From InfoQ · 40 stories
Canvas UI Launches with 35 HTML-in-Canvas Components for GPU Effects on Live DOM
Canvas UI, an open-source library, has launched with 35 components that apply WebGL and WebGPU effects directly over live, interactive HTML content using the experimental HTML-in-Canvas API. This allows for visual effects like fluid distortions and glass lenses while preserving DOM interactivity and accessibility. The library offers builds for various frameworks and requires Chrome with a specific flag or origin trial token for full functionality.
Google's Spanner Omni, a deploy-anywhere distributed database, is now generally available
Google has made Spanner Omni generally available, allowing users to deploy the distributed, multi-model database in on-premises data centers or other cloud environments. This release provides the same core Spanner capabilities, including ACID compliance and horizontal scalability, outside of Google Cloud, enabling greater deployment flexibility for demanding workloads and AI applications.
Cloudflare launches 'cf' CLI for full API access, standardizing agent interactions
Cloudflare introduced 'cf', a new command-line interface that provides agents with access to the entire Cloudflare API, moving beyond the limitations of the previous Wrangler CLI. This development standardizes command experiences across Cloudflare products and integrates new features like JSON as a default interface and TypeScript-based configuration.
SvelteKit 3 Release Candidate Moves Config to Vite, Retires $lib Alias
SvelteKit 3 has entered its release candidate phase, focusing on code pruning and foundational changes rather than new features. Key updates include moving configuration to vite.config.ts and replacing the $lib alias with #lib, which uses native Node subpath imports.
Linux Support Announced for Qualcomm Snapdragon X2 Series Processors
Qualcomm has announced that its Snapdragon X2 Series processors will receive Linux support. This development expands the operating system options for devices powered by these chips, potentially increasing their appeal to a broader range of developers and users.
Amazon CloudWatch Omni Introduces AI-Powered Collaborative Observability
Amazon CloudWatch launched CloudWatch Omni, an AI-powered observability platform for applications and AI agents. Omni integrates OpenTelemetry data, offers a collaborative workspace, and automates service discovery and alarm adjustments, aiming to reduce manual effort in incident investigation.
Cloudflare Adds Vary Header Support to Cache Rules
Cloudflare has implemented support for the HTTP Vary response header within its Cache Rules feature, allowing users to control how caches handle varied content. This update enables more precise caching of resources that deliver different representations from a single URL, preventing incorrect content delivery to clients.
Worker Previews Launch for Isolated Preview Environments per Git Branch
Worker Previews has launched, providing a production-like environment for each Git branch with its own code, configuration, URL, observability, and state. This allows developers to test changes thoroughly before merging to production, improving the development lifecycle.
Cloudflare Workers now generally available for Python applications
Cloudflare has announced the general availability of Python Workers, allowing developers to run Python applications directly within the Cloudflare Workers runtime. This update makes Python a fully supported language on the Cloudflare Developer Platform, integrating it with various Cloudflare services and popular Python frameworks.
Radicle Discloses Critical Vulnerabilities in Network Protocol Affecting All Versions
Radicle has disclosed two critical security vulnerabilities in its network protocol, affecting all versions of its peer-to-peer code collaboration stack. These flaws allow for unencrypted data transmission and node impersonation, posing a risk of information leakage for private repositories.
AWS Elastic Beanstalk Introduces Cluster Mode for Shared Infrastructure
AWS Elastic Beanstalk launched Cluster Mode, allowing multiple applications to share infrastructure managed by Amazon EKS. This update aims to reduce per-application costs and operational complexity for teams managing a portfolio of applications.
Google Introduces AX, an Open Agentic Orchestrator for Scalable Agent Workloads
Google has released AX, an open agentic orchestrator designed to manage and scale agent-based workloads. AX provides sandboxed execution, workspace setup, network policies, and model configuration, addressing the unique requirements of agent workloads that differ from traditional microservices or batch jobs.
Google open-sources Mantis, an AI-powered bug finding and fixing harness
Google has open-sourced Mantis, a framework designed to automate the discovery, triage, reproduction, and patching of software vulnerabilities using AI. Mantis aims to improve the effectiveness and scalability of vulnerability analysis by combining agentic techniques with sandboxed reproduction, offering a tool for developers to integrate AI into their security practices.
Google releases HEIR, an open-source compiler for private AI inference using homomorphic encryption
Google has released HEIR (Homomorphic Encryption Intermediate Representation), an open-source compiler designed to enable private AI inference using homomorphic encryption. This tool addresses the challenge of performing computations on encrypted data without exposing underlying information, making homomorphic encryption more practical for developers.
pnpm 12 Released as a Rust Rewrite with Git Dependency and Configuration Improvements
pnpm 12, a package manager, has been released as a rewrite in Rust, maintaining compatibility with pnpm 11's commands, flags, settings, and lockfile format. This update introduces changes to how Git dependencies are resolved and improves error reporting for unrecognized settings in `pnpm-workspace.yaml` files, which matters for developers using pnpm as it enhances reliability and consistency in dependency management.
Cohere launches Parse 5, a vision language model for structured document conversion
Cohere released Parse 5, a 2.3-billion-parameter vision language model designed to convert PDFs, slides, and images into structured Markdown at enterprise scale. While not the most accurate on benchmarks, Parse 5 is positioned for its cost-effectiveness at $1.50 per 1,000 pages, addressing the challenge of processing complex enterprise documents without losing structural information.
Cloudflare introduces task-based OAuth consent with scope customization
Cloudflare has launched OAuth scope customization, allowing users to deselect optional scopes during authorization. This change moves from an all-or-nothing consent model to a more granular, task-based approach, enhancing user control over application permissions.
.NET 11 Preview 7 Released with Updates Across Libraries, Runtime, SDK, and Frameworks
Microsoft has released .NET 11 Preview 7, introducing improvements across various components including libraries, the .NET Runtime, SDK, C#, ASP.NET Core, .NET MAUI, Entity Framework Core, F#, and Windows Forms. This preview provides developers with new features and enhancements for application development across different platforms.
DuckDB v2.0 "Cyanoptera" to Introduce Server Mode, New SQL Parser, and Storage Format
DuckDB v2.0, codenamed "Cyanoptera," is scheduled for release this fall, bringing a new SQL parser, a new default storage format, and a reworked C API. The update's most significant feature is the introduction of a stable client/server mode, allowing DuckDB processes to serve databases over a network and connect to remote databases like PostgreSQL and MySQL.
New technique "skitter-creek-bath-salts" bypasses DRAM memory protections on AMD CPUs
A new technique called "skitter-creek-bath-salts" allows manipulation of DRAM controller registers to scramble platform memory, bypassing security features like the Platform Security Processor, System Management Mode, and CPU microcode. This method was developed and tested on AMD Family 16h CPUs, which are the last generation with publicly documented DRAM controller translation registers.
Cloudflare introduces WriteGuard for fine-grained control over AI agent actions on MCP servers
Cloudflare has launched WriteGuard, a new control system designed to manage and restrict the actions of AI agents connected to Model Context Protocol (MCP) servers. This system addresses the risk of AI agents performing unintended or destructive operations by providing granular permissions, preventing scenarios like mass ticket closures or data deletion. WriteGuard is now available in private beta for Cloudflare MCP server portals.
Cloudflare launches CI SDK for running CI/CD pipelines on its platform
Cloudflare introduced a CI SDK built on Cloudflare Workflows, enabling continuous integration (CI) pipelines to run directly on its platform. This development allows platforms to manage CI/CD for their own code and their customers' code, integrating with Cloudflare Artifacts for versioned code storage.
Amazon DynamoDB Adds Real-Time Vector Search Capability
Amazon DynamoDB now supports real-time vector search, allowing users to store vector embeddings alongside operational data and perform similarity searches directly within the database. This integration removes the need for separate vector databases and synchronization pipelines, simplifying application architecture and reducing operational overhead for AI-driven features.
Cloudflare Introduces Agent Tracing and Local Debugging for AI Agents on Workers
Cloudflare has launched Cloudflare Agents, a platform for deploying and managing hosted agents, starting with agent tracing for visibility into agent behavior. Concurrently, `wrangler dev` and `vite dev` now automatically capture OpenTelemetry traces for local Worker invocations, enabling AI agents to debug issues using a new Local Explorer API. This provides structured feedback for agents during local development, reducing manual logging.
Amazon EKS Introduces Kubernetes Version Rollback and Extended Support
Amazon EKS now supports Kubernetes version rollbacks, allowing users to revert a cluster's control plane to its previous Kubernetes version within seven days of an upgrade. This feature provides a safety net for quick recovery from problematic updates. Additionally, EKS has introduced Extended Support for Kubernetes versions, making each version available for 26 months.
Google Cloud Introduces AI Security Blueprint for Kubernetes Engine
Google Cloud has released a security blueprint for AI workloads on Google Kubernetes Engine (GKE). This strategic guide suggests a multilayered security approach to protect model weights and counter threats like prompt injection, advancing AI's transition from prototype to production. It matters as AI deployment security becomes crucial for enterprises.
Cloudflare Internal DNS Launches for Private Networks
Cloudflare has launched its Internal DNS, providing unified management of authoritative and recursive DNS for private networks. This service aims to simplify DNS operations by consolidating public and private DNS management on a single platform, thereby enhancing security and visibility across networks.
Amazon launches GuardDuty investigation agent for AI-powered threat assessment
Amazon introduced the GuardDuty investigation agent in public preview, enhancing threat assessments across AWS environments. This tool automates investigation processes, reducing time from hours to minutes and providing structured risk assessments and actionable recommendations.
.NET 11 Preview 6 Released with New Optimizations and Features
.NET 11 Preview 6 has been released, offering enhancements across several aspects like the runtime, SDK, libraries, ASP.NET Core, and .NET MAUI. New features include asynchronous validation, improved JSON serialization, and performance optimizations for future development iterations. The preview aims to improve development efficiency and capability, reflecting significant advances since the prior preview release.
Netflix Introduces GenPage AI to Optimize Personalized Homepages
Netflix has introduced GenPage, a generative AI model to create personalized homepages. GenPage improves user engagement and reduces latency by replacing the traditional multi-stage recommendation pipeline with a single model that uses user history and context. This shift could streamline content delivery and enhance personalized user experiences.
Google's AlphaEvolve Released for General Use on Gemini Enterprise Platform
Google has announced that AlphaEvolve, an AI-driven code optimization service, is now generally available on the Gemini Enterprise Agent Platform. Featuring evolutionary algorithm techniques, it enables organizations to optimize their code within their own infrastructure boundaries, supporting diverse industries. This advancement signifies a robust approach to tackling optimization challenges across sectors like logistics and genomics.
Google Cloud API Gateway Adds Streaming Support for Real-Time and AI Applications
Google Cloud API Gateway now supports streaming, allowing real-time communication for applications like AI model responses and interactive sessions. This update enables streaming endpoints to use existing gateway policies and security controls, addressing a previous limitation where developers had to choose between streaming and gateway features. The new functionality also introduces predictable gateway hostnames.
Leapwork Play Reaches General Availability, Adds Governance to Playwright Test Suites
Leapwork released Play to general availability on September 30, 2026, providing governance features for Playwright test suites. The service adds requirement traceability, approval workflows, and monitoring for changes in application behavior to recommend test updates.
Workload Identity Federation in GCP eliminates long-lived credentials for external workloads
Workload Identity Federation (WIF) in Google Cloud Platform (GCP) allows external workloads to authenticate without long-lived service account keys, reducing credential exposure and operational overhead. This approach shifts machine identity from managing secrets to configuring trust relationships, improving security for integrations like CI/CD tools and third-party access.
Vitest 5 Released with Performance Improvements, Trace View, and Stricter Defaults
Vitest 5.0 has been released, focusing on performance gains of 8% to 53% through a shared Vite server, improved caching, and optimized worker communication. The update also introduces a built-in Trace View for Browser Mode, a new `vi.when` API, and stricter default behaviors for assertions and mocks. This release requires Vite 6.4 and Node.js 22.12 or newer, and may require updates to existing test suites and CI configurations.
LinkedIn Implements OpenTelemetry for End-to-End Member Journey Tracing
LinkedIn developed an OpenTelemetry-based platform to connect user interactions in its mobile and web applications with backend service processing. This system allows engineers to trace a member's activity from the client through frontend and backend services, closing a common observability gap between client analytics and backend tracing. The platform uses a "pageForestId" to group related requests within a single user page view, providing a broader context than individual distributed traces.
JDK 28 Targets New Features, JDK 27 Release Candidate Delayed
Several Java Enhancement Proposals (JEPs) for JDK 28 have advanced, with JEP 539 (Strict Field Initialization), JEP 401 (Value Objects), and JEP 535 (Shenandoah GC: Generational Mode by Default) now targeted for the release. Concurrently, the initial release candidate for JDK 27 has been delayed by two weeks to August 20, 2026, to align with an upcoming Critical Patch Update.
Uber Develops MCP Gateway to Standardize AI Agent Access to 800+ Servers and 5,000+ Tools
Uber has created an MCP Gateway to standardize how its internal AI agents discover and invoke services, addressing fragmentation and inconsistent security across its growing AI agent ecosystem. This platform manages over 800 servers and 5,000 tools, providing a unified layer for discovery, protocol translation, authorization, and execution. The system uses an AutoCrawler for automated tool discovery and integrates with Uber's access control for security.
Shopify Develops Overexposed Scanner for GKE Ingress and Cloud Run Exposure Detection
Shopify introduced Overexposed, an internal scanner that identifies internet-accessible, unauthenticated Kubernetes Ingresses on GKE and Cloud Run services. The scanner was rebuilt to use GCP Cloud Asset Inventory and anonymous HTTP probes, reducing inconclusive verdicts by approximately 80%. This tool helps Shopify identify and manage publicly exposed services more accurately than its previous configuration-file-based approach.
AWS Cloud Capacity Largely Sold Out Through 2027, On-Demand Headroom Reserved
Amazon CEO Andy Jassy stated that AWS's large committed cloud capacity is largely sold out through 2027, with portions of 2028 also allocated, while maintaining headroom for On Demand, EC2, and Bedrock services. This indicates high demand for long-term cloud resource commitments, particularly for GPU instances, though some analysts suggest the 'sold out' claim may not apply to typical day-to-day enterprise allocations.