CodeRabbit Adds DevOps Planning and Review Tool for AI Prompts
CodeRabbit today made available in beta a planning tool that enables DevOps teams to determine which artificial intelligence (AI) prompts to create and review before embedding them within their workflows. David Loker, vice president of AI for CodeRabbit, said CodeRabbit Issue Planner will enable DevOps teams to collaboratively apply AI to workflows versus relying on […]
Survey: Java Developers Wrestling With Massive Amounts of Technical Debt
A global survey of 2,039 Java developers published today finds 63% reporting that dead and unused code adversely affects their team’s productivity, with 22% describing the impact of that technical debt as being severe. Conducted by Dimensional Research on behalf of Azul, a provider of a distribution of OpenJDK, the survey also finds that more […]
Salesforce Freezes Heroku Feature Development, Signals Long-Term Shift
Salesforce has confirmed it is stepping back from active development of Heroku, creating a turning point for one of the cloud industry’s most influential platform-as-a-service offerings. While the company insists the service remains fully supported, the decision to halt new feature development and stop selling enterprise contracts to new customers indicates a broader strategic shift […]
Will AI Kill the OSS Star?
As AI-driven development accelerates, open source software faces an uncomfortable paradox: Usage is rising while engagement, sustainability and community economics quietly erode. AI isn’t eliminating OSS, but it is reshaping how code is written, discovered and maintained. The result may not be the death of open source, but the end of its long reign as the default foundation of modern software.
Google Launches Developer Knowledge API to Give AI Tools Access to Official Documentation
Google’s new Developer Knowledge API and MCP server provide AI assistants with direct access to up-to-date Google developer documentation.
Five Great DevOps Job Opportunities
This week’s report features top employers including Capital One, Google, CLS US Services, Thrive Market, and Cisco Systems, providing insights into the job market and salaries for crucial roles in DevOps.
Veracode Extends Package Firewall Reach to Microsoft Artifacts
Veracode has extended the reach of a Package Firewall that applies policies that limit what types of code can be downloaded from a repository to Azure Artifacts from Microsoft. Additionally, DevSecOps teams can now define custom policies based on package risk profiles, vulnerability thresholds, or a specific security requirement their organization has adopted. Tim Jarrett, […]
Qodo Adds Multiple AI Agents to Code Review Platform
Qodo 2.0 adds memory-enabled, task-specific AI agents to its LLM-based code-review platform, improving defect recall and F1 performance to help DevOps scale code quality as AI-generated code rises.
Is Claude Opus 4.6 the Best Security Researcher Ever?
Anthropic’s Claude Opus 4.6 uncovered more than 600 previously unknown vulnerabilities in widely used open source software, raising new questions about AI-driven security research, vulnerability management, and defensive readiness.
Survey Surfaces More Focus on Software Security Testing and API Security
A global survey of 828 enterprise IT professionals conducted by the Futurum Group finds well over a third of respondents expect their organization to increase spending on software security testing (39%) and application programming interface (API) security (36%) over the next 12 to 18 months. Overall, about 35% said they also plan to make some […]
Perforce Adds MCP Support Across Entire DevOps Portfolio
Perforce Software is making the Model Context Protocol (MCP) that artificial intelligence (AI) tools and agents invoke to access data available across its entire portfolio of DevOps platforms. Jake Hookom, executive vice president of product for Perforce, said the code management, application testing and infrastructure management tools and platforms the company provides will now all […]
Anthropic Research Shows Trade-Off Between AI Productivity and Developer Mastery
Artificial intelligence tools are now a routine part of today’s software development, promising faster output and reduced workloads. But new research from Anthropic suggests that when developers rely on AI while learning new skills, those productivity gains may come at the expense of understanding. In a randomized controlled study involving 52 mostly junior software engineers, […]
OpenAI Shifts Toward Autonomous Team Model with Codex Desktop Launch
OpenAI has launched a macOS desktop application for Codex, signaling a strategic pivot from simple artificial intelligence (AI) pair-programming to a complex command center for autonomous coding agents. The news, announced Monday, moves Codex beyond its origins as a command-line tool and IDE extension. By creating a dedicated desktop interface, OpenAI is positioning its AI […]
Survey Surfaces Disconnect Between DevOps Metrics and Business KPIs
A survey of 418 DevOps professionals finds that while DevOps teams closely monitor and observe the performance of applications, not nearly as many are able to correlate the value of those efforts to the business. Conducted by Catchpoint, a unit of LogicMonitor, the survey finds more than two-thirds (67%) believe application degradations are either always […]
Please Grow Up, Coder Launches AI Maturity Self-Assessment Tool
Coder introduces an AI maturity self-assessment service to help organizations evaluate their AI adoption in software development. As teams transition from ad hoc usage to structured workflows, this tool addresses the need for governance and oversight in AI-driven projects.
Five Great DevOps Job Opportunities
Explore top DevOps job opportunities from companies like Technology Resource Experts, Thermo Fisher Scientific, Regeneron, Mutual of Omaha, and Macquarie Global Services. Advance your career with our weekly DevOps jobs report!
‘PackageGate’ Vulnerabilities Can Let Attackers Bypass Shai-Hulud Defenses
In the wake of the massive Shai-Hulud supply chain attack that ripped through npm late last year and compromised more than 700 packages and exposed 25,000 repositories, developers in the JavaScript world embraced a two-part defense strategy. The widely adopted playbook called for disabling lifecycle scripts and using lockfiles. “It became the standard advice everywhere […]
Opsera Report Highlights DevOps Challenges Created by AI Coding Tools
An analysis published today by Opsera, a provider of a DevOps platform, finds that while adoption of artificial intelligence (AI) coding tools has increased developer productivity they also create more duplicate code, resulting in 15 to 18% more security vulnerabilities per line of code compared to code created by a human developer. Overall, the Opsera […]
AWS CodeBuild Webhook Misconfiguration Exposed Admin Access Risk
AWS fixed webhook filter misconfigurations in CodeBuild that could have allowed unauthorized repository access. No customer impact or malicious code found.
Open-Source Coding Agents Just Got Accessible
Ai2’s open-source SERA coding agents slash the cost of training repository-aware AI, enabling teams to customize high-performance coding agents on private codebases for as little as $400.
Apiiro Guardian Agent Prevents AI Models From Generating Insecure Code
Apiiro launches Guardian Agent, an AI security agent that rewrites prompts in real time to prevent insecure code from ever being generated, reducing vulnerabilities without slowing developers.
Anthropic Adds Automated Security Reviews to Claude Code
Anthropic pulls security into the inner dev loop with new Claude Code tools that scan for vulnerabilities in the terminal and on every pull request—before insecure code ever ships.
Codenotary’s Free SBOM Service Tackles the AI Software Supply Chain
Just because AI is writing your code doesn’t mean you can stop worrying about software bills of materials. While the quality of AI coding remains open to debate, there’s no question that everyone and their dog is using it. That means, if you’re serious about using AI in production, you must track its code in […]