DevOps and Open Technologies
Dash0 Acquires Polar Signals for Continuous Profiling and GPU Visibility
Observability startup Dash0 announced this week that it acquired Berlin-based continuous profiling specialist Polar Signals. The deal adds continuous profiling to SignalStore, Dash0’s OpenTelemetry-native data platform. Continuous profiling has been part of ...
Hackers Target Popular arrayref Rust Crate in Supply-Chain Attack
Security researchers are sorting through a complex, stealthy, and fast-moving supply-chain attack aimed at pushing information-stealing malware by compromising the account of the maintainer of multiple Rust crates and introducing four more ...
npm v12 Shuts Down a Popular Malware Trick — But the Threat Isn’t Going Away
For years, one of the easiest ways to sneak malware onto a developer's machine has been to hide in plain sight. Install a package from npm, and any lifecycle script bundled with ...
Microsoft Decouples AI Agents From the VS Code Editor in Latest Release
Microsoft has shipped Visual Studio Code 1.133, and the headline change is architectural rather than cosmetic: AI agent sessions now run in a dedicated background process rather than within the editor's extension ...
Reflex’s Newly Open-Sourced XY Library Offers Faster Python Charting
A newly open-sourced Python charting library, called XY, from Reflex offers an advantage few other charting tools provide: massive scalability. The library rethinks how to render a set of points on the ...
Beyond Automation: Building Accountability for AI Agents
The conversation around AI agents has evolved remarkably quickly. Not long ago, most organisations were still experimenting with prototypes and controlled use cases, trying to understand where these systems might fit within ...
How to Automate API Testing in CI/CD Pipelines
Automating API tests and plugging them directly into your CI/CD pipeline is no longer a complex undertaking reserved for large engineering teams ...
What Five Localization Pull Requests Revealed About Open Source Governance: A Field Report on Open Source’s i18n Infrastructure Gap
If you maintain an OSS (Open Source Software) project, audit your contribution workflow this week. Could a new contributor add a language without asking basic questions? If not, the next merge is ...
The Future of Salesforce DevOps: Preparing for the AI Era
By establishing a robust DevOps foundation now, organizations can leverage these emerging predictive capabilities to transform reactive pipelines into proactive, self-correcting release architectures ...
OpenTelemetry Achieves CNCF Graduated Project Status
The Cloud Native Computing Foundation (CNCF) today announced that the open source OpenTelemetry (OTel) project has officially graduated a little more than seven years after its initial adoption. Announced at the Observability ...
OpenSSF’s CRob: ‘The Runway Is Rapidly Running Out’ on EU CRA Readiness
The EU's Cyber Resilience Act kicks into high gear this September, and companies are still clueless about how they must obey its strictures. MINNEAPOLIS — At Open Source Summit North America, Christopher ...
Widespread Mini Shai-Hulud Campaign Is a Matter of Trust
The latest series of attacks using the notorious Shai-Hulud worm puts into sharp focus the threats facing software developers and their CI/CD pipelines, an issue that has been raised in recent months ...

