From InfoQ · 40 stories
Ink & Switch Releases Bijou64, a Canonical Variable-Length Integer Encoding
Ink & Switch introduced bijou64, a new variable-length integer encoding designed to ensure each number has only one byte representation, eliminating a class of security vulnerabilities. This format also decodes significantly faster than LEB128, addressing issues in protocols like their Subduction sync protocol.
Meta Ports React Compiler to Rust for Faster Builds and Tighter Toolchain Integration
Meta merged a Rust port of the React Compiler into its main repository, replacing the previous TypeScript version. This change aims to deliver significantly faster build times and tighter integration with Rust-based JavaScript toolchains, improving compilation performance for React applications.
GitHub Enhances Issues Navigation, Boosts Instant Access from 4% to 22%
GitHub redesigned the navigation architecture for GitHub Issues, enhancing client-side efficiency to increase instant navigation from 4% to 22%. The shift reduces latency by leveraging client-side caching, predictive prefetching, and a local-first approach, improving user experience significantly for developers.
Walmart Discusses Building Agents Using English as Programming Language
Walmart's Jake Mannix discussed the development of LLM-based agents at a conference, emphasizing the use of English as a programming language for building these agents. This shift represents a return to early programming styles, reminiscent of BASIC, and highlights the industry's ongoing evolution in AI agent technology.
Rspack 2.0 launched with performance improvements and leaner dependencies
Rspack 2.0, ByteDance's Rust-based JavaScript bundler, has been released, featuring performance enhancements and reduced dependencies. This version offers a pure ESM core, support for React Server Components, and requires Node.js 20.19+.
GitLab Introduces Carbon Emission Metrics for CI/CD Pipelines
GitLab has launched a feature to measure carbon emissions from CI/CD pipelines, integrating environmental metrics into DevOps workflows. This development aims to help engineering teams optimize sustainability alongside traditional performance measures.
Engineering AI for Creativity and Mobile Visual Search Presented by Bhavuk Jain
Bhavuk Jain outlined two projects utilizing AI for mobile applications: AI-generated wallpapers and a visual search tool. These innovations aim to enhance user experience by reducing friction in finding products and images.
Yelp Launches Training Orchestrator for Unified Machine Learning Model Training
Yelp has introduced Training Orchestrator, a new internal framework designed to streamline machine learning (ML) model training. This framework replaces fragmented team-specific scripts with a standardized, configuration-driven orchestration model, addressing issues of code duplication and inconsistency across ML training processes.
GitLab 19.2 Introduces AI Automation for Security Backlog Management
GitLab has launched version 19.2 of its DevSecOps platform, which includes new AI-driven features aimed at alleviating security review backlog caused by rapid AI-assisted coding. Key new functionalities include Dependency Scanning Auto-Remediation and Security Review Flow, addressing vulnerabilities and logic flaws in code efficiently.
Java Roundup: Value Objects Preview, WildFly 41, Open Liberty 26.0.0.7 Released
Key updates in Java include the reintroduction of Value Objects (Preview) and the GA release of WildFly 41. Additional notable releases include Open Liberty 26.0.0.7 and other updates for TornadoVM and LangChain4j, among others.
DoorDash Launches Entity Cache for 1.5M RPS with 99.99999% Availability
DoorDash has introduced Entity Cache, a proxy caching platform to efficiently manage service requests across its microservices. This system streamlines service communication, achieving over 1.5 million requests per second with 99.99999% availability, reducing backend load and improving response times.
InfoQ Launches Three Certification Cohorts Starting August 2023
InfoQ has launched three five-week online certification cohorts in August 2023 for experienced professionals. These cohorts focus on Architecture, Engineering Leadership, and AI Security & Privacy Engineering, helping senior engineers enhance their skills through real-world applications.
Max Korbacher Discusses Failures in Internal Platform Engineering
Max Korbacher emphasizes that success in platform engineering depends on understanding user needs, not just coding. He outlines common pitfalls in platform development, such as unmet management expectations and lack of user adoption.
Clare Liguori Discusses Strands Agents SDK Growth in InfoQ Podcast
Clare Liguori explains the evolution of the Strands Agents SDK from a Python project to a production-level agent harness. The conversation highlights the SDK's model-driven architecture and the importance of a modular approach in constructing AI agents, offering insights for developers in the space.
AWS Launches CloudFormation Express Mode for Faster Deployments
AWS has launched CloudFormation express mode, which marks stack operations complete once API calls succeed, reducing deployment times significantly. This mode allows resources to initialize without waiting for full stabilization, catering to faster development workflows where immediate readiness is not critical.
Dolt 2.0 Released with Automatic Cleanup and Improved Performance Features
DoltHub has launched Dolt 2.0, enhancing the SQL database with automatic garbage collection, compression, and improved data type support. These updates are significant for users managing historical data, optimizing storage, and improving performance.
Uber Enhances OpenSearch Resilience During Zone Outages
Uber has developed a method to ensure OpenSearch clusters remain operational during zone outages. This approach uses shard allocation, isolation groups, and a specialized voting configuration to maintain data integrity and service continuity even amid node failures.
Cursor Launches Origin, a Code Hosting and Collaboration Platform
Cursor has launched Origin, a new code hosting and collaboration platform available in early beta for paid plan users. Origin provides repositories, pull requests, code browsing, and GitHub synchronization, aiming to integrate code management with Cursor's AI agent capabilities.
Workload Identity Federation in GCP eliminates long-lived credentials for external workloads
Workload Identity Federation (WIF) in Google Cloud Platform (GCP) allows external workloads to authenticate without long-lived service account keys, reducing credential exposure and operational overhead. This approach shifts machine identity from managing secrets to configuring trust relationships, improving security for integrations like CI/CD tools and third-party access.
Twilio Implements Time-in-Queue Metric for Apache Hudi Data Lake Pipelines
Twilio developed a "time-in-queue" metric to accurately measure data freshness in its petabyte-scale Apache Hudi data lake pipelines, addressing limitations of traditional Kafka offset lag metrics. This new metric allows pipeline owners to define and enforce custom freshness SLAs, improving visibility into data staleness.
Wiz Report Finds S3-Compatible Object Storage Services Have Significant Security Gaps
A Wiz report reveals that S3-compatible object storage services from six neocloud providers lack many security protections found in Amazon S3, leading to potential vulnerabilities. This matters because organizations using these services cannot assume AWS-level security and must adjust their security practices to account for reduced protections and limited least-privilege capabilities.
AI Makes Code Write-Only and Disposable, Requiring New Development Approaches
Phillip Mortimer argued at QCon London that AI-generated code is becoming write-only and disposable due to its complexity, making tests the primary documentation and rewriting easier than debugging. This shift necessitates automated reviews and self-healing software to manage the volume of AI-produced code.
Buildpacks Shift Container Hardening Control from Dockerfiles to Platform Engineering
Cloud Native Buildpacks are changing how container base image security updates are managed by centralizing control with platform engineering teams, rather than individual application developers. This shift allows for faster remediation of critical vulnerabilities across many services by enabling rebasing of container images without full rebuilds.
WebAssembly on JVM Evolves with Performance Gains and Chicory's Transition to Endive
Andrea Peruffo discussed the evolution of WebAssembly (Wasm) on the JVM, highlighting performance improvements and its expanded role beyond browsers to server-side and edge computing. The Chicory runtime is transitioning to "Endive" under the Bytecode Alliance to ensure stable, foundation-governed development within the JVM ecosystem.
JDK 24 Updates Virtual Threads, Shifting Production Risks and Introducing Scoped Values
JDK 24's JEP 491 removes monitor-related carrier pinning for Java virtual threads, reducing risks for synchronized blocking code. This change shifts the primary production risk from carrier-thread starvation to downstream resource exhaustion, and highlights issues with ThreadLocal caching under virtual threads. Scoped Values, finalized in JDK 25, are introduced as a replacement for application-owned request context.
OpenClaw Maintainers Discuss Managing Rapid Growth and Security Challenges
The maintainers of OpenClaw, an AI assistant project, discussed their experiences managing a surge of pull requests, rethinking contributor trust, and addressing software supply chain risks. This provides insights into the operational challenges of rapidly growing open-source AI projects.
Swiggy Develops Multi-Task MLP Model with 350+ Features for Customer Lifetime Value Prediction
Swiggy has developed an in-house predicted lifetime value (pLTV) model to estimate the long-term value of new customers for its food delivery and Instamart services. This model uses over 350 features and a multi-task multilayer perceptron, which reduced model parameters by 63% while improving accuracy, enabling Swiggy to optimize advertising bids based on predicted customer value.
InfoQ Launches AI-Assisted Engineering Certification Program for Senior Practitioners
InfoQ has opened enrollment for its new InfoQ Certified AI-Assisted Engineering Program, an online certification designed for senior engineers and architects using coding agents on production code. The program focuses on agent permissions, error detection, and validating AI-generated code for scalability and maintainability within existing codebases.
Artie Shevchenko Discusses AI's Role in Code Reviews and Maintaining Intellectual Control
Artie Shevchenko presented at Craft conference on integrating AI into code reviews, suggesting mandatory AI checks with manual spikes for complex changes. He argued that while AI can increase velocity by handling low-risk reviews, human oversight is crucial to prevent cognitive debt and maintain intellectual control over codebases.
DoorDash's Flux Platform Automates 130,000 Engineering Tasks Monthly in the Cloud
DoorDash has migrated its engineering agent workloads from developers' laptops to its cloud-based Flux platform, which processed 130,000 engineering tasks in a single month in 2026. This shift addresses limitations of local execution, such as CPU/memory constraints and security concerns, by providing isolated, monitored environments for automated workflows.
FlexGanttFX Resource-Scheduling Framework Open Sourced Under AGPL License
Dirk Lemmerman has open-sourced FlexGanttFX, a JavaFX-based resource-scheduling framework for generating Gantt charts, after 15 years of development. The AGPL license was chosen to increase code availability while addressing project maintenance, impacting developers who use Gantt charts in project planning and resource management.
DoorDash develops SafeChat AI system for real-time safety in its marketplace communications
DoorDash has developed SafeChat, an AI-powered system designed to detect and prevent verbal abuse across its platform's communication channels, including chat and calls. This system processes millions of daily messages and calls in real-time to ensure user safety, reflecting DoorDash's focus on both actual and perceived safety for its users.
Harper Releases Version 5.2 and Benchmarks Against Vercel-Based Stack
Harper released version 5.2 of its database platform, introducing a new record cache and increased throughput per node. The company also published a benchmark comparing its single-runtime architecture against a Vercel-based stack, reporting better performance for live, personalized-data workloads.
PGSimCity Visualizes PostgreSQL Internals as an Interactive 3D City Simulation
Nikolay Samokhvalov released PGSimCity, an open-source tool that converts PostgreSQL cluster mechanics into an interactive 3D spatial simulation accessible in a browser. This tool helps backend developers, site reliability engineers, and database architects understand the connection between SQL queries and kernel execution by visualizing PostgreSQL 18 internals as a city.
Spotify uses an internal coding agent, Honk, to automate codebase maintenance and rewrites
Spotify developed an internal background coding agent named Honk to automate the continuous maintenance and rewriting of its codebase. This tool addresses the "maintenance problem" where developers spend significant time on tasks like dependency updates and migrations rather than new feature development. Honk helps ensure the entire Spotify fleet uses the latest library versions, improving developer efficiency.
Vercel Labs Releases Zero, a Graph-First Systems Language for AI Agents
Vercel Labs introduced Zero, an experimental systems programming language designed for AI agents to read and repair compiler output. This language emphasizes a graph-first authoring workflow and provides structured error diagnostics with machine-readable repair plans, shifting the focus from human developers to AI agents for code interaction.
eslint-rspack-plugin 5.0.0 Released as Pure ESM Package
eslint-rspack-plugin version 5.0.0 has been released as a pure ESM package, removing its CommonJS build to align with the Rspack ecosystem. This change mirrors Rspack 2.0's move to pure ESM, aiming for consistent module loading practices.
HubSpot Redesigns JITA Authorization with Rule Engine for Improved Observability
HubSpot has re-engineered its Just-In-Time Access (JITA) authorization system to use a rule engine architecture, replacing complex conditional logic. This change allows for greater observability and explainability of access decisions, making it easier for engineers to understand why requests are approved or denied and to manage evolving authorization requirements.
Jotai v2.20 Released with Reworked Internal Store Building Blocks for Performance
Jotai, a React state management library, released version 2.20.0, which focuses on improving performance in high-throughput scenarios by reworking its internal store building blocks. This update addresses a performance regression introduced in earlier versions and prepares the library for a future v3 release.
Expedia Develops AI-Assisted Service Telemetry Analyzer (STAR) for Incident Investigation
Expedia Group has launched Service Telemetry Analyzer (STAR), an internal AI-assisted observability platform designed to help engineers investigate production incidents by analyzing service telemetry and generating root cause assessments. This system aims to reduce the time engineers spend identifying the source of service degradation by combining operational metrics with large language models through predefined diagnostic workflows.