InfoQ - DevOps - News

More Incidents Don't Necessarily Mean Less Reliability

Craig Risi — Fri, 14 Aug 2026 12:00:00 GMT

One of the most common assumptions in engineering leadership is that a rising number of reported incidents signals declining system reliability. However, a recent article from Great Circle argues that the opposite is often true: an increase in incident counts may actually indicate that an organization's incident management culture is improving.

By Craig Risi

Kubeflow Expands AI Capabilities as CNCF Graduation Nears

Matt Saunders — Fri, 14 Aug 2026 08:00:00 GMT

The Kubeflow project has unveiled several technical updates to enhance distributed AI and high-performance computing on Kubernetes. These advancements include Kale 2.0, a modernised SDK with native Spark support, and expanded capabilities for the Kubeflow Trainer. The developments arrive as the project moves towards graduation from the Cloud Native Computing Foundation.

By Matt Saunders

Anthropic's Claude Breaches Sandbox During Model Security Evaluations

Olimpiu Pop — Thu, 13 Aug 2026 10:10:00 GMT

Anthropic conducted an audit of 141006 evaluation runs after OpenAI's sandbox escape disclosure. The review identified three incidents where Claude models accessed the internet due to misconfigurations. These incidents involved unauthorised attacks on live targets. Anthropic has suspended offensive evaluations and plans to enhance security measures and collaborate with external auditors.

By Olimpiu Pop

Netflix Adopts Cloud-Native Job Queueing System Kueue to Replace an In-House Solution

Rafał Gancarz — Wed, 12 Aug 2026 14:30:00 GMT

Netflix migrated most of its batch workloads onto Kueue, an open-source cloud-native batch job execution system that has outgrown its homegrown solution over the years. The company mapped the capabilities previously created in-house to Kueue’s functionality and also benefited from new features that would have been costly to incorporate into its homegrown solution.

By Rafał Gancarz

MCP Goes Stateless, and Developers Ask Whether That Just Makes It an API Again

Steef-Jan Wiggers — Wed, 12 Aug 2026 09:48:00 GMT

The MCP 2026-07-28 specification removes the initialize handshake and session header, and adds required method and tool-name headers so gateways can route agent traffic without parsing JSON. Reaction split between developers calling it a rediscovery of REST and those arguing the standard itself was always the point.

By Steef-Jan Wiggers

IBM and Red Hat Expand Lightwell to Strengthen Trust and Governance for AI-Era Open Source

Craig Risi — Tue, 11 Aug 2026 12:00:00 GMT

IBM and Red Hat have announced an expansion of Lightwell, introducing new commercial offerings designed to help organizations establish trusted, verifiable software supply chains for the age of AI-assisted software development.

By Craig Risi

JetBrains Details its First Steps to Bring Rapidly Growing AI Spend under Control

Matt Foster — Tue, 11 Aug 2026 07:25:00 GMT

JetBrains has described how it began centralising AI usage after development-related spending increased roughly tenfold in six months. Rather than restricting engineers to a small set of approved tools, the company built a shared access and accounting layer intended to preserve tool choice while giving teams greater visibility and control over consumption.

By Matt Foster

How Pinterest Secures AWS Infrastructure at Scale with a Centralized Terraform Pipeline

Claudio Masolo — Mon, 10 Aug 2026 10:00:00 GMT

Pinterest has revealed the Resource Provisioner Pipeline (RPP), its own Terraform execution engine. It ensures least-privilege access and needs dual-control reviews. This is important for the company’s AWS infrastructure, as it adds strict guardrails to the GitHub Actions workflows.

By Claudio Masolo

GitHub Code Quality Targets Maintainability as AI-Generated Code Increases

Matt Saunders — Mon, 10 Aug 2026 08:00:00 GMT

GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. The service combines CodeQL analysis with AI-assisted detection of maintainability and reliability problems, then uses Copilot Autofix to suggest changes for review in pull requests, according to an announcement from GitHub.

By Matt Saunders

Buildpacks Move the Container Hardening Control Point Away from the Dockerfile

Mark Silvester — Mon, 10 Aug 2026 07:00:00 GMT

Cloud Native Buildpacks, which graduated within the CNCF in July 2026, move base image choice out of per-service Dockerfiles into a single builder owned by platform engineering, enabling fleet-wide patching. BellSoft's hardened Paketo builder is the latest sign that vendors now treat the builder, not the Dockerfile, as the container security control point.

By Mark Silvester

Stripe Uses Graph Search and State Machines to Automate Database Remediation

Renato Losio — Sun, 09 Aug 2026 06:55:00 GMT

The engineering team at Stripe recently described how they automated database incident recovery by modeling their global infrastructure as a graph. Using graph search algorithms together with state machines, the team computes and executes remediation plans automatically.

By Renato Losio

GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing

Steef-Jan Wiggers — Sat, 08 Aug 2026 07:45:00 GMT

GitHub consolidated the npm and Actions changes it shipped from March to July 2026 against supply chain attacks, several of which alter defaults rather than add options. Hacker News discussion focused less on the individual controls than on whether waiting periods are the right instrument, or a substitute for author-side package signing.

By Steef-Jan Wiggers

Instacart Builds Blueberry, an AI-Powered Assistant to Help On-Call Engineers Investigate Incidents

Leela Kumili — Fri, 07 Aug 2026 14:34:00 GMT

Instacart introduced Blueberry, an AI-assisted incident response system that helps on-call engineers investigate production issues faster. It combines AI agents, operational data, and historical incident knowledge to generate grounded root cause hypotheses in Slack. It uses parallel subagents, MCP integrations, and incident history to reduce investigation time while keeping engineers in control.

By Leela Kumili

AI Is Transforming Incident Response - But the Hardest Problems May Still Belong to Humans

Craig Risi — Fri, 07 Aug 2026 12:00:00 GMT

Artificial intelligence is rapidly changing how engineering teams respond to production incidents, offering the ability to summarize incident channels, analyze unfamiliar code, suggest remediation steps, generate pull requests, and increasingly assist with diagnosis.

By Craig Risi

Rootly Drops Small PR Rule as Agentic AI Changes Code Review Economics

Matt Saunders — Fri, 07 Aug 2026 08:00:00 GMT

Incident management platform provider Rootly has published an account of its decision to drop its long-standing small pull request rule, arguing that the practice no longer serves its purpose now that AI agents generate most of its code. The company describes a shift from measuring PR size to assessing blast radius, with feature flags and rollback capability taking precedence over line counts.

By Matt Saunders