InfoQ

Backstage 1.55 Adds Scaffolder Task Recovery and Removes Deprecated Catalog APIs

Mark Silvester — Tue, 13 Oct 2026 17:00:00 GMT

Backstage 1.55 adds opt-in recovery for Software Template tasks, resuming crashed or timed-out runs from the last completed step. The release also carries breaking changes to the catalog, search and TechDocs, so teams should review their configuration before upgrading to the current 1.55.3 patch.

By Mark Silvester

ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

Olimpiu Pop — Tue, 13 Oct 2026 13:13:00 GMT

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials. This flaw, stemming from improper input sanitization, has been actively exploited. Organizations are advised to upgrade to version 10.1.20 or disable susceptible SNMP services to mitigate risks.

By Olimpiu Pop

Production Patterns for Agents, Evals, and LLM Costs: QCon AI New York 2026

Artenisa Chatziou — Tue, 13 Oct 2026 12:00:00 GMT

Once AI is in production, code arrives faster than it can be reviewed, token costs rise, evals have to be good enough to act on, and agents need permissions and guardrails. QCon AI New York 2026 (December 15-16) has confirmed sessions from engineers sharing how they handle these constraints.

By Artenisa Chatziou

AWS Reworks EventBridge Custom Buses for Enterprise-Scale Event-Driven Architectures

Craig Risi — Tue, 13 Oct 2026 12:00:00 GMT

AWS has introduced an enhanced Custom Event Bus for Amazon EventBridge, targeting a problem that often emerges when event-driven architectures move beyond a single team or AWS account: the event infrastructure itself becomes fragmented.

By Craig Risi

Presentation: How Eve Online Leverages Head Based Sampling to Observe "Fun"

Nicholas Herring — Tue, 13 Oct 2026 11:00:00 GMT

Nicholas Herring shares how EVE Online tackles distributed tracing and observability across a 20-year-old MMO architecture. He discusses leveraging head-based, dynamic exponential moving average (EMA), and deterministic sampling techniques to maintain high system fidelity, control telemetry costs, and avoid performance degradation under high-throughput real-time game simulations.

By Nicholas Herring

Cloudflare’s OHTTP Gateway Refuses to Decrypt Requests That Arrive Through Cloudflare

Steef-Jan Wiggers — Tue, 13 Oct 2026 06:44:00 GMT

Cloudflare has opened a closed beta of its OHTTP Gateway, a managed endpoint that decrypts Oblivious HTTP requests for an origin. The design choice drawing attention is a refusal: the Gateway will not decrypt requests arriving from Cloudflare Workers or from hosts proxied through Cloudflare, because that would put client identifiers and request contents in the same hands.

By Steef-Jan Wiggers

Spotify More Than Doubled Monthly Code Changes as AI Accelerated Development

Leela Kumili — Mon, 12 Oct 2026 13:57:00 GMT

Spotify reports that AI-assisted development more than doubled monthly merged changes, prompting a review of quality and reliability controls across its engineering organization. The company describes changes to testing, observability, rollback capacity, workload prioritization, and automated maintenance as it adapts to higher software change volume.

By Leela Kumili

Article: When Should You Use Liquid Clustering? Benchmarking Lakehouse Layout Strategies

Kushal Kumar Vishwakarma — Mon, 12 Oct 2026 11:00:00 GMT

Physical data layout is one of the most consequential decisions in lakehouse engineering. The author compares Liquid Clustering, ZOrdering, and partitioning across four workload types on Delta Lake, uncovering two undocumented failure modes that likely affect production systems today and offering a decision framework for choosing the right layout strategy.

By Kushal Kumar Vishwakarma

Podcast: What Does It Really Mean To Program With AI: A Conversation with Joy Ebertz

Joy Ebertz — Mon, 12 Oct 2026 11:00:00 GMT

In this podcast, Michael Stiefel spoke to Joy Ebertz about how the use of artificial intelligence is changing the way architects and developers do their jobs. Focusing on the long term success of the business is one of the most neglected tasks of an architect. This task becomes particularly important as the nature of artificial intelligence changes the landscape of software development.

By Joy Ebertz

Presentation: You Can't Trust Your AI Bill. And Neither Can I

Erik Peterson — Mon, 12 Oct 2026 11:00:00 GMT

Erik Peterson discusses why AI spend is eclipsing cloud bills, triggering a major software engineering cost crisis. He explains tokenmaxxing, unit economics, forced developer promotions, and why fully autonomous AI will write, deploy, and govern code by 2028.

By Erik Peterson

React 19.3: Adds a browser() API, Giving Client-Only Rendering a First-Class Name

Daniel Curtis — Mon, 12 Oct 2026 10:52:00 GMT

React 19.3 was released on September 9, introducing several features including the react-dom browser() API. This API allows components to opt out of server-side rendering, addressing issues with components that rely on client-specific data. It provides a cleaner solution for managing hydration mismatches and supports conditional data fetching, enhancing flexibility for developers.

By Daniel Curtis

Java News Roundup: Grails 8, Open Liberty, GlassFish, Infinispan, LangChain4j, Spock

Michael Redlich — Mon, 12 Oct 2026 10:10:00 GMT

This week's Java roundup for October 5th, 2026, features news highlighting: OpenJDK JEPs Proposed to Target for JDK 28; Lazy Constants elevated to Candidate status; the GA releases of Apache Grails 8.0 and Open Liberty 20.0.0.10; point releases of TornadoVM, Infinispan, LangChain4j and Spock; and a maintenance release of GlassFish.

By Michael Redlich

GitLab 19.4 Adds Goal-Driven Agents and Tighter Cost Controls

Matt Saunders — Mon, 12 Oct 2026 09:00:00 GMT

GitLab has released version 19.4 of its DevSecOps platform, adding a goal-driven mode to GitLab Duo CLI, three hosted open-weight models, a larger set of Model Context Protocol (MCP) tools, and more detailed controls for AI spending.

By Matt Saunders

Xcode 27.2 Introduces an Agent- and Merge-Friendly JSON Format for Project Configuration

Sergio De Simone — Mon, 12 Oct 2026 09:00:00 GMT

Apple is introducing a new JSON-based format for Xcode project configuration files, replacing the traditional property-list-based format. Available in Xcode 27.2, the new format aims to improve readability, simplify maintenance, and make project configuration easier for AI coding agents to understand and modify.

By Sergio De Simone

Context Language Models: Self-Managing Context to Improve Performance and Reduce Compute Costs

Sergio De Simone — Sun, 11 Oct 2026 14:00:00 GMT

Researchers from Meta, MIT, and the University of Washington introduce Context Language Models (CLMs), a new approach that enables language models to manage and edit their own context rather than relying on predefined mechanisms for summarization, compression, and information retrieval, reporting substantial gains in both performance and computational efficiency.

By Sergio De Simone