Hey {{first name | there}},

Another week, another wave 🌊

The gap between AI capability and production safety is narrowing fast, and this week shows both sides of that pressure: tighter controls and faster systems emerging at the same time.

In today’s roundup:

You will also find upcoming events, a podcast worth listening to, and curated job opportunities across the ecosystem.

Let’s dive in👇🏼

Every team has someone people naturally turn to.

The engineer who can explain a confusing decision, add useful context to a discussion, or help others make sense of a complicated problem.

Those moments might seem small, but they're often where career growth happens. It's how trust is built. It's how reputations are earned.

That's the role we've always wanted to help more engineers grow into.

The newsletter has been one part of that.

Now we're bringing the same mission to YouTube, with videos covering platform engineering, cloud infrastructure, Kubernetes, AI tooling, and the ideas that shape how modern systems are built and operated.

→ Subscribe:  @EverythingDevOpsHQ

npm v12 Is Coming in July — Here’s What Developers Need to Do Now
npm is removing automatic execution of dependency install scripts by default. The move follows a surge in supply chain attacks and gives teams more control over what code runs during installs.

Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes
Microsoft’s new Azure Container Apps Sandboxes run AI-generated code in fast, hardware-isolated environments with strict security boundaries and no idle cost. It targets safer execution for agent-driven workflows. 

Datadog Leverages AI to Extend Observability Reach Deeper into DevOps Workflows
Datadog is extending its Bits framework to detect and fix issues automatically using AI across its observability platform. The goal is to move from monitoring systems to actively remediating them in real time. 

Elastic Observability Gives SREs a Head Start on Kubernetes Incident Investigations
Elastic has introduced an agentic observability workflow that automatically investigates Kubernetes alerts as soon as they fire, surfacing likely root causes and next steps before SREs even open the incident.

Terraform 1.15 Closes Gap to OpenTofu on Dynamic Sources and Deprecation
Terraform 1.15 introduces variables in module sources, better type handling, and built-in deprecation warnings for variables and outputs, aiming to reduce long-standing workflow friction for platform teams. 

Linux Foundation Announces OpenSharing Project
The Linux Foundation has introduced OpenSharing, a protocol for securely sharing AI models, data, and agent tools across platforms, aiming to reduce fragmentation in the agentic AI ecosystem.

Devs know AI code is riddled with holes, but ship it anyway
A Checkmarx survey finds that most developers believe AI-generated code introduces more vulnerabilities, with many still shipping known security flaws to production under delivery pressure.

Apple gives Mac devs a WSL-ish thing to call their own
Apple’s new container machines run Linux environments inside lightweight VMs on Mac, helping developers bridge the gap between macOS development and Linux production.

Mark your calendars!

Every team has someone people naturally turn to.

The engineer who can explain a confusing decision, add useful context to a discussion, or help others make sense of a complicated problem.

Those moments might seem small, but they're often where career growth happens. It's how trust is built. It's how reputations are earned.

That's the role we've always wanted to help more engineers grow into.

The newsletter has been one part of that.

Now we're bringing the same mission to YouTube, with videos covering platform engineering, cloud infrastructure, Kubernetes, AI tooling, and the ideas that shape how modern systems are built and operated.

→ Subscribe:  @EverythingDevOpsHQ