platformchangelog.dev
43 tools

Platform Changelog: what shipped in platform engineering, developer experience and DevOps

feedbefore 2026-08-18patches hidden unless security or breaking
newest entries
2026-08-173 months ago
Pulumiv3.258.0minor++++******
Streamline your GitHub journey with AWS CodePipeline and AWS DevOps AgentpostAWS published a walkthrough for connecting AWS DevOps Agent to GitHub repositories, AWS CodePipeline, CloudWatch alarms and a Lambda webhook. When a pipeline stage fails, a CloudWatch alarm or EventBridge rule triggers the agent, which investigates logs and recent commits. The post shows two sample failures, a bad DynamoDB table name and a misspelled npm dependency, where the agent identified the offending change.platform teamsPlatform teams running CodePipeline with GitHub sources can evaluate an agent that starts investigations from pipeline alarms and proposes remediation. The setup requires IAM roles, a webhook stored in Secrets Manager, and a Lambda bridge, and the post reports no measured results beyond the sample app.AWS DevOps Blog ↗AWS DevOps AgentGitHub ActionsAmazon EKSwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Sandboxing local AI AgentspostOctopus Deploy published a how-to for running local AI agents inside a Vagrant virtual machine sandbox. The sandbox runs Claude Code as a restricted user, mounts only the ~/Code directory over NFS, and stores the Anthropic API key in a root-owned file the agent can read. The post says the design prioritizes convenience over security, and its stated non-goals include guaranteeing that malicious prompts cause no harm.platform teamsPlatform teams evaluating local agent use can reuse the pattern of a restricted OS user, limited directory mounts, and denied git push, but the post says credentials can still be exfiltrated by the agent. Teams should treat this as a starting point and not as a hard security boundary.Octopus Deploy Blog ↗Octopus Deploywritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Octopus Easy Mode - Self SupportpostThe Octopus Deploy blog post walks through a demo in which a deployment is set up to fail on a missing Kubernetes secret, then a Platform Hub process template is added. The template runs a Claude Agent step on failed deployments that uses Octopus and GitHub MCP servers to pull deployment logs, step configuration, git changes, and matching GitHub issues. The demo uses a mock Kubernetes target and a mock git repository that resets periodically.platform teamsA platform team could publish a shared AI self-support step as a Platform Hub process template and attach it to projects, with the prompt and MCP servers managed centrally. It requires Claude, GitHub and Octopus Agent API credentials, and the post states that the hosted demo setup is not a production pattern.Octopus Deploy Blog ↗Octopus Deploywritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Act faster with our new Slack integrationannouncementOctopus Deploy has added a Slack integration that sends subscription event notifications to Slack channels, alongside existing webhook and email options. It also adds a Send a Slack Message step that uses OAuth so a deployment or runbook can post a message to a chosen channel, such as just before a manual intervention step. Event filters can scope notifications by project, tag, and environment.platform teamsPlatform teams using Octopus can route deployment failures, variable changes, API expiries and MCP token issuance to Slack channels, and can notify approvers at manual intervention points. Teams on other CI/CD tools will not be affected.Octopus Deploy Blog ↗Octopus Deploywritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-08-123 months ago
Argo CDv3.3.14patchsecurity****!!
2026-08-103 months ago
Automate SageMaker HyperPod incident triage and root-cause-analysis with AWS DevOps AgentpostAWS describes a solution that connects a SageMaker HyperPod cluster to AWS DevOps Agent. EventBridge events and a periodic Kubernetes-state audit feed the agent, which triages and root-causes conditions that still need a human decision and sends a verdict email. The agent is configured read-only, with no SSM, SSH, or action-taking permissions, and the solution deploys as one CloudFormation stack per cluster.platform teamsPlatform teams running HyperPod on EKS or Slurm can deploy an observe-and-report incident agent alongside existing self-healing, with custom skills that can be edited for their own conditions. Teams should check the read-only boundary and the cost of polling and investigations against their own operating model.AWS DevOps Blog ↗AWS DevOps AgentAmazon EKSwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
How to deploy Salesforce Agent Script metadatapostGearset describes how to deploy Salesforce Agent Script metadata (AiAuthoringBundle) between orgs. Salesforce's draft and commit lifecycle means only the bundle should be deployed, since Bot, BotVersion and GenAiPlannerBundle are generated when a draft is committed in the target. The post says Gearset deploys the script as a draft when the target is already committed and offers an option to commit automatically after deployment, currently for org-to-org deployments only.platform teamsPlatform teams deploying Agentforce agents need to package only the AiAuthoringBundle and account for the draft-versus-committed state of the target org, or the deployment is rejected or the agent stays inert until someone commits it manually. Automatic commit is available in Gearset for org-to-org deployments, with pipeline support stated as upcoming.Gearset Blog ↗GearsetSalesforce PlatformAgentforcewritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-08-053 months ago
Jenkins2.576minorsecurity!
Jenkins Security Advisory 2026-08-05announcementJenkins published a security advisory dated 2026-08-05 listing affected components. Jenkins Core is among them, along with 16 plugins, including AWS CodeBuild, CodeSonar, Google Chat Notification, Qualys Container Scanning Connector and SCM-Manager. The source text does not describe the vulnerabilities, their severity, or the fixed versions.platform teamsTeams running Jenkins core or any listed plugin should check their installed versions against the advisory and apply the fixes it describes. The source text gives no versions, CVE identifiers or severity, so those details must be taken from the full advisory.Jenkins security advisories ↗Jenkinswritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-07-313 months ago
Kubernetes v1.37 Sneak PeekannouncementThe Kubernetes project previewed planned changes for v1.37, scheduled for August 26, 2026, and says the status may change before release. Breaking changes include static pods no longer being able to reference Secrets or ConfigMaps, with the opt-out feature gate removed, and SELinux volume relabeling graduating to GA and enabled by default for CSI drivers that opt in. Deprecations include the kubectl run --filename flag and ipvs mode in kube-proxy, which is slated to be disabled by default in v1.40 and removed in v1.43.platform teamsPlatform teams should audit static pods for Secret or ConfigMap references, check SELinux-enabled nodes for shared volumes that may fail to start, and find nodes still on cgroup v1 before upgrading. Clusters using kube-proxy ipvs mode should plan a move to another mode before v1.43.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-07-293 months ago
Salesforce CLI2.145.6minor+**
How the controller-runtime Cache Actually Works, and Why Your Controller Does Not Crash the API ServerpostThe Kubernetes Blog article explains how controller-runtime reads objects from a local in-memory cache populated by list and watch, rather than querying the API server on every r.Get or r.List call. It describes the Reflector, delta queue, indexer and SharedIndexInformer that make up this cache, and notes that writes go directly to the API server. The source text is cut off before covering the delta queue change in full.platform teamsPlatform teams writing or operating Kubernetes controllers should expect memory use to scale with the cache size and indexes, and should not assume reads after a write are immediately consistent. Teams that need live reads can use APIReader.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Why teams switch from Copado to GearsetpostGearset, a vendor, published a blog post arguing that Salesforce teams are switching from Copado to Gearset. It contrasts Gearset's off-platform SaaS architecture with Copado's managed package and cites vendor-reported G2 scores and time-to-value figures.platform teamsPlatform teams evaluating Salesforce DevOps tools get a comparison of deployment architecture, upgrade model, and rollback options, but the claims come from a competitor and are not independently verified. No product release or change is described.Gearset Blog ↗GearsetCopadoSalesforce Platformwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
daily email

One short email each morning: what shipped, what breaks, and a link to each change. Unsubscribe in one click. Privacy.

statuslast 30 days for lines
tools tracked43releases in registry964released in the last 30 days104entries published336breaking change lines18security lines82
change typestwo-column gutter, like git status
  • +addedNew functionality.
  • ~changedExisting behavior changed.
  • -deprecatedStill works, scheduled for removal.
  • -removedDecommissioned, gone in this version.
  • *fixedA defect corrected.
  • !securityA vulnerability closed or a dependency patched for one.
  • !breakingFlag in the first column; the change needs action before upgrading.
filter
categoryallidp & portalsai agents on platformci/cdobservabilitysupply chaincost & governancereports & dx dataenterprise app platforms
showmajor onlyreleasescase studiespostmortemsinclude patches