Newsletter Archive

Hi there, here's what we published this week, plus a new game and fresh challenges to start your week.

• 15 Minutes to 5: What Happens When You Move iOS CI From M1 to M4
• Terraform 1.17's -minimal-refresh: 202 API Calls Down to Zero, and the Drift Goes Quiet Too
• Base64 Explained: 3 Bytes In, 4 Characters Out, Zero Secrecy

Hope your week is off to a good start - here's everything we published on DevOps Daily last week.

• Why Your GitHub Actions Bill Keeps Growing, and What Each Fix Saves
• A Service Catalog Nobody Updates Can Be Worse Than None: We Checked 217 Entries Against GitHub
• PHP2Shell: How to Check That Every PHP You Run Is Actually Patched

Hey there, here's a fresh batch of posts, games and guides to start your week.

• Postgres 19 Slipped to November: Every Pulled Feature and Why
• Let's Encrypt Goes to 64-Day Certificates: When Does Your ACME Client Actually Renew?
• DORA Metrics From Git History: The Definition Picks Your Tier

Good morning! Here's everything we published on DevOps Daily last week.

• OpenSSH 10.6 Refuses DOMAIN\user and Weakens ssh -C. We Measured Both
• Python 3.15 Made UTF-8 the Default. We Ran 13 Cases in Seven Linux Locales to See What Changes
• Docker Desktop Switched New Containers to the local Log Driver. We Measured What That Changes

Hey there, hope your week is off to a good start - here's what we put together for you.

• We Took Down Our Mesh VPN Control Plane. Here Is What Kept Working
• A Repo per Agent: What Cloudflare Artifacts Changes About Git
• CVE-2026-80521: The Ubuntu Container Escape Is Not Just an Ubuntu Problem

Hey there, hope your week is off to a good start - here's everything we published last week.

• Terraform Module Outputs, Inputs and Sources: How Modules Pass Data to Each Other
• Six System Design Problems, and the New Problem Each Fix Creates
• Terraform State: Remove, Move and Migrate Resources, and Set Up a Remote Backend

Morning, here is everything that went up on DevOps Daily over the past week.

• Your Logs Cost More Than the Service That Emits Them
• Your Tenant Isolation Is One Forgotten WHERE Clause Away
• Jev and the Classification Problem Hiding in Your LLM Bill

Good morning, here is everything that went up on DevOps Daily over the past week.

• Figma Made Multiplayer Instant by Picking the Dumber Algorithm
• systemd and NetworkManager Are Trapping AI Agents
• Gate Your Terraform Plans: Rules Decide, the Model Explains

Here is what we shipped last week, from a webhook sender that never lost a retry to Stripe's idempotency keys and a Terraform state fight.

• Stop Building Webhook Retries Yourself
• How Stripe Avoids Double-Charging Anyone
• Who Owns the State File, and Other Questions That Decide Your Week

Happy Monday! Big week: we went deep on how Lakebase Postgres turns the WAL into the whole database (with a live branch-back-in-time demo), told the story of Discord's trillion-message migration, and fact-checked a viral Kubernetes 1.37 claim that turned out to be half true.

• WAL as the Source of Truth: What Lakebase Storage on S3 Means for You
• How Discord Stores Trillions of Messages With a Tiny Team
• Kubernetes 1.37 Really Can Flag Unused PVCs, but the Viral YAML Is Wrong

Happy Monday! Last week brought us a GitHub outage postmortem, a deliberately wiped production database, and two new simulators to play with - let's get into it.

• GitHub's 2.9B Monthly Commits: Anatomy of an Outage
• Someone Ran migrate:fresh on Production
• The 9 Types of API Testing, and Where Each Belongs in Your Pipeline

Hey folks, here is everything we published this week at DevOps Daily.

• Why Your Base Image Has 1,684 CVEs
• We Built an On-Call Agent in Mastra: Where It Won and Where It Would Not
• HTTP QUERY Shipped. Your Cache Did Not Get the Memo

Hey there, here is everything we published this week at DevOps Daily.

• What It Actually Takes to Deliver a Webhook in Production
• Swapping Across 25 Models With One Line
• Adding SAML and SCIM Before It Costs You a Deal

Hey there, here is everything we shipped at The DevOps Daily this week.

• What It Actually Takes to Deliver a Webhook in Production
• Model Fallback and Routing Without a Provider SDK Each
• Per-Branch AI Endpoints: Isolating Model Spend Across Prod, Preview, and CI

Happy Friday! Another week, another stack of things we broke, fixed, and wrote down so you don't have to.

• One Key for Claude, GPT, and Gemini: the Gateway Pattern
• node-postgres Silently Ignores Your TLS Config When the URL Says sslmode
• 11 Laws That Quietly Run Your Engineering Team

Hope your week is off to a good start - here's everything we published for you to dig into.

• Build a Terraform Provider for Your API with the Plugin Framework
• The pwn request just got harder: what actions/checkout v7 changes, and what it does not
• Your GitOps Controller Is Tier Zero: the Argo CD repo-server RCE

Hope your week is off to a good start - here's the latest from DevOps Daily to kick things off.

• Stop Prompting, Start Looping: Agentic Loops Explained
• The Docker AuthZ Bypass Is Back: CVE-2026-34040
• PostgreSQL 18.2 Broke Standbys: The 18.x Upgrade Footguns

Hope your week is off to a good start - here's everything we published at DevOps Daily, from Postgres performance wins to a pair of CVEs worth your attention.

• Stop Paginating With OFFSET: Keyset Pagination and the Deep-Page Cliff
• Firebase Alternatives in 2026: Choose by Why You Are Leaving, Not by a Ranking
• Preview Environments That Include the Backend, Not Just the Frontend

Hey folks, here's everything we shipped this week to keep your DevOps skills sharp.

• Splunk Shipped an Unauthenticated Database Sidecar: CVE-2026-20253
• Streaming an AI Agent Without a Function Timeout
• Compute That Lives on Your Database Branch

Hey there, here's everything we shipped this week to keep your DevOps skills sharp.

• Hetzner Doubled Its Prices Again. The AI Memory Crunch Is Why
• How to Design a Multi-Region Active-Active Architecture on AWS
• DevOps Weekly Digest - Week 25, 2026

Happy Sunday! Here's everything we shipped this week to keep your stack sharp and your on-call quiet.

• The US Government Pulled Two Frontier Models Overnight. The Real Lesson Is About Your Stack
• OpenTofu 1.12: destroy = false Retires the tofu state rm Ritual
• npm v12 Will Stop Running Install Scripts. We Audited Our Repos to See What Actually Breaks

Happy Sunday folks, here is everything we shipped this week to keep your stack sharp.

• Shai-Hulud Reaches PyPI: The Hades Wave That Runs Before You Import It
• Is Valkey Ready to Replace Redis in 2026?
• OpenTofu in 2026: Should You Switch from Terraform (and What It Actually Costs You)

Hey there, here's a quick run through everything we shipped this week, all in one spot.

• Hetzner's Third Price Increase in Three Months: What DevOps Teams Should Do
• How NetEase Games Cut LLM Cold Starts From 42 Minutes to 30 Seconds Using Fluid
• OpenTelemetry Just Graduated: What to Retire from Your Stack This Quarter

Hey there, here's what landed in DevOps this week - supply chain drama, on-call wisdom, and a fresh chaos experiment to try.

• When the Malicious Hook Is in the Other Manifest: 700+ Repos, 8 Packagist Packages, One package.json Trick
• node-ipc DNS-Tunneling Supply Chain Attack: Your Egress Firewall Probably Missed This
• AI Is Reshaping DevOps. The Engineers Are Faster Than the Vendors.

Big week in DevOps - cooling failures, an 18-year-old NGINX bug, a supply-chain worm, and a couple of critical CVEs all landed on the same calendar.

• When One Data Center Room Got Hot: AWS US-EAST-1, Coinbase, and the DR Drill That Was Not
• NGINX Rift (CVE-2026-42945): The 18-Year-Old Rewrite Bug That Hands an Attacker Your Worker Process
• Ingress-NGINX Is Retired: A Real Migration to Gateway API With ingress2gateway 1.0

Big week in DevOps land - three nasty CVEs, a supply chain worm, and a fresh batch of hands-on learning to keep you sharp.

• Dirty Frag (CVE-2026-43284 + CVE-2026-43500): Local Root on Every Major Linux Distro
• Next.js 16.2.6 and 15.5.18 Ship 13 Security Fixes: Patch Now
• 10 GitHub Repositories That Will Actually Teach You DevOps in 2026

Big security week. CVE-2026-31431 (Copy Fail) dropped on May 1, hitting most Linux containers in production with a clean container escape. We have a deep write-up below plus the rest of this week's drops.

• CVE-2026-31431 Copy Fail: A 4-Byte Kernel Write That Escapes Containers
• Kubernetes 1.36 Ships User Namespaces GA and Pod-Level In-Place Resize
• GitOps with Argo CD: Structuring Your Repository for Multi-Environment Deployments

Welcome to the Week 18 roundup. Bigger drop than last week: a new long-form post on Argo CD repository structure, two checklists, fresh flashcards, and a couple of database comparisons that came out of recent reader questions.

• GitOps with Argo CD: Structuring Your Repository for Multi-Environment Deployments
• Istio Traffic Management: Routing, Retries, and Circuit Breaking
• Distributed Tracing with OpenTelemetry

Hey folks, quieter week on the publishing side, so we pulled together a mix of fresh simulators and evergreen material worth revisiting.

• Caching Strategies Simulator
• Kubernetes Scheduler Challenge
• AWS Fundamentals Quiz

Happy Sunday - here's everything we published this week to level up your DevOps game.

• Best Claude Code Plugins for DevOps Engineers in 2026
• Argo CD vs Flux
• Kubernetes Security Checklist

Happy Monday! Here's everything we published this week to level up your DevOps skills.

• Argo CD vs Flux
• Kubernetes Security Checklist
• SSH Hardening Checklist

Hey there - big week on DevOps Daily with supply chain security lessons, hands-on Linux labs, and some solid comparison guides to bookmark.

• Claude Code Source Leaked via npm Source Maps: Lessons for Every DevOps Team
• The Axios Supply Chain Attack: What DevOps Teams Need to Know
• Claude Code Hidden Features You Probably Missed