$ tail -f topics/infra.log
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Linux
Linus merged five critical subsystem fixes overnight, including a futex race that can leave tasks stuck and a Quattro upgrade script that silently fails mid-transition, leaving the system in an unsafe state.
read --wire →
Arch Linux
Five packages cleared testing and moved to the extra repository overnight, with Felix Yan handling the bulk of the promotions.
read --wire →
HashiCorp
Terraform's Azure provider is ripping out feature flag gates across postgres and storage resources, a sign the 5.0 migration is hitting its stride.
read --wire →
Go
The Go compiler just cut another 2,700 instructions from binaries on linux/riscv64 by compressing bare function returns.
read --wire →
CachyOS
Five browser and utility packages shipped overnight with automated version bumps, while the Welcome interface gains Traditional Chinese support and translation cleanup hits the queue.
read --wire →
Linux
Linus pulled five critical patch sets overnight targeting watchdog timer rearms, storage driver memory corruption, and GPU pipeline leaks before the final 7.2 release window closes.
read --wire →
Arch Linux
Arch infrastructure team patched a critical Metabase vulnerability overnight, signaling active security work across the fleet.
read --wire →
HashiCorp
Terraform's Azure provider is shipping stricter acceptance test guards and a major linting overhaul that caught two real bugs in the codebase.
read --wire →
Go
The Go extension for VS Code is enforcing stricter TypeScript rules across the codebase while shipping a major update to its revive linter.
read --wire →
CachyOS
CachyOS documentation and onboarding tooling just got a major multilingual refresh, with Russian and German translations bundled into comprehensive PRs and five language updates rolling through the Welcome suite.
read --wire →
Linux
A critical use-after-free vulnerability in the iPhone USB tethering driver can leave kernel work queues armed after interface shutdown, exposing memory corruption on device unplug.
read --wire →
Arch Linux
Nukesor shipped a major refactor to alpm's type parsing layer, consolidating five separate parser implementations into a unified AlpmParser pattern.
read --wire →
HashiCorp
Consul Enterprise users hitting HTTP 503s after upgrading to 2.0.x now have a fix: API gateways with HTTP listeners were resolving downstream services with wrong protocols, breaking discovery chains in peered clusters.
read --wire →
Kubernetes
Addon-resizer 1.8.24 lands with new apiserver resource metrics, while perf-tests benchmark overhaul adds watch delay tracking and stable QPS enforcement.
read --wire →
Go
Go's compiler now constant-folds expensive math/bits operations at compile time, while crypto/tls hardens FIPS 140-3 enforcement and vscode-go cleans up its code lens architecture.
read --wire →
CachyOS
CachyOS wiki maintainers are caught in a revert loop over German translations while the status infrastructure logs 55 commits without incident.
read --wire →
Linux
A critical memory management bug in direct page table reclaim is flushing the wrong address, potentially corrupting TLB state on architectures that depend on precise invalidation.
read --wire →
Arch Linux
Arch is tightening error handling in its package manager while pushing python-hypothesis out of testing into stable, signaling confidence in the latest batch of core updates.
read --wire →
HashiCorp
HashiCorp is systematically removing feature flags across the Azure provider while Consul teams move security scanning upstream in their release workflows.
read --wire →
Kubernetes
The test-infra automation pushed fresh builds of Boskos and staging images across GCR and Artifact Registry as CAPG hit OOM walls compiling google.golang.org/api.
read --wire →
