Terraform Google Cloud Provider 8.0 Is GA — Three Breaking Changes That Will Affect Your Infrastructure
Terraform's Google Cloud provider 8.0 changes the default load balancer scheme and removes deprecated resources: three breaking changes to plan for.
CircleCI Can Now Run Your GitHub Actions Workflows Without Rewriting Them
CircleCI can now run existing GitHub Actions YAML on its own infrastructure with no rewrite, citing 40% faster builds. Linux-only, in open preview.
Datadog's MCP Server Now Runs Code — and Cuts AI Agent Investigation Costs 73% in the Process
Datadog's MCP Server now runs sandboxed JavaScript for AI agents, cutting input tokens 73% and lifting answer correctness from 74% to 90% across 25 tasks.
How to Build an LSP Plugin for Claude Code: Real-Time Language Server Feedback in the AI Editing Loop
A CircleCI guide covers building LSP plugins for Claude Code that route real-time language server feedback — diagnostics, hover docs, autocomplete — directly into Claude's editing loop. A four-component architecture: server launcher, scoping proxy, plugin config, and integration layer. Benchmark: 31% improvement in test storage configuration on applicable tasks.
Datadog IaC Security Now Accepts Custom Rego Rules — and Can Block PRs That Fail Them
Datadog IaC Security now supports organization-specific custom rules written in Rego, covering Terraform, CloudFormation, Kubernetes manifests, Ansible, Dockerfiles, and GitHub Actions. PR Gates can block merges on policy violations. Configuration lives in code-security.datadog.yaml.
HCP Terraform Now Has Pre-Written AWS and CIS Compliance Policies You Don't Have to Maintain
HCP Terraform launched a native pre-written policy library with AWS Foundational Security Best Practices and CIS Foundations Benchmark policies. Platform teams can enforce them at Advisory or Mandatory level without writing or maintaining Rego/Sentinel. Azure and GCP policies are coming. Currently in public beta.
Kubernetes v1.37 Native Histograms Graduate to Beta — and They're Now On by Default
Kubernetes v1.37 enables Native Histograms by default, graduating from alpha in v1.36. The change replaces classic Prometheus histograms' static buckets with adaptive, lower-cardinality metrics that provide more accurate latency percentiles without manual configuration.
NetFlow Traffic Counts Are Lying to You. Here's How to Fix Them.
Most NetFlow configurations double-count traffic by design — two independent mechanisms create duplicate records, and they often run simultaneously. Datadog's guide covers both root causes and the two complementary fixes that eliminate the noise without losing visibility.
Kubernetes v1.37 Adds Five Standardized Node Conditions for Drain and Maintenance Workflows
Kubernetes v1.37 introduces five new well-known Node conditions — DrainInProgress, Drained, MaintenancePlanned, MaintenanceInProgress, and GracefulNodeShutdownInProgress — replacing the scattered taint/label signals that platform teams currently use to communicate node state during operational events.
Kubernetes v1.37 Gang Scheduling Hits Beta — and Brings a New API for AI/ML Workloads
Kubernetes v1.37 graduates gang scheduling to beta with a new CompositePodGroup API, Workload-Aware Preemption, and standardized building blocks for third-party controller integration. The AI/ML workload angle is the reason this cycle matters.
Datadog Workload Protection Can Now Kill Processes and Isolate Workloads Mid-Attack
Datadog's Workload Protection has added automated and manual response actions — kill offending processes and isolate compromised containers — closing the gap between detection and remediation without a human handoff.
Kubernetes v1.37: Dynamic Resource Allocation Graduates to GA — What Changes for GPU Workloads
Kubernetes v1.37 promotes DRA Extended Resource Support to GA, enabling existing GPU workloads to migrate to Dynamic Resource Allocation without code changes. Device taints and NUMA standardization also reach GA.
India's Regulatory Wave: The 5 Security Controls Every Organization Needs Now
DPDP, SEBI CSCRF, CERT-In, and RBI data localization all demand the same five controls. HashiCorp Vault and Boundary address most of them directly.
The Datadog Loop: Five Stages for Turning Agent Traces Into Verified Improvements
Datadog's five-stage optimization loop — Observe, Hypothesize, Evaluate, Experiment, Ship — gives platform teams a repeatable method for improving AI agents without blind prompt guessing.
JFrog at swampUP 2026: Agents Are Now Supply Chain Actors, Not Just Tools
JFrog unveiled APM repositories, prompt-to-release traceability, and zero-touch remediation at swampUP 2026 — extending supply chain governance to autonomous AI agents.
From Traces to Experiments: The 5-Stage Loop for Improving AI Agents in Production
Datadog's framework for turning AI agent traces into actionable improvements — from pattern identification to production A/B testing — addresses the gap that offline evaluation alone can't close.
HashiCorp Vault Agentic IAM Is Now GA: Managing AI Agents Like Identities
Vault Enterprise 2.1 brings AI agent identity management to general availability — per-request OAuth controls, a centralized agent registry, and Terraform provisioning for agent credentials.
Datadog's Bitbucket Cloud Integration: Source Code Context in Every Trace
Datadog's new Bitbucket Cloud source code integration connects running services to their commit history, surfaces code snippets inline during troubleshooting, and posts automated PR feedback. Here's what changes for teams using Bitbucket.
How Datadog Bits Proves a Query Rewrite Is Actually Faster — Not Just Theoretically
Datadog's Bits Database Optimization generates synthetic production environments to validate query rewrites against three metrics before recommending them. Here's the methodology that makes it trustworthy.
Kubernetes v1.37: Pod Certificates and Cluster Trust Bundles Are Now GA
Kubernetes v1.37 graduates Pod Certificates and Cluster Trust Bundles to stable. They replace bearer token JWTs with proof-of-possession mTLS credentials — closing a workload identity gap that has existed since the beginning.
Kubernetes v1.37 Pod Certificates: Why Bearer Tokens Were Never Enough
Pod Certificates and Cluster Trust Bundles hit GA in Kubernetes v1.37, replacing bearer token identity with proof-of-possession X.509 credentials.
What Datadog Learned About AI Agent Security by Monitoring Its Own Agents
Datadog's internal agent monitoring revealed that 69% of input tokens live in system prompts teams can't inspect, coding agents execute repo-controlled code before the first user message, and prompt injection bypasses model evaluation entirely.
Datadog Live Debugger: Fix Production Bugs Without Writing a Single Deploy
Datadog's Live Debugger attaches logpoints to running services and collects variable snapshots without code changes or restarts — with Bits AI converting a plain-language bug description into a production-backed code fix.
How Datadog Saves $1 Million a Month on AI: The Optimization Playbook
Datadog cut over $1M/month in AI costs by migrating models, adjusting effort levels, and deploying context optimization. The specific numbers and methods behind each lever.