GitHub ReviewBench: Copilot Wins Its Own AI Code Review Test
Copilot tops GitHub's ReviewBench but ranks fourth on an independent leaderboard. What that gap means when choosing an AI code reviewer for CI/CD.
Datadog CI/CD Optimization: The Case for Treating Your Pipeline as a Production Service
Datadog's CI/CD Optimization combines pipeline telemetry, flaky test detection, and test impact analysis. Betterment cut builds from 40 minutes to under 10.
Datadog Observability Pipelines Now Routes Security Logs to Exabeam — Without Blinding Your SIEM
Datadog Exabeam Packs filter Cisco ASA, CrowdStrike, and Palo Alto logs before SIEM ingest — cutting costs while keeping threat-relevant signals intact.
CircleCI Can Now Run Your GitHub Actions Workflows Without Rewriting Them
CircleCI can now run existing GitHub Actions YAML on its own infrastructure with no rewrite, citing 40% faster builds. Linux-only, in open preview.
How to Build an LSP Plugin for Claude Code: Real-Time Language Server Feedback in the AI Editing Loop
A CircleCI guide covers building LSP plugins for Claude Code that route real-time language server feedback — diagnostics, hover docs, autocomplete — directly into Claude's editing loop. A four-component architecture: server launcher, scoping proxy, plugin config, and integration layer. Benchmark: 31% improvement in test storage configuration on applicable tasks.
Kubernetes v1.37: Dynamic Resource Allocation Graduates to GA — What Changes for GPU Workloads
Kubernetes v1.37 promotes DRA Extended Resource Support to GA, enabling existing GPU workloads to migrate to Dynamic Resource Allocation without code changes. Device taints and NUMA standardization also reach GA.
The Datadog Loop: Five Stages for Turning Agent Traces Into Verified Improvements
Datadog's five-stage optimization loop — Observe, Hypothesize, Evaluate, Experiment, Ship — gives platform teams a repeatable method for improving AI agents without blind prompt guessing.
Datadog's Bitbucket Cloud Integration: Source Code Context in Every Trace
Datadog's new Bitbucket Cloud source code integration connects running services to their commit history, surfaces code snippets inline during troubleshooting, and posts automated PR feedback. Here's what changes for teams using Bitbucket.
Datadog Live Debugger: Fix Production Bugs Without Writing a Single Deploy
Datadog's Live Debugger attaches logpoints to running services and collects variable snapshots without code changes or restarts — with Bits AI converting a plain-language bug description into a production-backed code fix.
Kiro, AWS DevOps Agent, and Dynatrace: How Production Telemetry Gets Baked Into Code Generation
AWS's three-tool stack connects live Dynatrace production telemetry directly to Kiro's code generation — so AI-written changes reflect how systems actually behave, not how docs say they should.
Kiro + AWS DevOps Agent + Bluebox: The AI Software Delivery Loop AWS Is Betting On
AWS describes how Kiro, its DevOps Agent, and Dynatrace's Bluebox create a closed feedback loop from spec to production incident response. Human review gates required throughout.
CloudFormation Drift Detection: The AWS Blueprint for Governing ClickOps Environments
AWS DevOps published a four-stage maturity framework for converting manually modified infrastructure into governed IaC — with EventBridge-driven drift detection at its core.
MCP vs API: CircleCI's Practical Guide to When Each Makes Sense
CircleCI's engineering blog clarifies the actual distinction between APIs and MCP — and why the answer for most agentic systems is 'both, for different purposes.'
How Datadog Scaled Git Serving 20x Without Slowing CI Down
Datadog's GitRetriever sustains 20× CI traffic growth at 40ms median latency — a two-tier mirror/relay architecture for monorepo CI that any platform team can adapt.
How to Trace AWS Lambda Durable Functions with Datadog
Datadog's Node.js and Python tracers now instrument AWS Lambda Durable Functions automatically — connecting multi-invocation workflows into a single unified flame graph without code changes.
CNCF Publishes Governance Framework Guidance: Three Models, One Critical Mechanism
CNCF's analysis of 72 projects reveals that organizational-balanced voting — not contributor volume — is the strongest predictor of sustained contributor diversity. The guidance recommends three governance structures based on project size and complexity.
Eleven Minutes, Zero Humans: How This Kubernetes Upgrade Pipeline Works
A production Kubernetes control plane upgraded across three nodes in 11 minutes without manual intervention. Here's the six-tool pipeline behind it, the critical concurrency mistake to avoid, and what self-healing actually requires.
Packer v1.16.0 Brings SLSA Provenance to Machine Images — Here's What That Means
HashiCorp's Packer v1.16.0 adds native SLSA provenance generation and verification to machine image builds. The result: cryptographically signed build records, four signing modes, and packer verify-attestation for enforcement pipelines.
JFrog Artifactory and GCP Artifact Registry: Native Pull, No Sync Required
JFrog's Artifact Registry Connector routes Cloud Run and GKE pulls directly to Artifactory in real time — eliminating sync lag, parallel registries, and policy enforcement gaps.
AGENTS.md vs. Skills: How to Actually Steer a Coding Agent
CircleCI's breakdown of when to use AGENTS.md versus modular skills for coding agents — and why the real problem isn't the format, it's measuring whether steering works at all.
When Zero Plus Zero Equals Two: Fixing Trace Fragmentation in Istio and Kiali
Combining Istio sidecar tracing with OpenTelemetry instrumentation produces duplicate, disconnected trace records — not unified observability. The fix is two configuration changes, and it closes the gap permanently.
The npm Attack That Turned Provenance Attestations Into Camouflage
The August 2026 npm worm compromised packages with 150M+ weekly downloads by publishing from legitimate GitHub Actions runners — making valid provenance attestations a false safety signal.
Shadow AI in CI/CD: The Six-Stage Threat Model from Laptop to Kubernetes
CNCF maps six attack surfaces where unapproved AI agents gain privileged access in the software pipeline — every enterprise has at least one gap, and CI credentials are the target.
AWS Kiro's Agent Client Protocol: The LSP Moment for AI Coding Agents
AWS rebuilt Kiro around the Agent Client Protocol, separating coding agents from editors. Here's why this LSP-like shift matters for platform teams.
AWS IaC MCP Server: What CloudFormation Development Looks Like with Unified AI Tooling
AWS's IaC MCP Server consolidates CloudFormation documentation search, syntax validation, compliance checking, and runtime troubleshooting into one conversational interface. Here's what that workflow change actually delivers.
SLSA and DevGovOps: Why Software Supply Chain Governance Now Runs at Machine Speed
AI agents generate code faster than human governance frameworks can review it. DevGovOps — continuous governance embedded in CI/CD — is the response, and SLSA provides the maturity model. Here's how JFrog's implementation works.
The Practical Guide to AI Sandboxes for Developers
AI coding agents have deleted home directories and a production database. What an AI sandbox is, how isolation levels differ, and where it fits.
The Practical Guide to EC2 Image Builder and AWS CDK for Studio-Scale AMI Management
Company 3's post-production teams eliminated custom-resource workarounds for AMI versioning by adopting EC2 Image Builder auto-versioning and CDK L2 constructs.
Remote MCP Servers: Why 'Just Run It Locally' Stopped Working
Remote MCP servers move tool access from a developer's laptop to hosted infrastructure — here's the architecture shift and why CircleCI built one for CI/CD.
Atlassian's Jira Gets a Coding Agent: What the Teamwork Graph Actually Changes
Jira Coding Agent is now live on all paid plans. Atlassian's Teamwork Graph provides project context to connected AI coding tools — here's what that means for platform teams managing AI-assisted development at scale.
The Velocity Gap Is Getting Worse: What CircleCI's Q2 2026 Data Shows
Elite engineering teams now run 9x more main-branch workflows than median teams — up from 8x in Q1. CircleCI's Q2 Pulse report introduces a new metric, MER, that explains why the gap compounds.
CircleCI Rewrote Its CLI in Go Because Coding Agents Needed Predictability
CircleCI's CLI rewrite isn't a developer ergonomics play—it's infrastructure for agentic CI/CD. Consistent JSON, stable exit codes, and a first-class MCP server are now the requirements.
JFrog Boost: The Free CLI That Cuts AI Coding Token Bills Before You Hit the Limit
JFrog Boost enters public preview with 80% payload reduction in CI scenarios—addressing the token-cost problem quietly becoming every platform team's biggest AI line item.
CircleCI Q2 2026: The 9x Velocity Gap Between Elite Teams and Everyone Else
CircleCI analyzed 20 million workflows and found the gap between top 5% engineering teams and median teams widened to 9x in Q2 2026. The differentiator isn't AI — it's what happens to code before it reaches the AI pipeline.
kpt Joins CNCF: The Kubernetes Config Toolchain That Shows You What You're Deploying Before You Deploy It
kpt's CNCF sandbox debut reintroduces a Kubernetes configuration toolchain built around WYSIWYG deployment — you inspect the final manifest before it hits the cluster, not a template that generates it.
AWS EKS Kubernetes Version Rollbacks: Upgrading Is No Longer a One-Way Door
Amazon EKS now lets teams reverse a Kubernetes version upgrade within 7 days. Here's how rollback works, what the limits are, and what it changes for platform engineers.
Why Traditional CI/CD Fails for LLMs—and the Release Gates That Fix It
CI/CD was built for deterministic code. LLMs aren't deterministic. Here's the core mismatch and the threshold-based release gates teams are building to address it.
AWS CloudFormation Express Mode: 4x Faster, Zero Extra Cost
AWS CloudFormation's new Express mode cuts deployment times by up to 4x by skipping stabilization wait times — enabling sub-minute feedback loops for AI-assisted infrastructure at no added charge.
Coding Agents All Agree: Run the Code. The Debate Is What It Runs Against.
Runtime verification is now the baseline for AI coding agents. Greptile, Cursor, and Devin agree on execution — they disagree on what it runs against, and that choice matters at scale.
Datadog's CDN Log Fix: Archive Search Lets You Query 751 GB of Logs Without Paying to Index Them
High-volume CDN access logs are too expensive to keep in Datadog's indexing tier but too valuable to throw away. Archive Search solves the gap — query petabytes in cold storage with the same syntax as Log Explorer.
Codeplain's Argument: Code Should Be Regenerated, Not Maintained
Dušan Omerčević's Codeplain treats code as disposable output and specs as the durable artifact. In the age of AI-assisted development, the case for regenerative development is harder to dismiss than it sounds.
Mutation Testing: What Platform Teams Are Missing With Code Coverage Alone
Code coverage tells you which lines ran. Mutation testing tells you whether your tests would actually catch a defect. For platform teams shipping infrastructure-affecting code, the difference is the gap between 'tests passed' and 'tests work'.
AWS DevOps Agent Adds Release Management: Pre-Production Assessment Before Code Merges
AWS DevOps Agent's new release management capabilities add release readiness review and autonomous release testing — two preview features that assess code changes in isolated environments before they reach production.
Building a Cluster-Aware AI Agent with Kubernetes, Argo CD, and GitOps
A CNCF reference architecture shows how to run an AI agent inside a Kubernetes cluster that observes live state, diagnoses pods via RAG, and delivers updates through a full GitOps pipeline — without write access to the cluster.
AWS DevOps Agent + LaunchDarkly: Feature Flags as Incident Response
AWS DevOps Agent now connects to LaunchDarkly's MCP server, enabling agentic feature flag orchestration at deployment and during incidents — flag-based containment in minutes, not rollbacks.
npm v12's Biggest Security Change: Installation Scripts Now Need Your Permission
npm v12 disables lifecycle scripts, Git dependencies, and remote URL resolution by default — an explicit trust model that blocks 53% of malicious npm attacks and requires teams to audit their CI/CD pipelines before upgrading.
How AWS Transform Turns Tech Debt Into a Daily Ops Problem
AWS Transform now scans continuously and auto-generates remediation PRs. That reframes tech debt from migration event to ongoing infrastructure concern.
HashiCorp Closes the Terraform-Ansible Gap With pyTFE and Collection 2.0
pyTFE 1.0 and Terraform Ansible Collection 2.0 make it practical to run Terraform workflows from Ansible without glue code — bridging Day 0 provisioning and Day 2 operations natively.
HashiCorp Launches tfctl: A Dedicated CLI for HCP Terraform and Terraform Enterprise
HashiCorp's new tfctl gives platform engineers full API coverage of HCP Terraform and TFE from the command line — with dry-run mode, schema discovery, and built-in guardrails for destructive operations.
When AI Teams Deploy 1,000 Times a Month, the Pipeline Breaks
AI coding agents have reversed the classic software constraint: code now takes hours, not weeks. The CI/CD pipeline, still designed for human-speed development, has not kept up.
The Three-Layer IDP That Cut Deployment Failures from 30% to 5%
Separating infrastructure, platform, and application layers in a Kubernetes IDP cut deployment failures from 30% to 5% and provisioning time from hours to 15 minutes. Here's the full architecture.
Terraform 1.15: What Dynamic Module Sources Change for Platform Teams
Terraform 1.15 introduces dynamic module sources, variable deprecation, native Windows ARM64 support, and inline type conversion. Here's what each feature unlocks for IaC at scale.
CircleCI Chunk: CI Validation Inside the Agent's Inner Loop in Under 60 Seconds
CircleCI Chunk sidecars bring CI feedback into the agent's inner loop — microVM environments that validate code locally in 60 seconds, no commit or push required.
SmartBear Swagger Targets the Silent API Drift That AI Coding Tools Create
SmartBear's Swagger Catalog and Contract Testing with Drift Detection address a new failure mode: AI coding tools generate code that silently diverges from the OpenAPI spec it was supposed to implement.
CircleCI as a Codex Plugin: What Agentic CI/CD Actually Looks Like
CircleCI just shipped a native Codex plugin that lets AI agents inspect pipelines, debug failures, and optimize configs without a context switch. Here's what that unlocks.
Datadog CI/CD Threat Matrix: A MITRE Framework for Pipeline Security
Datadog published a MITRE ATT&CK-style threat matrix for CI/CD pipelines — 10 attack tactics mapped to the specific exposure points where compromised pipelines ship malicious code.
The Hidden Tax on Every AI-Generated Merge Request
AI doubled merge request volume but review time rose 91% in parallel. Here's the hidden cost accumulating in your codebase.
LiteLLM Compromised: How the AI Gateway Became the Attack Surface
On March 24, attackers compromised LiteLLM via a single unpinned CI dependency, deploying credential harvesters and Kubernetes backdoors across affected environments.