Monday, July 06, 2026

6 stories worth your scroll — picked from 37 curated today.

1 · Copy → 2 · Share → 3 · Paste & post

View the post text

Security patches, stable enterprise protocols, and new AWS features reshape engineering infrastructure today.

▸ Streams Postgres WAL to immutable Iceberg tables on S3 without database credentials.
▸ Fixes silent TLS downgrade in PostgreSQL JDBC that bypasses channel binding checks.
▸ Stabilizes MCP auth for zero-touch identity integration across enterprise servers.
▸ Adds searchable metadata to S3 objects without modifying the underlying data.
▸ Enforces design standards in AI-generated UIs to eliminate generic boilerplate.
▸ Allows customizable failure thresholds for automatic ECS deployment rollbacks.

Summaries, takeaways and sources → https://offnetchat.com/news/2026-07-06/brief.html

#PostgreSQL #AWS #Security #MCP #DevOps

pg-cdc streams Postgres WAL to immutable Iceberg tables on S3

pg-cdc is a single-binary tool that reads Postgres Write Ahead Logs and writes typed, immutable Parquet files to AWS S3 in Iceberg format. It integrates with AWS Glue for metadata and enforces access control via Lake Formation tags, ensuring consumers never need database credentials. The architecture is strictly one-way, preventing any data from flowing back to the production database, which isolates analytics workloads from the source system.

Single binary implementation with no JVM dependency reduces deployment overhead.

Database Technology NEW PostgreSQL News

PostgreSQL JDBC 42.7.12 patches silent channel-binding downgrade

PostgreSQL JDBC 42.7.12 fixes CVE-2026-54291, a vulnerability where connections using channelBinding=require silently downgrade from SCRAM-SHA-256-PLUS to plain SCRAM-SHA-256. This occurs when the server presents certificates with algorithms like Ed25519 that lack the expected channel-binding hash. The root cause involves the bundled scram-client library returning an empty byte array instead of failing when it cannot derive the binding hash. This flaw removes man-in-the-middle protection for secure connections.

Upgrade to JDBC 42.7.12 immediately to restore MITM protection for channelBinding=require connections.

LLMs NEW InfoQ

MCP Enterprise Auth Hits Stable, Enabling Zero-Touch Identity Integration

The Model Context Protocol team has stabilized the Enterprise-Managed Authorisation extension, allowing organizations to centralize access control for MCP servers via their existing identity providers. This update replaces fragmented per-server consent prompts with a unified, zero-touch authentication flow. Users sign in once and gain immediate access to approved servers without additional configuration steps.

MCP Enterprise Auth is now stable for production use.

AWS NEW InfoQ

AWS S3 Annotations enable searchable object context without separate metadata systems

AWS has launched Amazon S3 Annotations, allowing teams to attach rich, searchable metadata like summaries, compliance tags, and AI insights directly to objects. These annotations are managed independently of the underlying S3 object data, enabling updates without modifying the object itself. This capability allows for cross-dataset querying of context, potentially eliminating the need for external metadata management platforms.

Annotations decouple searchable context from the S3 object data itself.

Agentic AI NEW GitHub Trending (daily)

Taste-Skill: AI Agent Framework to Eliminate Generic UI Output

Taste-Skill is an open-source framework designed to improve the aesthetic quality of AI-generated user interfaces. It provides portable agent skills that enforce stronger layout, typography, motion, and spacing standards to prevent boilerplate-looking designs. The tool supports generating reference boards for web, mobile, and brand kits, which can then be handed off to coding agents like Cursor or Claude Code for implementation.

Provides specific agent skills to override default AI tendencies toward generic, boring UI designs.

Automation / DevOps / IaC NEW AWS What's New

Amazon ECS adds configurable deployment circuit breaker thresholds

Amazon ECS now allows customization of deployment circuit breaker settings to control when a service deployment fails and triggers an automatic rollback. Users can define failure thresholds using either a fixed task count or a percentage of the desired task count. The feature also supports choosing between consecutive failure models to better align with specific application startup behaviors and failure tolerances.

Customize rollback triggers using fixed task failure counts or percentages of desired tasks.