platformchangelog.dev
43 tools

Platform Changelog: what shipped in platform engineering, developer experience and DevOps

feedbefore 2026-05-20patches hidden unless security or breaking
newest entries
2026-05-196 months ago
Pulumiv3.242.0minor+++++++++***
2026-05-156 months ago
Kubernetes v1.36: Mixed Version Proxy Graduates to BetapostThe Kubernetes Mixed Version Proxy moves to Beta in Kubernetes 1.36 and is enabled by default. It routes requests for resources unknown to an older API server to a newer peer instead of returning 404, and it now uses aggregated discovery and merges peer APIs into discovery responses. Clusters need the --peer-ca-file flag set for peer proxying to work, and discovery falls back to local APIs when that flag is absent.platform teamsPlatform teams running multi-control-plane clusters should set --peer-ca-file before upgrading to 1.36, since proxying fails with TLS errors without it. Discovery output will now list APIs from all peers by default, so tooling that expects per-server results can request the profile=nopeer view.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Kubernetes v1.36: New Metric for Route Sync in the Cloud Controller ManagerpostKubernetes v1.36 adds an alpha counter metric, route_controller_route_sync_total, to the Cloud Controller Manager route controller. The metric increments each time routes are synced with the cloud provider. It is intended to help operators A/B test the CloudControllerManagerWatchBasedRoutesReconciliation feature gate, introduced in v1.35, which reconciles routes only when nodes change instead of on a fixed interval.platform teamsPlatform teams can compare sync counts with the feature gate on and off to measure reduced calls to the infrastructure provider API. The source expects a significant drop in sync rate in clusters where nodes change infrequently, but gives no measured figures.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Amazon EKS v1.36 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-05-146 months ago
Kubernetes v1.36: Deprecation and removal of Service ExternalIPsannouncementKubernetes 1.36 formally deprecates the .spec.externalIPs field on Service, which the project says enables security exploits when users are not fully trusted (CVE-2020-8554). Kubernetes now emits warnings when the field is used. The project plans to disable support in kube-proxy at v1.40 at the earliest, with an opt-back-in, and fully at v1.43 at the earliest.platform teamsPlatform teams should check whether any Services set externalIPs and migrate to a LoadBalancer controller such as MetalLB, or to Gateway API, where administrators control IP assignment. Enabling the DenyServiceExternalIPs admission controller is recommended as a precaution against new uses.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-05-136 months ago
Kubernetes v1.36: Advancing Workload-Aware SchedulingpostKubernetes v1.36 introduces the Workload and PodGroup APIs under scheduling.k8s.io/v1alpha2, separating the static Workload template from runtime PodGroup state. It adds a PodGroup scheduling cycle that evaluates a group atomically, along with first iterations of topology-aware scheduling and workload-aware preemption. The release also adds ResourceClaim support for PodGroups and a first phase of Job controller integration with the new API.platform teamsTeams running batch or AI/ML training workloads on Kubernetes will see the v1alpha2 API replace v1alpha1, and the Pod workloadRef field is replaced by schedulingGroup, so manifests and controllers need updating. Gang scheduling and topology placement are alpha, and the source notes limits on heterogeneous groups and inter-Pod dependencies, so plan for partial guarantees.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-05-126 months ago
Fluxv2.8.7patchsecurity++~~~~~~!
Kubernetes v1.36: PSI Metrics for Kubernetes Graduates to GApostKubernetes v1.36 graduates Pressure Stall Information (PSI) metrics for the kubelet to general availability, exposing CPU, memory and I/O pressure at node, pod and container level. The Kubernetes SIG Node post reports performance tests on 80-pod density nodes, where the kubelet feature added about 0.1 cores, or 2.5% of node capacity, and the kernel PSI overhead stayed between 0.037 and 0.125 cores. The GA version also stops emitting misleading zero values when the kernel lacks PSI support.platform teamsPlatform teams can scrape PSI metrics from the /metrics/cadvisor endpoint or the Summary API on Linux nodes running kernel 4.20 or later with cgroup v2 and PSI enabled, without enabling a feature gate. Windows nodes will omit these metrics, so mixed clusters need to handle the gap in dashboards and alerts.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-05-076 months ago
Kubernetes v1.36: More Drivers, New Features, and the Next Era of DRApostThe Kubernetes v1.36 blog post describes DRA changes in that release, including Prioritized list and Partitionable devices graduating, plus new alpha features such as node allocatable resources via DRA and a resource pool status request object. Device taints, binding conditions, and resource health status moved to beta. The post states that the new alpha features sit behind feature gates disabled by default.platform teamsPlatform teams running GPU or other accelerator workloads can use fallback device preferences, device taints, and pool status queries for scheduling and capacity planning. Alpha features like node CPU and memory via DRA should be evaluated only in test clusters for now.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Amazon EKS 1.36 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Kubernetes v1.36: Server-Side Sharded List and WatchpostKubernetes v1.36 adds server-side sharded list and watch as an alpha feature (KEP-5866). The API server filters objects by hash range using a new shardSelector field on ListOptions, so each controller replica receives only the objects it owns. The feature requires the ShardedListAndWatch feature gate and echoes applied selectors in a shardInfo field when honored.platform teamsPlatform teams running horizontally scaled controllers on very large clusters could cut per-replica deserialization, CPU and network cost, since replicas no longer receive the full event stream. Because the feature is alpha and gated, clients must fall back to client-side filtering when shardInfo is absent.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Amazon EKS v1.36 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Kubernetes v1.36: Admission Policies That Can't Be DeletedpostKubernetes v1.36 adds an alpha feature, manifest-based admission control, that lets admission webhooks and CEL-based ValidatingAdmissionPolicies be loaded from files on disk at API server startup via a staticManifestsDir field in the AdmissionConfiguration file. Manifest objects must have names ending in .static.k8s.io, and the files are watched at runtime with atomic swaps, keeping the previous configuration if validation fails. The feature can also be used to write policies that block modification or deletion of API-based admission resources.platform teamsPlatform teams can make baseline admission policies active from API server start and protect them from deletion by cluster admins, without depending on API state. Manifest-based configurations are self-contained: they cannot reference API resources, webhooks must be URL-only, and multiple API servers each load their own files with no cross-server sync.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Kubernetes MCP Server v1.36 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-05-016 months ago
Kubernetes v1.36: Pod-Level Resource Managers (Alpha)postKubernetes v1.36 adds Pod-Level Resource Managers as an alpha feature, extending the kubelet's Topology, CPU, and Memory Managers to use pod-level resource specifications. Exclusive NUMA-aligned resources can be granted to specific containers while sidecars share a pod-level pool, under feature gates PodLevelResourceManagers and PodLevelResources. New kubelet metrics track allocations, errors, and container assignment types.platform teamsPlatform teams running latency-sensitive workloads can keep sidecars in the Guaranteed QoS class without dedicating exclusive cores to them, but must enable two feature gates and configure the static CPU and Memory Managers with a non-none Topology Manager policy. Since the feature is alpha, teams should review the documented limitations and downgrade instructions before relying on it.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Jenkins Security Advisory 2026-04-29announcementJenkins published a security advisory dated 2026-04-29 listing seven affected plugins: Credentials Binding, GitHub, GitHub Branch Source, HTML Publisher, Matrix Authorization Strategy, Microsoft Entra ID, and Script Security. The source text does not describe the vulnerabilities, their severity, or the fixed versions.platform teamsPlatform teams running Jenkins should check whether any of these plugins are installed and apply the fixed versions from the full advisory. The source text does not state which versions are affected or fixed.Jenkins security advisories ↗Jenkinswritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Agentforce Vibes: governing AI-generated code in your Salesforce orgpostGearset published a blog post on Agentforce Vibes, Salesforce's AI coding assistant that generates Apex, Lightning Web Components and Flows from prompts. The post argues that AI-generated Salesforce code needs automated testing, static analysis, code review and observability in the delivery pipeline before it reaches production. It promotes Gearset's CI/CD, code review, monitoring and backup tooling as the way to provide that governance.platform teamsNo new product capability or change to Agentforce Vibes is described. Platform teams using Salesforce may use the post's list of controls (quality gates on Apex deployments, UI test runs, runtime error monitoring) as a checklist, but the post itself states no new behavior.Gearset Blog ↗Salesforce PlatformAgentforceGearsetwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
daily email

One short email each morning: what shipped, what breaks, and a link to each change. Unsubscribe in one click. Privacy.

statuslast 30 days for lines
tools tracked43releases in registry964released in the last 30 days104entries published336breaking change lines18security lines82
change typestwo-column gutter, like git status
  • +addedNew functionality.
  • ~changedExisting behavior changed.
  • -deprecatedStill works, scheduled for removal.
  • -removedDecommissioned, gone in this version.
  • *fixedA defect corrected.
  • !securityA vulnerability closed or a dependency patched for one.
  • !breakingFlag in the first column; the change needs action before upgrading.
filter
categoryallidp & portalsai agents on platformci/cdobservabilitysupply chaincost & governancereports & dx dataenterprise app platforms
showmajor onlyreleasescase studiespostmortemsinclude patches