InfoQ

Entire's Git Forge Rethinks Git Collaboration for Coding Agents

Sergio De Simone — Sun, 08 Nov 2026 11:00:00 GMT

Entire is a Git forge designed specifically for collaboration between human developers and AI coding agents. Its premise is that traditional software development infrastructure, particularly the pull request (PR) model, is not well suited to an environment where AI agents generate, review, and iterate on code at high speed.

By Sergio De Simone

Google Cloud Adds Self-Managed VMware Cloud Foundation on Bare Metal

Steef-Jan Wiggers — Sun, 08 Nov 2026 07:16:00 GMT

Google Cloud has made a self-managed VMware solution generally available, running VMware Cloud Foundation 9.x on dedicated Z3 bare metal with root access across ESXi, vCenter and NSX in 22 regions. It sits beside the Google-managed VMware Engine and matches customer-operated offerings from AWS and Oracle, shifting lifecycle, patching and Broadcom licensing back to the customer.

By Steef-Jan Wiggers

Cloudflare Scales D1 Control Plane to Millions of Databases

Renato Losio — Sun, 08 Nov 2026 06:34:00 GMT

In a recent article, Cloudflare shared the redesign of the control plane of its D1 serverless SQL database to support millions of databases, avoiding centralized bottlenecks, implementing retries and idempotency, and using eventual consistency.

By Renato Losio

How Grab Improved Mobile App Stability by Safely Handling Surge in AI-Generated Code Changes

Sergio De Simone — Sat, 07 Nov 2026 11:00:00 GMT

The growing adoption of AI coding assistants has accelerated development and increased the volume of code changes per release, bringing more opportunities for defects and crashes, says Grab. To address these challenges, they implemented a layered defense strategy to prevent, detect, and contain crashes throughout the development and release lifecycle.

By Sergio De Simone

Open Source pg_vectorsearch Brings More Scalable Vector Search to PostgreSQL

Renato Losio — Sat, 07 Nov 2026 09:49:00 GMT

Tiger Data has released pg_vectorsearch, an open source PostgreSQL extension for vector similarity search, currently in alpha. Its PRISM index uses data partitioning and compression instead of the graph-based approach used by pgvector’s HNSW index, reducing memory requirements and index build times.

By Renato Losio

Varlock Releases Bumpy: A File-Based Versioning Alternative to Changesets

Daniel Curtis — Sat, 07 Nov 2026 06:54:00 GMT

Bumpy is an MIT-licensed, TypeScript tool for version management and changelogs in monorepos. It follows the changesets workflow, using markdown bump files, and adds support for workspace and catalog protocols, custom publish commands, and branch-based prereleases. Changesets v3, released in August 2026, closed many earlier gaps, though differences remain.

By Daniel Curtis

Yelp Combines Native and Server-Driven UI for Its AI Assistant

Leela Kumili — Fri, 06 Nov 2026 14:25:00 GMT

Yelp combines native mobile controls with server-driven conversation rendering in its AI Assistant using the CHAOS framework. The architecture separates view configuration from conversation data, supports backend-driven chat interactions, and enables faster UI updates without new app releases. Yelp also discusses cross-platform challenges and reuse for its Biz Ask Anything pilot.

By Leela Kumili

GitLab 19.5 Makes Agentic Development a Governed Part of the DevOps Platform

Craig Risi — Fri, 06 Nov 2026 12:00:00 GMT

GitLab 19.5, released on October 15, puts agentic software development and governance at the centre of the platform, making its GitLab MCP server generally available while expanding how external AI agents can interact with GitLab.

By Craig Risi

TypeScript 7.1 Beta: Restores the Compiler API and Makes Vue and Svelte First-Class

Daniel Curtis — Fri, 06 Nov 2026 11:06:00 GMT

TypeScript 7.1 Beta, announced October 20, 2026, restores the compiler API removed in 7.0, now split into separate entry points. It adds content mappers, letting tools like Vue check non-standard files. One Vue project's type checks fell from 14.19 to 3.10 seconds. An editor issue remains open, and teams may need TypeScript 6 alongside 7.

By Daniel Curtis

Presentation: The Socio-Technical Staff+ Engineer: Architecture, Culture and Organisational Change

Vanessa Formicola — Fri, 06 Nov 2026 11:00:00 GMT

Vanessa Formicola shares how technical leaders can move beyond "wishful architecture" by practicing holistic socio-technical engineering. She discusses why engineering leaders must account for organizational maturity, reward structures, geopolitical climate, and team dynamics, framing the staff-plus role as designing the conditions for technology to thrive rather than just picking tools.

By Vanessa Formicola

AWS Ships Continuum for Code Vulnerabilities

Steef-Jan Wiggers — Fri, 06 Nov 2026 10:00:00 GMT

AWS has made Continuum for code vulnerabilities generally available in two regions. The service proves exploitability by running real exploits in a sandbox, then opens fixes as pull requests. Published pricing charges per finding processed as well as per line of code, and practitioners are asking what would justify letting it merge fixes on its own.

By Steef-Jan Wiggers

Article: Identity as an Architectural Concern: Enterprise IAM Beyond Authentication

Vaishnavi Khosla — Fri, 06 Nov 2026 09:00:00 GMT

The way you design your identities will drive your data models, your service scope, and your revocation policies; enterprise identity management is thus an architectural problem, not an afterthought. Based on our experience in service account governance, this article touches upon graph vs. RBAC, integrating a vault you don't own, and bounding revocation latency for an event stream.

By Vaishnavi Khosla

Vault Fork OpenBao Adds External Keys and Quantum-Ready TLS

Matt Saunders — Fri, 06 Nov 2026 09:00:00 GMT

OpenBao has released version 2.7, adding read scaling for PostgreSQL-backed deployments, support for external hardware security module (HSM) and key management service (KMS) keys, and post-quantum cryptographic algorithms. The release also introduces control groups for human review of sensitive operations and new headers intended to keep requests consistent across load-balanced OpenBao nodes.

By Matt Saunders

GitHub Actions Lockfiles Reach GA to Secure Workflow Dependencies

Claudio Masolo — Fri, 06 Nov 2026 09:00:00 GMT

GitHub has made workflow dependency lockfiles for GitHub Actions generally available on October 28, 2026, two weeks after the feature entered public preview. Workflows can maintain clear tag and branch references.

By Claudio Masolo

Edera's Object Capability Bounded Authority Promises to Isolate Credentials from AI Agent Workloads

Olimpiu Pop — Fri, 06 Nov 2026 06:06:00 GMT

Edera announced Object Capability Bounded Authority, a security model that separates an AI agent's or MCP server's required authority from the credentials behind it. Hypervisor-enforced capabilities limit agents to specific actions without storing secrets in the workload. Initial releases cover scoped command execution and workload identity; credential-brokered API access will follow.

By Olimpiu Pop