Distributed DataFusion: Datadog Open-Sources a Framework for Running One Query Across Many Machines
Datadog open-sourced a framework that runs one Apache DataFusion query across many machines, reporting 10x speedups on long queries versus one node.
Datadog Supply Chain Firewall: Block Malicious npm and pip Packages Before They Install
Datadog's open-source Supply Chain Firewall checks npm, pip, and poetry installs against threat databases and blocks malicious packages before they install.
Guardrails, Not Gates: A Better Framework for Platform Team Policy
CNCF argues platform policies fail as gates. Its framework of validation, mutation, generation, and verification makes developer experience the primary metric.
How Datadog Built an Async-Aware Python Profiler — and Why Traditional Profilers Fail Async Code
Python profilers can't follow asyncio tasks. How Datadog rebuilt task dependency trees and cut overhead over 60% in its async-aware profiler.
Zero-Trust AI Agent Access in Practice: IBM watsonx and HashiCorp Boundary
A HashiCorp proof of concept gives AI agents infrastructure access via Boundary and Vault without exposing credentials, with IBM watsonx doing the reasoning.
Datadog Extends RUM to Shopify and Salesforce — Monitoring Revenue Flows You Don't Control
Datadog RUM now covers Shopify and Salesforce Experience Cloud, so teams can monitor checkout funnels and errors on frontends they can't instrument.
CircleCI's Framework for Testing AI Agents in CI: Contract Tests and Agent Evals
CircleCI's two-layer agent testing in CI: deterministic contract tests as hard gates, plus statistical agent evals against baselines at a slower cadence.
Datadog Tap to Parse: Click a Log Field, Get a Grok Parser — No Regex Required
Datadog Tap to Parse is GA: click a log field and get a generated parsing rule to review, no Grok syntax needed. Where it fits in the log lifecycle.
Datadog Trained a 9B Model for $0.003 Per Alert Investigation — Here's the Architecture
Datadog fine-tuned a 9B model to 87% of its teacher's recall at 5% of the cost, about $0.003 per production alert investigation. The architecture behind it.
Terraform Google Cloud Provider 8.0 Is GA — Three Breaking Changes That Will Affect Your Infrastructure
Terraform's Google Cloud provider 8.0 changes the default load balancer scheme and removes deprecated resources: three breaking changes to plan for.
CircleCI Can Now Run Your GitHub Actions Workflows Without Rewriting Them
CircleCI can now run existing GitHub Actions YAML on its own infrastructure with no rewrite, citing 40% faster builds. Linux-only, in open preview.
Datadog's MCP Server Now Runs Code — and Cuts AI Agent Investigation Costs 73% in the Process
Datadog's MCP Server now runs sandboxed JavaScript for AI agents, cutting input tokens 73% and lifting answer correctness from 74% to 90% across 25 tasks.
How to Build an LSP Plugin for Claude Code: Real-Time Language Server Feedback in the AI Editing Loop
A CircleCI guide covers building LSP plugins for Claude Code that route real-time language server feedback — diagnostics, hover docs, autocomplete — directly into Claude's editing loop. A four-component architecture: server launcher, scoping proxy, plugin config, and integration layer. Benchmark: 31% improvement in test storage configuration on applicable tasks.
Datadog IaC Security Now Accepts Custom Rego Rules — and Can Block PRs That Fail Them
Datadog IaC Security now supports organization-specific custom rules written in Rego, covering Terraform, CloudFormation, Kubernetes manifests, Ansible, Dockerfiles, and GitHub Actions. PR Gates can block merges on policy violations. Configuration lives in code-security.datadog.yaml.
HCP Terraform Now Has Pre-Written AWS and CIS Compliance Policies You Don't Have to Maintain
HCP Terraform launched a native pre-written policy library with AWS Foundational Security Best Practices and CIS Foundations Benchmark policies. Platform teams can enforce them at Advisory or Mandatory level without writing or maintaining Rego/Sentinel. Azure and GCP policies are coming. Currently in public beta.
Kubernetes v1.37 Native Histograms Graduate to Beta — and They're Now On by Default
Kubernetes v1.37 enables Native Histograms by default, graduating from alpha in v1.36. The change replaces classic Prometheus histograms' static buckets with adaptive, lower-cardinality metrics that provide more accurate latency percentiles without manual configuration.
NetFlow Traffic Counts Are Lying to You. Here's How to Fix Them.
Most NetFlow configurations double-count traffic by design — two independent mechanisms create duplicate records, and they often run simultaneously. Datadog's guide covers both root causes and the two complementary fixes that eliminate the noise without losing visibility.
Kubernetes v1.37 Adds Five Standardized Node Conditions for Drain and Maintenance Workflows
Kubernetes v1.37 introduces five new well-known Node conditions — DrainInProgress, Drained, MaintenancePlanned, MaintenanceInProgress, and GracefulNodeShutdownInProgress — replacing the scattered taint/label signals that platform teams currently use to communicate node state during operational events.
Kubernetes v1.37 Gang Scheduling Hits Beta — and Brings a New API for AI/ML Workloads
Kubernetes v1.37 graduates gang scheduling to beta with a new CompositePodGroup API, Workload-Aware Preemption, and standardized building blocks for third-party controller integration. The AI/ML workload angle is the reason this cycle matters.
Datadog Workload Protection Can Now Kill Processes and Isolate Workloads Mid-Attack
Datadog's Workload Protection has added automated and manual response actions — kill offending processes and isolate compromised containers — closing the gap between detection and remediation without a human handoff.
Kubernetes v1.37: Dynamic Resource Allocation Graduates to GA — What Changes for GPU Workloads
Kubernetes v1.37 promotes DRA Extended Resource Support to GA, enabling existing GPU workloads to migrate to Dynamic Resource Allocation without code changes. Device taints and NUMA standardization also reach GA.
India's Regulatory Wave: The 5 Security Controls Every Organization Needs Now
DPDP, SEBI CSCRF, CERT-In, and RBI data localization all demand the same five controls. HashiCorp Vault and Boundary address most of them directly.
The Datadog Loop: Five Stages for Turning Agent Traces Into Verified Improvements
Datadog's five-stage optimization loop — Observe, Hypothesize, Evaluate, Experiment, Ship — gives platform teams a repeatable method for improving AI agents without blind prompt guessing.
JFrog at swampUP 2026: Agents Are Now Supply Chain Actors, Not Just Tools
JFrog unveiled APM repositories, prompt-to-release traceability, and zero-touch remediation at swampUP 2026 — extending supply chain governance to autonomous AI agents.