InfoQ - Development

How OpenAI Built a Secure Windows Sandbox for Codex Agents

Leela Kumili — Fri, 05 Jun 2026 14:37:00 GMT

OpenAI details Codex Windows sandbox architecture, showing how SIDs, ACLs, restricted tokens, and dedicated sandbox accounts enable safe execution of autonomous coding tasks. The design balances isolation with real developer workflows and shows how OS security primitives must be composed for AI agents on local development environments.

By Leela Kumili

Dropbox Introduces Nova, an Internal Platform for Running AI Coding Agents at Scale

Craig Risi — Fri, 05 Jun 2026 12:00:00 GMT

Dropbox has unveiled Nova, an internal platform designed to orchestrate and operationalize AI coding agents across the company's engineering workflows.

By Craig Risi

Google LiteRT-LM Speeds Up Local Inference Up to 2.2x With Gemma 4 Multi-Token Prediction

Sergio De Simone — Fri, 05 Jun 2026 09:00:00 GMT

LiteRT-LM brings native support for Gemma 4 Multi-Token Prediction (MTP) drafters, enabling up to 2.2x faster inference. The framework is expanding beyond Kotlin and C++ adding support for new Swift and a JavaScript APIs.

By Sergio De Simone

TypeORM Reaches 1.0 After Nearly a Decade, Signalling Renewed Maintenance

Daniel Curtis — Fri, 05 Jun 2026 06:52:00 GMT

TypeORM 1.0 is the first major release of the open-source TypeScript and JavaScript ORM since its inception in 2016. This version modernizes platform requirements, removes deprecated APIs, and introduces numerous bug fixes and new features. TypeORM now supports ECMAScript 2023, dropping older Node.js versions and dependencies while enhancing security and migration processes.

By Daniel Curtis

30+ Updates per Second per Account: Uber Scales Ledger Processing with Batching

Leela Kumili — Thu, 04 Jun 2026 14:02:00 GMT

Uber introduced a high-throughput financial ledger processing system designed to handle hot account write contention at scale. Using 250ms batching, Redis coordination, and optimistic atomic updates, the system supports 30+ updates per second per account while preserving consistency and auditability, reducing multi-hour processing pipelines to minutes in its distributed accounting infrastructure.

By Leela Kumili

Article: Architectural Change Cases: A Practical Tool for Evolutionary Architectures

Pierre Pureur, Kurt Bittner — Thu, 04 Jun 2026 09:00:00 GMT

Architectural change cases extend architecture decision record (ADR) thinking by evaluating how decisions may evolve over time. Change cases expose hidden assumptions and help teams estimate the reversibility and cost of change.

By Pierre Pureur, Kurt Bittner

AWS Replaces Fat-Tree Data Center Networks with Random Graph Theory, Cutting Routers by 69%

Steef-Jan Wiggers — Thu, 04 Jun 2026 08:25:00 GMT

AWS disclosed that Resilient Network Graphs, a flat network architecture based on quasi-random graph theory, is now the default for most new data center builds. The design replaces fat-tree hierarchies with direct ToR-to-ToR mesh connections using passive optical ShuffleBoxes, cutting routers by 69%, boosting throughput by 33%, and reducing network power consumption by 40%.

By Steef-Jan Wiggers

Next.js 16.2: 400% Faster Dev Startup, Faster Rendering, and Deeper Tooling for AI Agents

Daniel Curtis — Thu, 04 Jun 2026 06:47:00 GMT

Vercel has released Next.js 16.2, featuring performance enhancements that make development startup 400% faster and rendering up to 60% quicker. The update includes AI-assisted development tools, improved Turbopack efficiency, and better error reporting. Migration from Next.js 15 is supported, and compatibility is set for Node.js 20.9 and TypeScript 5.1 or newer.

By Daniel Curtis

Inside Google’s System for Coordinated A/B Testing across its Global Service Fleet

Leela Kumili — Wed, 03 Jun 2026 14:54:00 GMT

Google has shared details of its fleet wide large scale A/B experimentation system designed to standardize experiment assignment, exposure logging, and configuration propagation across distributed services. The approach enables consistent measurement across products, reduces experiment conflicts, and improves reliability of data driven decision making at scale.

By Leela Kumili

Article: Two Misconfigurations That Caused Spark OOM Failures on Kubernetes

Pranav Bhasker — Wed, 03 Jun 2026 09:00:00 GMT

After migrating Spark pipelines to Azure Kubernetes Service, two infrastructure settings interacted destructively: spark.kubernetes.local.dirs.tmpfs=true backed shuffle spill with RAM instead of disk, and a hard podAffinity rule forced all executors onto one node. Together, they caused repeated OOM kills invisible to standard diagnostics.

By Pranav Bhasker

Node.js Moves to One Major Release Per Year, Starting with Node 27

Daniel Curtis — Wed, 03 Jun 2026 06:40:00 GMT

Node.js will change its release schedule starting with version 27 in October 2026, moving from two major releases per year to one. All releases will become Long-Term Support (LTS), removing the distinction between odd and even versions. An Alpha channel for early testing will also be introduced. This decision addresses maintenance challenges and aims to align with user needs.

By Daniel Curtis

Google Workspace CLI: Unified Command-Line Tool Built for Humans and AI Agents

Daniel Curtis — Tue, 02 Jun 2026 06:33:00 GMT

Google has released a new CLI for Google Workspace, offering a unified interface for various services like Drive, Gmail, and Calendar. Built in Rust, the tool dynamically adjusts to API changes and features over 100 bundled skills. It requires Node.js and a Google Cloud project for setup. Initial community feedback is mixed, highlighting both its dynamic capabilities and setup challenges.

By Daniel Curtis

Java News Roundup: OpenJDK JEPs, Hazelcast, Quarkus, Hibernate, Koog, JHipster, Introducing Endive

Michael Redlich — Mon, 01 Jun 2026 21:30:00 GMT

This week's Java roundup for May 25th, 2026, features news highlighting: lifecycle changes with two of the JEPs that were targeted for JDK 27; the GA release of Koog 1.0; point releases of Hazelcast, Quarkus, Hibernate and JHipster; the eighth milestone release of Spring AI 2.0; and introducing Endive, a JVM-native WebAssembly (Wasm) runtime.

By Michael Redlich

Shopify Reports 15X Faster Graphql Execution with Breadth First Engine

Leela Kumili — Mon, 01 Jun 2026 14:25:00 GMT

Shopify introduced GraphQL Cardinal, a new execution engine replacing depth-first traversal with breadth-first execution. The redesign improves large-scale GraphQL performance with up to 15x faster field execution, 6x lower GC overhead, and +4s P50 latency gains. It focuses on execution-layer efficiency and batched resolver processing for high-cardinality commerce queries.

By Leela Kumili

BadHost Vulnerability Exposes AI Agents, Evaluators, and LLM Gateways

Sergio De Simone — Mon, 01 Jun 2026 14:00:00 GMT

BadHost is a high-severity authentication bypass vulnerability in the widely used Python web framework Starlette, with 325 million weekly downloads. The flaw allows attackers to use malformed HTTP Host headers to bypass path-based access controls and access sensitive AI agent infrastructure, among other systems.

By Sergio De Simone