From InfoQ · 40 stories
Expedia Open-Sources mockql-rs for LLM-Generated GraphQL Mocks; Airbnb and GraphQL Foundation Also Pursue Solutions
Expedia Group open-sourced mockql-rs, a Rust CLI that generates GraphQL mock responses using a large language model (LLM) at request time. This tool, along with similar efforts from Airbnb and the GraphQL Foundation, addresses the challenge of rapidly creating mock data for GraphQL development, allowing developers to work with incomplete backend services.
Kubeflow Updates Include Kale 2.0, Native Spark, and Enhanced Trainer as CNCF Graduation Nears
The Kubeflow project released technical updates including Kale 2.0, native Spark support in its SDK, and an enhanced Kubeflow Trainer, as it approaches graduation from the Cloud Native Computing Foundation. These developments aim to improve distributed AI and high-performance computing capabilities on Kubernetes, making it easier for data scientists to move AI models from experimentation to production.
Rx.NET 7.0 Splits Windows UI Support to Reduce Deployment Size
Rx.NET 7.0 has been released, separating Windows UI integration components from the main System.Reactive package. This change reduces deployment sizes for self-contained .NET applications that do not use Windows UI frameworks, addressing an issue where unused dependencies added significant overhead.
npm 12 Released with Install Scripts Off by Default for Enhanced Security
npm 12 has been released, making several security-related changes to `npm install` defaults, including disabling automatic execution of install scripts. These changes require developers to explicitly opt-in to script execution, aiming to mitigate supply chain attacks and improve package security.
Vercel Releases v0 API for Programmatic AI-Powered Application Building
Vercel has made its v0 API generally available, allowing developers programmatic access to an AI agent that generates and modifies application files based on prompts. This release enables developers to integrate AI-powered application generation directly into their products, scripts, and CI pipelines, offering a new approach to app development infrastructure.
Astro 7 Released with Rust Compiler, Markdown Pipeline, and Vite 8 for Faster Builds
Astro, a content-focused web framework, released version 7, which includes a rewrite of its compiler in Rust, a new Rust-based Markdown pipeline, and an upgrade to Vite 8. These changes result in build performance improvements ranging from 15% to 61% for larger sites. The update also introduces stricter HTML compilation and advanced routing features.
Netflix Replaces In-House Batch Job System with Open-Source Kueue
Netflix has migrated most of its batch workloads from its proprietary Compute Managed Batch (CMB) system to Kueue, an open-source cloud-native job queueing system. This shift was driven by Kueue's advanced capabilities and better integration with the Kubernetes ecosystem, which CMB lacked as it aged.
Spotify Introduces Random Access Parquet (RAP) for Low-Latency Queries on Data Lake
Spotify developed Random Access Parquet (RAP), a new storage architecture that enables low-latency point queries directly on data lake files without replicating datasets into operational databases. This allows online services and AI applications to retrieve individual records efficiently from existing analytical datasets, reducing storage costs and data duplication.
Netflix Redesigns Service Topology Pipeline for Scalability
Netflix redesigned the streaming pipeline for its Service Topology, a real-time map of service dependencies, to support production scale. The new design separates intermediary resolution from enrichment and persistence, propagates backpressure to Kafka, and uses server-sent events for internal transfers, addressing previous bottlenecks with popular destinations.
IBM and Red Hat Expand Lightwell with Commercial Offerings for AI-Era Software Supply Chain Security
IBM and Red Hat have expanded Lightwell, introducing new commercial offerings to establish verifiable software supply chains for AI-assisted development. These offerings simplify software signing, provenance, artifact verification, and policy enforcement, addressing the need to trust both human- and AI-generated software throughout its lifecycle.
JetBrains Centralizes AI Usage to Control Costs After Tenfold Spending Increase
JetBrains implemented a centralized system for AI tool access and accounting after its AI-related development spending increased tenfold in six months. This system, called Central CLI, routes AI requests through a shared control point, allowing for cost visibility and management without restricting developers' tool choices.
JEP 401 Introduces Value Objects and Redefines '==' for Them in JDK 28 Preview
JEP 401, "Value Objects (Preview)", has been integrated into JDK 28, introducing identity-free class instances with final fields and altering the behavior of the '==' operator for these new value objects. This change allows for flatter, allocation-free JVM representations and requires developers to use a new 'value' modifier and adhere to stricter construction rules.
Canva Redesigns Session Revocation Using Amazon S3 for Scalability
Canva re-engineered its session revocation infrastructure to handle hundreds of millions of active sessions by storing revocation data in Amazon S3 and distributing it as in-memory indexes to application gateways. This change improved deployment speed, reduced database infrastructure, and decreased the memory footprint of its revocation cache by 87.5%. The new architecture allows Canva to scale its authentication system more efficiently without relying on constant networked database lookups.
Pinterest Introduces Resource Provisioner Pipeline for Secure AWS Infrastructure Management
Pinterest developed and released the Resource Provisioner Pipeline (RPP), a custom Terraform execution engine, to manage its AWS infrastructure securely. RPP enforces least-privilege access and dual-control reviews across thousands of cloud resources, addressing security challenges in a multi-repository environment. This system enhances security and consistency for Pinterest's AWS operations by centralizing Terraform execution and applying strict guardrails to GitHub Actions workflows.
GitHub Code Quality, combining CodeQL and AI, is now generally available
GitHub Code Quality, a service integrating CodeQL analysis with AI-assisted detection of maintainability and reliability issues, is now generally available on GitHub Enterprise Cloud and GitHub Team. This release provides tools for engineering teams to manage code quality and maintainability, which is increasingly important with the rise of AI-generated code.
Google Releases Angular v22 with Stable Signal Forms, OnPush Default, and Experimental WebMCP
Google has released Angular v22, which stabilizes Signal Forms, Angular Aria, and asynchronous reactivity APIs, making OnPush the default change detection strategy. This update provides developers with new tools for reactive forms, data modeling, and improved performance, impacting how Angular applications are built and maintained.
Stripe Automates Database Remediation Using Graph Search and State Machines
Stripe's engineering team implemented a system that models its global infrastructure as a graph and uses graph search algorithms with state machines to automate database incident recovery. This new approach has reduced database-related pager alerts by 30%, eliminating 200 pages and 12 days of unhealthy shard states annually.
Instacart launches Blueberry, an AI assistant for incident response
Instacart introduced Blueberry, an AI-powered incident response system that helps on-call engineers investigate production issues by providing context and root cause hypotheses. This system aims to reduce the time engineers spend gathering information during incidents, improving diagnostic accuracy by leveraging historical data and operational knowledge.
Rootly Alters Code Review Process, Drops Small PR Rule Due to AI-Generated Code
Incident management platform Rootly has discontinued its small pull request (PR) rule, citing changes in code generation economics due to AI agents. The company now focuses on assessing "blast radius" and uses feature flags and rollback capabilities for safety, rather than limiting PR size. This shift reflects how AI agents produce complete feature implementations, making traditional small, stacked PRs inefficient for review.
Uno Platform 6.6 Adds Native AOT, Vulkan Rendering, and Accessibility Improvements
Uno Platform 6.6 introduces Native AOT publishing for five target platforms, an optional Vulkan rendering backend, and automatic registration for Model Context Protocol servers. These updates aim to improve application performance, simplify development, and expand cross-platform capabilities for WinUI-style applications.
npm Introduces Staged Publishing for Node.js Packages with Human Approval Step
npm has made staged publishing generally available, adding a mandatory human approval step with two-factor authentication before a package version goes live. This feature aims to enhance supply chain security by preventing direct, unreviewed publication of potentially malicious code.
yk Technology Automatically Adds JIT Compilers to Existing Language Implementations
A new technology called yk has been developed to automatically integrate just-in-time (JIT) compilers into existing language implementations, particularly for dynamically typed languages. This technology demonstrates significant speed improvements, with a Lua benchmark showing a 4x speedup and MicroPython showing a 2x speedup.
Ponytail AI Agent Skill Corrects Benchmark After Community Challenge
Ponytail, an open-source skill for AI coding agents, revised its performance benchmark after a contributor and Hacker News skeptics challenged its initial claims. The project, which instructs agents to prioritize minimal code solutions, rebuilt its benchmark against a more realistic agentic baseline.
SkiaSharp 4.0 Released, Aligning with Upstream Skia Milestones
Microsoft and Uno Platform released SkiaSharp 4.0, including versions 4.148.0 and 4.150.0, which updates the .NET bindings for Google's Skia 2D graphics engine. This release establishes a new cadence that aligns SkiaSharp package versions with upstream Skia milestones, modernizing the engine and improving performance in specific areas.
Microsoft Agent Framework Harness and Hosted Agents Reach General Availability
Microsoft has announced the general availability of the Agent Framework Harness and Foundry Hosted Agents, providing a production runtime for AI agents. This release offers platform teams tools to run and govern agents, moving beyond just building them, and addresses runtime execution and observability for AI agents.
HashiCorp Releases Public Beta of Vault Kubernetes Key Management for Encryption at Rest
HashiCorp has released the public beta of Vault Kubernetes key management, enabling Kubernetes clusters to use Vault Enterprise as their Key Management Service (KMS) provider for encryption at rest. This allows the Kubernetes API server to offload envelope encryption to Vault, protecting Kubernetes Secrets and other API resources stored in etcd by moving the encryption keys outside the cluster.
Embabel Agent Framework for Java AI Agents Reaches 1.0 General Availability
Embabel, a framework for building AI agents in Java and Kotlin, has released its 1.0 general availability version. This framework allows developers to define AI agents using typed domain objects, simplifying the creation of agents that can plan actions dynamically based on goals and changing conditions.
Cloudflare Launches Meerkat, a Leaderless Global Coordination Service Based on QuePaxa
Cloudflare introduced Meerkat, an internal globally consistent control-plane service that uses the QuePaxa consensus algorithm. Meerkat allows leaderless writes, which improves availability across Cloudflare's global network by avoiding the downtime associated with leader failures in traditional consensus algorithms like Raft.
AWS Builder Center Launches Free Sandbox Environments for Workshops
AWS Builder Center now offers free, time-limited sandbox environments for workshops, eliminating the need for developers to use personal AWS accounts or worry about unexpected charges. This initiative addresses a common barrier to learning new AWS technologies by providing pre-provisioned, temporary environments for hands-on practice.
HashiCorp Introduces tfpolicy, an HCL-based Policy-as-Code Framework for Terraform
HashiCorp has launched tfpolicy, a new HCL-based policy-as-code framework for Terraform, now in public beta within HCP Terraform. This framework integrates policy creation and enforcement directly into Terraform workflows, aiming to simplify infrastructure governance by using the same language and workflow as infrastructure provisioning.
Dropbox Integrates MCP and Dash to Link Security Design with Code Review Workflows
Dropbox has implemented a new engineering approach that connects security design documentation directly with code review processes using its internal Model Context Protocol (MCP) and knowledge system, Dash. This integration aims to bridge the gap where security requirements defined during design often become disconnected from later code implementation and verification.
AWS Lambda Introduces Self-Managed Code Storage, Increasing Account-Level Quotas
AWS Lambda now allows self-managed code storage, enabling functions and layers to reference deployment packages directly from customer-owned S3 buckets. This change removes the per-Region code storage quota for large function fleets and increases the default Lambda-managed storage from 75 GB to 300 GB, but does not alter individual function size limits.
.NET 11 Preview 6 Updates MAUI CollectionView for Windows and Android Shell
Microsoft released .NET 11 Preview 6, introducing the next-generation CollectionView to Windows and re-implementing Android Shell with standard MAUI handlers. These changes modernize the MAUI framework by replacing older Xamarin.Forms infrastructure with platform handlers and source-generated code, improving architectural consistency and reliability.
Grafana Assistant Now Supports Over 30 Data Sources for AI-Powered Observability
Grafana Labs expanded Grafana Assistant to query and correlate data from more than 30 sources using natural language, including Snowflake, Oracle, and Jira. This update allows engineers to investigate incidents and troubleshoot distributed systems without switching between multiple monitoring tools, aiming to address fragmented operational data.
Remix 3 Beta Preview Rebuilds Framework with Web Standards, Drops React
Remix has released a beta preview of Remix 3, a complete rebuild that shifts the framework away from React and towards web platform primitives, expanding its scope to a full-stack offering. This change impacts web developers by introducing a new architectural approach for building web applications, potentially altering development workflows and toolchains.
Uber implements "Zero Growth Stack" for infrastructure and AI cost optimization
Uber introduced its "Zero Growth Stack" strategy to decouple infrastructure capacity from business demand, reducing physical hardware and optimizing AI costs. This initiative includes dynamic Go runtime tuning and new governance for generative AI tools, addressing a sixfold increase in AI-related expenses since 2024.
Netflix Details In-House LLM Serving Platform Using Triton and vLLM
Netflix has shared details about its internal platform for serving large language models (LLMs), which integrates Triton and vLLM to manage real-time and batch inference workloads across CPUs and GPUs. This platform allows Netflix to support diverse model sizes and hardware while maintaining a consistent production workflow for LLM inference.
TanStack Table V9 Beta Released with Tree-Shakable Features and Reworked State Management
TanStack Table V9 beta has been released, introducing tree-shakable features, state management built on TanStack Store, and reduced memory usage. This update reworks core aspects of the headless UI library to improve performance and extensibility across various JavaScript frameworks.
Zalando Implements In-Process Client-Side Load Balancer for High-Throughput API
Zalando's engineering team developed and deployed an in-process, client-side load balancer for its Product Read API, which handles approximately 1 million requests per second. This change improved latency predictability, reduced infrastructure costs, and enhanced visibility into failure origins by moving high fan-out internal traffic routing into the calling process.
Airbus Selects Scaleway as Sovereign Cloud Partner, Prioritizing Protection from Extraterritorial Laws
Airbus selected French provider Scaleway as its sovereign cloud partner, making protection against non-European extraterritorial legislation a formal evaluation criterion in its tender process. This decision highlights a growing concern among major industrial buyers regarding data sovereignty and legal jurisdiction in cloud services.