TLDR DevOps 2025-06-20

AI coding agents like VS Code Agent Mode and Cursor are fast, but can easily introduce insecure or non-compliant code. Codacy Guardrails silently scans and fixes AI-suggested code that contains vulnerabilities or violates your coding standards, while the code is being generated.

• Free, local, real-time scans for AI-suggested code
• Make every line of AI code play by your rules
• Auto-fix security and quality issues in your IDE
• Enforce standards before your code reaches Git

By embedding trusted static analysis within your AI coding flow, Guardrails finally unlocks AI-driven development at scale.

👉 Get the free IDE plugin

Terraform AWS provider 6.0 is now generally available, bringing enhanced multi-region support within a single configuration file and other workflow improvements.

Amazon EKS Pod Identity now supports streamlined cross-account access by allowing Kubernetes pods to assume roles in other AWS accounts without code changes, using IAM role chaining. This enhancement simplifies configurations, reduces operational overhead, and supports fine-grained access control with session tags across AWS accounts.

Google Cloud's C4D VMs offer up to 80% better web throughput and significant performance gains for AI, databases, and general workloads. Powered by AMD Turin and Titanium, they include Bare Metal options, faster storage, and enhanced security.

Platform engineers are facing a bottleneck as AI allows developers to generate entire applications in hours while infrastructure provisioning still takes days. To solve this, Intent-to-Infrastructure is emerging, which uses AI to translate "what we need" into infrastructure, allowing platform teams to scale infrastructure delivery and cut manual bottlenecks.

Kubernetes has revolutionized infrastructure management over the past decade, enabling scalable, self-healing, declarative systems, but it now faces critical usability and architectural limitations. A proposed Kubernetes 2.0 would replace YAML with HCL for safer, more expressive configs, support pluggable storage backends beyond etcd, introduce a native package manager to replace Helm, default to IPv6 networking, and emphasize better defaults to streamline user experience and reduce operational overhead.

Connect directly with Amazon experts at this free, immersive experience for builders. Over two content-packed days, you'll get hands-on access to the latest APIs, SDKS, ad-tech services, and developer tools. This is an IRL event, space is limited — register now.

Google AI Edge Gallery is an experimental app that showcases on-device ML/GenAI use cases. The gallery allows users to explore, experience, and evaluate generative AI models locally through features like Ask Image, Prompt Lab, and AI Chat, all without requiring an internet connection after initial model loading.

PHP has undergone a major transformation since its release in 1995, evolving from a simple templating tool into a robust, type-safe programming language now in version 8.4. Frameworks like Laravel and Symfony have modernized PHP's ecosystem, keeping it relevant despite competition and shifting trends like WordPress's move toward JavaScript on the frontend.

Varonis Threat Labs has developed Jitter-Trap, a new technique to detect C2 communication by identifying patterns of randomness. The technique analyzes the sleep and jitter parameters of beacon traffic, as well as URL variations, to uncover malicious activity, even when frameworks like Cobalt Strike and Sliver are used.

Grafana Labs has deprecated AWS and Azure authentication from its core Prometheus data source, replacing them with dedicated plugins tailored to each platform's specific requirements. The company is evolving its “big tent” philosophy to emphasize purpose-built data sources that maintain upstream compatibility, promote interoperability, and support vendor-specific features without compromising the integrity of open source projects like Prometheus.

Cloudflare autonomously blocked a record-breaking 7.3 terabits per second (Tbps) DDoS attack in mid-May that targeted a hosting provider using Magic Transit. The attack, which delivered 37.4 TB of data in 45 seconds, originated from 122,145 source IP addresses across 161 countries, with nearly half the traffic coming from Brazil and Vietnam.

KServe v0.15 has been released, marking a leap forward in serving predictive and generative AI models with enhanced support for large language models and new features like model and KV caching mechanisms.

Microsoft has introduced container network logs in public preview for Azure Kubernetes Service with Advanced Container Networking Services, enabling detailed monitoring of Layer 3 to Layer 7 traffic using eBPF and Cilium.