Insights
Practical notes on Kubernetes, cloud security, and AI governance for teams in government and regulated industries. Every article links to its sources.
npm trusted publishing changed this fall: what to check in your release pipelines
Between September 3 and October 2, 2026, GitHub added multiple configurations, staging by default, an opt-in dist-tag permission, and 48-hour expiry to npm trusted publishing. What changed and what to check.
Lambda deprecates Python 3.10 and .NET 8 this fall: what changes and how to upgrade
AWS Lambda deprecated the Python 3.10 runtime on October 31, 2026, and .NET 8 follows on November 10. What deprecation changes, the 2027 blocking dates, and how to find and upgrade affected functions.
FedRAMP stops new Rev5 applications on June 11, 2027: planning the move to 20x
FedRAMP's FY27 plan confirms that new Rev5 applications end on June 11, 2027 and that the 2026 rules become mandatory on January 1, 2027. The dates, the 20x classes, and what providers and agencies should do now.
Kubernetes 1.37 turns on HPA scale to zero by default: what platform teams should check
Kubernetes 1.37 makes HorizontalPodAutoscaler scale to zero a Beta feature that is on by default, and EKS now offers 1.37. Which workloads qualify, how it behaves, and what to check before you rely on it.
Amazon Bedrock model retirements this fall: the dates, the notice rules, and what to check
Claude Sonnet 4 reaches end of life on Amazon Bedrock on October 14, 2026, and more models follow through April 2027. The dates, what the Legacy state restricts, and how to find affected workloads.
NIST IR 8587 is final: protecting identity tokens and signing keys in the cloud
On September 15, 2026, NIST announced final NIST and CISA guidance on protecting identity and access tokens from forgery, theft, and misuse. What it asks of cloud providers and customers, and where to start.
GitHub Actions in fall 2026: six dated changes to check in your CI pipelines
Between September 23 and November 19, 2026, GitHub removes Node 20, enforces runner versions, expires run history, retires macOS 14, and moves ubuntu-latest. What to check and when.
Amazon DevOps Guru ends support on September 30, 2027: what to move and when
AWS announced on September 29, 2026 that Amazon DevOps Guru closes to new customers on October 29, 2026 and ends support on September 30, 2027. What stops working and how to plan the move.
Kubernetes 1.34 reaches end of life on October 27: an upgrade plan for EKS teams
Upstream support for Kubernetes 1.34 ends on October 27, 2026, and Amazon EKS now offers 1.37. What the dates mean and what to check before each upgrade step.
Cal-Secure 2.0: what it means for agency platform teams
California's new cybersecurity roadmap moves from a compliance checklist to a risk-based strategy. Four things platform teams should do now.
Buying generative AI in California government: what SAM 4986.9 requires
State agencies must assess risk before awarding a GenAI contract, and vendors must disclose when they use it. A plain-language guide for both sides.
Facing one of these changes?
Tell us where you are and we’ll suggest a practical next step.