GitLab announced the general availability of GitLab Duo with Amazon Q.
The CNCF Technical Oversight Committee (TOC) has voted to accept wasmCloud as a CNCF incubating project.
wasmCloud, an open source project from the Cloud Native Computing Foundation (CNCF), enables teams to build and run polyglot applications made up of reusable WebAssembly (Wasm) components. This allows applications to operate resiliently and efficiently across diverse environments—in the cloud, on Kubernetes, in data centers, or at the edge.
By using Wasm as the application artifact, wasmCloud decouples applications from underlying infrastructure, freeing developers to focus on feature development. It provides the tools to run Wasm components securely and efficiently and—instead of forcing thousands of developers to maintain the same libraries and capabilities in their applications—create a single set of reusable core applications.
The project was created by Liam Randall and Kevin Hoffman during their time at a top 10 US bank. The project is currently led by Cosmonic CTO and Bytecode Alliance Technical Steering Committee member Bailey Hayes. wasmCloud was designed to solve the friction that application teams face in every enterprise when writing software and it has grown in popularity since being accepted into the CNCF Sandbox; it is now being deployed and maintained by engineers working in a host of organizations including Adobe, Orange, MachineMetrics, TM Forum member CSPs, and Akamai.
Since joining the CNCF Sandbox, wasmCloud has matured and grown in popularity:
- Enterprise-readiness: Built around new standards, wasmCloud 1.0 was released in early 2024 as a stable, production-ready platform. The project has now reached release 1.4 and is full of DevEx improvements that bring parity to the Wasm developer experience.
- Standards-first: wasmCloud was one of the first to bring support for wasip2 and embrace the Wasm Component Model. This makes it the most open, secure, stable, and standards-led ecosystem for deploying and orchestrating distributed applications in production.
- Cloud Native and CNCF integration: wasmCloud integrates with a host of CNCF projects. wasmCloud is powered by NATS; it also integrates with 20+ cloud native tools including OpenTelemetry, Kubernetes, Open Policy Agent, Argo, Couchbase, PostgreSQL, Kafka, Grafana, Azure blobstore and more. It is also possible to distribute artifacts using the Open Container Initiative (OCI).
- Industrial adoption: wasmCloud is deployed in a wide variety of sectors and use cases, from industrial IoT and automotive to digital services and banking, with more use cases emerging all the time.
- Community growth: In the last 12 months, the wasmCloud community has grown significantly. wasmCloud now has over 100 regular contributors, with overall contributions rising by 300% since 2021.
Main Components:
- Declarative WebAssembly Orchestration. The wasmCloud Application Deployment Manager (wadm) orchestrates the deployment and management of Wasm applications, at any scale or location.
- Seamless Distributed Networking. Powered by NATS, wasmCloud network has a flat topology that enables application components to communicate exactly the same, whether they are running on a single machine or globally distributed at scale.
- Distributed Support with wRPC. wRPC (WIT over Remote Procedure Call) is protocol agnostic and makes distributed computing in wasmCloud feel like composing components over the lattice.
- Polished DevEx. wash dev is a CLI tool that brings the hot reload experience developers expect.
- Support for Multiple Languages. wasmCloud abstracts away vendor and language considerations from software development.
- Completely OTEL Observable. wasmCloud has full OTEL support for traces, logs and metrics, the 3 pillars of observability.
- Secure By-Default. Having passed the OSTIF/Trail of Bits security audit, new features cement the commitment to security.
wasmCloud has several features and functionalities on the roadmap for Q4 and beyond including mult-tenancy, standards alignment, and deeper language support. Previous roadmaps can be viewed in the wasmCloud roadmap section in wasmCloud documentation.
Industry News
Perforce Software and Liquibase announced a strategic partnership to enhance secure and compliant database change management for DevOps teams.
Spacelift announced the launch of Saturnhead AI — an enterprise-grade AI assistant that slashes DevOps troubleshooting time by transforming complex infrastructure logs into clear, actionable explanations.
CodeSecure and FOSSA announced a strategic partnership and native product integration that enables organizations to eliminate security blindspots associated with both third party and open source code.
Bauplan, a Python-first serverless data platform that transforms complex infrastructure processes into a few lines of code over data lakes, announced its launch with $7.5 million in seed funding.
Perforce Software announced the launch of the Kafka Service Bundle, a new offering that provides enterprises with managed open source Apache Kafka at a fraction of the cost of traditional managed providers.
LambdaTest announced the launch of the HyperExecute MCP Server, an enhancement to its AI-native test orchestration platform, HyperExecute.
Cloudflare announced Workers VPC and Workers VPC Private Link, new solutions that enable developers to build secure, global cross-cloud applications on Cloudflare Workers.
Nutrient announced a significant expansion of its cloud-based services, as well as a series of updates to its SDK products, aimed at enhancing the developer experience by allowing developers to build, scale, and innovate with less friction.
Check Point® Software Technologies Ltd.(link is external) announced that its Infinity Platform has been named the top-ranked AI-powered cyber security platform in the 2025 Miercom Assessment.
Orca Security announced the Orca Bitbucket App, a cloud-native seamless integration for scanning Bitbucket Repositories.
The Live API for Gemini models is now in Preview, enabling developers to start building and testing more robust, scalable applications with significantly higher rate limits.
Backslash Security(link is external) announced significant adoption of the Backslash App Graph, the industry’s first dynamic digital twin for application code.
SmartBear launched API Hub for Test, a new capability within the company’s API Hub, powered by Swagger.
Akamai Technologies introduced App & API Protector Hybrid.