| |
| Hey Insiders, Thanks for reading the Inside Dev newsletter! Today, we cover: - 2023 Accelerate State of DevOps Report from Google;
- Docker, Neo4j, LangChain, and Ollama launching GenAI Stack;
- A new vulnerability in Microsoft's Visual Studio, and more!
If you find this newsletter useful, please share it with your friends and colleagues. Thank you. Sudarshan
p/sudarshan | |
| 1 | | The 2023 Accelerate State of DevOps Report revealed that a positive organizational culture and user-centric design are essential for successful software delivery. The report is based on input from around 3,000 professionals from various roles. More: - The report seeks to understand the relationship between working methods and outcomes to measure software delivery performance, organizational success, operational performance, team performance, and employee well-being.
- The change lead time for the elite tier of software teams, which comprised 18% of respondents, was less than a day, and the recovery time was less than one hour.
- In contrast, the change lead time and recovery time for low-performing teams was between one week and one month and between one month and six months, respectively.
- The report also discovered a disparity in the change failure rate reported by Elite (5%) and low-performing (64%) software teams.
- Other insights from the report include the need for a healthy culture and distributing work fairly to help reduce burnout, building with users in mind to drive improvement, and capitalizing on characteristics of the cloud, such as rapid elasticity and on-demand self-service, to get the maximum value out of the cloud.
Q: What cultural practices does your company follow to ensure successful software delivery? Join the conversation here. 
|     | |
| 2 | | At the DockerCon event, Docker launched GenAI Stack in collaboration with Neo4j, LangChain, and Ollama. The new offering simplifies deploying a full GenAI stack for developers. More: - According to Docker's CEO, Scott Johnston, GenAI Stack eliminates the dilemma for developers to get started with GenAI, which is experiencing several challenges in the form of multiple vendors and diverse technology stacks.
- It includes pre-configured LLMs such as Llama 2, GPT-3.5, etc., Ollama for simplifying local management of open-source LLMs, Neo4j as the default database, LangChain for facilitating between the LLM, application, and database, and more.
- The tool is in Early Access now and is accessible from the Docker Desktop Learning Center or GitHub.
- Docker also invited developers to participate in its Docker AI/ML Hackathon to showcase their AI/ML projects built on Docker.
| | | |
| A message from our sponsor, Paragon. |  | | Can't keep up with your customers' requests for integrations? Read this Build vs. Buy: Native Integrations Guide Your B2B SaaS company needs to provide seamless native integrations to sell into the market today. Look at the leaders in every category. HubSpot, Atlassian, Slack - all of these companies built moats around their integration ecosystem. However, the engineering effort required to build and maintain dozens of native integrations is significant, which is why companies backlog these requests. This leaves revenue on the table from the closed lost deals against competitors, churn, and a lack of upsell levers. Embedded integration platforms streamline the integration development process, but adopting one isn't an easy decision - there are tradeoffs you need to consider. Read our in-depth comparison guide below that covers the factors your engineering team needs to consider when making a Build vs. Buy decision. Get the guide 
| |
|
| 3 | | A security researcher at Sangfor, Zhiniang Peng, discovered a vulnerability in Microsoft's Visual Basic IDE. Attackers could exploit the vulnerability to perform remote code execution. More: - The vulnerability is centered around the trusted locations feature, added by Microsoft after the Lazarus attack in 2021, to prevent remote code execution.
- According to Peng, this feature is not enabled by default, exposing developers to potential attacks when opening projects downloaded from the internet.
- Peng's exploit involved a maliciously crafted project that manipulated the .suo binary file when a malicious project was opened on a machine.
- In response to Peng's findings, Microsoft said the issue discovered was not considered a security vulnerability, as opening a Visual Studio project downloaded from platforms like GitHub is inherently an insecure operation.
| | | |
| 4 | | Build acceleration company EngFlow, firstminute capital, Tiger Capital, and tipi.build together announced the beta of CMake RE. EngFlow made an undisclosed investment in tipi.build. More: - CMake RE aims to reduce C and C++ build times through automatic caching and cloud-based, distributed build execution.
- According to Antonio Di Stefano, Software Engineer at EngFlow, CMake is widely used by developers, but it lacks critical features like software security and remote execution, which the new solution seeks to address.
- CMake RE includes Tipi's source code parsing, caching capabilities, and automated dependency analysis, along with EngFlow's remote execution service.
- CMake RE is expected to speed up developer processes by around 10x.
| | | |
| |
|
| 5 | | New Tools and Updates: - Microsoft rolled out the second release candidate for .NET 8 with new NuGet package READMEs for .NET packages, simple CLI-based project evaluation for MSBuild, publishing containers to tar.gz archives, and Tensor Primitives for .NET.
- The September release of Visual Studio Code includes improved command discovery through enhanced command palette searching, accessibility improvements, updates to Python debugger, a dedicated pinned editor row, and more.
- StackBlitz announced the integration of WASI into WebContainers with experimental support of Python, support for jq - a command-line JSON processor, a new wasm command, and more.
- GitHub improved the process of centrally managing workflows for its Enterprise Cloud customers by requiring certain workflows to run successfully before code can be merged into an organization's repositories.
| | | |
| |
| 7 | | Quick Hits: - The Engine of the Century? The boldest engine innovator in 150+ years is taking investors for just a few more days. Invest in LiquidPiston by 10/24.*
- MariaDB is discontinuing strategic products and laying off 28% of its workforce due to financial challenges faced by the company after it went public.
- In a blog post, Google explained the benefits of automation and upcoming changes to the Chrome Root Program policy to improve web security.
- Unity CEO John Riccitiello resigned after the pricing controversy that led to several developers criticizing the move.
*This is a sponsored listing. | | | |
| Upcoming Events | | OCT
16 | | Meet Our Fund 5, Building and Investing in AI | | | | | | | OCT
30 | | Discover the latest digital experience innovations, updates, and breakthroughs at Opticon Online.* | | | | | | | NOV
17 | | Join the Docker AI/ML Hackathon to help shape the exciting new frontier of AI and have a chance to win cool prizes!* | | | | | | * This is a sponsored event | | | |
Term of the Day Real gross domestic product: Real GDP is calculated by subtracting the effect of inflation from the nominal GDP. Question of the Week What perks would convince you to return to the office? Join the conversation |
INSIDE DEV LEADERBOARD (ALL-TIME) |
 | Analyst | | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | This newsletter was edited by Aaron Crutchfield | |
| |
 | Paragon is an embedded integration platform that enables B2B SaaS companies to build native integrations 7x faster than in-house. | |
|
| |
|
| |
Comments
Post a Comment