21 articles on DevOps. Practical notes on infrastructure, security, and engineering leadership by Indra Gusti Prasetya.
Run gh api on your repo's sub claim: npm's "OIDC token exchange error - package not found" is a publisher mismatch, not a missing package.
Read more: npm OIDC "package not found": your sub claim changedRun pnpm install --side-effects-cache=false to tell which of three 12.x bugs skipped your postinstall. A fresh node_modules no longer re-runs builds.
Read more: pnpm build scripts not running: another project ran themTurn on output.strictModuleErrorHandling: webpack 5.111 awaits async ESM entries by default, but a failed async cycle still hands out fulfilled exports.
Read more: Webpack 5.111 Top-Level Await Fix Skips Async CyclesRun pgrep -f Runner.Worker to tell four GitHub Actions runner hangs apart: only acquirejob has no timeout, and the stuck pod keeps its ARC slot.
Read more: "Acknowledging runner request": 4 Bugs, 1 Stuck SlotUpgrade to pnpm 11.27.0. Before it, readPackage got the cached manifest by reference, so one in-place edit landed on every dependent on that version.
Read more: pnpm readPackage Edits Leak to Deps You Never MatchedRun two commands to split the four causes behind docker save --platform failing on Docker 29's containerd image store, then export a tar that actually loads.
Read more: Fix docker save "no suitable export target found"pnpm deploy 11.19 to 11.21 symlinks workspace packages out of your Docker image. Run one find to catch the dangling link, then upgrade to 11.22.0.
Read more: Fix pnpm deploy "Cannot find module" in Docker on 11.19Set GOMEMLIMIT and drop --max-old-space-size: TypeScript 7's Go tsc uses 2.48 GB where tsc 6 used 0.41 GB for the same error TS7056, then exits 137.
Read more: Fix TypeScript 7 Out of Memory: error TS7056 Costs 6x RAMCheck the exit code before the error text: 137 means the kernel killed it. Four causes of Node 24.19.0 heap OOM, each with its own separating test.
Read more: Fix Ineffective mark-compacts in Node 24.19.0: 4 Causesnpm 12 flipped allow-remote to none. EALLOWREMOTE on a private registry is fixed by replace-registry-host, not by disabling the supply-chain control globally.
Read more: npm EALLOWREMOTE: Fix Private Registries, Not allow-remote=allRun pnpm why typescript to find which of three trees put TypeScript 7 under typescript-eslint, then fix it with pnpm 12 or an overrides pin.
Read more: Fix ESLint Cannot read properties of undefined (Intrinsic)Terraform 1.15 apply panics in readDiff on a deposed object. Run one state pull and jq check to find the live orphan before you upgrade to 1.16.
Read more: Fix Terraform Deposed Object Panic in readDiff on 1.15Terraform 1.15 warns about attributes you never wrote. Run terraform validate -json to tell real deprecations from mark propagation, plus what 1.16 fixes.
Read more: Fix Terraform "The deprecation originates from" WarningsThree root causes produce this crash; only one clears with node_modules. Run npm install --package-lock-only on a clean checkout to tell them apart.
Read more: npm error edgesOut: Three Causes, One Fixed by node_modulesnpm 12 forbids --allow-scripts in project installs. Plain npm install fails too if .npmrc carries the flag. Fix: an allowScripts allowlist in package.json.
Read more: npm EALLOWSCRIPTS: Use allowScripts, Not --allow-scriptsTell the npm audit 410 and 'invalid json response body' gzip bug apart by the URL in the error, and stop a silent audit from passing your CI.
Read more: Fix npm audit 410 and 'invalid json response body' bugsA TRACE logging default writes 640 TB/year to ~/.codex/logs_2.sqlite. Here is how to check your disk wear and stop it.
Read more: OpenAI Codex Bug Is Writing 640 TB/Year to Your SSDBackstage owns 89% of the IDP market but averages 10% internal adoption. Here's when self-hosting your developer portal stops paying off.
Read more: Backstage vs Port vs Cortex: When to Stop Self-HostingAI agent sandboxes isolate untrusted AI-generated code with Firecracker microVMs and gVisor. Here's how to pick an execution runtime in 2026.
Read more: Sandboxing AI Agent Code: A 2026 Runtime GuideMicrosoft's pg_durable, DBOS, and Temporal are pushing crash-proof, exactly-once workflows into Postgres in 2026. Here's how to choose.
Read more: Durable Execution Is Moving Into PostgresA decade of lessons moving from engineer to leader on building teams that can run the systems they ship, under pressure, without you in the room.
Read more: Leading Technical Teams: Innovation and People, In BalanceDeep dives into infrastructure, security, and technical leadership. No noise, just engineering rigor. Subscribe and grab the infrastructure security checklist I work from.
Indra G. Prasetya
