Let's Encrypt's 6-Day Certificates Are GA: The Renewal Math Your PaaS's ACME Automation Needs to Survive It
Let's Encrypt's 6-day certificates are live and 45-day defaults are coming by 2028 — the renewal-frequency math, the real rate-limit bottleneck (your DNS provider, not Let's Encrypt), and what a self-hosted PaaS's ACME automation needs to change first.
MCP Tasks Gets Retry Semantics and Expiry Policies: The 'Call Now, Fetch Later' Pattern for Deploys That Outlive an HTTP Timeout
MCP's Tasks primitive just went Final: client-generated task IDs make retries idempotent, keepAlive sets result expiry, and the 2026-07-28 spec reshapes both into a formal extension — what a deploy-from-chat MCP server needs to implement for deploys and rollbacks that outlast an HTTP timeout.
MCP Tool Schemas Are Eating 72% of Your Context Window: How to Design an Infrastructure MCP Server That Doesn't
A production benchmark shows MCP tool schemas can eat 72% of an agent's context window before a single query runs. Here's why, how Pinterest fixed it at scale, and how to design an infrastructure MCP server that doesn't repeat the mistake.
Ephemeral Preview Environments on Kubernetes: A Namespace-Per-PR Recipe for a Git-Push PaaS
A working ArgoCD ApplicationSet recipe for namespace-per-PR previews, what it actually costs in cluster resources at 10 vs 50 concurrent PRs, and the quota/network-policy/TTL guardrails that keep a busy repo from starving a shared cluster.
Paketo Buildpacks Loses Its GCP Sponsor: What a Cloud Vendor Walking Away Means for Betting a Build Layer on the Open Standard
In 2025 Google pulled the sponsorship paying for Paketo's container registry hosting, giving it two weeks' notice. Here's why the project barely noticed, and the four-layer funding audit any team betting its build pipeline on someone else's open-source project should run first.
PocketBase vs. a Cluster API Fleet: The Three Walls That Tell You When to Switch
PocketBase's single Go binary handles 10,000+ realtime connections on a $4 server — until sustained multi-writer contention, HA requirements, or hard tenant isolation hit walls a Cluster API fleet is built to clear.
PostgreSQL 18's Async I/O, OAuth, and pg_upgrade --swap: What Your Operator Image Should Actually Turn On
PostgreSQL 18 shipped async I/O, OAuth 2.0 authentication, and a faster pg_upgrade --swap mode. A concrete recommendation for which of the three a self-hosted PaaS's CNPG or Zalando-managed Postgres image should turn on today, and which ones aren't ready yet.
Preview Environments Are Table Stakes Now: What Dokploy, Railway, and Render's PR-Preview Features Mean for a Self-Hosted git-push PaaS Roadmap
Render, Railway, and Dokploy all ship PR-triggered preview environments now — here's what it actually takes to build the same feature on a multi-node Cluster API fleet instead of one Dokploy-style box, and why the gap is four real subsystems, not a checkbox.
Render's Buildpacks Aren't 75% Faster Than Dockerfiles — Here's What Its 2026 Changelog Actually Says
The '75% faster' Render buildpacks claim traces back to no real Render source. Here's what its 2026 changelog actually documents, why Railway rebuilt Nixpacks around the same caching shift, and how to get the same layer caching self-hosted with Paketo, kpack, and Railpack.