InfoQ

GitHub Introduces Default "Cooldown" Policy for Dependabot Version Updates

Sergio De Simone — Tue, 28 Jul 2026 19:00:00 GMT

Instead of immediately opening pull requests when newer dependency versions are released, Dependabot now waits three days before suggesting upgrades, thus increasing the likelihood that malicious releases are identified and removed before they can be integrated.

By Sergio De Simone

Grafana Assistant Expands to More Than 30 Data Sources

Craig Risi — Tue, 28 Jul 2026 12:00:00 GMT

Grafana Labs has expanded the capabilities of Grafana Assistant, enabling its AI-powered observability assistant to query and correlate data across more than 30 different data sources through natural language.

By Craig Risi

Presentation: The Future of Engineering: Mindsets That Matter When Code Isn’t Enough

Ben Greene — Tue, 28 Jul 2026 11:10:00 GMT

Ben Greene discusses how software engineers can adapt and thrive in an era of rapid AI code automation. Drawing on his startup experience, he explains key mindsets like starting simple, maintaining code comprehension, attacking hard problems first, and focusing on customer impact. He shares why human empathy, agency, and practical problem-solving remain irreplaceable when code is automated.

By Ben Greene

Remix 3 Beta Preview Ditches React for a Web-Standards Full-Stack Framework

Daniel Curtis — Tue, 28 Jul 2026 09:02:00 GMT

Remix 3 is a full-stack web framework that moves away from React, focusing on web platform primitives. It integrates routes, request handlers, and UI components into a single structure, utilizing a forked Preact for the frontend. Unlike previous versions, it emphasizes server ownership of the request lifecycle. Migration from Remix 2 is not straightforward, as it requires changes to existing apps.

By Daniel Curtis

Article: The Hard-Stop Rule: From 3 HCM Monoliths to 120 Domain Microservices

Prashanth Pasham — Tue, 28 Jul 2026 09:00:00 GMT

A payroll and HR software team rebuilt three monoliths into over 120 smaller services over five years, with no dedicated migration budget. Every new feature was built as its own service instead of changing the old ones. The article covers the pull-based migration, the tools that made this possible, how costs were kept down, and the problems the team ran into along the way.

By Prashanth Pasham

AWS Launches Amazon GuardDuty Investigation Agent to Automate Threat Triage

Steef-Jan Wiggers — Tue, 28 Jul 2026 07:14:00 GMT

AWS released a public preview of the GuardDuty investigation agent, which correlates findings, 90-day activity logs, and resource topologies into structured reports with risk ratings, confidence scores, and MITRE ATT&CK classification. It is reachable through the AWS MCP Server, so investigations can run from agentic tooling. Preview quotas cap usage at 10 investigations per account per day.

By Steef-Jan Wiggers

Uber’s Zero Growth Stack: Scaling Services, While Optimising Infrastructure and AI Cost

Olimpiu Pop — Tue, 28 Jul 2026 07:07:00 GMT

Uber's "Zero Growth Stack" focuses on scalable infrastructure that separates capacity growth from business demand, reducing hardware needs while enhancing service scaling. Central to this is garbage collection optimisation. Additionally, generative AI is integrated into development, elevating developer productivity while introducing cost management measures to maintain economic efficiency.

By Olimpiu Pop

Microsoft Releases .NET 11 Preview 6 With Language and Framework Updates

Almir Vuk — Mon, 27 Jul 2026 15:09:00 GMT

Microsoft has released .NET 11 Preview 6, with updates across C#, ASP.NET Core, .NET MAUI, and Entity Framework Core. C# adds extension indexers and built-in union support types. ASP.NET Core brings async validation, automatic CSRF protection, and OpenAPI 3.2 by default. MAUI extends CollectionView to Windows, and EF Core adds FULL OUTER JOIN translation.

By Almir Vuk

Java News Roundup: Simple JSON API, JEPs for JDK 28, Oracle CPUs, Embabel 1.0, Azul Payara, Helidon

Michael Redlich — Mon, 27 Jul 2026 13:00:00 GMT

This week's Java roundup for July 20th, 2026, features news highlighting: two JEPs proposed to target for JDK 28; new JEPs 540 and 541, Simple JSON API (Incubator) and Deprecate the macOS/x64 Port for Removal, respectively; the July 2026 Critical Patch Update; the GA release of Embable 1.0; Azul Payara 7.2.0; and Helidon 4.5.1.

By Michael Redlich

Podcast: Rethinking Data: Moving From the Traditional Three-Tier Web Stack to Client-Side Event Sourcing

Johannes Schickling — Mon, 27 Jul 2026 13:00:00 GMT

Johannes Schickling explores how he moved beyond the traditional three-tier web stack to a local-first approach. He shares his experience transitioning from Prisma to developing Overtone—a music curation app leveraging client-side event sourcing and SQLite. The discussion highlights the trade-offs between event sourcing and CRDTs.

By Johannes Schickling

Presentation: Clean Architecture for Serverless: Business Logic You Can Take Anywhere

Elena van Engelen — Mon, 27 Jul 2026 11:26:00 GMT

Elena van Engelen discusses how to eliminate serverless vendor lock-in without sacrificing native cloud capabilities. She explains how to structure FaaS applications using Clean Architecture, Spring Cloud Function, and Gradle modules to isolate business logic. Finally, she shares a live demo deploying portable Kotlin services across AWS and Azure using Terraform CDK for multi-cloud IaC.

By Elena van Engelen

Article: An Evolutionary Architecture Pattern for Managing AI’s Pace of Change

Joe Price, Branimir Đurek, Pavlos Migkiros, Trevor Dearham — Mon, 27 Jul 2026 11:00:00 GMT

Traditional API gateways assume deterministic services and simple schemas - assumptions agentic AI breaks. Discover why enterprise engineering leaders are adopting AI Gateways as an evolutionary architecture seam. Centralize guardrails, model routing, agent identity, action policy, and semantic audit within a single control plane to prevent costly incidents while keeping core platforms stable.

By Joe Price, Branimir Đurek, Pavlos Migkiros, Trevor Dearham

Netflix Details Its In-House LLM Serving Platform with Triton and vLLM

Matt Foster — Mon, 27 Jul 2026 07:33:00 GMT

Netflix has described the production lessons behind bringing LLM inference into its internal serving platform, including the challenges of supporting different model sizes, hardware requirements, and rapidly evolving inference engines.

By Matt Foster

TanStack Table V9 Beta: Tree-Shakable Features, TanStack Store State, and Lower Memory Usage

Daniel Curtis — Mon, 27 Jul 2026 05:45:00 GMT

TanStack Table V9 is a beta release of a headless UI library for creating tables in various JavaScript frameworks. It features improved state management, memory usage, and extensibility. The notable change is an opt-in feature model, allowing developers to load only necessary components. Migration is gradual, with tools provided for legacy support. The library remains free and developer-focused.

By Daniel Curtis

AI-Enabled Security Researchers Discover How a Crafted Video Can Provide Attackers Access to Your PC

Olimpiu Pop — Sun, 26 Jul 2026 09:09:00 GMT

JFrog Security Research revealed "PixelSmash," a vulnerability in the FFmpeg media framework, allowing for Remote Code Execution and Denial of Service attacks. Present for sixteen years, it affects numerous applications using the MagicYUV decoder. Exploitation requires only a crafted media file. Users are advised to check for the vulnerability and apply patches or disable the decoder if necessary.

By Olimpiu Pop