Announcing Argo CD v3.1 (4 minute read)
Argo CD v3.1 introduces key features including beta support for OCI registries, CLI plugins, Hydrator metadata enhancements, UI-based resource scaling, and server-side apply migration. The release also delivers numerous bug fixes, security updates, performance improvements, and major dependency upgrades such as Go 1.24.4.
|
GitLab 18.1 released (1 minute read)
GitLab 18.1 introduces the Maven virtual registry in beta and Duo Code Review for AI-powered automated merge request analysis along with over 110 other improvements, including compromised password detection and SLSA Level 1 compliance components.
|
|
A Cloud Dev Hack: Connecting Local Code to Remote Clusters (8 minute read)
Mirrord by MetalBear allows developers to connect local code to a remote Kubernetes pod, enabling them to code, debug, and test with access to real cluster resources without full cloud deployment. The tool intercepts system calls and reroutes them through the cluster, giving local apps access to internal APIs, queues, and secrets as if they were running inside the cluster. It can be installed as a standalone CLI tool, through the VS Code extension, or through the IntelliJ plugin.
|
|
AG-UI (GitHub Repo)
AG-UI, an open-source and MIT-licensed protocol, streamlines the integration of AI agents with front-end applications using a lightweight, event-based system. It offers a flexible middleware layer for broad compatibility, includes a reference HTTP implementation, and provides a default connector to expedite the development of in-app agent interactions.
|
|
Measuring Commercial Impact at Scale at Canva (14 minute read)
Canva developed the IMPACT app, an internal tool using Snowflake, Streamlit, Snowpark, and Cortex, to measure the commercial impact of its experiments, which number over 1,800 this year. The app enables users to estimate commercial impact through a low-code or no-code experience and has reduced the time for analysis from 6+ hours to under 10 minutes.
|
Unexpected security footguns in Go's parsers (15 minute read)
Go's parsers have insecure defaults that attackers exploit to bypass security, including issues with duplicate keys, case-insensitive matching, and inconsistent behavior across formats. Developers should enforce strict parsing and monitor JSON v2 for safer defaults.
|
|
|
Love TLDR? Tell your friends and get rewards!
|
|
Share your referral link below with friends to get free TLDR swag!
|
|
|
|
| Track your referrals here. |
|
Want to advertise in TLDR? 📰
If your company is interested in reaching an audience of devops professionals and decision makers, you may want to advertise with us.
Want to work at TLDR? 💼
Apply here or send a friend's resume to jobs@tldr.tech and get $1k if we hire them!
If you have any comments or feedback, just respond to this email!
Thanks for reading,
Kunal Desai & Martin Hauskrecht
|
|
|
|
