Newslurp

<< Stories

Java 25 πŸ†•, Cloud Native’s Next Phase ⏭️, Limiting Supply Chain Attacks πŸ₯·

TLDR DevOps <dan@tldrnewsletter.com>

September 22, 11:10 am

TLDR DevOps
Java 25 delivers thousands of improvements aimed at boosting developer productivity along with performance, stability, and security enhancements β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ  β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ β€Œ 

TLDR

Together With AWS

TLDR DevOps 2025-09-22

Observability patterns and tools for AWS (Sponsor)

Improve visibility, minimize downtime, and accelerate resolution. Explore curated observability solutions and technical guidance built for AWS.

From troubleshooting performance to proactive monitoring, find what fits your environment.

Start free trials with your AWS account paired with tutorials solving common patterns.

πŸ“±

News & Trends

Oracle Releases Java 25 (3 minute read)

Java 25 delivers thousands of improvements aimed at boosting developer productivity along with performance, stability, and security enhancements. The version will receive quarterly updates until September 2028 under NFTC, followed by OTN licensing with long-term support planned until at least September 2033.
Kubernetes v1.34: Recovery From Volume Expansion Failure (GA) (3 minute read)

Kubernetes v1.34 now generally supports automated recovery from storage expansion, allowing users to correct mistakes in PersistentVolumeClaim (PVC) size requests without admin intervention as long as the new size is larger than the original allocated size. The update introduces new API fields in PVC objects, such as `.status.allocatedResourceStatus['storage']`, to monitor volume expansion progress. Errors are now reported as conditions on PVC objects, addressing a long-standing bug in the resizing workflow. Kubernetes will also retry failed volume expansions at a slower rate to reduce requests to both the storage system and the Kubernetes API server.
Wasm 3.0 (5 minute read)

Wasm 3.0 introduces major long-awaited features, including 64-bit memory, multiple memories, garbage collection, typed references, tail calls, native exception handling, relaxed SIMD, deterministic execution profiles, custom annotations, and new JS string builtins. These upgrades significantly expand Wasm's ability to support high-level languages and large-scale applications. Widespread adoption is already underway across browsers and standalone engines.
πŸš€

Opinions & Tutorials

eBPF: The Silent Power Behind Cloud Native's Next Phase (4 minute read)

eBPF is emerging as the foundational technology for Cloud Native 2.0 by enabling kernel-level networking, observability, and security without the overhead of sidecars or intrusive instrumentation. It delivers deep visibility and programmability across platforms, quietly reshaping cloud-native infrastructure while posing challenges in complexity, portability, and standardization.
Single-tenant vs. multi-tenant architecture with Grafana Cloud: A guide to choosing the right approach (6 minute read)

Grafana Cloud users can manage tenancy through single or multiple stacks, with the single-stack approach using role-based (RBAC) and label-based (LBAC) access control being recommended in most cases.
Less is safer: how Obsidian reduces the risk of supply chain attacks (3 minute read)

Obsidian reduces supply chain attack risks by minimizing third-party dependencies, re-implementing or forking code where possible, and shipping only a small, controlled set of version-pinned libraries. It further protects users through slow, review-heavy dependency updates, strict lockfiles, no postinstall scripts, and deliberate release delays that allow time for the ecosystem to flag malicious versions.
πŸ§‘β€πŸ’»

Resources & Tools

Are your credentials on the dark web? Find out for free today (Sponsor)

Over 24 billion usernames and passwords are circulating on the dark web. Are yours there? Keeper BreachWatch monitors the dark web 24/7 for compromised credentials. If it finds a match, you get instant alerts to update compromised passwords. Start with a free dark web scan to see if you're exposed
Lazyssh (GitHub Repo)

Lazyssh, a terminal-based, interactive SSH manager written in Go, allows users to manage servers and navigate, connect, and transfer files from their terminal using their existing `~/.ssh/config` file. The tool, inspired by lazydocker and k9s, uses the system's native SSH binary and does not store or modify credentials.
Amazon EKS introduces a new catalog of community add-ons in the AWS GovCloud (US) Regions (1 minute read)

Amazon EKS introduced a new catalog of community add-ons in AWS GovCloud (US) Regions, including metrics-server, kube-state-metrics, cert-manager, prometheus-node-exporter, fluent-bit, and external-dns. The add-ons are scanned, validated, and securely hosted by EKS, allowing users to configure and manage them directly through the EKS Console, API, CLI, eksctl, or IaC tools.
🎁

Miscellaneous

Extending deployment pipelines with Amazon ECS blue green deployments and lifecycle hooks (5 minute read)

Amazon ECS now supports native blue/green deployments along with lifecycle hooks, enabling custom logic such as governance checks, automated tests, and manual approvals directly in deployment pipelines. Lifecycle hooks use Lambda functions to control deployment stages, allowing policies like image validation before scaling tasks and approval gates before shifting production traffic.
DeepSeek-V3.1 model now available in Amazon Bedrock (3 minute read)

DeepSeek-V3.1 is now available as a fully managed foundation model in Amazon Bedrock, offering improved performance in tool usage, agent tasks, and support for over 100 languages. The hybrid open weight model switches between thinking mode (chain-of-thought reasoning) and non-thinking mode for faster responses. It is accessible through the Amazon Bedrock console, AWS CLI, and AWS SDK in select regions.
⚑

Quick Links

What does it take to scale SQL databases reliably on Kubernetes? (45 min webinar) (Sponsor)

Learn why colocating CockroachDB with your microservice applications on the same cluster in K8s can bring significant operational benefits.

Register here

Building scalable, resilient enterprise networks with Network Connectivity Center (4 minute read)

Google Cloud's Network Connectivity Center provides a scalable hub-and-spoke model to simplify enterprise networking across VPCs, on-premises, and multi-cloud environments while reducing operational overhead.
Qwen models are now available in Amazon Bedrock (4 minute read)

Amazon Bedrock has expanded its model offerings by adding Alibaba's Qwen3 open-weight foundation models (FMs) in a fully managed, serverless way.

Love TLDR? Tell your friends and get rewards!

Share your referral link below with friends to get free TLDR swag!
Track your referrals here.

Want to advertise in TLDR? πŸ“°

If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.

Want to work at TLDR? πŸ’Ό

Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them!

If you have any comments or feedback, just respond to this email!

Thanks for reading,
Kunal Desai & Martin Hauskrecht


Manage your subscriptions to our other newsletters on tech, startups, and programming. Or if TLDR DevOps isn't for you, please unsubscribe.