Kubernetes Image Promoter Quietly Rewritten: 20% Faster, 40% Smaller Codebase
The Kubernetes image promoter (kpromo) underwent an invisible rewrite that deleted 20% of the codebase while dramatically improving speed and reliability.
Tag: supply-chain
GitHub Actions: macos-26 runners go GA—what it unlocks for CI, signing, and mobile build pipelines
GitHub is rolling out macos-26 GitHub-hosted runners. Here’s why it matters for iOS/macOS builds, code signing, supply-chain controls, and reproducibility in CI.
Running Harbor in Production on Kubernetes: HA, Storage, and Supply-Chain Guardrails
Harbor is easy to install, hard to productionize. Here’s a practical checklist for HA, storage, signing/scanning, and day-2 ops when Harbor becomes your cluster’s artifact backbone.
OpenTofu 1.11.5 and the rise of ‘security-first IaC’ in platform engineering
OpenTofu 1.11.5 ships with upstream Go security fixes and continues a trend: infrastructure-as-code tools are becoming security products as much as automation products. Here’s what that means for platform teams.
Kubernetes patch train: what the v1.35.1/v1.34.4/v1.33.8/v1.32.12 drop says about upgrade hygiene
Kubernetes shipped same-day patch releases across four supported branches plus a new v1.36.0 alpha. Here’s how to turn ‘release day’ into a repeatable upgrade workflow: risk triage, conformance gates, and rollback-ready rollouts.
Argo CD 3.3.0: what changes when GitOps gets more “platform-native”
Argo CD 3.3.0 ships new actions and upgrade considerations that matter most to self-managing installations—where the GitOps tool is also managed by GitOps.