× Want to read this newsletter every week?! × 👋  Join FAUN
 
Last week's must-read news and stories from the DevOps communityDevOps Weekly Newsletter, DevOpsLinks, a FAUN Newsletter.
 
🔗 View in your browser.   |  ✍️ Publish on FAUN   |  🦄 Become a sponsor
 
Last week's must-read news and stories from the DevOps community
DevOpsLinks
 
Curated DevOps news, tutorials, tools and more!
 
 
⭐ Patrons
 
www.manageengine.com www.manageengine.com
 
Navigating Kubernetes observability: A live webinar by ManageEngine and DevOps Toolkit
 
 
Struggling with Kubernetes visibility? Join ManageEngine and DevOps expert Viktor Farcic in this exclusive webinar to uncover strategies for enhancing performance, eliminating blind spots, and optimizing your Kubernetes environment. Register now!
 
 

👉 Spread the word and help developers find you by promoting your projects on FAUN. Get in touch for more information.

 
ℹ️ News, Updates & Announcements
 
www.theregister.com www.theregister.com
 
VMware sues Siemens for using unlicensed software
 
 

VMware slaps Siemens with a lawsuit over unlicensed software use, setting off a juicy legal drama. Rumors swirl about a 72-core licensing minimum. Small businesses? Less than thrilled. Meanwhile, VMware tightens its product download process. Unique tokens for everyone. Probably their way of dodging future licensing migraines.

 
 
www.wiz.io www.wiz.io
 
Remote Code Execution Vulnerabilities in Ingress NGINX
 
 

Wiz Research discovered some eyebrow-raising Remote Code Execution flaws in the Ingress NGINX Controller for Kubernetes. These flaws potentially jeopardize 43% of cloud environments, putting 6,500 clusters at risk of unauthorized tampering. Carrying a daunting CVSS v3.1 score of 9.8, these vulnerabilities in Ingress NGINX’s admission controller could lead to a full-blown cluster takeover. Swift patching is essential to fend off exposure to public and pod networks. So, it's not the time to take a coffee break. Get that patch moving!

 
 
www.microsoft.com www.microsoft.com
 
Microsoft unveils Microsoft Security Copilot agents and new protections for AI
 
 
Meet Microsoft Security Copilot—the evolved AI superhero. It's diving into the chaos of phishing and identity management, juggling a staggering 84 trillion daily signals. In 2024, Microsoft flagged a mind-bending 30 billion phishing emails. That screams for AI intervention. Enter Security Copilot agents, debuting in April 2025. They'll sweep up tedious tasks like a Roomba on a caffeine high. And the new cross-cloud AI security? It might just turn Microsoft Defender into the hottest show in town.
 
 
 
🔗 Stories, Tutorials & Articles
 
xata.io xata.io
 
Are AI agents the future of observability?
 
 

AI observability agents could dial down on-call stress. These tireless workers slog through logs all day, every day, even fixing low-risk bugs so humans can catch some sleep. Sure, nagging worries about privacy and LLM cost lurk, but early trials with Xata Agent suggest these costs barely scrape the surface compared to their heavyweight traditional peers. A cost-efficient revolution might just be brewing.

 
 
sourcegraph.com sourcegraph.com
 
Revenge of the junior developer
 
 

Vibe coding—a cheeky term from Dr. Andrej Karpathy—lets LLMs tackle the drudgery, propelling coding's future as manual coding fades into history. By 2025, coding agents are poised to outshine chat-based tools, urging developers to swap their keyboards for AI irony hats. Efficiency gears will shift as these digital minions reshape what productivity looks like. Enter agentic coding, where developers must morph into maestros of managing these digital juggernauts. But beware: this isn't a free ride. It demands cash, lots of it, as budgets groan and sigh. Progress won't just jog forward; it’ll pole-vault, leaving the stubborn ones in the dust.

 
 
x.com x.com
 
The rise and fall of the vector database infrastructure category
 
 

The explosion of embedding-based applications created a need for specialized infrastructure for vector operations, giving rise to the vector database category, with companies like Pinecone at the forefront. However, the industry has evolved towards a convergence where traditional search engines are incorporating vector capabilities, recognizing that vector search alone is insufficient for practical, real-world use cases.

 
 
www.ranthebuilder.cloud www.ranthebuilder.cloud
 
Stop Building Internal Tools Nobody Wants: A Platform Engineer’s Guide
 
 

Forge tools that tackle everyday quirks, yet welcome secret handshakes like function pointers or hooks for the rule-breakers among us. Think custom libraries, but on steroids. Embrace semantic versioning with zeal. Minimize surprise explosions—AKA breaking changes. Flaunt your release notes like casual glamour shots. Let GitHub’s ‘watch’ feature blare updates like a town crier.

 
 
levelup.gitconnected.com levelup.gitconnected.com
 
Software Engineer Roadmap 2025: The Complete Guide
 
 

Zero in on AI tools, cloud services, and system design. Want a software engineering career that stands out? Ditch the fluff, snag the free roadmap!

 
 
spacelift.io spacelift.io
 
15 GitOps Best Practices to Improve Your Workflows   ✅
 
 
GitOps puts code in the driver's seat, steering apps and infrastructure straight from Git. Your deployments? They'll be twins with the repo's setup. Here are 15 key factors to consider when adopting GitOps in your teams.
 
 
hacker-laws.com hacker-laws.com
 
Hacker Laws   ✅
 
 

Laws, Theories, Principles and Patterns that developers will find useful.

 
 
dcnnmagazine.com dcnnmagazine.com
 
Industry experts react to World Backup Day
 
 

2025 is arming itself with a new title: The Year of Ransomware. Businesses swagger in delusional optimism. Meanwhile, reality sharpens its knives. Dr. Thomas King from DE-CIX has a word of caution: most businesses (82%, no less) downplay packet loss on SaaS. Spoiler alert—they're in for a rude awakening. Time to double down on redundancy or face the digital storm.

 
 
blog.dusktreader.dev blog.dusktreader.dev
 
Self-contained Python scripts with uv
 
 

Dive into uv and make Python scripting a breeze. Jam your dependencies right into the script header. Let uv manage those virtual environments while you kick back. Debugging woes? A relic of the past. Execute your script—no circus act with virtual environments required. Feel the magic.

 
 
www.mssqltips.com www.mssqltips.com
 
Understanding Azure Functions for Microservice Architecture
 
 

Azure Functions demolish clunky monolithic apps with a serverless advantage. They scale like a dream and deploy with a breeze. Oh, and with Azure Blob Trigger, functions spring to life the moment new data hits. Instant updates ping straight to Slack without breaking a sweat.

 
 
aws.amazon.com aws.amazon.com
 
Handling billions of invocations – best practices from AWS Lambda
 
 

Amazon gets clever with AWS Lambda by using shuffle-sharding and consistent hashing. This isn't just tech jargon—it's magic for isolating asynchronous invocations. With these tools, they're boxing out noisy neighbors, smoothing out workloads across a jaw-dropping 4500+ unique queue combos. Collisions? Just about nonexistent.

 
 
www.theregister.com www.theregister.com
 
Nvidia's roadmap shows just how deep Moores Law is buried
 
 

Nvidia just dropped its 2028 GPU squad, honoring Richard Feynman. Enter the 600kW behemoth with 576 GPUs. Moore's Law? Toast. Yet AI's appetite swells for more muscle, more density. Nvidia leads the pack, but watch out—AMD and Intel might just dog-pile onto this trend and cook up their own dense chip wonders in sprawling datacenters.

 
 
philipbohun.com philipbohun.com
 
Convert Linux to Windows
 
 

Wine might just be Linux's secret weapon. It untangles the compatibility mess by coaxing Windows apps to dance on Linux soil. Think of it as a friendly bridge guiding Windows users over to the wild side.

 
 
medium.com medium.com
 
Challenges in Large-Scale DevOps Migration
 
 

Migrating 40K repos from GitLab to GitHub? Picture a herd of cats. The GHEC tool choked. Suddenly, scripts became the unsung heroes, zapping 100 MB+ files and evicting unwanted tokens. Think retro hacks with a modern twist.

 
 
aws.amazon.com aws.amazon.com
 
Effectively implementing resource control policies in a multi-account environment
 
 

Resource control policies (RCPs) allow you to wrangle AWS access with ease, setting organization-wide guardrails that trim down policy chaos. They work wonders for broad restrictions, but for the nitty-gritty? Stick with resource and identity-based policies.

 
 
dzone.com dzone.com
 
Avoid Cross-Shard Data Movement in Distributed Databases
 
 

Cross-shard joins? Total performance assassins. Instead, unleash strategies like reference table replication or collocation to outsmart needless data shuffle. Stay savvy on those trade-offs!

 
 
medium.com medium.com
 
The Sociotechnical Reality Engineer
 
 

Forget "Site Reliability Engineering"; try Sociotechnical Reality Engineering on for size. It's the art of navigating the tangled web where software crashes into the chaos of human interactions. SREs aren't babysitters for code; they're the brave souls wrangling glitches on a quest through barcode disasters and forgotten search index escapades.

 
 
 
⚙️ Tools, Apps & Software
 
github.com github.com
 
GoogleCloudPlatform/khi
 
 

A transformative log viewer for Kubernetes

 
 
github.com github.com
 
sourcebot-dev/sourcebot
 
 

Blazingly fast code search. Deployed as a single Docker image. Search million+ lines of code in your , GitLab, and Gitea repositories.

 
 
github.com github.com
 
hcengineering/platform
 
 

Huly — All-in-One Project Management Platform (alternative to Linear, Jira, Slack, Notion, Motion)

 
 
github.com github.com
 
charlax/professional-programming
 
 

A collection of learning resources for curious software engineers

 
 
github.com github.com
 
eduardoagarcia/shef
 
 

Shef is a powerful CLI framework for cooking up advanced shell recipes.

 
 
github.com github.com
 
uatec/teleform
 
 

Local development for AWS Lambda's and Terraform

 
 
github.com github.com
 
automation-ai-labs/mcp-link
 
 

Seamlessly Integrate Any API with AI Agents

 
 

👉 Spread the word and help developers find and follow your Open Source project by promoting it on FAUN. Get in touch for more information.

 
🤔 Did you know?
 
 
Did you know that Shopify runs on a massive monolith written in Ruby on Rails—nicknamed “The Rails Monolith”? While many companies move toward microservices, Shopify doubled down on monolith architecture for core services, arguing it simplifies development, testing, and deployment at scale. To handle its huge global traffic, Shopify supplements the monolith with carefully isolated services written in Go, and uses Kubernetes for orchestration. This hybrid approach lets them handle billions in e-commerce transactions every year—especially during massive spikes like Black Friday.
 
 
😂 Meme of the week
 
 
 
 
🗣️ Quote of the week
 
 
"It always takes longer than you expect, even when you take into account Hofstadter's Law." ~ The Hofstadter Law
 
 
❤️ Thanks for reading
 
 
👉 Never miss an issue
Join FAUN Developer Community and subscribe to our newsletter here.

👋 Keep in touch and follow us on social media:
- 💼LinkedIn
- 📝Medium
- 🐦Twitter
- 👥Facebook
- 📰Reddit
- 📸Instagram

👌 Was this newsletter helpful?
We'd really appreciate it if you could share it with your friends! You can also donate to help us keep this newsletter going.

ℹ️ Have a question or feedback?
Feel free to reach out to us at community@faun.dev. We'd love to hear from you!

🤩 Want to sponsor our newsletter?
Reach out to us at sponsors@faun.dev and we'll get back to you as soon as possible.