Hey {{first name | there}}. Imagine shipping AI-generated code that gets hardened upstream before an attacker ever sees it, governed by agents that know exactly where their authority ends. Most of the pieces for that landed this week.

In today’s roundup:

  • The Linux Foundation rallies the industry behind Akrites to fix open source flaws before AI finds them

  • Argo CD 3.5 hardens the GitOps supply chain with internal mTLS and signed commits

  • Vercel, Snyk, and Cloudflare race to build and fence in AI agents at the same time

  • Engineering survives the AI jobs apocalypse while the token bill quietly comes due

  • Kubernetes teams will automate the deploy but still won't let a machine touch the CPU limit

You will also find upcoming events, a podcast worth listening to, and curated job opportunities across the ecosystem.

Let’s dive in 👇🏼

💡TOGETHER WITH ATLASSIAN

Cursor + Jira

The biggest engineering bottleneck today isn’t code. Before AI can generate anything useful, it needs the right context. And most of that doesn’t live in code.

For most teams, context is scattered across Jira, Confluence, and other tools. And that’s why teams are building custom AI workflows just to keep up. 

Atlassian saw this happening and integrated Cursor in Jira

You can now assign any Jira work item directly to a Cursor cloud agent. It gets to work, and the PR it opens is linked back to Jira automatically. 

It works the other way too: from Cursor in your IDE or terminal, the Teamwork Graph CLI keeps Jira work items and Confluence docs up to date. No app switching.

It ships with every paid Jira subscription.

Thanks to Atlassian for your partnership and sponsoring this newsletter. #Ad #AtlassianPartner

📰TOP PICKS:

Akrites: The Latest Attempt to Protect Open-Source From AI Attacks Has Arrived
The Linux Foundation has launched Akrites to coordinate vulnerability reporting and fixes for critical open source projects. It aims to help maintainers stay ahead as AI dramatically speeds up vulnerability discovery.

Argo CD 3.5 Tightens Supply Chain Security with Internal mTLS and Source Integrity
The latest Argo CD release candidate introduces internal mTLS, Git commit signature verification, and new UI improvements for managing ApplicationSets.

Vercel debuts Eve open source agent framework, tries to fix shadow AI with Passport
Vercel has introduced Eve, an open source framework for building and deploying AI agents with TypeScript and Markdown, alongside new enterprise controls for managing AI-built applications.

Snyk Introduces Evo Agentic Development Security
Snyk's new Evo ADS adds real-time security controls for AI agents, helping organizations govern agent behavior and secure AI-generated code from the start.

Cloudflare Ships Agent Skills for Zero Trust Deployment and Migration
Cloudflare's new open source skill library helps AI agents plan, deploy, and migrate Zero Trust environments while keeping security teams in control of changes. 

Microsoft Brings the Azure SDK for Rust to General Availability
Microsoft has released the Azure SDK for Rust as generally available, giving developers a stable, production-ready way to build Rust applications on Azure.

CData Launches Connect AI Developer Edition, Python SDK, and CLI
CData has introduced a free developer edition, an open source Python SDK, and a CLI to help developers securely connect AI applications to enterprise data

Three FOSS projects for developers, procrastinators, and media wranglers
From a VS Code extension that estimates AI emissions to a local first productivity app and a Kubernetes native media store, here are three open source projects worth adding to your radar.

Companies are scrambling to stop employees from maxing out AI budgets with small tasks
After encouraging widespread AI adoption, some companies are now tightening usage as rising token costs force closer scrutiny of AI's return on investment.

AI was supposed to kill engineering jobs, but new data suggests they’re the most resilient
Despite the rapid adoption of AI coding tools, SignalFire's hiring data suggests engineering remains one of the strongest hiring areas across the tech industry.

Kubernetes teams trust automation to ship code but not to touch CPU, and AI is raising the stakes
New research suggests teams are comfortable automating deployments but still prefer human oversight for CPU and memory optimization, especially as AI workloads grow.

🗓️ UPCOMING EVENTS

Mark your calendars!

AI & Agent Systems

  • MCP Connect - Reinventing Travel in the AI Era with Evaneos, Alpic & Jinko (2 July 2026, Paris, France): MCP, AI agents, and AI-powered travel experiences. Register here.

Cloud & Platform Engineering

  • Are You Measuring the Right Things? SLOs, Toil, and the Metrics That Matter (2 July 2026, Sydney, Australia): SRE, service level objectives, and engineering metrics. Register here.

  • Kubernetes Community Days Lima 2026 (18 July 2026, Lima, Peru): Kubernetes, cloud native technologies, and the CNCF community. Register here.

  • Google Cloud Next Extended Bangkok (19 July 2026, Bangkok, Thailand): Google Cloud, infrastructure, and cloud innovation. Register here.

Software Engineering

  • React Nexus (2-3 July 2026, Bengaluru, India): React, frontend engineering, and modern web development. Register here.

  • WeAreDevelopers World Congress (8-10 July 2026, Berlin, Germany): Software engineering, AI, cloud, and emerging developer technologies. Register here.

  • Droidcon Orlando (16 - 17 July 2026, Orlando, FL): Android development, Kotlin, and the Android ecosystem. Register here.

  • FlutterCon USA (16 - 17 July 2026, Orlando, FL): Flutter, Dart, and cross-platform app development. Register here.

Developer Communities & Open Source

  • Develop Conference (14-16 July 2026, Brighton, England): Game development, industry insights, and creative technologies. Register here.

  • DevRelCon (17-18 July 2026, Brooklyn, New York City, NY): Developer relations, community building, and advocacy. Register here.

  • EuroSciPy 2026 (18-23 July 2026, Kraków, Poland): Scientific Python, data science, and computational research. Register here.

  • Open Source Days (19 July 2026, Los Angeles, CA + Virtual): Open source projects, collaboration, and developer communities. Register here.

💡PRESENTED BY WISPR FLOW

10x the context. Half the time.

Speak your prompts into ChatGPT or Claude and get detailed, paste-ready input that actually gives you useful output. Wispr Flow captures what you'd cut when typing. Free on Mac, Windows, and iPhone.

HOW DID WE DO?

Login or Subscribe to participate

Keep Reading