HashiCorp
GOLANG DEPENDENCIES TIGHTENED ACROSS HASHICORP STACK
Three core HashiCorp projects pulled in upstream Go library updates overnight, including a critical semaphore fix that could prevent panics in concurrent workloads.
read --wire →
$ tail -f topics/infra.log
Infrastructure news, every morning.
Daily updates from the platform-engineering layer - Kubernetes, Terraform, Linux, Arch, and the tools that run production.
42 updates across 6 projects this week.
Your week in Infrastructure, every Monday.
One calm review of what shipped across Infrastructure - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Infrastructure projects - refine anytime. · Read a sample issue →
Recent wires
Kubernetes
KUBERNETES INFRASTRUCTURE SHIPS AGENTIC AI SUPPORT, FIXES CEL ADMISSION PANICS
The k8s-infra team provisioned a new GCP project for Vertex AI workloads in prowjobs while core Kubernetes merged critical fixes to CEL admission controllers and etcd3 iteration logic.
read --wire →
Go
GO CRYPTO PATCHES SOURCE-ADDRESS VALIDATION BYPASS IN SSH
CVE-2026-46595 closed a critical gap where SSH source-address restrictions weren't enforced consistently across all authentication methods.
read --wire →
Linux
X86 FIXES PATCH KERNEL RESOURCE LEAKS AND SECURITY HOLES OVERNIGHT
Linus pulled urgent x86 and io_uring patches that close resource leaks, fix a perf security hole leaking kernel addresses to userspace, and restore critical RCU read sections that were dropped mid-merge window.
read --wire →
Arch Linux
MESON 1.11.2 LANDS IN EXTRA, TESTING TIER GETS PRISMLAUNCHER 11
Meson build system jumped to 1.11.2-1 overnight, the first major infrastructure update across the stack in 24 hours.
read --wire →
HashiCorp
NOMAD ECOSYSTEM OPENS NIGHTLY TESTING CHANNELS ACROSS THREE CORE PROJECTS
HashiCorp is pushing development snapshots live across Nomad's driver, autoscaling, and packaging layers, giving operators early access to unreleased features before they ship.
read --wire →
Kubernetes
NODE-PROBLEM-DETECTOR FIXES CRITICAL KMSG WATCHER DEADLOCK
A cascading restart bug in node-problem-detector's kmsg watcher caused 37k restarts in 200ms and could deadlock the shutdown path, and the fix just landed.
read --wire →
Linux
SMB3 CLIENT FIXES LAND AS RC2 SWEEP CONTINUES
Linux 7.2-rc2 pushed a massive SMB3 client update overnight that closes a critical buffer overflow in ioctl_query_info and fixes broken symlink handling on mounted filesystems.
read --wire →
Arch Linux
LIBSSH2 PATCHES CROSS CORE AND MULTILIB. LIBTORRENT AND LIBGUESTFS STAGE MAJOR UPDATES
Arch is pushing security and stability patches across its core SSH library while three major package updates queue for testing.
read --wire →
HashiCorp
TERRAFORM PROVIDERS IN HEAVY CHURN - AZURE FIXES PALOALTO REGRESSION, GOOGLE ADDS VM EXTENSION POLICY
Terraform-provider-azurerm shipped a critical regression fix for Palo Alto while simultaneously shipping five other PRs that reshape Azure and Google Cloud resource coverage.
read --wire →
Kubernetes
CADVISOR BUMPS PULL GOLANG ECOSYSTEM FORWARD, TEST INFRASTRUCTURE STABILIZES
Kubernetes core jumped cadvisor to v0.60.4, dragging golang.org/x/net from pseudo-versions into stable release territory and removing a long-standing protobuf dependency in one move.
read --wire →
Go
GOPLS SANDBOX GETS EMERGENCY STABILITY FIX AS PLAYGROUND OVERHAULS DEPLOYMENT
The playground sandbox can no longer hang on container timeouts, and gopls is cleaning up internal linkname hacks that were recipes for trouble.
read --wire →
Linux
NETWORKING FIXES LAND AHEAD OF 7.2-RC3 AS MEMORY LEAKS AND BUFFER OVERREADS GET PLUGGED
The kernel is shipping critical fixes for in-flight packet handling, MAC address spoofing vectors, and heap overreads that could crash your network stack.
read --wire →
Arch Linux
PIPEWIRE 1.6.8 LANDS IN TESTING WITH FONTCONFIG FIX
PipeWire 1.6.8 is moving through the testing pipeline [ref:3][ref:4] while fontconfig 2.18.2 follows suit [ref:2][ref:5], signaling a coordinated push toward stable that will touch audio and font rendering across the entire stack.
read --wire →
HashiCorp
HASHICORP PATCHES MARKDOWN DOS, SHIPS API GATEWAY AUTH CONTROLS
Consul-K8s locked down a remote denial-of-service vulnerability in Markdown while simultaneously shipping external authorization support to the API Gateway.
read --wire →
Kubernetes
KOPS FIXES DNS-CONTROLLER ORPHAN BUG, PROW GAINS CLOUD METADATA INJECTION
Kops now automatically cleans up dns-controller deployments when clusters migrate away from gossip DNS, solving a manual deletion problem that's plagued operators for releases.
read --wire →
Go
GOPLS V0.23.0 SHIPS AS GO TOOLCHAIN FIXES PLAN 9 COMPATIBILITY
gopls 0.23.0 landed overnight while the Go core team fixes a Plan 9 regression in file removal that could break deployments on legacy systems.
read --wire →
Arch Linux
ARCH PURGES GPU ACCELERATION PACKAGES FROM EXTRA
Four AI and speech processing packages just disappeared from the extra repository, signaling either a maintenance consolidation or upstream trouble.
read --wire →
HashiCorp
PACKER SHIPS TIMESTAMP FUNCTIONS, CONSUL-K8S TIGHTENS DEPS
Packer finally closes the timestamp gap with two new HCL functions that match Terraform's behavior, while Consul-K8s hardens its dependency stack across three critical libraries.
read --wire →
Kubernetes
ETCD 3.7.0 GOES LIVE ACROSS THE STACK
Kubernetes is shipping etcd 3.7.0 final across test infrastructure, kops, and the main distribution, ending months of release-candidate testing and unlocking production etcd upgrades for 1.37+.
read --wire →