InfoQ - Development

Presentation: What 25 Trillion Tokens Reveal About How Developers Actually Adopt AI Agents

Brendan O’Leary — Thu, 15 Oct 2026 11:00:00 GMT

Brendan O'Leary discusses how real-world AI adoption depends on building trust rather than chasing model benchmarks. Drawing from 40 trillion tokens of usage data, he explains the four rungs of the AI adoption ladder and analyzes key failure points in context construction, multi-model routing, and feedback loops to help engineering leaders successfully scale agentic workflows.

By Brendan O’Leary

Article: Server-Side DPoP and Token Exchange in Spring Security 7

Dhruv Agnihotri — Thu, 15 Oct 2026 09:00:00 GMT

Spring Authorization Server now lives inside Spring Security 7 under the same Maven coordinates, so the upgrade is a version bump. This server-side guide covers enabling DPoP and RFC 8693 Token Exchange, explains why 7.1 apps can silently stop enforcing DPoP until they call .dPoP(), and shows how to combine both into narrowed, sender-constrained tokens for service-to-service and agentic calls.

By Dhruv Agnihotri

Meta Extends Confidential Computing to AI Glasses with Private Processing

Leela Kumili — Wed, 14 Oct 2026 13:57:00 GMT

Meta has extended Private Processing to AI glasses, using confidential VMs, trusted execution environments, remote attestation, anonymous credentials, OHTTP routing, and TEE-based storage to process AI workloads and persistent user context in the cloud.

By Leela Kumili

Presentation: How to Find Resilience Bugs in Systems that Don't Exist

Hillel Wayne — Wed, 14 Oct 2026 11:00:00 GMT

Hillel Wayne discusses how formal methods principles - such as property strength, state-space verification, and environment assumptions - help software engineers uncover critical architectural bugs early. He shares practical mental models like "adversarial non-determinism" to reason about concurrency, edge cases, and distributed system failures without needing complex mathematical tools.

By Hillel Wayne

Google Antigravity SDK Adds Local Model Support for Greater Token Efficiency and Code Privacy

Sergio De Simone — Wed, 14 Oct 2026 09:00:00 GMT

Google has introduced support for local models in the Antigravity SDK, enabling developers to build and execute agentic workflows directly on their own machines, while retaining the flexibility to mix in cloud-based models for higher-level tasks. This approach gives developers greater control over data privacy, inference costs, network dependencies, and computational workload distribution.

By Sergio De Simone

Cloudflares Newly Acquired Vite+ Reaches 1.0 with GitLab CI Support, Hooks, and tsup Migration

Daniel Curtis — Wed, 14 Oct 2026 06:15:00 GMT

VoidZero has launched Vite+ 1.0, the first stable version of its JavaScript toolchain. It features a command line tool for managing Node.js, package management, and frontend development from a single configuration file. Enhancements include CI integration for GitLab and Docker support. Future updates are planned, focusing on stability and diagnostics.

By Daniel Curtis

Backstage 1.55 Adds Scaffolder Task Recovery and Removes Deprecated Catalog APIs

Mark Silvester — Tue, 13 Oct 2026 17:00:00 GMT

Backstage 1.55 adds opt-in recovery for Software Template tasks, resuming crashed or timed-out runs from the last completed step. The release also carries breaking changes to the catalog, search and TechDocs, so teams should review their configuration before upgrading to the current 1.55.3 patch.

By Mark Silvester

ZCS Command Injection via SNMP Handlers Enables Unauthenticated Remote Code Execution

Olimpiu Pop — Tue, 13 Oct 2026 13:13:00 GMT

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses risks by allowing unauthorized access to mailbox data and credentials. This flaw, stemming from improper input sanitization, has been actively exploited. Organizations are advised to upgrade to version 10.1.20 or disable susceptible SNMP services to mitigate risks.

By Olimpiu Pop

Presentation: How Eve Online Leverages Head Based Sampling to Observe "Fun"

Nicholas Herring — Tue, 13 Oct 2026 11:00:00 GMT

Nicholas Herring shares how EVE Online tackles distributed tracing and observability across a 20-year-old MMO architecture. He discusses leveraging head-based, dynamic exponential moving average (EMA), and deterministic sampling techniques to maintain high system fidelity, control telemetry costs, and avoid performance degradation under high-throughput real-time game simulations.

By Nicholas Herring

Cloudflare’s OHTTP Gateway Refuses to Decrypt Requests That Arrive through Cloudflare

Steef-Jan Wiggers — Tue, 13 Oct 2026 06:44:00 GMT

Cloudflare has opened a closed beta of its OHTTP Gateway, a managed endpoint that decrypts Oblivious HTTP requests for an origin. The design choice drawing attention is a refusal: the Gateway will not decrypt requests arriving from Cloudflare Workers or from hosts proxied through Cloudflare, because that would put client identifiers and request contents in the same hands.

By Steef-Jan Wiggers

Spotify More Than Doubled Monthly Code Changes as AI Accelerated Development

Leela Kumili — Mon, 12 Oct 2026 13:57:00 GMT

Spotify reports that AI-assisted development more than doubled monthly merged changes, prompting a review of quality and reliability controls across its engineering organization. The company describes changes to testing, observability, rollback capacity, workload prioritization, and automated maintenance as it adapts to higher software change volume.

By Leela Kumili

React 19.3: Adds a browser() API, Giving Client-Only Rendering a First-Class Name

Daniel Curtis — Mon, 12 Oct 2026 10:52:00 GMT

React 19.3 was released on September 9, introducing several features including the react-dom browser() API. This API allows components to opt out of server-side rendering, addressing issues with components that rely on client-specific data. It provides a cleaner solution for managing hydration mismatches and supports conditional data fetching, enhancing flexibility for developers.

By Daniel Curtis

Java News Roundup: Grails 8, Open Liberty, GlassFish, Infinispan, LangChain4j, Spock

Michael Redlich — Mon, 12 Oct 2026 10:10:00 GMT

This week's Java roundup for October 5th, 2026, features news highlighting: OpenJDK JEPs Proposed to Target for JDK 28; Lazy Constants elevated to Candidate status; the GA releases of Apache Grails 8.0 and Open Liberty 20.0.0.10; point releases of TornadoVM, Infinispan, LangChain4j and Spock; and a maintenance release of GlassFish.

By Michael Redlich

Xcode 27.2 Introduces an Agent- and Merge-Friendly JSON Format for Project Configuration

Sergio De Simone — Mon, 12 Oct 2026 09:00:00 GMT

Apple is introducing a new JSON-based format for Xcode project configuration files, replacing the traditional property-list-based format. Available in Xcode 27.2, the new format aims to improve readability, simplify maintenance, and make project configuration easier for AI coding agents to understand and modify.

By Sergio De Simone

Context Language Models: Self-Managing Context to Improve Performance and Reduce Compute Costs

Sergio De Simone — Sun, 11 Oct 2026 14:00:00 GMT

Researchers from Meta, MIT, and the University of Washington introduce Context Language Models (CLMs), a new approach that enables language models to manage and edit their own context rather than relying on predefined mechanisms for summarization, compression, and information retrieval, reporting substantial gains in both performance and computational efficiency.

By Sergio De Simone