platformchangelog.dev
43 tools

Platform Changelog: what shipped in platform engineering, developer experience and DevOps

feedbefore 2026-09-05patches hidden unless security or breaking
newest entries
Kubernetes v1.37: KubeletInUserNamespace (aka Rootless mode) Graduates to BetapostKubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta, allowing kubelet, container runtimes, CNI plugins and kube-proxy to run as a non-root user inside a Linux user namespace. The feature gate is now enabled by default, but nodes only run rootless if they are set up that way outside Kubernetes. Kubelet now reports a runningInUserNamespace property on nodes.platform teamsPlatform teams can run node components without host root to limit container-breakout impact, but some CNI and CSI drivers may break, so test them first. Administrators can use the new runningInUserNamespace node property to keep root-dependent workloads off rootless nodes.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Kubernetes MCP Server v1.37 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Investigate DMS migration issues with AWS DevOps AgentpostAWS published a guide on extending AWS DevOps Agent with a sample MCP server that provides read-only, DMS-specific tools and 46 runbooks for investigating database migration issues. The server is deployed on AWS Lambda behind an IAM-authenticated function URL and registered with a DevOps Agent Space. The post describes five investigation scenarios run against a test migration from RDS MySQL to Aurora PostgreSQL.platform teamsPlatform teams running DMS migrations can evaluate a read-only MCP pattern for giving an agent migration-specific context, with tools restricted to Describe, Get, List, Lookup and TestConnection calls. Timing claims in the post come from the authors' own test runs and are not benchmarked.AWS DevOps Blog ↗AWS DevOps AgentAmazon EKSwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-09-031 month ago
Automating the Experimentation Lifecycle with Kiro, AWS DevOps Agent, and LaunchDarklypostAWS describes a reference architecture where AWS DevOps Agent runs a scheduled custom agent that plans feature-flagged experiments, uses Kiro CLI in a custom MCP server to write code and open pull requests, and deploys through GitHub Actions and AWS Amplify. LaunchDarkly runs the experiments and Guarded Releases, which roll back flag state when error or latency guardrails are breached. The post says the architecture is a reference implementation and that a more turnkey version is planned.platform teamsA platform team evaluating agent-driven delivery would need to scope MCP tools, restrict repos, branches and allowed tools, and manage credentials and state outside the container. The post notes that the scoping lives in server code rather than prompts, and that MCP tool allowlists are recommended for production.AWS DevOps Blog ↗AWS DevOps AgentAmazon EKSGitHub ActionsKubernetes MCP Serverwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-09-021 month ago
Kubernetes v1.37: Scale Workloads to Zero with HorizontalPodAutoscalerpostKubernetes v1.37 moves horizontal autoscaling to zero replicas to Beta and enables it by default. An HPA using an object or external metric can now scale a workload to zero and bring it back when the metric changes, a capability that previously required an add-on or the Alpha feature gate. The blog notes that Services do not buffer requests, so request-driven workloads need a separate buffering layer.platform teamsPlatform teams can scale idle queue consumers and batch workers to zero to cut costs on expensive CPU or GPU Pods, but must accept cold-start latency and make sure the external metrics adapter is reliable. Before upgrading, control plane components must both have the feature enabled, and HPAs with minReplicas 0 need an object or external metric.Kubernetes Blog ↗editorCorrection 2026-10-20: this was listed as a Amazon EKS v1.37 release by mistake. It is Kubernetes Blog coverage, not release notes from the project.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Jenkins Security Advisory 2026-09-02incidentJenkins published a security advisory dated 2026-09-02 that lists affected components: Jenkins core, update-center2, and about 18 plugins including GitLab, LDAP, SAML, Microsoft Entra ID, Script Security, and Pipeline: Groovy Libraries. The source text lists only the affected components and does not describe the vulnerabilities, severity, or fixed versions.platform teamsPlatform teams running Jenkins controllers should check the advisory for fixed Jenkins core and plugin versions and review which installed plugins are affected. The source text does not give the fixed versions, so the advisory itself must be consulted before deciding on upgrades.Jenkins security advisories ↗Jenkinswritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Automate planned lifecycle upgrades with AWS DevOps Agent and KiropostAWS describes a pattern in which AWS Health Planned Lifecycle Events for Amazon EKS trigger EventBridge and a Lambda function that starts AWS DevOps Agent to investigate the upgrade and produce a CDK change spec. The spec is validated in a GitHub Actions workflow, then Kiro CLI in headless mode edits a single stack file and a pull request is opened for human review. The post also describes an automated failure path that investigates failed deployments and opens a fix pull request, with one retry attempt.platform teamsPlatform teams running EKS on AWS could adapt this event-driven pattern to handle managed service end-of-support deadlines, with human review kept at the pull request. The source is a vendor blog post with sample code and does not report measured results.AWS DevOps Blog ↗Amazon EKSAWS DevOps AgentGitHub Actionswritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-09-012 months ago
Flaggerv1.45.0minor+++**
Kubernetes v1.37: etcd RangeStream Cuts Memory Use on Large List ReadspostThe Kubernetes blog says etcd RangeStream is graduating to beta in Kubernetes v1.37 and pairs with etcd v3.7. RangeStream is a streaming version of the etcd Range read that sends results in chunks sized by bytes, so the API server and etcd hold less memory when reading large collections such as Pods. The EtcdRangeStream feature gate is on by default in v1.37, and the API server falls back to paginated Range reads if etcd is older than v3.7.platform teamsPlatform teams running clusters with many or large objects should see lower and more predictable kube-apiserver and etcd memory use during watch cache initialization and direct list fallbacks, provided etcd is upgraded to v3.7 or later. Teams can confirm use via the listStream operation label on etcd request duration metrics, or disable the gate with --feature-gates=EtcdRangeStream=false.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Kubernetes v1.37: Storage Version Migration Enabled by DefaultpostStorage Version Migration has reached General Availability in Kubernetes v1.37 and is enabled by default on all v1.37 clusters. The built-in StorageVersionMigration API (storagemigration.k8s.io/v1) and its control plane controller rewrite existing stored resources to the current storage version when a StorageVersionMigration object is created. Migration progress is reported through status conditions that can be checked with kubectl.platform teamsPlatform teams can replace manual kubectl get/replace scripts or the out-of-tree kube-storage-version-migrator for CRD version cleanup and encryption at rest key rotation. Teams should confirm the CRD storedVersions field is updated after a successful migration before removing older API versions.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Optimize EKS operations with agents: Reduce MTTR with AWS DevOps Agent and a Kubernetes OperatorpostAWS describes a Kubernetes Operator that watches EKS pods, collects logs, events, node-level data and manifests when a failure occurs, and sends that context to AWS DevOps Agent through a generic webhook. The post says the Operator stores evidence in S3 or CloudWatch Logs before pods are rescheduled or deleted. Setup requires an Agent Space, an IAM role with Pod Identity, and building the Operator image from source because no prebuilt image is provided.platform teamsPlatform teams running EKS can evaluate automated incident evidence capture and agent-driven investigation, but must set up IAM, Systems Manager registration on nodes, and build and host their own image. Node-level collection is unavailable on Fargate.AWS DevOps Blog ↗Amazon EKSAWS DevOps AgentK8sGPTwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-08-292 months ago
Backstagev1.50.5minorsecurity!
2026-08-282 months ago
Build your own continuous modernization pipeline with AWS Transform custompostAWS describes a do-it-yourself continuous modernization pipeline that runs AWS Transform custom as a step in GitHub Actions. The walkthrough uses a sample Spring Boot application and covers Dependabot alert remediation and auto-documentation on pull requests. The post provides shell scripts that call the atx CLI in headless mode with up to three retries.platform teamsPlatform teams could wire AI code transformations into existing CI/CD pipelines, but the example runs with the --trust-all-tools flag, which removes interactive confirmation and needs review against security policy before production use. The source text is cut off before the remaining practices are covered.AWS DevOps Blog ↗GitHub ActionsAmazon EKSwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Two views, one org: mapping business processes to Salesforce metadatapostThe post argues that Salesforce teams need a map linking business processes to the metadata that implements them, because org documentation goes stale and changes carry risk. It describes three traditional discovery methods (talking to the business, reviewing regression tests, and reviewing historical tickets) and notes that dependency tooling is limited by API restrictions. It then presents Gearset's Agent and Org Intelligence as a way to generate a live, dependency-aware map of org metadata.platform teamsPlatform teams running Salesforce may find dependency mapping before changes useful, but the post gives no measured results and the claimed benefits are the vendor's own. The post also notes that AI reads implementation rather than intent, so changes still need review against business requirements.Gearset Blog ↗GearsetSalesforce Platformwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-08-272 months ago
Argo CDv3.4.8patchsecurity****!!!
Kubernetes v1.37: Metrics API graduates to stablepostKubernetes v1.37 promotes the metrics.k8s.io API to stable v1. The v1 resource types and fields are identical to v1beta1, with NodeMetrics and PodMetrics unchanged. kubectl top prefers v1 and falls back to v1beta1, while the HPA controller still supports only v1beta1.platform teamsPlatform teams get stability guarantees for the API behind kubectl top and resource-metrics autoscaling, but no data changes. Implementations such as metrics-server should serve both v1 and v1beta1 during the transition, and HPA still needs v1beta1.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
Debunking the hotfix pipeline mythpostThe Octopus Deploy blog argues that hotfix pipelines, which skip lower environments to deploy straight from Staging to Production, are a symptom of a suboptimal main deployment pipeline. The author describes a former team that rebuilt its pipeline with Octopus Deploy, Azure DevOps and Redgate tooling, moving production deployments from quarterly to weekly and dropping the need for a hotfix path. The post then lists modern delivery principles and open questions about versioning and merging hotfix pipelines.platform teamsPlatform teams evaluating hotfix pipelines are advised to invest first in a single, identical promotion path with build-once artifacts, rather than a separate fast lane. The post offers no benchmark data, so the claimed benefits rest on one team's anecdote.Octopus Deploy Blog ↗Octopus Deploywritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-08-262 months ago
Kubernetes v1.37: GarhwalpostKubernetes v1.37 ships 67 enhancements: 16 graduated to Stable, 23 to Beta, 27 entered Alpha, and 1 is a deprecation or removal. Notable graduations include resilient watch cache initialization, HPA scale to zero (now enabled by default), manifest-based admission control configuration, the metrics.k8s.io API, and SELinuxMount and SELinuxChangePolicy. The source text is cut off before the full list.platform teamsPlatform teams using SELinux with shared volumes may see Pods with different labels fail to start, so they should set seLinuxChangePolicy to Recursive where needed or plan for the change before v1.38 locks it. Clients and operators should handle HTTP 429 responses with Retry-After and backoff, and HPA minReplicas of 0 is now usable for object and external metrics.Kubernetes Blog ↗written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
AI-driven software delivery with Kiro, AWS DevOps Agent and Bluebox by DynatracepostAWS and Dynatrace describe a workflow in which Kiro retrieves runtime topology and traffic data from Bluebox via CLI before generating a pull request, and AWS DevOps Agent investigates a simulated traffic-spike incident. The agent's findings and mitigation plan are filed as a GitHub issue, and Kiro then opens a remediation pull request that a human reviews and merges. The post uses a travel-booking example, and the reported results come from that example rather than measured data.platform teamsPlatform teams evaluating AI incident agents can see a pattern where investigation output is written to GitHub issues and fixes flow through normal PR review and CI/CD. The post does not give benchmarks, adoption figures, or availability details for the release management capability, which is in Preview.AWS DevOps Blog ↗AWS DevOps Agentwritten by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
2026-08-252 months ago
Jenkins2.579minor+~*******
daily email

One short email each morning: what shipped, what breaks, and a link to each change. Unsubscribe in one click. Privacy.

statuslast 30 days for lines
tools tracked43releases in registry964released in the last 30 days105entries published336breaking change lines18security lines84
change typestwo-column gutter, like git status
  • +addedNew functionality.
  • ~changedExisting behavior changed.
  • -deprecatedStill works, scheduled for removal.
  • -removedDecommissioned, gone in this version.
  • *fixedA defect corrected.
  • !securityA vulnerability closed or a dependency patched for one.
  • !breakingFlag in the first column; the change needs action before upgrading.
filter
categoryallidp & portalsai agents on platformci/cdobservabilitysupply chaincost & governancereports & dx dataenterprise app platforms
showmajor onlyreleasescase studiespostmortemsinclude patches