Link Sharing

Link Sharing

55250 bookmarks
Newest
Short Family's Ultimate Holiday Movie Marathon: 29 Holiday Films
Short Family's Ultimate Holiday Movie Marathon: 29 Holiday Films

Short Family's Ultimate Holiday Movie Marathon: 29 Holiday Films

https://chrisshort.net/short-familys-ultimate-holiday-movie-marathon-29-holiday-films/

From classic comedies to animated adventures, this is our family's top 29 holiday movies. These films bring joy, laughter, and holiday cheer to every season.

via Chris Short https://chrisshort.net/

December 10, 2025

·chrisshort.net·
Short Family's Ultimate Holiday Movie Marathon: 29 Holiday Films
DevOps & AI Toolkit - DevOps Q&A - December 11 - https://www.youtube.com/watch?v=5VXRQFwy3ko
DevOps & AI Toolkit - DevOps Q&A - December 11 - https://www.youtube.com/watch?v=5VXRQFwy3ko

DevOps Q&A - December 11

In this AMA livestream, Viktor and Scott dive into a wide range of DevOps and platform engineering topics submitted by viewers.

▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ BlueSky: https://vfarcic.bsky.social ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/

▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox

via YouTube https://www.youtube.com/watch?v=5VXRQFwy3ko

·youtube.com·
DevOps & AI Toolkit - DevOps Q&A - December 11 - https://www.youtube.com/watch?v=5VXRQFwy3ko
DevOps & AI Toolkit - Top 10 GitHub Project Setup Tricks You MUST Use in 2025! - https://www.youtube.com/watch?v=gYl3moYa4iI
DevOps & AI Toolkit - Top 10 GitHub Project Setup Tricks You MUST Use in 2025! - https://www.youtube.com/watch?v=gYl3moYa4iI

Top 10 GitHub Project Setup Tricks You MUST Use in 2025!

Tired of chaotic repositories with vague bug reports, unclear pull requests, and outdated dependencies? This video shows you how to transform any GitHub repository into a professionally organized project using built-in tools most developers don't even know exist. Learn how to set up issue templates that force useful information, pull request templates that make code review actually possible, automated dependency updates with Renovate, security scanning with OpenSSF Scorecard, automatic PR labeling, stale issue management, and all the essential governance files that make collaboration smooth. Whether you're maintaining open source projects, building internal tools, or managing commercial software, these GitHub features will save you hours of frustration.

The best part? You don't have to spend hours setting this up manually. The video demonstrates how to automate the entire process in minutes using the DevOps AI Toolkit's Project Setup MCP tool with Claude Code. See real examples from the DevOps AI Toolkit repository itself, including how coding agents can automatically fill out PR templates, how automated workflows handle dependencies and security scanning, and how proper documentation and governance files prevent confusion and establish clear processes for contributors. By the end, you'll know exactly how to create a professional repository that works for both human contributors and AI coding agents.

▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ Sponsor: JFrog Fly 🔗 https://jfrog.com/fly_viktor ▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬

GitHubTemplates #DevOpsAutomation #ProjectManagement

Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join

▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/development/top-10-github-project-setup-tricks-you-must-use-in-2025 🔗 DevOps AI Toolkit: https://github.com/vfarcic/dot-ai 🎬 How I Tamed Chaotic AI Coding with Simple Workflow Commands: https://youtu.be/LUFJuj1yIik

▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).

▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ BlueSky: https://vfarcic.bsky.social ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/

▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox

▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 GitHub Setup 02:03 JFrog Fly (sponsor) 03:13 GitHub Issue Templates 08:13 Pull Request Templates 12:26 Code Owners and Auto-Assignment 15:25 Security Scanning and Badges 16:50 Automated Dependency Updates 21:12 Essential Documentation Files 24:17 DevOps AI Toolkit

via YouTube https://www.youtube.com/watch?v=gYl3moYa4iI

·youtube.com·
DevOps & AI Toolkit - Top 10 GitHub Project Setup Tricks You MUST Use in 2025! - https://www.youtube.com/watch?v=gYl3moYa4iI
IDEsaster: A Novel Vulnerability Class in AI IDEs
IDEsaster: A Novel Vulnerability Class in AI IDEs
Don’t want to miss my next post? Follow me on X or connect on LinkedIn Summary We all know AI reshaped how we build software. Autocomplete evolved into AI agents that can autonomously act on behalf of the user. As vendors compete on “productivity” they add additional capabilities that significantly affect the security posture of their products. Around 6 months ago, I decided to dig into the world of AI IDEs and coding assistants because they were gaining popularity and it was clear they are here to stay. The first vulnerabilities I found were focused on narrow components - a vulnerable tool, writeable agent configuration or writeable MCP configuration that leads to anything from data exfiltration to remote code execution. Those issues are serious, but they only affect a single application at a time (and were publicly disclosed multiple times).
·maccarita.com·
IDEsaster: A Novel Vulnerability Class in AI IDEs
Flatpak Support in Brewfiles | Bluefin
Flatpak Support in Brewfiles | Bluefin
Flatpak support in Brewfiles is here! You can now manage your Flatpak applications alongside your Homebrew formulae, casks, and other dependencies in a single Brewfile. This is thanks to the amazing work by Ahmed Adan (Donate), who worked with upstream to land this feature.
·docs.projectbluefin.io·
Flatpak Support in Brewfiles | Bluefin
Last Week in Kubernetes Development - Week Ending November 30 2025
Last Week in Kubernetes Development - Week Ending November 30 2025

Week Ending November 30, 2025

https://lwkd.info/2025/20251203

Developer News

CVE-2025-13281: the in-tree Portworxs CSI driver exposes a security hole in the kube-controller-manager, which was patched for other storage drivers but not for Portworx. Vulnerable users are ones who still haven’t migrated to the external CSI StorageClass.

SIG-Scheduling has published their technical plan for Kubernetes 1.36.

Wei Fu was nominated as SIG-Etcd Tech Lead.

Release Schedule

Next Deadline: Release Highlights Complete, Dec. 9

We are in Code Freeze. Release highlight items need to be finished and fully edited by next week. Also, please be on the alert for any blocking test failures, and get them debugged quickly so we can release on time.

Friday is the cherry-pick deadline for the next set of patch releases.

Other Merges

Allow relaxed Ingress defaultBackend service names with RelaxedServiceNameValidation

Eliminate spurious warning log messages about enabled alpha APIs while starting API server

Prevent spurious namespace-not-found errors in admission

Version Updates

Go to 1.24.10 and distroless iptables for 1.32

Subprojects and Dependency Updates

cri-o v1.34.3 adds support for the external crio-credential-provider plugin, fixes CVE-2025-58183 by updating github.com/vbatts/tar-split to v0.12.2, introduces a new housekeeping option for the irq-load-balancing.crio.io annotation (surfacing housekeeping CPUs via OPENSHIFT_HOUSEKEEPING_CPUS and adjusting IRQ affinity behaviour), and refreshes core dependencies including the Kubernetes 0.34.1 stack and new Podman image/storage libraries.

cri-o v1.33.7 and v1.32.11 are focused patch releases that backport the CVE-2025-58183 tar-split update across the 1.33 and 1.32 lines, with v1.32.11 additionally fixing network cleanup failures when the network namespace path is empty on server teardown.

kops v1.35.0-alpha.1 advances the 1.35 line with etcd 3.5.23/3.5.24 updates, containerd v2.1.5, refreshed CNI plugin sources, AWS Karpenter v1.8.1 plus configurable feature gates, expanded scale and GCE/Azure testing, initial Ubuntu 25.10 support, tighter AWS IAM permissions, and deeper ClusterAPI integration including new toolbox commands and CAPI-oriented nodeup refactors.

cluster-autoscaler 1.34.2, 1.33.3, and 1.32.5 align the 1.34, 1.33 and 1.32 branches with common fixes: more robust proactive scale-up handling for scheduling-gated pods, a SimulateNodeRemoval panic fix for missing node info, Azure LTS test updates and refreshed static SKU lists, CI/lint cleanups, and Kubernetes dependency bumps to v1.34.2, v1.33.6, and v1.32.10 respectively.

cluster-api v1.12.0-rc.1 continues the v1.12 line toward GA with in-place update support for KCP and MachineDeployments, chained multi-minor Kubernetes upgrades for managed topologies, new InPlaceUpdates, MachineTaintPropagation, and ReconcilerRateLimiting feature gates, MachineHealthCheck condition-based health checks, plus a round of bugfixes across webhooks, e2e tests, runtime SDK, and condition handling on top of Go 1.24 and Kubernetes 0.34.x library bumps.

cluster-api-provider-vsphere v1.15.0-rc.0 tracks CAPI v1.12 and Kubernetes v1.35/cloud-provider-vsphere v1.35, introduces a dedicated CAPV ServiceAccount, and adds govmomi flags to tune CPU and memory shares, reservations, and limits, while also updating etcd/Kubernetes dependencies, bumping CPI/autoscaler versions, and hardening tests and CI (including network debug improvements and flake-focused timeouts).

prometheus v3.8.0 is the first release to mark Native Histograms as a stable opt-in feature via the new scrape_native_histogram config knob, updates Remote Write v2 to the 2.0-rc.4 spec, adds unified AWS service discovery (EC2, Lightsail, ECS), introduces OAuth2 JWT-bearer grant support, extends promtool with Remote Write 2.0 pushes, and delivers a broad set of PromQL, TSDB, and UI performance fixes (including faster large alerts/rules pages and improved NHCB handling).

Shoutouts

Petr Mullar – Shoutout for organizing a meeting to support new contributors in Prow, gathering ideas to improve onboarding and reduce entry barriers for newcomers.

via Last Week in Kubernetes Development https://lwkd.info/

December 03, 2025 at 05:00PM

·lwkd.info·
Last Week in Kubernetes Development - Week Ending November 30 2025
Will Agentic AI Pay Off? Cybersecurity Shifts and EU Cloud Pressure | TSG Ep. 973
Will Agentic AI Pay Off? Cybersecurity Shifts and EU Cloud Pressure | TSG Ep. 973

Will Agentic AI Pay Off? Cybersecurity Shifts and EU Cloud Pressure | TSG Ep. 973

https://chrisshort.net/video/techstrong-gang-ep973/

The gang then looks at how AI is about to transform cybersecurity before examining why the European Union is investigating Amazon Web Services and Microsoft.

via Chris Short https://chrisshort.net/

November 24, 2025

·chrisshort.net·
Will Agentic AI Pay Off? Cybersecurity Shifts and EU Cloud Pressure | TSG Ep. 973