~/news vault: 164 entries last sync: 06:26 model: gemma4:26b
— Tech briefing archive

The signal
through the noise.

A locally-curated stream of what matters in software, AI, and security. Filtered, scored, summarized, indexed.

$
All 164 Ai 58 Dev-tools 29 General 19 Infra 25 Releases 2 Security 31
§ 02

This week

3 entries
7/ 10
Kubernetes v1.36: In-Place Vertical Scaling for Pod-Level Resources Graduates to Beta
Kubernetes v1.36 introduces the graduation of In-Place Pod-Level Resources Vertical Scaling to Beta. This feature allows developers to modify the aggregate resource budget (`.spec.resources`) of a running Pod, enabling...
7/ 10
Agents can now create Cloudflare accounts, buy domains, and deploy
Cloudflare and Stripe have introduced a new protocol within Stripe Projects that enables AI agents to autonomously provision Cloudflare infrastructure. This allows agents to create Cloudflare accounts, register domains,...
6/ 10
Kubernetes v1.36: Staleness Mitigation and Observability for Controllers
Kubernetes v1.36 introduces new features designed to mitigate controller staleness and improve the observability of controller behavior. These updates allow controllers to detect when their local cache is outdated...
§ 03

Earlier

22 entries
7/ 10
Kubernetes v1.36: User Namespaces in Kubernetes are finally GA
Kubernetes v1.36 introduces User Namespaces at General Availability (GA) for Linux-only environments. This feature enables rootless security isolation by decoupling container user identities from the host, preventing...
7/ 10
SELinux Volume Label Changes goes GA (and likely implications in v1.37)
Kubernetes is transitioning the `SELinuxMount` feature gate to be enabled by default, an update anticipated for version 1.37. This change replaces the resource-intensive recursive relabeling of volume files with a more...
6/ 10
Making Rust Workers reliable: panic and abort recovery in wasm‑bindgen
Recent updates to `wasm-bindgen` and the Rust Workers runtime introduce mechanisms to recover from Rust panics and WebAssembly aborts. These improvements prevent a single failed request from poisoning the WebAssembly...
7/ 10
Kubernetes v1.36: ハル (Haru)
Kubernetes v1.36 introduces 70 enhancements, including 18 features graduating to Stable, 25 entering Beta, and 25 entering Alpha. The release focuses on refining API authorization, improving hardware resource...
6/ 10
The AI engineering stack we built internally — on the platform we ship
Cloudflare has deployed an internal AI engineering stack built entirely on its own production infrastructure, including AI Gateway, Workers AI, and Cloudflare Access. This architecture supports over 3,600 internal users...
7/ 10
Building the agentic cloud: everything we launched during Agents Week 2026
Cloudflare has launched a suite of infrastructure primitives designed to support the "agentic cloud," focusing on the unique compute, security, and memory requirements of autonomous AI agents. The updates provide...
7/ 10
Unweight: how we compressed an LLM 22% without sacrificing quality
Unweight is a lossless compression system designed to reduce LLM weight size and alleviate memory bandwidth bottlenecks during inference on NVIDIA H100 GPUs. By compressing the exponent bytes of BF16 weights, the system...
7/ 10
Agents that remember: introducing Agent Memory
Cloudflare has announced the private beta of Agent Memory, a managed service designed to provide persistent, retrieval-based memory for AI agents. The service addresses the "context rot" problem by extracting and...
7/ 10
Cloudflare’s AI Platform: an inference layer designed for agents
Cloudflare is expanding its AI platform into a unified inference layer, providing a single API to access models from various third-party providers. This update enables developers to manage multi-model workflows,...
6/ 10
Building the foundation for running extra-large language models
Cloudflare has implemented several architectural optimizations to the Workers AI infrastructure to support the deployment of extra-large language models, such as Kimi K2.5. These updates focus on decoupling...
6/ 10
Kubernetes v1.36 Sneak Peek
Kubernetes v1.36, scheduled for release on April 22, 2026, introduces significant API removals, the retirement of the Ingress NGINX project, and advancements in Dynamic Resource Allocation (DRA). These updates focus on...
6/ 10
Running Agents on Kubernetes with Agent Sandbox
The Agent Sandbox project, developed under Kubernetes SIG Apps, introduces a new abstraction for managing long-running, stateful AI agent workloads on Kubernetes. It provides a standardized API via a Custom Resource...
7/ 10
Announcing Ingress2Gateway 1.0: Your Path to Gateway API
The release of Ingress2Gateway 1.0 provides a stable migration assistant for transitioning Kubernetes networking from Ingress-NGINX to the Gateway API. The tool automates the translation of Ingress resources and...
6/ 10
Securing Production Debugging in Kubernetes
This architecture replaces broad, long-lived production access—such as cluster-admin privileges and shared bastion hosts—with a secure, just-in-time (JIT) debugging workflow. It utilizes an access gateway and...
8/ 10
Before You Migrate: Five Surprising Ingress-NGINX Behaviors You Need to Know
Kubernetes is retiring the Ingress-NGINX controller in March 2026, requiring a migration to alternative solutions such as the Gateway API. This transition is high-risk because Ingress-NGINX utilizes non-standard...
8/ 10
Kubernetes v1.35: Restricting executables invoked by kubeconfigs via exec plugin allowList added to kuberc
Kubernetes v1.35 introduces a new security feature in the `kuberc` configuration that allows users to restrict which executables can be invoked by `kubeconfig` credential plugins. This mechanism mitigates supply-chain...
6/ 10
Kubernetes v1.35: New level of efficiency with in-place Pod restart
Kubernetes v1.35 introduces the `RestartAllContainers` alpha feature, which enables the in-place restart of all containers within a Pod without requiring the Pod to be deleted and recreated. This mechanism allows for a...
7/ 10
Kubernetes v1.35: Introducing Workload Aware Scheduling
Kubernetes v1.35 introduces workload-aware scheduling features designed to manage multi-Pod applications, such as machine learning batch jobs, more efficiently. The update implements the new Workload API and gang...
7/ 10
Kubernetes 1.35: In-Place Pod Resize Graduates to Stable
Kubernetes v1.35 marks the graduation of the In-Place Pod Resize feature to Stable (GA). This feature allows for the modification of CPU and memory requests and limits within a running Pod, eliminating the requirement...
7/ 10
Kubernetes v1.35: Timbernetes (The World Tree Release)
Kubernetes v1.35 introduces 60 enhancements, consisting of 17 stable, 19 beta, and 22 alpha features. This release focuses on improving resource management efficiency, automating workload identity, and enhancing...
6/ 10
Kubernetes v1.35 Sneak Peek
Kubernetes v1.35 introduces critical breaking changes, including the removal of cgroup v1 support and the end of support for containerd v1.x. The release also features significant functional advancements, such as the...
8/ 10
Ingress NGINX Retirement: What You Need to Know
Kubernetes SIG Network and the Security Response Committee have announced the retirement of the Ingress NGINX controller due to unsustainable maintenance and security challenges. Best-effort maintenance will continue...