<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://cicd.deployment.to/dependabot-groups-slow-cadence-security-fast/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-14</news:publication_date>
      <news:title>GitHub&apos;s Dependabot playbook: group the version PRs, slow the cadence, keep security fast</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/github-rulesets-migration-in-product/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-14</news:publication_date>
      <news:title>GitHub adds an in-product path off branch protection rules</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/packer-1-16-verifiable-provenance/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-14</news:publication_date>
      <news:title>Packer 1.16 ships signed SLSA provenance, and a command to check it</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/docker-vmm-public-beta/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13</news:publication_date>
      <news:title>Docker Desktop grows its own VMM, and it is now open beta</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/gitlab-19-2-2-ci-pipeline-authorization-bypass/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13</news:publication_date>
      <news:title>GitLab&apos;s mid-month patch train fixes a CI/CD pipeline authorization bypass</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://cicd.deployment.to/litellm-supply-chain-434k-pipelines/</loc>
    <news:news>
      <news:publication>
        <news:name>CI/CD News</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-08-13</news:publication_date>
      <news:title>One credential, three tools deep: the LiteLLM supply-chain breach</news:title>
    </news:news>
  </url>
</urlset>