DevOps Daily Newsletter - Week 44, 2026

Hope your week is off to a good start - here's everything we published on DevOps Daily last week.

Blog Posts

Why Your GitHub Actions Bill Keeps Growing, and What Each Fix Saves

Per-job rounding, macOS minutes at ten times the Linux price, re-runs and storage add up quietly. We measured where one repository's minutes went, then ran a mobile pipeline 34 times on GitHub-hosted runners and on Bitrise Build Hub. In partnership with Bitrise.

A Service Catalog Nobody Updates Can Be Worse Than None: We Checked 217 Entries Against GitHub

We checked 217 public Backstage catalog entries from 30 organizations against GitHub to see how much of each catalog still matches reality. It might make you look twice at your own catalog.

PHP2Shell: How to Check That Every PHP You Run Is Actually Patched

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical remote code execution bugs. Installing the update is the easy part, so this post shows how to confirm that every PHP you run is on a fixed version.

Node.js October 2026 Security Release: Finding Every Node You Actually Run

Node.js 22.23.4, 24.22.1 and 26.12.1 fix a Brotli decoder bug that the project says permits remote code execution. Here's how to find every Node runtime in your stack so none of them get missed.

What Keeps a Neon Compute Awake, and What It Costs

We watched Neon computes through the API to see which clients stop a database from scaling to zero. See which connections keep it awake and what that costs you.

Neon Realtime, Measured: Live SQL Queries Replace the LISTEN/NOTIFY Layer We Built by Hand

Neon Realtime turns a SQL query into a live subscription, so we rebuilt our hand-made LISTEN/NOTIFY layer on top of it and measured the difference.

Prompt Caching on DigitalOcean Inference, Measured: What Breaks It and How Long It Lasts

We sent 867 requests with a long on-call runbook as the system prompt to three DigitalOcean-hosted models. We wanted to know what breaks the cache and how long a cached prompt lasts.

SOC 2 Evidence From GitHub and Terraform, and the Part That Still Needs a Person

We pointed a small evidence collector at a repo with a strict ruleset on its main branch to see how much audit evidence GitHub and Terraform can produce on their own. It covers a lot, and we show the part where a person still has to step in.

Featured Games

How Docker Works Under the Hood

Step through what really happens when you run docker run -p 8080:80 nginx, one layer at a time.

Fork Bomb Simulator

Watch processes multiply exponentially as the infamous :(){ :|:& };: one-liner takes over a system, with no risk to your own machine.

News Digests

DevOps Weekly Digest - Week 43, 2026

Catch up on last week's updates from Kubernetes, cloud native tooling, CI/CD, IaC, observability and security in one quick read.

Comparisons

Bitrise Build Hub vs GitHub-Hosted Runners

Price per minute, macOS hardware, concurrency, images, caching and billing side by side, and which jobs are worth moving.

Cilium vs Calico

See how these two Kubernetes networking and security options compare, from eBPF vs iptables to the trade-offs that matter when you pick one for your clusters.

Guides

Introduction to CI/CD with GitHub Actions

Learn to automate your development workflow with GitHub Actions, starting with basic builds and working up to more advanced pipelines.

Quizzes

Concurrency and Race Conditions Quiz

Race conditions, deadlocks and the other bugs that only show up under load and never in a debugger. Find out how many you can spot.

Flashcards

AWS Essentials

Brush up on EC2, S3, VPC and IAM, along with best practices for security and keeping your cloud bill under control.

---

Happy learning, The DevOps Daily Team