$ tail -f topics/infra.log
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Kubernetes
Cluster Autoscaler re-enabled printf vet checks after Go 1.24 upgrade while kops rushed out fixes for Hetzner API removal and Azure terraform v5 incompatibilities.
read --wire →
Go
The core library shipped two security-relevant fixes overnight that eliminate algorithmic vulnerabilities in URL resolution and XML decoding that could be exploited to cause denial of service.
read --wire →
CachyOS
CachyOS shipped BORE 6.8.0 patches across two kernel series while upgrading its sched-ext ecosystem in parallel, signaling major tuning work ahead.
read --wire →
Linux
Linus merged critical fixes across hardening, btrfs, and platform drivers overnight, with btrfs addressing a deadlock that could stall metadata writeback during transaction commits.
read --wire →
Arch Linux
Arch pushed Firefox 153.0.1 to extra overnight, along with localization updates and a trio of library bumps across the stack.
read --wire →
HashiCorp
Consul's test suite just got a rewrite engine that lets both old and new tests run together while the UI team methodically converts acceptance tests feature-by-feature.
read --wire →
Kubernetes
Kops 1.36.1 fixes a persistent issue where load balancer comparisons fail on Hetzner, while the Kubernetes team pulls an EventBroadcaster goroutine fix that was too risky for the current release cycle.
read --wire →
Go
Go shipped a critical fix for a denial-of-service vulnerability in TLS handshake handling that allowed malicious clients to force infinite key derivation operations on servers.
read --wire →
CachyOS
CachyOS shipped Linux 7.2-rc5-1 with a new AMD P-State optimization branch while the CLI installer got stripped down and refactored for cleaner deployment logic.
read --wire →
Linux
Linus merged 13 memory management fixes cc:stable overnight, plus critical corrections to keyring array bounds and erofs page cache sharing that fix a NULL pointer dereference.
read --wire →
Arch Linux
Hyprland and its core dependency Aquamarine shipped from staging to extra-x86_64, marking the wayland compositor's promotion to stable after recent updates.
read --wire →
HashiCorp
Documentation infrastructure gets a major refresh with Terraform-automated environment management, while Nomad and Consul push fixes for secrets handling and supply chain vulnerabilities.
read --wire →
Kubernetes
kOps shipped two AWS infrastructure fixes that restore flexibility for node naming and shared subnet configurations, while client-go and api simultaneously promoted Dynamic Resource Allocation workload claims out of alpha.
read --wire →
Go
Go's ARM64 compiler now eliminates dead zero-extension instructions, cutting instruction count on tight loops while the vulnerability database absorbs a major backlog of security advisories.
read --wire →
CachyOS
CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.
read --wire →
Linux
Linux 7.2-rc5 lands critical fixes for filesystem caching, USB device quirks, and a nasty emergency thaw deadlock that could hang your system during freeze operations.
read --wire →
Arch Linux
The AUR web backend just closed a registration flaw that could let attackers bypass email uniqueness checks using Gmail dot-notation tricks, while the main repository purges two stalled packages.
read --wire →
HashiCorp
Terraform Provider Boundary ships version 1.6.1 with project alias and RDP recording updates while dependabot rolls out actions/checkout 7.0.1 across the stack.
read --wire →
Kubernetes
VPA's recommender was silently ignoring metric flags when querying Prometheus history, causing recommendations to restart from scratch instead of building on past data.
read --wire →
Go
Go's compiler now counts IR nodes to order functions more intelligently, while the benchmark harness stumbles on recent upgrades.
read --wire →
