InfoQ - DevOps - News

GitHub Actions Runner Controller 0.15.0 Targets Reliability at Scale

Craig Risi — Tue, 20 Oct 2026 12:00:00 GMT

GitHub has released Actions Runner Controller (ARC) 0.15.0, introducing reliability, scalability, and observability improvements for organisations running self-hosted GitHub Actions runners on Kubernetes.

By Craig Risi

Buildkite Adds Scoped Secrets and New Agentic CI Tools

Matt Saunders — Mon, 19 Oct 2026 09:00:00 GMT

Continuous integration provider Buildkite has introduced pipeline-scoped secrets and new Model Context Protocol tools for validating pipelines, diagnosing failed builds and repairing webhooks. The company has also added Linux arm64 support to its GitHub Actions compatibility layer and expanded OpenTelemetry data in Buildkite Agent v4.1.0.

By Matt Saunders

AWS Introduces Preview of Well-Architected Agent

Renato Losio — Sun, 18 Oct 2026 14:29:00 GMT

AWS recently announced the preview of the Well-Architected Agent, a service that analyzes environments against Well-Architected best practices and provides prioritized recommendations across cost, security, performance, and reliability. The AI agent can also suggest remediation steps and review infrastructure-as-code before deployment.

By Renato Losio

AWS Will Run Its European Sovereign Cloud Without the Global Backbone for Several Hours

Steef-Jan Wiggers — Sun, 18 Oct 2026 05:30:00 GMT

On October 24, AWS will operate its European Sovereign Cloud without a connection to the AWS Global Network backbone, with a team of EU residents and the region’s own hardware and software. AWS says neither of the two systems being severed is operation-critical, and practitioners are divided over whether the exercise answers the question customers are asking.

By Steef-Jan Wiggers

AI in Production: Panellists Highlight Silent Failures, Harness Engineering, and Agent Governance

Olimpiu Pop — Fri, 16 Oct 2026 14:14:00 GMT

A recent InfoQ webinar examined operational challenges in deploying agentic systems. Key points included issues like semantic and embedding drift, which can lead to significant errors. Experts discussed the need for automated code reviews, continuous evaluation of models, and enhanced privacy measures. The session emphasised a strategic approach to deployment and security management.

By Olimpiu Pop

Grafana Applies SLOs and Error Budgets to AI Agent Behaviour

Craig Risi — Fri, 16 Oct 2026 12:00:00 GMT

Grafana Labs is proposing a familiar reliability engineering approach for one of the less familiar problems in modern software: how to measure whether an AI agent is actually behaving well.

By Craig Risi

Chainguard Launches Secure Workspaces and Checks for AI Coding Agents

Matt Saunders — Fri, 16 Oct 2026 09:00:00 GMT

Software supply chain security company Chainguard has announced two beta products for running and testing code written by developers and AI agents. Chainguard Workspaces provides remote development environments based on hardened microVMs, while Chainguard Checks moves continuous integration into the development loop. The company announced both products at its Assemble London event.

By Matt Saunders

Microsoft Commits Maia to Multi-Gigawatt Inference, and its Efficiency Metric Draws Questions

Steef-Jan Wiggers — Fri, 16 Oct 2026 06:02:00 GMT

Microsoft will scale its Maia accelerator family to multi-gigawatt deployments from 2027, making it the primary inference system for its own products. Maia 300 collapses scale-up and scale-out onto one Ethernet fabric and moves KV state between prefill and decode workers without leaving it. Practitioners have questioned the tokens-per-watt claim that leads the announcement.

By Steef-Jan Wiggers

Grafana Tempo 3.1 Adds Query-Based Trace Redaction and Sampling-Aware TraceQL Metrics

Claudio Masolo — Thu, 15 Oct 2026 10:00:00 GMT

Grafana Labs has released Tempo 3.1, the first minor update to the 3.0 architecture. It adds TLS and additional SASL mechanisms to the Kafka client, lets operators redact traces with a TraceQL query instead of a list of trace IDs, and introduces an experimental query-time hint that corrects TraceQL metrics for sampled data.

By Claudio Masolo

Backstage 1.55 Adds Scaffolder Task Recovery and Removes Deprecated Catalog APIs

Mark Silvester — Tue, 13 Oct 2026 17:00:00 GMT

Backstage 1.55 adds opt-in recovery for Software Template tasks, resuming crashed or timed-out runs from the last completed step. The release also carries breaking changes to the catalog, search and TechDocs, so teams should review their configuration before upgrading to the current 1.55.3 patch.

By Mark Silvester

ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

Olimpiu Pop — Tue, 13 Oct 2026 13:13:00 GMT

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials. This flaw, stemming from improper input sanitization, has been actively exploited. Organizations are advised to upgrade to version 10.1.20 or disable susceptible SNMP services to mitigate risks.

By Olimpiu Pop

AWS Reworks EventBridge Custom Buses for Enterprise-Scale Event-Driven Architectures

Craig Risi — Tue, 13 Oct 2026 12:00:00 GMT

AWS has introduced an enhanced Custom Event Bus for Amazon EventBridge, targeting a problem that often emerges when event-driven architectures move beyond a single team or AWS account: the event infrastructure itself becomes fragmented.

By Craig Risi

Cloudflare’s OHTTP Gateway Refuses to Decrypt Requests That Arrive through Cloudflare

Steef-Jan Wiggers — Tue, 13 Oct 2026 06:44:00 GMT

Cloudflare has opened a closed beta of its OHTTP Gateway, a managed endpoint that decrypts Oblivious HTTP requests for an origin. The design choice drawing attention is a refusal: the Gateway will not decrypt requests arriving from Cloudflare Workers or from hosts proxied through Cloudflare, because that would put client identifiers and request contents in the same hands.

By Steef-Jan Wiggers

GitLab 19.4 Adds Goal-Driven Agents and Tighter Cost Controls

Matt Saunders — Mon, 12 Oct 2026 09:00:00 GMT

GitLab has released version 19.4 of its DevSecOps platform, adding a goal-driven mode to GitLab Duo CLI, three hosted open-weight models, a larger set of Model Context Protocol (MCP) tools, and more detailed controls for AI spending.

By Matt Saunders

Foresight AI Brings Gremlin Agents to Reliability Engineering

Matt Saunders — Sun, 11 Oct 2026 09:00:00 GMT

Reliability management company Gremlin has announced the general availability of Foresight AI, an agentic product that analyses services for potential failures, recommends changes and reruns tests to check that a fix works.

By Matt Saunders