Hardening Hooks, Windows CI Woes, and the Alpine Base Image Pivot

Security

Per-Plugin Resource Isolation Proposal Surfaces

A new proposal for per-plugin resource guards dropped. This would let you lock down memory and CPU per plugin, preventing a single buggy one from tanking your whole deployment. Big step for production hardening.

CI/CD

Windows CI Failures Become Predictable (and Undiagnosed)

The Windows CI story just got worse. It's not just failing; it's failing reliably on specific worker image tags, and nobody's sure why yet. If you're on Windows, you're blocked and testing in the dark.

Infrastructure

Concrete Push for Alpine-Based Images with Benchmark Data

The container base image debate is heating up. There's concrete data suggesting Alpine could slash image size further than the current slim images, but the migration cost is real. The team's asking for more real-world benchmarks.

Observability

Scheduler Telemetry for Internal Queue Depths Merged

This PR adds detailed telemetry for internal queue depths. Right now scheduler behavior is a black box under load. This kind of instrumentation is what you need to actually debug production bottlenecks before they escalate.

Performance

Redis Connection Pool Optimization Patch Landed

A patch landed to optimize the Redis connection pool handling, fixing a subtle leak under high churn. If you're running a lot of short-lived jobs, this could meaningfully cut your connection overhead.

Build

Fedora 40 Added to CI Build Matrix

Oh look, the build matrix is getting even more complex. This PR adds Fedora 40 to the CI matrix, confirming the team is actively exploring the switch. The CI times are going to get interesting.