Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Gemini Models are Misunderstood

Recently, Google released a couple new Gemini models. They were Gemini 3.6 Flash, 3.5 Flash Lite, and 3.5 Flash Cyber. Many people on the internet roasted Gemini Flash and Flash Lite for their less-than-frontier performance. This makes sense when you consider that OpenAI and Anthropic have been sparring back and forth for first place for quite a while but Gemini almost never gets that first place position. After all, this is Google we are talking about.

GitKraken Desktop: Go Deep on One Repo, With an Agent Riding Along

Before agents were part of the picture, GitKraken Desktop had one job: make Git make sense. Visualize the commit graph, show branches and remotes clearly, and let a developer feel confident hitting merge. That job has not changed. What changed in GitKraken Desktop 12 is what sits on top of it.

How to prove the business value of AI

Proving AI business value means sorting every AI investment into one of four buckets - revenue growth, cost avoidance, productivity gain, or risk reduction - then tracking spend at the unit level (per feature, customer, or team) so each dollar has a traceable return. Most companies measure one bucket well and leave the rest unattributed. That gap is why the same AI deployment can look like a $40M win and a public reversal at the same time.

Updating Reference Data with Rollbacks Using Harness Database DevOps | Harness Blog

Versioning reference data in Git with Liquibase OSS changelogs enables consistent, auditable, and automated deployments across environments. Using loadUpdateData with versioned CSV files provides fast, reliable rollbacks and reduces production risk. Modern applications do not just depend on schema changes. They also depend on data that powers the application itself.

Golden paths: how to ship securely without slowing developers

The secure path and the easy path should be the same path. Ralph McTeggart (Principal Engineer), Alex Franzmann (Customer Onboarding Team Lead), and Claire McDyre (Product Manager) at Cloudsmith lay out how platform teams can deliver supply chain security as a capability rather than a checklist. The argument runs from first principles: make a private registry the default, automate policy enforcement at the global level, and extend that same logic to compliance – so SBOM generation happens in the pipeline, not as a developer's manual task.

Supply chain hit: the first hours are about "am I affected?"

The first two to three hours after a supply chain compromise aren't about remediation – they're about figuring out whether you're affected at all. That requires two things: a feed of compromised packages you can cross-reference against what you're using, and an audit trail showing which developers pulled which packages and when. Teams that can answer "are we affected?" in 30 minutes have that data pre-built into their platform. Teams that don't are still piecing it together at hour three. Protect your supply chain with Cloudsmith.

Public mTLS client-auth certificates stop renewing in October

Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.