InfoQ

InfoQ Online Cohorts Address AI Security and Coding Agent Verification

Artenisa Chatziou — Wed, 30 Sep 2026 17:00:00 GMT

A look at two InfoQ online certification cohorts covering security and privacy decisions in production AI systems and the verification needed when coding agents work in existing codebases.

By Artenisa Chatziou

Cursor Uses S3 WAL to Scale Git Storage to More than 300 Pushes per Second

Leela Kumili — Wed, 30 Sep 2026 13:47:00 GMT

Cursor has introduced Continuity, a Git storage architecture that uses an S3 backed write ahead log as the source of truth. The design turns local NVMe repositories into warm caches and separates replica coordination from consistency. Cursor reports linear read scaling with up to 100 replicas and more than 300 pushes per second with S3 Express One Zone in synthetic tests.

By Leela Kumili

Presentation: Context Is the New Code

Patrick Debois — Wed, 30 Sep 2026 11:00:00 GMT

Patrick Debois discusses how to manage, evaluate, distribute, and observe context using proven software engineering practices. He shares how treating context like code - complete with testing, CI/CD, package managers, and security scanning - enables engineering leaders to reliably scale AI coding agents, maintain control over non-deterministic outputs, and build long-term organizational knowledge.

By Patrick Debois

Agents Refactor 300K Lines in Three Weeks, and Practitioners Ask What It Proves

Steef-Jan Wiggers — Wed, 30 Sep 2026 06:16:00 GMT

CodeScene has published a case study in which coding agents refactored 300,000 lines of C over three weeks for roughly $4,000 in tokens, verified by a frame-by-frame replay harness. The agents built a playbook of codebase-specific recipes along the way. Practitioners have questioned the scope, the metric, and how much of the result depends on the harness.

By Steef-Jan Wiggers

SvelteKit 3 Reaches Release Candidate, Moving Config to Vite and Retiring the $lib Alias

Daniel Curtis — Wed, 30 Sep 2026 05:58:00 GMT

The Svelte team has entered the release candidate phase for SvelteKit 3, which focuses on code refinement and prepares for future updates. Notable changes include moving configuration to vite.config.ts, replacing the $lib alias with #lib for improved compatibility. SvelteKit 3 requires Vite 8 and Svelte 5, enhancing error handling and build efficiency, while retaining some experimental features.

By Daniel Curtis

Amazon CloudWatch Omni Extends CloudWatch into the Agent Era

Sergio De Simone — Tue, 29 Sep 2026 19:00:00 GMT

Recently launched, Amazon CloudWatch Omni is an AI-first observability platform designed to monitor, evaluate, and troubleshoot applications and autonomous AI agents in a unified environment.

By Sergio De Simone

Cloudflare Adds Configurable HTTP Vary Header Support to Prevent Cache Thrashing

Olimpiu Pop — Tue, 29 Sep 2026 14:14:00 GMT

Cloudflare has implemented native support for the HTTP Vary header across its edge network, enhancing cache management for all customer plans. This feature allows for better negotiation of content representations while minimizing cache fragmentation. Operators can define specific behaviors for request headers, enabling greater control over caching efficiency and reducing server load.

By Olimpiu Pop

Kubernetes Teams Get a Safer Way to See Their Own GPU Metrics

Craig Risi — Tue, 29 Sep 2026 12:00:00 GMT

Adobe engineers have described an open-source approach for giving teams self-service access to their own Prometheus metrics in multi-tenant Kubernetes environments, without exposing the shared metrics of other teams.

By Craig Risi

Spring News Roundup: Second Milestone Releases of Boot, Framework, Data, Security, Integration

Michael Redlich — Tue, 29 Sep 2026 12:00:00 GMT

There was a flurry of activity during the week of September 21st, 2026, highlighting: second milestone releases of: Spring Boot, Spring Batch, Spring Security, Spring AMQP, Spring Integration, Spring Data, Spring Framework, Spring for GraphQL and Spring for Apache Kafka. There were also first milestone releases of Spring AI, Spring Cloud, Spring Web Services and Spring LDAP.

By Michael Redlich

Presentation: From Staff Platform Engineer to a16z Founder: What I Wish I'd Known

Gonzalo Maldonado — Tue, 29 Sep 2026 09:14:00 GMT

Gonzalo Maldonado explains how technical leaders can translate engineering skills into startup success using their "VC Abstraction Layer Knowledge" (VALK). They share hard-won lessons on finding product-market fit, structuring pitches like technical docs, avoiding co-founder drama, and evaluating internal platforms as commercial ventures in a post-ZIRP environment.

By Gonzalo Maldonado

Atlassian Rebuilds Metrics Pipeline Around OpenTelemetry at Massive Scale

Matt Saunders — Tue, 29 Sep 2026 09:00:00 GMT

Software company Atlassian has published an account of its migration from gostatsd to OpenTelemetry, replacing the internal workings of a metrics platform that receives data from about 100,000 hosts across 14 regions. The existing service had a 99.95% SLO, so the team had to change the platform without disrupting the metrics used by production alerts.

By Matt Saunders

Cloudflare Worker Previews: Per-Branch Environments for Workers

Claudio Masolo — Tue, 29 Sep 2026 09:00:00 GMT

Cloudflare has introduced Worker Previews. This feature allows each Git branch to have its own isolated, production-like environment for a Worker. Each environment has a stable URL. It also has its own configuration and unique state for each branch. Plus, there’s scoped observability.

By Claudio Masolo

Python Workers Reach GA on Cloudflare, with Questions About Cold Starts and Upstream Maintenance

Steef-Jan Wiggers — Tue, 29 Sep 2026 06:33:00 GMT

Cloudflare has made Python Workers generally available, built on PEP 783 and on socket syscalls implemented over the Workers connect API. The announcement carries no performance figures. A urllib3 maintainer questioned who supports the upstream work afterwards, and Wasmer's founder asked for cold-start numbers, citing about 1.027 seconds from Cloudflare's own earlier post.

By Steef-Jan Wiggers

Artifactory Vulnerabilities Under Active Exploitation Enable Authentication Bypass and Admin Access

Sergio De Simone — Mon, 28 Sep 2026 19:00:00 GMT

Three Artifactory vulnerabilities under active exploitation enable authentication bypassing on Internet-accessible, self-hosted deployments, potentially allowing attackers to establish persistent administrator access in under five minutes. The exploits then enable dangerous activity, including credential and key theft, arbitrary code execution, persistence, and anti-forensics measures.

By Sergio De Simone

Radicle Discloses Critical Flaws Exposing Private Repositories in Plain Text

Olimpiu Pop — Mon, 28 Sep 2026 14:14:00 GMT

Radicle has identified two critical security vulnerabilities in its wire protocol, compromising confidentiality across all node releases. Attackers can access private repository data in cleartext and impersonate nodes. Due to architectural flaws, immediate halting of clearnet operations is advised. Fixes will require a shift to a new protocol (Iroh), creating backward incompatibility issues.

By Olimpiu Pop