Article: InfoQ Cloud and DevOps Trends Report - 2026

Wed, 12 Aug 2026 11:00:00 GMT

InfoQ editorial staff and friends of InfoQ are discussing the current trends in the domain of Cloud and DevOps as part of the process of creating our annual 2026 trends report.

By Steef-Jan Wiggers, Matt Saunders, Shweta Vohra, Daniel Bryant, Mark Silvester, Renato Losio

GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing

Steef-Jan Wiggers — Sat, 08 Aug 2026 07:45:00 GMT

GitHub consolidated the npm and Actions changes it shipped from March to July 2026 against supply chain attacks, several of which alter defaults rather than add options. Hacker News discussion focused less on the individual controls than on whether waiting periods are the right instrument, or a substitute for author-side package signing.

By Steef-Jan Wiggers

InfoQ - Automation

Article: InfoQ Cloud and DevOps Trends Report - 2026

GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing