DevOps Daily Newsletter - Week 34, 2026

Hey folks, here is everything we published this week at DevOps Daily.

Blog Posts

Why Your Base Image Has 1,684 CVEs

We pulled 17 base images straight from the registry and counted every advisory against each one, and the numbers are worse than you would guess. If you have ever waved off a scanner report, this one is worth the five minutes.

We Built an On-Call Agent in Mastra: Where It Won and Where It Would Not

We built an on-call agent on Mastra and then broke it on purpose to see what actually held up. You get the wins, the failures, and the parts we would not put near a real pager.

HTTP QUERY Shipped. Your Cache Did Not Get the Memo

HTTP finally got a new method, and QUERY is safe and idempotent with a request body. The catch is that most caches and proxies have no idea what to do with it yet.

You Cannot Rotate a Secret You Cannot Find

We followed a single credential from a developer laptop all the way to production and counted every copy it left behind. The total is the real reason your rotation policy keeps slipping.

Top 5 AI Agent Frameworks in 2026

Five agent frameworks worth building production systems on, scored against criteria we state up front instead of vibes. GitHub numbers and trade-offs included.

Realtime Chat With Auth: Next.js, Neon Auth, and WebSockets

A WebSocket cannot send an Authorization header, so proving who is on the other end takes some work. Here is a working Next.js chat app with Neon Auth handling the identity part.

Auth for a Postgres App, Without a Separate Service

Most auth setups mean running a second system beside your database and keeping the two in sync forever. This one skips that entirely and keeps identity where your data already lives.

From DNS to Delivery: Building Transactional Email with SMTPFast

Connect a domain, send a receipt from FastAPI, and then actually trace what happens after the 200 comes back. Delivery is where transactional email gets interesting.

Featured Games

AWS VPC Networking Simulator

Draw a VPC, wire up the subnets and route tables, and watch traffic either flow or die at the gateway. Much faster feedback than clicking through the console.

PostgreSQL Wire Protocol Simulator

Step through what actually happens between your client and Postgres, from TLS negotiation to the messages that carry your query. Great for anyone who has debugged a connection error and guessed.

News Digests

DevOps Weekly Digest - Week 33, 2026

This week across Kubernetes, cloud native tooling, CI/CD, IaC, observability, and security, sorted so you can skim it in a couple of minutes. The releases that matter are near the top.

Comparisons

JFrog Artifactory vs GitHub Packages

We put both artifact registries through real package workflows, permissions, and cleanup policies. Useful if you are deciding whether GitHub Packages is enough or you need the heavier option.

Go vs Rust

Two languages that show up constantly in DevOps tooling, compared on CLIs, Kubernetes operators, and day to day build pain. No winner declared, just where each one earns its keep.

Guides

Introduction to CI/CD with GitHub Actions

Start with a build that runs on push and end with pipelines that handle matrices, caching, and deploys. Written for people who keep copying workflow files without knowing why they work.

Quizzes

GitOps with Argo CD: Multi-Environment Repository Structure Quiz

Repo layout is where most Argo CD setups go wrong, usually around the third environment. See how your dev, staging, and prod structure holds up.

Flashcards

System Design Speed Tricks - How Things Work So Fast

The algorithms, data structures, and infrastructure tricks behind systems that answer in milliseconds. Quick cards you can run through before an interview or over coffee.

---

Happy learning, The DevOps Daily Team