DevOps Daily Newsletter - Week 42, 2026

Good morning! Here's everything we published on DevOps Daily last week.

Blog Posts

OpenSSH 10.6 Refuses DOMAIN\user and Weakens ssh -C. We Measured Both

If your scripts log in as DOMAIN\user or depend on compression, the October 6 release changes things for you. We tested both changes and measured what actually breaks.

Python 3.15 Made UTF-8 the Default. We Ran 13 Cases in Seven Linux Locales to See What Changes

UTF-8 mode is now on by default everywhere, so we ran 13 encoding cases across seven Linux locales to see where behavior actually changes. Your container's locale settings turn out to matter more than the upgrade itself.

Docker Desktop Switched New Containers to the local Log Driver. We Measured What That Changes

The local log driver is now the default for new Linux containers in Docker Desktop 4.94, but Docker Engine works differently, so your laptop may no longer match your servers. We measured what that changes in practice.

Queue or Log? Kafka, RabbitMQ and NATS All Do Both Now

Kafka now has queues, RabbitMQ has streams, and NATS JetStream does both, so picking a broker is no longer a simple queue-versus-log decision. Here's how to think about the choice now.

OpenTofu 1.13 Re-Encodes base64gzip and Drops WinRM. We Upgraded the Same State to See What Breaks

We applied configs with 1.12.7 and planned them with 1.13.1 to find out what the base64gzip re-encoding and the WinRM removal break. Worth a read before you upgrade.

A Poisoned .git/config Runs Code on git status. We Tested Which Commands and Copies Carry It

GitLab's October 2 ConfigPoisoning disclosure showed that a repo shipping its own .git/config can get an AI coding tool to run code on something as routine as git status. We tested which commands trigger it and which kinds of copies carry it along.

How Shopify Survives Black Friday: The Flash-Sale Playbook

Load tests at 150% of last year's peak, queuing buyers at the edge, and reserving stock are all part of how Shopify gets through its busiest weekend. Here's the playbook you can borrow for your own traffic spikes.

Knowing What Your AI Feature Costs Before Finance Does

The model invoice gives you one line per model, but finance wants one line per feature. We ran three features to show how to close that gap before the bill shows up.

GITHUB_TOKEN Is Now 377 Characters Long. We Tested Which Redaction Rules Still Catch It

GitHub App installation tokens, including the Actions GITHUB_TOKEN, now use a new and much longer ghs_ format. We tested common redaction rules to see which ones still catch it and which let it slip into your logs.

Featured Games

Database Management Systems

Explore SQL, NoSQL, graph, and time-series databases and find out which one fits which job.

You Might Be a DevOps Engineer If...

Every reload gives you a fresh and painfully accurate DevOps meme. Fair warning: some of these will feel personal.

News Digests

DevOps Weekly Digest - Week 41, 2026

Catch up on the week's updates across Kubernetes, cloud native tooling, CI/CD, IaC, observability, and security in one quick read.

Comparisons

Ansible vs Chef

Agentless push or agent-based pull? We compare architecture, language, and more to help you pick the right configuration management tool.

Guides

Threat Modeling

Learn STRIDE, DREAD, and attack trees, and use them to spot security risks in your systems before attackers do.

Quizzes

Kubernetes Fundamentals Quiz

Test yourself on pods, services, deployments, and troubleshooting with practical, real-world scenarios.

Flashcards

On-Call Rotations and Escalation Policies

Practical tips for designing on-call schedules, setting clear escalation paths, and cutting down on alert fatigue.

---

Happy learning, The DevOps Daily Team