https://cicd.deployment.to/npm-v12-install-time-defaults-off/ CI/CD News en 2026-07-09 npm v12 flips install-time to closed-by-default https://cicd.deployment.to/setup-java-5-5-0-verify-signature/ CI/CD News en 2026-07-09 setup-java 5.5.0 adds JDK signature verification, if you remember to enable it https://cicd.deployment.to/docker-sbom-generation-build-vs-scan/ CI/CD News en 2026-07-08 The SBOM you can trust is the one your build actually made https://cicd.deployment.to/polinrider-expands-developer-pipeline/ CI/CD News en 2026-07-08 PolinRider keeps expanding, and the postinstall still lands on your runner https://cicd.deployment.to/vercel-better-auth-agent-identity/ CI/CD News en 2026-07-08 Vercel buys Better Auth on the pitch that agents need their own login