TLDR DevOps 2025-12-12
AI Code Review π, Secure AI Workflows π₯·, Postman Workspace Leaks π§
Building responsive APIs with Amazon API Gateway response streaming (5 minute read)
AWS has introduced API Gateway response streaming to reduce time to first byte, handle large or long-running responses, and enhance real-time interactivity for AI and web apps. Developers can enable streaming across Lambda, HTTP proxy integrations, and various clients with extended timeouts and full observability support.
Lima v2.0: New features for secure AI workflows (4 minute read)
The Lima project shipped its second major release (v2.0.0) on November 6, significantly expanding its capabilities to support AI workloads alongside containers. This update introduced GPU acceleration for Linux VMs on macOS hosts via a krunkit VM driver and new Model Context Protocol (MCP) tools, enabling secure execution of AI agents within a VM sandbox.
Linux Foundation Announces the Formation of the Agentic AI Foundation (AAIF) (7 minute read)
On December 9, the Linux Foundation launched the Agentic AI Foundation (AAIF), an initiative co-founded by Anthropic, Block, and OpenAI. The AAIF aims to advance open and accessible agentic AI, stewarding key projects such as Anthropic's Model Context Protocol (MCP), Block's goose, and OpenAI's AGENTS.md.
An In-Depth Look at Istio Ambient Mode with Calico (10 minute read)
Tigera has introduced a unified platform that integrates Istio Ambient Mode with Calico, offering a sidecarless service mesh solution designed to simplify Kubernetes networking, security, and L7 observability across clusters by eliminating fragmented tools and reducing operational overhead. This integration provides crucial capabilities like mTLS encryption, L4/L7 traffic control, and deep application-level observability while preserving existing network policies.
What I Look For in AI-Assisted PRs (5 minute read)
As AI makes it easier to generate code, the burden on reviewers increases, requiring strong heuristics that assess clarity of PR descriptions, reversibility of changes, appropriate scope, coherent abstractions, meaningful tests, and healthy error-handling while watching for βvibeβ code smells that indicate low human curation. AI can help with first-pass review but still struggles with conceptual design issues, so human judgmentβand eventually stronger verification toolsβremain essential as code volume rapidly scales.
π¨βπ»
Resources & Tools
Stop AI scrapers from stealing your PDFs with TDMRep (Sponsor)
AI bots love PDF content. If you want to
reserve the rights to your content β or charge a fee for access β you need to include this as a machine-readable instruction. This blog covers how to work with the Text and Data Mining Reservation Protocol (TDMRep) to protect your data.
Read the blog by DatalogicsFresh (GitHub Repo)
Fresh is a terminal-based text editor that offers an easy, powerful, and fast experience with native UIs, a command palette, and full mouse support for users transitioning from graphical editors. It's designed for extensibility with TypeScript plugins and engineered for speed. Fresh can handle multi-gigabyte files without slowing down.
Rustfs (GitHub Repo)
RustFS, an open-source and S3-compatible high-performance object storage system built in Rust, has been shown to be 2.3x faster than MinIO for 4KB object payloads. Released under the permissible Apache 2.0 license, it supports migration and coexistence with other S3-compatible platforms while being optimized for data lakes, AI, and big data workloads.
Postman Workspace Leaks: When Your API Testing Tool Becomes a Data Breach (12 minute read)
A year-long investigation revealed that more than 30,000 public Postman workspaces leaked sensitive API keys, tokens, and credentials, exposing organizations across healthcare, finance, e-commerce, and tech to real-world breaches and financial risk. The incident highlights how simple misconfigurations, insecure developer practices, and weak defaults in collaboration tools can escalate into widespread, high-impact security failures.
The case of .Net Central Package Management and Azure DevOps Pipelines (3 minute read)
A .NET 10 project using Central Package Management failed in an Ubuntu-based Azure pipeline because the required Directory.Packages.props file was miscapitalized, which Windows and macOS tolerated but Linux rejected. Renaming the file with correct casing resolved the NU1015 errors and restored pipeline builds.
Get our free daily newsletter with curated tools π», trends π, and insights π‘, for DevOps Engineers π¨βπ»
Join 340,000 readers for
one daily email