Fix GitHub CLI NO_PUBKEY / EXPKEYSIG Errors After the September 2026 Key Rotation If apt update, dnf update gh, or yum update gh suddenly started failing on a Linux box that has the GitHub CLI installed from GitHub's own package repository, you're not imagining it. The PGP key GitHub CLI used to sign its Linux packages …

AWS Lambda SnapStart for Container Images: Setup Guide and Cost Tradeoffs If you package a Lambda function as a container image and it runs Java, Python, or .NET, you have probably eaten cold starts of several seconds every time traffic scaled up. SnapStart was the fix for that on .zip functions since 2022, but until …

Docker CopyEscape (CVE-2026-17106): Fix the docker cp Host File Overwrite Vulnerability If you or your CI pipeline ever run docker cp against a container you didn't fully trust — a scanning sidecar, a customer-submitted build, an AI-agent sandbox — you need to check your Docker version right now. CVE-2026-17106, …

Managed Instance on Azure App Service Is GA: Migrate Legacy .NET Framework Apps Without Rewriting Them If you've ever tried to move a 15-year-old ASP.NET app to Azure App Service and hit a wall — a COM component that needs registering, an MSI installer the app depends on, hardcoded C:\ paths, or a registry key some …

Find Source IP Addresses Connecting to AWS Transfer Family SFTP with CloudWatch Logs Insights If your AWS Transfer Family SFTP server has CloudWatch logging turned on, every connection, login attempt, and file operation is already sitting in a log group — you just need the right query to pull the source IPs out of it. …

GitHub Actions' New vulnerability-alerts Permission: Read Dependabot Alerts Without a PAT If you've ever tried to have a GitHub Actions workflow check for open Dependabot alerts — to block a release, gate a merge, or post a Slack summary — you've probably hit a wall: the default GITHUB_TOKEN can't read them. The …

AKS Hyperscale Control Plane (Preview): Setup Guide and When You Actually Need It If you've ever run a large AKS cluster and watched kubectl requests start queuing during a traffic spike, or seen pods sit Pending while the scheduler falls behind, the cause is usually invisible: the managed control plane itself, not …

Terraform 1.16: Import Blocks in Modules, JSON Output, and Action Failure Modes Explained HashiCorp shipped Terraform 1.16.0 on August 26, 2026, and buried in the changelog is a fix for one of the most-requested Terraform limitations of the last few years: import blocks can finally target resources declared inside a …

Kubernetes 1.37 HPA Scale-to-Zero: Setup Guide and Cold-Start Gotchas Kubernetes v1.37 ("Garhwal") shipped on August 26, 2026, and the change most teams will actually feel is quiet: HorizontalPodAutoscaler scale-to-zero graduated from Alpha to Beta, and it's enabled by default. If you're running batch consumers, queue …

GitHub Actions Self-Hosted Runners: Fix Your Version Before the September 25 Enforcement If your CI/CD pipeline runs on self-hosted GitHub Actions runners, GitHub has already started intermittently blocking outdated ones. Brownouts began August 24, 2026 on github.com and GitHub Enterprise Cloud, and they escalate on a …