InfoQ - DevOps - News

GitLab 19.2 Puts AI Agents to Work on the Security Backlog

Matt Saunders — Tue, 21 Jul 2026 08:00:00 GMT

GitLab has released version 19.2 of its DevSecOps platform, adding agentic automation aimed at the security and review work that has piled up as AI coding tools generate more code than developers can check by hand. The release, announced on 16 July 2026, brings four features out of beta or into public beta: Dependency Scanning Auto-Remediation, Security Review Flow, GitLab Duo CLI and Custom Flows

By Matt Saunders

AWS Releases Loom, an Open-Source Reference Platform for Governing AI Agents at Enterprise Scale

Steef-Jan Wiggers — Mon, 20 Jul 2026 10:04:00 GMT

AWS released Loom, an open-source reference platform on AWS Labs for governing AI agents at scale. Built on Strands Agents and Bedrock AgentCore Runtime, it implements RFC 8693 token exchange for identity propagation through delegated actor chains, config-driven deployments without runtime code generation, and mandatory tagging. AWS positions it as an example, not a managed service.

By Steef-Jan Wiggers

Google's AlphaEvolve Reaches General Availability with Evolutionary Code Optimization as a Service

Steef-Jan Wiggers — Sun, 19 Jul 2026 10:16:00 GMT

Google's AlphaEvolve reached general availability on the Gemini Enterprise Agent Platform, turning the DeepMind research project into an evolutionary code optimization service. Evaluators run client-side so code never leaves the customer's infrastructure. Klarna doubled ML training throughput; practitioners note it only works where a measurable evaluation function exists.

By Steef-Jan Wiggers

AWS Introduces CloudFormation Express Mode for Faster Infrastructure Deployments

Renato Losio — Sun, 19 Jul 2026 05:59:00 GMT

AWS has recently introduced CloudFormation express mode, a deployment option that can reduce infrastructure deployment times by marking stack operations complete once resource configuration is applied, rather than waiting for full resource stabilization.

By Renato Losio

Cloud Native Infrastructure Emerges as the Foundation for Trustworthy Agentic AI

Craig Risi — Fri, 17 Jul 2026 12:00:00 GMT

A new technical analysis published by the Cloud Native Computing Foundation (CNCF) argues that the future of agentic AI will be built not on entirely new infrastructure, but on the mature cloud-native ecosystem that already powers modern distributed applications

By Craig Risi

How Uber Builds Zone-Failure-Resilient OpenSearch Clusters

Claudio Masolo — Fri, 17 Jul 2026 10:00:00 GMT

Uber explained how it keeps its OpenSearch deployments running during a zone outage. It does this by using OpenSearch's built-in shard allocation and its own isolation-group system, which relies on the Odin container orchestration platform. This way, it maintains both query and ingestion capabilities.

By Claudio Masolo

AWS Continuum to Enable Agentic Code Security for Enterprises

Gianmarco Nalin — Thu, 16 Jul 2026 19:00:00 GMT

Amazon Web Services has recently introduced AWS Continuum, a new integrated security platform to automate the discovery, enforcement, and remediation of security issues across codebases, dependencies, and applications. AWS Continuum launches with four agentic capabilities, aiming at the entire vulnerability lifecycle: penetration testing, code review, threat modelling, and code vulnerabilities.

By Gianmarco Nalin

AI Agents with Cloud Credentials Are Outrunning Billing Guardrails Built for Human-Speed Mistakes

Steef-Jan Wiggers — Thu, 16 Jul 2026 10:17:00 GMT

A three-person agency received a $14,000 AWS bill in one day after attackers extracted static access keys and burned Claude invocations on Bedrock. Combined with May's DN42 incident, where an autonomous agent provisioned $6,531 of oversized infrastructure in 24 hours, practitioners warn that cloud billing lags roughly a day behind agent-speed spend.

By Steef-Jan Wiggers

AWS Ships Claude Apps Gateway as Self-Hosted Control Plane for Claude Code and Claude Desktop

Steef-Jan Wiggers — Wed, 15 Jul 2026 11:04:00 GMT

AWS and Anthropic have released the Claude apps gateway for AWS, a self-hosted control plane that centralizes identity, policy, telemetry, routing, and spend caps for Claude Code and Claude Desktop. The gateway runs as a single stateless container and routes inference to Amazon Bedrock or Claude Platform on AWS.

By Steef-Jan Wiggers

Linkerd 2.20 Delivers Smarter Traffic Management and Dramatic Efficiency Gains

Craig Risi — Tue, 14 Jul 2026 12:00:00 GMT

The Linkerd community has announced the release of Linkerd 2.20, introducing a series of performance, observability, and traffic management enhancements that further strengthen the CNCF-graduated service mesh's position as a lightweight alternative for Kubernetes networking.

By Craig Risi

Google's Genkit Ships Agents API with Detached Turns and Human-in-the-Loop for TypeScript and Go

Steef-Jan Wiggers — Tue, 14 Jul 2026 10:17:00 GMT

Google released the Genkit Agents API in preview for TypeScript and Go. The open-source framework packages message history, tool loops, streaming, and state persistence behind a single chat() interface. Detached turns let agents work after clients disconnect. Interruptible tools provide human-in-the-loop control with anti-forgery validation on resume.

By Steef-Jan Wiggers

Cloudflare Identifies Race Condition in hyper’s HTTP/1 Implementation

Renato Losio — Sun, 12 Jul 2026 06:18:00 GMT

Cloudflare recently documented how its development team identified and fixed a rare bug in the widely used Rust HTTP library hyper that could silently truncate large HTTP responses while still returning a successful 200 OK status. The issue had existed for years, was triggered only under specific timing conditions, and has now been fixed upstream.

By Renato Losio