Kubernetes Dashboard to Headlamp: A Practical Migration Guide
Migrate from Kubernetes Dashboard to Headlamp with this step-by-step guide. Learn about architecture differences, installation methods (Helm/CLI), OIDC auth, and multi-cluster workflows.
Cloud & Security
Cloud infrastructure, DevOps, containers, platform operations, vulnerabilities, defensive guidance, and security advisories.
Building a Custom Metrics Exporter for Kubernetes
Kubernetes exposes CPU and memory, but scaling often depends on application-specific signals like queue depth or latency. This guide explains how to build a custom metrics exporter, package it as a container, and wire it into a cluster so Prometheus and the HorizontalPodAutoscaler can act on real business logic.
Kubernetes v1.37 Sneak Peek: Key Deprecations, Removals, and New Features
Kubernetes v1.37, scheduled for release on August 26, 2026, introduces significant changes including the deprecation of kubectl run’s file flag, the removal of ipvs mode support, and the graduation of the Metrics API to stable. This preview details breaking changes and new capabilities administrators should prepare for.
WordPress 7.0.2 Patch: Critical Security Fixes for SQL Injection and Remote Code Execution
WordPress 7.0.2 is a security release addressing one critical and one high-severity vulnerability. The update fixes a Remote Code Execution flaw in the REST API batch-route and a facilitated SQL injection issue. WordPress.org has enabled forced auto-updates for affected sites.
WordPress 7.0.3 Released with Critical Security Fixes
WordPress 7.0.3 is a security-focused update addressing multiple vulnerabilities, including a pre-auth reflected cross-site scripting (XSS) flaw on the login screen and privilege escalation issues on multisite networks.
WordPress 7.0.4 Patched: Critical Remote Code Execution Vulnerability in Imagick
WordPress 7.0.4 is a critical security release addressing a Remote Code Execution (RCE) flaw in the Imagick library. Authenticated users with Author+ privileges can exploit this vulnerability via malicious file uploads. Immediate updates are recommended for all sites using Ghostscript and Imagick.
GitHub Code Scanning Adds ‘Mitigated’ Dismissal Reason
GitHub introduces a new ‘Mitigated’ dismissal reason for code scanning alerts, allowing teams to document when external controls manage a vulnerability.
GitHub Actions: Windows 11 ARM64 runners now ship with Visual Studio 2026
GitHub’s Windows 11 ARM64 hosted runners now include Visual Studio 2026. This guide explains how to adopt the new image and prepare for the upcoming migration that will switch the default image by September 2026.
GitHub Separates Code Quality from Code Scanning in Actions Paths
GitHub has introduced a dedicated workflow path for GitHub Code Quality, separating it from code scanning in Actions usage reports and run history.
GitHub adds audit log tracking for Code Quality enablement
GitHub Code Quality now emits audit log entries for enablement and configuration changes. This update introduces three specific events—repo.code_quality_enabled, repo.code_quality_disabled, and repo.code_quality_updated—allowing administrators to track who changed settings and when, which is critical for billing visibility regarding active committers.
GitHub Copilot Cloud Agent in Microsoft Teams: Collaborative Coding from Chat
GitHub introduces a cloud agent for Microsoft Teams, enabling collaborative coding sessions, async sandbox work, and compliance controls for enterprise teams.
CodeQL 2.26.3 Adds Vue Modeling, Fixes GitHub Actions Queries, and Removes SelfHostedQuery Module
GitHub released CodeQL 2.26.3, introducing source modeling for Vue.js and improvements to GitHub Actions security queries. A breaking change removes the SelfHostedQuery module due to unreliable runner labels.