, 2026 • 📰 GitHub Blog
📄 Rate limits on GitLab.com are changing
GitLab.com hosts millions of projects for teams of every size that need a platform they can rely on. Demand is climbing quickly, and we expect platform load to grow several times over this year. Predi
📅 Sep 17, 2026 • 📰 GitLab Blog
📄 Optimize your team's price-performance with hosted open weight models
There’s no single best model for every software development task. Implementing a new feature, diagnosing a failed pipeline, and resolving security vulnerabilities all place different demands on the mo
📅 Sep 17, 2026 • 📰 GitLab Blog
📄 See who spent your AI credits and set fair caps per team
Scaling AI across your organization depends on knowing where the budget is going and who’s using it. While a subscription cap keeps your total spend within budget, it can’t tell you how much AI was us
📅 Sep 17, 2026 • 📰 GitLab Blog
📄 Stories from the Factory Floor: Why AI software factories won’t always look like factories
There's a world of difference between wiring up coding agents for a side project and building a software factory inside a codebase that ships to thousands of customers at scale.
📅 Sep 16, 2026 • 📰 LaunchDarkly Blog
📄 Machine learning model deployment
Machine learning model deployment moves trained models to production. Learn deployment patterns for ML models, CI/CD, and feature-flag rollouts.
📅 Sep 15, 2026 • 📰 LaunchDarkly Blog
📊 Observability
📄 LLM Observability: The 8 Best Tools for Production AI Systems
Compare the top LLM observability tools for production AI — tracing, cost tracking, and evaluation — and see what to weigh before you add another tool to your stack.
📅 Sep 17, 2026 • 📰 New Relic Blog
📄 Centralized Log Management: A Comprehensive Guide for Engineers
Learn how centralized log management helps developers and engineers improve incident response, reduce costs, and gain better control over log data.
📅 Sep 17, 2026 • 📰 New Relic Blog
📄 7 Best Synthetic Monitoring Tools for Engineering Teams
Compare the top synthetic monitoring tools for engineering teams — uptime checks, browser tests, and how each correlates with the rest of your stack.
📅 Sep 17, 2026 • 📰 New Relic Blog
📄 MLOps Solutions for Production Machine Learning
Learn how MLOps solutions support experiment tracking, model serving, monitoring, feature management, governance, and production rollouts.
📅 Sep 15, 2026 • 📰 LaunchDarkly Blog
📄 Digital Experience Monitoring with Grafana Cloud: Session Replay, synthetic checks, and faster investigations
When something breaks in production, the questions that matter most are also the toughest to answer from metrics alone: who was affected, what did they actually see, and is this worth waking someone u
📅 Sep 14, 2026 • 📰 Grafana Blog
🔐 Security
📄 Threats Making WAVs - Incident Response to a Cryptomining Attack
Guardicore security researchers describe and uncover a full analysis of a cryptomining attack, which hid a cryptominer inside WAV files. The report includes the full attack vectors, from detection, in
📅 Sep 21, 2026 • 📰 Linode Blog
📄 Canonical announces Zephyr 26.04 LTS, delivering up to 15 years of support for MCU-grade devices
The new enterprise distribution provides a trusted Real-Time Operating System (RTOS) to solve critical Cyber Resilience Act (CRA) compliance and developer experience challenges. Anaheim, California –
📅 Sep 21, 2026 • 📰 Canonical Blog
📄 Turning security complexity into useful intelligence: What’s new in Red Hat Lightspeed
In a post-Mythos world, IT teams face a mounting crisis. Many are doing more with the same staff, and security work hasn’t gotten simpler. Alerts still land without context. Compliance still means cha
📅 Sep 21, 2026 • 📰 Red Hat Blog
📄 Why Digital Sovereignty Comes Down to One Metric: Exit Velocity
“Exit Velocity is the key operational metric that measures how fast, reliably, and effortlessly an organization can migrate or redeploy an IT workload (applications, services, and data) away from a cl
📅 Sep 19, 2026 • 📰 SUSE Blog
📄 What RKE2 Security Responder collects, and why
Starting in RKE2 v1.37, every cluster runs a small, optional component called security-responder by default. It tells you which CVEs affect the RKE2 version you’re running, and what version to move to
📅 Sep 19, 2026 • 📰 SUSE Blog
📄 AWS Continuum now supports credential testing and accessible domain suggestions
AWS Continuum for penetration testing is a frontier agent that proactively secures applications throughout the development lifecycle by offering on-demand, customized penetration testing with real exp
📅 Sep 18, 2026 • 📰 CloudFormation Updates
📄 Inside a YugabyteDB Internship
From zero distributed systems experience to shipping password compliance to enterprises. This retrospective blog from Yugabyte Software Engineer Intern Angela Xu details the projects, people, and less
📅 Sep 18, 2026 • 📰 Yugabyte Blog
📄 Beyond the 10-year mark: Extending Ubuntu Pro 16.04 LTS security coverage
A decade ago, Canonical launched Ubuntu 16.04 LTS (codenamed “Xenial Xerus”). As a Long-Term Support (LTS) release, it comes with 5 years of standard security coverage, which is doubled to a total of
📅 Sep 17, 2026 • 📰 Ubuntu Blog
📄 pgAdmin 4 v9.18 Released
The pgAdmin Development Team is pleased to announce the release of pgAdmin 4 version 9.18. This release of pgAdmin 4 includes 29 bug fixes and new features, including fixes for four security vulnerabi
📅 Sep 17, 2026 • 📰 PostgreSQL News
📄 When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
A modern storefront can look healthy while malicious JavaScript quietly siphons revenue, hijacks clicks, or rewrites analytics. See how Cloudflare's machine learning models surface evasive client-side
📅 Sep 16, 2026 • 📰 Cloudflare Blog
📄 The AI Hurricane Is Here
AI is accelerating software creation and cyberattacks alike. Leaders must secure agents and code at inception, enforce controls at runtime, and validate defenses independently.
📅 Sep 15, 2026 • 📰 Snyk Blog
💾 Databases
📄 PLEASE_READ_ME: The Opportunistic Ransomware Devastating MySQL Servers
Guardicore Labs uncovers a Ransomware detection campaign targeting MySQL servers. Attackers use Double Extortion and publish data to pressure victims.
📅 Sep 21, 2026 • 📰 Linode Blog
📄 Announcing Native BM25 Ranking in AlloyDB and Cloud SQL
Vector search is a critical component of generative AI, retrieval-augmented generation (RAG), and data agent architectures, but sometimes vector search alone isn't enough. While vector embeddings are
📅 Sep 18, 2026 • 📰 Google Cloud Blog
📄 The Next Step for Mission-Critical Workloads: Managed Databases Advanced Edition
As your business scales, your database shifts from a simple storage layer to the critical heart of your application architecture. For years, DigitalOcean has helped thousands of startups and growing b
📅 Sep 17, 2026 • 📰 DigitalOcean Blog
📄 Why Your AI Agent Doesn’t Actually Remember Anything
Editor’s note: This post originally appeared on The New Stack and is republished with permission. The original version is available here. A few months ago, I was reviewing a customer support agent who
📅 Sep 17, 2026 • 📰 TiDB Blog
📄 pgAssistant 3.8.0 : continuous improvement loop for Postgres
With this release, pgAssistant is evolving beyond PostgreSQL analysis and tuning to become a continuous PostgreSQL improvement platform. The new positioning is built around a continuous improvement lo
📅 Sep 16, 2026 • 📰 PostgreSQL News
🌐 Platforms
📄 The Oracle of Delphi Will Steal Your Credentials
Our deception technology is able to reroute attackers into honeypots, where they believe that they found their real target. The attacks brute forced passwords for RDP credentials to connect to the vic
📅 Sep 21, 2026 • 📰 Linode Blog
📄 The Nansh0u Campaign – Hackers Arsenal Grows Stronger
In the beginning of April, three attacks detected in the Guardicore Global Sensor Network (GGSN) caught our attention. All three had source IP addresses originating in South-Africa and hosted by Volum
📅 Sep 21, 2026 • 📰 Linode Blog
📄 Python Workers are now generally available
Python Workers allow developers to run Python web frameworks and AI orchestration libraries natively in the Cloudflare Workers runtime. You can seamlessly integrate with Cloudflare's ecosystem includi
📅 Sep 21, 2026 • 📰 Cloudflare Blog
📄 Amazon EC2 X8i instances are now available in the South America (São Paulo) Region
Starting today, Amazon Elastic Compute Cloud (Amazon EC2) X8i instances are available in the South America (São Paulo) region. These instances are powered by custom Intel Xeon 6 processors available o
📅 Sep 18, 2026 • 📰 CloudFormation Updates
📄 Saving another 100TB of RAM with math (and Rust)
Cloudflare's global network is immense but not limitless. As we look for small ways to trim our resource usage, we sometimes get lucky and we can cut significantly more. Here’s how we reduced one of o
📅 Sep 18, 2026 • 📰 Cloudflare Blog
📄 AWS Resilience Hub adds three new capabilities
The next generation of AWS Resilience Hub is a central location in the AWS that helps platform engineering and site reliability teams assess and strengthen the resilience of their workloads running on
📅 Sep 18, 2026 • 📰 CloudFormation Updates
📄 Reimagining service delivery in the agentic era with Google Public Sector
State and local governments are driven by a shared mission to provide responsive, equitable, and accessible services. However, achieving this goal is often hindered by legacy technical debt, disconnec
📅 Sep 18, 2026 • 📰 Google Cloud Blog
📄 The DevFest Community Workshop Experience: Building Real Agents Together
This week we kicked off the DevFest season in North America at Google Hudson Square in New York City with 80 engineers packed into the room. Typical technical workshops hand you a finished repo, tell
📅 Sep 18, 2026 • 📰 Google Cloud Blog
📄 How to upskill enterprise AI builders by using daily micro habits
As enterprises invest in generative AI, tech leaders keep seeing the same pattern: Developers test AI tools for a week, hit setup problems, and then drift back to the backlog. Nothing ships. The real
📅 Sep 18, 2026 • 📰 Google Cloud Blog
📄 Usage-Based vs. Fixed Pricing: Which Is Cheaper in 2026?
Provisioned, resource-consumption, and request-based cloud pricing compared, with worked examples showing which model is cheaper for each workload shape.
📅 Sep 17, 2026 • 📰 Railway Blog
📄 OpenTelemetry everywhere: Migrating a metrics platform at scale
Why we did this at all For most of the last decade our metrics pipeline ran on gostatsd, the open-source StatsD implementation we maintain. It primarily did two jobs: as sidecar on every host and the.
📅 Sep 17, 2026 • 📰 CNCF Blog
📄 Platform Engineering in the Age of AI
94% of engineering leaders say their AI metrics are missing. Here's how platform engineering is changing to close that gap. | Blog
📅 Sep 17, 2026 • 📰 Harness Blog
📰 Misc
📄 Visual Studio Code 1.139 (Insiders)
Learn what is new in Visual Studio Code 1.139 (Insiders) Read the full article
📅 Sep 23, 2026 • 📰 VS Code Blog
📄 Codex Sandbox Escapes Show Why Agent Guardrails Can’t Live Inside the Agent
Two patched OpenAI Codex vulnerabilities, Heapjack and Overpatch, exposed how coding agents can escape sandboxes and reach developer systems without approval prompts.
📅 Sep 21, 2026 • 📰 DevOps.com
📄 Claude Code Adds AGENTS.md Fallback, Cutting Instruction File Sprawl
Claude Code now supports AGENTS.md, giving development teams a shared instruction format across multiple AI coding agents and reducing configuration drift.
📅 Sep 21, 2026 • 📰 DevOps.com
📄 Your AI agent failed. The model might not be the problem.
As AI agents move into production, the path between a request and its result is becoming less predictable. An agent The post Your AI agent failed. The model might not be the problem. appeared first on
📅 Sep 20, 2026 • 📰 The New Stack
📄 One engineer shipped 2,000 PRs a month to production. Verification is the key.
Lauren Tan, an engineer on the Grok team at SpaceXAI, who previously worked at Cursor and Meta, recently published a The post One engineer shipped 2,000 PRs a month to production. Verification is the
📅 Sep 19, 2026 • 📰 The New Stack
📄 “Dormant deployments were quietly consuming storage”: Why Vercel tightened its free-tier rules
Vercel announced this week that teams on its free Hobby plan will now have older, unprotected deployments deleted immediately if The post “Dormant deployments were quietly consuming storage”: Why Verc
📅 Sep 19, 2026 • 📰 The New Stack
📄 This week’s news from Zed, Anthropic, and OpenRouter shows why better harnesses matter more than better models
Our five most-read stories this week covered code collaboration, a model router, a UI change, a benchmark, and a caching The post This week’s news from Zed, Anthropic, and OpenRouter shows why better
📅 Sep 19, 2026 • 📰 The New Stack
📄 SUSE at World Summit AI 2026: Enabling Sovereign Enterprise AI
Key takeaways Connect with SUSE experts at World Summit AI 2026 in Amsterdam to explore sovereign enterprise AI solutions. Save 20% on event registration with discount code SUSE20. Visit Booth G42 to
📅 Sep 19, 2026 • 📰 SUSE Blog
📄 US District Court Decision in AI’s Favor Worries Open-Source Developers
A federal appeals court handed GitHub, Microsoft, and OpenAI an important win in the first major appellate ruling over how AI coding tools can use open-source code. As we all know, all the AI code-gen
📅 Sep 18, 2026 • 📰 DevOps.com
📄 The AIDEs Framework: How We Built a “Theory of Everything” for AI Development Tools
We are living in genuinely interesting times. AI is disrupting software development at a pace where new models, tools, and practices appear almost daily. Many teams’ natural first instinct is to spend
📅 Sep 18, 2026 • 📰 JetBrains Blog
📄 Making Local AI Smarter and Faster
We want local coding agents to be smart and fast, with the ability to understand a codebase, do useful work, and finish tasks without long waits. This Junie Local update makes it practical to use a mo
📅 Sep 18, 2026 • 📰 JetBrains Blog
📄 From raw data to intelligent actions: inside our next-gen AI analytics data lake stack
At Canonical, we believe organisations should be able to unlock the full value of their data without giving up control. That principle is at the heart of our next-generation enterprise data lake stack
📅 Sep 18, 2026 • 📰 Canonical Blog
We earn commissions when you shop through the links below.
Svix
Webhooks as a service
Svix Dispatch sends your webhooks for you: retries with exponential backoff, signed payloads, idempotency keys, and a delivery log your customers can see.
Atomsized
AWS platform engineering and GitOps
Design and automation for reliable AWS and Kubernetes platforms, safer delivery workflows, and preview and UAT environments your engineers can understand and own.
DigitalOcean
Cloud infrastructure for developers
Simple, reliable cloud computing designed for developers
DevDojo
Developer community & tools
Join a community of developers sharing knowledge and tools
SMTPfast
Developer-first email API
Send transactional and marketing email through a clean REST API. Detailed logs, webhooks, and embeddable signup forms in one dashboard.
QuizAPI
Developer-first quiz platform
Build, generate, and embed quizzes with a powerful REST API. AI-powered question generation and live multiplayer.
Want to support DevOps Daily and reach thousands of developers?
Become a SponsorFound an issue?
Help us improve this content by reporting any errors, typos, or suggestions for enhancement.