Dora Noda
Software Engineer
2313 posts · View all authors
Your MCP Server Doesn't Know Who's Deploying. WorkOS's OAuth 2.1 Stack Fixes That
Most MCP servers still trust a bearer token in an env var. WorkOS's May 2026 OAuth 2.1 stack — CIMD, Resource Indicators, and on-behalf-of token exchange — finally answers the question a deploy-authority MCP server can't skip: which agent, acting for whom, just asked to ship to production?
Zeabur's $5 'No Sleep' Credit vs a €4.35 Hetzner Box: What You're Actually Paying For
Zeabur's $5/month Dev plan sells freedom from cold-start sleep. A line-by-line recompute of what that $5 credit actually covers on Zeabur's metered RAM pricing versus a €4.35 Hetzner CX22 that was never billed by the minute at all.
Blacksmith and Depot Colocate Docker Layer Cache on NVMe: What 40x Faster CI Builds Mean for Self-Hosted Build Pipelines
Blacksmith and Depot claim 20x-40x faster Docker builds by moving the layer cache onto NVMe disk colocated with the build machine. Here's the actual mechanism, and what it means for a self-hosted PaaS that already owns its build hardware.
Canine's MCP Server Can Deploy — Coolify's Still Can't: A Tool-by-Tool Audit
Canine's built-in MCP server ships one write tool — DeployProject — where Coolify's stays fully read-only. Here's the exact tool list across Canine, Coolify, and Dokploy, and what Canine's Kubernetes-native architecture actually buys over each.
CAPMOX Is Maturing Fast: What a Real Cluster API Provider for Proxmox Means Beyond Hetzner-Only Node Pools
IONOS's CAPMOX shipped six releases in fifteen months of active development — here's what the changelog actually shows, how it provisions a node, who else is building the same thing, and what a second CAPI provider really costs a Hetzner-only fleet.
CNCF's 19.9 Million Developers, +28% in Six Months: The Math That Says It's Not New Growth
CNCF says the cloud native developer population jumped 28% in six months to 19.9 million, with 7.3 million now AI developers. The arithmetic says that's not a wave of new developers — it's existing developers crossing a line, and it changes how fast a platform's agent golden path has to ship.
Cordyceps: How a Free GitHub Account Hijacked CI/CD at Microsoft, Google, and Cloudflare
A researcher with a free GitHub account and no org access could hijack CI/CD at Microsoft, Google, Cloudflare, Apache, and the Python Software Foundation. Here's what the Cordyceps vulnerability class actually does, and the audit checklist to run against your own build pipeline.
Firecracker MicroVMs for Multi-Tenant CI: What Per-Build Kernel Isolation Actually Costs
A shared-kernel build pod runs a tenant's arbitrary install scripts and Dockerfiles next to every other tenant's. Firecracker microVMs can close that gap per build — real numbers from BuildBuddy's production fleet included — but per-step isolation, which nobody has actually shipped, is a different and much worse trade.
The Postgres Backup Tool Anthropic and OpenAI Both Backed in the Same Month
Databasus out-starred pgBackRest, WAL-G, and Barman in 14 months, landed in the official PostgreSQL Software Catalogue, and got backed by both Anthropic and OpenAI's open-source programs in the same month. Here's what it actually is, and whether it belongs next to a Kubernetes-native Postgres fleet.