In this issue, April 21, 2026 View it in your browser.

Gemma 4, Agent Code Review, Graph Neural Networks, k8s & Secure LLMs, Observability, S3 Files, C++26, Kernel Vulnerabilities, Spring Boot 4, Speed at Scale, Local-First Inference, Code Mode MCP, eBay Velocity, Platform as a Product

QCon AI Boston (June 1-2): The evaluation frameworks Netflix uses to measure recommendation impact.

Mallika Rao, Engineering Leader @Netflix, shares how her team built the evaluation frameworks behind their adaptive recommendation engine, from candidate generation to metrics that measure real business impact, not just offline model performance. See the program.

 

Sponsored by Promptfoo

Inside MCP: A Protocol for AI Integration - Sponsored by Promptfoo

Inside MCP: A Protocol for AI Integration

The Model Context Protocol (MCP) defines a standard way for AI systems to interact with tools, data, and services. Explore its architecture—hosts, clients, and servers—and how it enables structured, secure integrations between AI models and external systems. Learn More.

https://res.infoq.com/podcasts/help-avoid-trivy-compromise/en/smallimage/the-infoq-podcast-logo-thumbnail-1775549272964.jpg

How SBOMs and Engineering Discipline Can Help You Avoid Trivy’s Compromise

Viktor Peterson, part of the CISA task force working on SBOM blueprints and co-founder of sbomify, explores the shifting landscape of software supply chain security as the EU's Cyber Resilience Act (CRA) comes into force, a "GDPR moment" for the industry. (Podcast)

TOP AI, ML & Data Engineering NEWS HEADLINES

  1. Google’s Aletheia Advances the State of the Art of Fully Autonomous Agentic Math Research

  2. Anthropic Introduces Agent-Based Code Review for Claude Code

  3. Google’s TurboQuant Compression May Support Faster Inference, Same Accuracy on Less Capable Hardware

  4. Anthropic Paper Examines Behavioral Impact of Emotion-Like Mechanisms in LLMs

  5. Anthropic Releases Claude Mythos Preview with Cybersecurity Capabilities but Withholds Public Access

Lakehouse Tower of Babel: Handling Identifier Resolution Rules Across Database Engines

Lakehouse architectures enable multiple engines to operate on shared data using open table formats such as Apache Iceberg. However, differences in SQL identifier resolution and catalog naming rules create interoperability failures. This article examines these behaviors and explains why enforcing consistent naming conventions and cross-engine validation is critical. (Article)

Reimagining Platform Engagement with Graph Neural Networks

Mariia Bulycheva discusses the transition from classic deep learning to GNNs for Zalando's landing page. She explains the complexities of converting user logs into heterogeneous graphs, the "message passing" training process, and the technical pitfalls of graph data leakage. She shares how a hybrid architecture solved inference latency, delivering contextual embeddings to a downstream model. (Presentation with transcript included)

Sponsored by Spacelift

Infrastructure as Code Is an Architecture Problem - Sponsored by Spacelift

Infrastructure as Code Is an Architecture Problem

Infrastructure as Code (IaC) has become the gold standard to define, version, and execute infrastructure. At scale, it becomes an architectural challenge: structuring modules, enforcing policy, and enabling safe change. IaCConf 2026 explores IaC as system design, with patterns and platform strategies that go far beyond provisioning. May 14th, 2026 - Save Your Seat.

TOP DevOps NEWS HEADLINES

  1. Pulumi Adds Full Bun Runtime Support

  2. CNCF Warns Kubernetes Alone Is Not Enough to Secure LLM Workloads

  3. OpenTelemetry Declarative Configuration Reaches Stability Milestone

  4. New Rowhammer Attacks on NVIDIA GPUs Enable Full System Takeover

  5. Airbnb Migrates High-Volume Metrics Pipeline to OpenTelemetry

Beyond One-Click: Designing an Enterprise-Grade Observability Extension for Docker

Docker Extensions boost developer speed but create a "visibility gap" by isolating telemetry. To meet enterprise needs, extensions must act as bridges to centralized platforms. This article details how to use OpenTelemetry, policy-as-code, and encryption to build secure pipelines. Learn to balance developer productivity with the governance required for scalable, compliant observability. (Article)

TOP Cloud NEWS HEADLINES

  1. AWS Launches Agent Registry in Preview to Govern AI Agent Sprawl Across Enterprises

  2. AWS Introduces S3 Files, Bringing File System Access to S3 Buckets

  3. AWS Launches Sustainability Console with API Access and Scope 1-3 Emissions Reporting

  4. AWS Announces General Availability of DevOps Agent for Automated Incident Investigation

Using AWS Lambda Extensions to Run Post-Response Telemetry Flush

At Lead Bank, synchronous telemetry flushing caused intermittent exporter stalls to become user-facing 504 gateway timeouts. By leveraging AWS Lambda's Extensions API and goroutine chaining in Go, flush work is moved off the response path, returning responses immediately while preserving full observability without telemetry loss. (Article)

Sponsored by Akka

AI Agent Swarm Patterns - Sponsored by Akka

AI Agent Swarm Patterns

Single LLM workflows often break down when faced with complex, multi-step problems that require coordination, context sharing, and parallel reasoning. Learn how AI Agent Swarms use multi-agent architectures to orchestrate sequential, cooperative, and delegative patterns—while addressing context management, parallelism, and state-driven trust in LLM systems. Watch Now.

TOP Development NEWS HEADLINES

  1. C++26: Reflection, Memory Safety, Contracts, and a New Async Model

  2. Cursor 3 Introduces Agent-First Interface, Moving beyond the IDE Model

  3. Claude Code Used to Find Remotely Exploitable Linux Kernel Vulnerability Hidden for 23 Years

  4. Google Opens Gemma 4 Under Apache 2.0 with Multimodal and Agentic Capabilities

From VR to Flat Screens: Bridging the Input and Immersion Gap

Dany Lepage discusses the architectural journey of porting a hit VR title to seven non-VR platforms. He explains how his team solved the challenges of cross-progression, diverse input paradigms, and maintaining release velocity across Steam, iOS, and PlayStation. Beyond the tech, he shares candid lessons on the "product fit" gap when translating immersive social presence to 2D screens. (Presentation with transcript included)

Sponsored by NeuBird AI

Before It Breaks: AI-Driven Azure Incident Response - Sponsored by NeuBird AI

Before It Breaks: AI-Driven Azure Incident Response

When Azure incidents hit, teams still rely on manual triage and war rooms. See how agentic AI changes that. Discover how an AI SRE agent analyzes telemetry in real time, identifies root cause, and delivers (or automates) remediation—helping you reduce MTTR, prevent outages, and scale reliability without adding headcount. On-Demand Webinar - Watch Now.

TOP Java NEWS HEADLINES

  1. Java News Roundup: JDK 27 Release Schedule, Hibernate, LangChain4j, Keycloak, Helidon, Junie CLI

The Spring Team on Spring Framework 7 and Spring Boot 4

InfoQ recently spoke with key members of the Spring team about the significant architectural and functional advancements in Spring Framework 7 and Spring Boot 4. This conversation explores the strategic shift toward core resilience by integrating features such as retry and concurrency throttling directly into the framework, alongside the performance benefits of modularizing auto-configurations. (Article)

TOP Web Development NEWS HEADLINES

  1. Effect v4 Beta: Rewritten Runtime, Smaller Bundles and Unified Package System

Speed at Scale: Optimizing the Largest CX Platform Out There

Matheus Albuquerque shares strategies for optimizing a massive CX platform, moving from React 15 and Webpack 1 to modern standards. He discusses using AST-based codemods for large-scale migrations, implementing differential serving with module/nomodule, and leveraging Preact to shrink footprints. He explains how to balance cutting-edge performance with strict legacy browser constraints. (Presentation with transcript included)

Google Released Gemma 4 with a Focus on Local-First, On-Device AI Inference

With the release of Gemma 4, Google aims to enable local, agentic AI for Android development through a family of models designed to support the entire software lifecycle, from coding to production. (News)

TOP Architecture & Design NEWS HEADLINES

  1. Meta Reports 4x Higher Bug Detection with Just-in-Time Testing

  2. Cloudflare Launches Code Mode MCP Server to Optimize Token Usage for AI Agents

  3. Zendesk Says AI Makes Code Abundant, Shifting the Bottleneck to “Absorption Capacity”

  4. Lyft Scales Global Localization Using AI and Human-in-the-Loop Review

Platform Engineering: Lessons from the Rise and Fall of eBay Velocity

Randy Shoup discusses the "Velocity Initiative," a transformation that doubled engineering productivity and modernized eBay’s DORA metrics. He shares the technical playbook used to scale 4,500 services while explaining why even elite engineering execution can’t save a company hampered by waterfall planning, risk aversion, and a "pathological" culture of fear. (Presentation with transcript included)

TOP Culture & Methods NEWS HEADLINES

  1. Platform as a Product: Delivering Value While Balancing Competing Priorities

Empower Your Developers: How Open Source Dependencies Risk Management Can Unlock Innovation

Celine Pypaert discusses the ubiquitous nature of open-source software and shares a blueprint for securing modern applications. She explains how to prioritize high-risk vulnerabilities using exploitability data, the role of Software Bill of Materials (SBOM), and the importance of bridging the gap between DevOps and Security through clear accountability and automated governance. (Presentation with transcript included)

SPONSORED CONTENT

Latest Sponsored Resources

document Scalable Enterprise Java for the Cloud - Download the eBook