TLDR DevOps 2026-11-13

Buildkite, the CI orchestration platform for AI.

We provide programmable primitives you co-ordinate, running only what changes, across any cloud, any chip, your secrets, your infra. Control without compromise.

Build faster, more securely, more reliably, with the CI engineered for frontier scale, used by the teams setting the pace.

You deserve better CI. Start with our 30-day trial. Kick the tires →

Solo.io released enterprise editions of Agent Substrate and kagent, which suspend idle agent sessions and resume them on demand. Agentgateway enforces identity and policy on traffic, and OutSystems and Swissquote run the stack in production.

A critical RCE vulnerability in Apache HTTP Server's HTTP/2 module stems from a race condition in the assign_headers() function. Wiz data shows 64% of cloud environments have vulnerable resources. Organizations should upgrade to version 2.4.71 or later, or disable HTTP/2 support, to address the flaw.

Lyft built a Fake Payment Provider that supports complex failure scenarios like partial authorization, latent captures, and refunds, which standard test cards cannot model. It embeds scenario logic directly into the payment token, allowing simulated users to test specific retry and fallback paths safely in both staging and production environments.

Google Cloud architects describe a reference architecture that connects the CodeMender security agent to Git pull requests on Cloud Run. Slash commands verify and fix findings, and short-lived OIDC tokens avoid stored keys.

PlanetScale built an open-source Heroku Migrator to move databases up to multiple terabytes without logical replication. It uses Bucardo for trigger-based replication to keep data in sync during the migration. The tool splits the process into data transfer and index rebuild phases to increase copy speeds by roughly five times.

> Agents outnumber people. 55% of Fern-hosted docs sites now have more agent readers than human ones. Learn more about how agents are your top readers.> Is your documentation ready for AI agents? Try Fern Agent Score, a free, open-source benchmark that grades your docs 0–100 on agent-readiness.

OpenBot is a self-hostable workspace for AI coworkers that provides each agent with its own browser, files, and tools. It supports AG-UI agents from platforms like Amazon Bedrock, Claude, and LangChain, and allows teams to deploy the system on their own Kubernetes infrastructure. The MIT-licensed template integrates with OpenAI, Claude, and Gemini models.

TensorFold is an LLM inference engine that serves language models from a Zig binary on Apple Silicon and NVIDIA GPUs. The engine reads checkpoints, tokenizes requests, and runs Metal or CUDA kernels directly, requiring no Python or MLX installation.

The CNCF Technical Oversight Committee accepted Open Cluster Management as an incubating project. OCM manages Kubernetes clusters across cloud, on-premises, and edge, and eBay uses it with Argo CD across more than 190 clusters.

An independent threat model of open-source Linkerd identified 30 threats, 28 of which were categorized as medium or high. Only one finding is a software bug, which maintainers fixed in February 2025. The rest stem from default settings and configuration choices. This guide maps every threat to MITRE ATT&CK and NIST 800-53 frameworks.

Atlassian brought together leading voices shaping software in the AI era. Featuring Vercel CEO Guillermo Rauch and 11 additional engineering and product leaders on how AI is reshaping the way software is planned, built, and run. Watch on demand

Istio 1.32.0 supports Kubernetes 1.33 to 1.37 and adds experimental Gateway API authorization targeting for HTTPRoute.

GitHub now scans completed Actions workflow logs for supported credential patterns and raises repository alerts that persist even if the logs are deleted.

Octopus Deploy deprecated its AI Assistant, and the Chrome extension is no longer available to new users.