Your Buildpack Only Checks bun.lockb. Bun Stopped Writing It in 2026.
Bun 1.2 quietly changed its default lockfile from bun.lockb to bun.lock, and it's already broken Bun detection on Railway, Cloudflare Pages, and Netlify. Here's the detection logic that survives the next lockfile change, and why 'build with Bun, run on Node' is the right default for existing projects.
Dokploy Ships Four Buildpack Backends: What Buildpack Plurality Buys a Git-Push Platform Over Picking One
Dokploy runs four separate buildpack backends side by side. A concrete look at what that plurality costs in real bugs, which languages each one actually covers, and whether a self-hosted PaaS should copy the model or pick one.
Railway Killed the Builder It Built: What Railpack's Nix-to-BuildKit Rewrite Means for a Self-Hosted PaaS's Buildpack Bet
Railway shipped Railpack in March 2026 to replace Nixpacks, the builder it built and open-sourced. The result: 38% smaller Node images, 77% smaller Python images, and a language-coverage gap at launch. Here's what the Nix-to-BuildKit rewrite actually changed, and what it means for a self-hosted PaaS choosing between Railpack and Cloud Native Buildpacks.
Vercel's Coding Agents Now Trigger Half of All Deployments: What a Platform Sized for Humans Has to Rebuild
Vercel's coding-agent-triggered deployments went from under 3% to over 50% of all deploys in six months. Here's the concrete build-queue, concurrency, and preview-URL math a human-sized deploy pipeline never had to do — and what changes when the platform treats an MCP tool call and a git push as the same event from day one.
Backstage's 89% Market Share Hides a 10% Adoption Problem
Backstage owns 89% of the IDP market but gets opened by about 10% of eligible engineers at a typical adopter. Here's what the plugin-upgrade tax behind that gap means for any platform's golden-path bet.
Buildpacks Now Auto-Detect 80% of New Web Apps in 2026: What the Remaining 20% Actually Needs From a Real Dockerfile
Zero-config buildpacks now cover roughly 80% of new web apps with no Dockerfile at all — but native dependencies, unsupported runtimes, multi-stage builds, and monorepos make up the other 20%, and how a platform handles that failure, cleanly or not, is a design choice.
CAPH Quietly Renamed Its Annotations and Finalizers — Here's Every Old-to-New Key
CAPH renamed every annotation and finalizer key to match Kubernetes convention back in 2024 with zero announcement — here's the full old-to-new mapping, why finalizers self-healed but annotations didn't, and the grep to run before you trust either one.
CVE-2026-25518: The cert-manager Bug That Lets a Poisoned DNS Reply Crash Your Whole TLS Pipeline
A crafted DNS response can crash the cert-manager controller mid-renewal. Here's exactly what CVE-2026-25518 breaks, why the fix isn't just an upgrade, and the two config changes a self-hosted PaaS's TLS automation needs today.
Chainguard and Wolfi Cross 2,000 Zero-CVE Images: Should a Self-Hosted PaaS Default to Them?
Chainguard's Wolfi-based images cut CVE counts from ~280 to zero and shaved 60-80% off build time and egress in a real migration. Here's what defaulting a git-push PaaS's build output to Wolfi would actually change — and the honest build-vs-buy call against Chainguard's paid catalog.