Envoy Proxy 1.40.0 hands-on: stable H3/QUIC, PQC-by-default TLS, the MCP router auth-header breaking change, and the bzlmod migration tax.
Karpenter 1.15.0 turns node auto-repair into a voluntary disruption method: budgets, per-condition drain bounds, XID-aware GPU policies, in-place reboots.
ESO 2.12.0 blocks composed service-account-token Secrets, ships a 29-hour chart revert, repairs destructive Pulumi ESC pushes, and warns on replica races.
OpenTofu 1.13 adds assume... planning hints, built-in linting, WinRM removal, and a base64gzip change that will churn your plans.
OPA 1.21 rewrites rule indexing (660x on our probe) and switches YAML to the 1.2 core schema — two silent breaks. 1.21.0 segfaulted; 1.21.1 fixed it.
OTel Collector v0.162.0 renames queuebatch to queue_batch, fixes a log-dropping batch split bug, and flips HTTP keepalive defaults. Analysis + configs.
Prometheus 3.15.0 fixes silent Agent-mode WAL corruption, ships Unix-socket scraping and OM 2.0, and makes XOR2 storage a one-way door. Analysis + configs.
containerd 2.4.1 fixes CVE-2026-53493, an image-pull DoS with no workaround, across five branches — leaving EOL 2.1.x users exposed. Patch matrix inside.
vLLM 0.30.0 ships an IPC weight-cache daemon, Gumbel-max watermarking, and a host-tier KV cache — plus breaking config changes your fleet must plan for.
containerd 2.4.0 removes deprecated CRI/tracing config and adds a mount manager for image volumes. Full migration guide.
Analysis of Argo CD's latest RC, focusing on AppSet visibility and CNPG resource management.
Analysis of Backstage's latest release, focusing on task recovery and forced dependency upgrades.
Technical breakdown of the Crossplane 2.4.1 fix for the "cannot establish control" deadlock during package revision hand-offs.
Analysis of the Kubernetes 1.37.0 release and the trend toward core stability.
Kubernetes Changed Block Tracking API (Beta) enables incremental volume backups by querying only modified blocks, but CSI driver quality determines reliability.
K8s v1.37 Memory QoS (Beta) adds tiered memory protection via cgroup v2, letting Kubelet distinguish critical pages from reclaimable cache to reduce OOM kills.
K8s v1.37 Native Histograms (Beta) aggregate distributions at the source, enabling dynamic bucket resolution for latency metrics without redeployment.
K8s v1.37 Pod-Level Resource Managers (Beta) decouple NUMA-aligned CPU placement from individual container requests, eliminating the sidecar core tax.
K8s v1.37 storage hardening adds bindMountOptions (noexec, nosuid, nodev) and emptyDir permission modes, closing the writable-executable volume gap.
Technical analysis of Ollama's update to MLX support and integration with ChatGPT.