Seven Iceberg REST Catalogs Tested: Spec Claims vs. Actual Behavior

·1 views

A developer built a Python probe harness to test seven Apache Iceberg REST catalog implementations — Apache Polaris, Google BigLake, AWS Glue, AWS S3 Tables, Databricks Unity, Snowflake Horizon, and Microsoft OneLake — against the published Iceberg REST specification. All measurements were conducted on September 3, 2026, using a combination of personal accounts, owned cloud projects, and free trials. The core finding is that while every catalog successfully served the fundamental read path, the study examined whether each catalog's machine-readable endpoint declarations matched what it actually served. Notable setup constraints include Databricks Free Edition being incompatible, Microsoft OneLake requiring a work or school account with a Fabric licence, and Snowflake Open Catalog being closed to new signups. The article also explains the foundational role of the REST catalog in replacing engine-specific catalog drivers with a single unified HTTP API.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Research Finds n8n Agentic AI Workflows Vulnerable to Credential and Encryption Key Theft

Security researchers have identified a multi-stage attack chain in n8n, a popular agentic AI workflow automation platform, that can lead from an exposed API key to full encryption key compromise. At the core of the risk is the N8N_ENCRYPTION_KEY, which not only decrypts all stored credentials but also contributes to JWT signing secrets and session tokens, making it a single point of failure. Researchers found three weaknesses in how n8n derives these secrets, including a JWT signing key derivation that uses only half the characters of the encryption key, effectively halving its entropy. Additionally, 129 internet-accessible n8n instances were found using known weak encryption keys, and a reproduced exploit via CVE-2026-25053 demonstrated how a privileged API key could be escalated to access encrypted credential records. The findings highlight that as agentic AI systems gain access to more external services, weaknesses in their credential management layer carry increasingly severe consequences.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Monogram Ships AI Context Files Alongside Code So Clients Can Keep Building

Atlanta-based applied AI agency Monogram has changed what it delivers at the end of a project, now including a structured AI layer alongside the codebase itself. Every repository handed to clients contains an AGENTS.md file, an OpenSpec folder for requirements, skill files for domain-specific tasks, and a DESIGN.md capturing the design system. The goal is to ensure client teams and their AI coding tools can extend the system the same way Monogram's own engineers did, without losing context that previously died in chat sessions. Skills cover both widely-used frameworks and client-specific processes like support-call rubrics and escalation rules, all versioned in the same pull requests as the code. Monogram says this approach means features built by the client's team months later will still look and behave consistently with the original delivery.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Commit Your Code Conference in Dallas Shares Tech Career and Dev Insights

The Commit Your Code conference took place on September 3 and 4 in Dallas, with free virtual attendance and an option to donate to charity. Speaker Leon Noel highlighted that only 2% of people using easy-apply features actually land interviews, stressing the importance of networking and relationship-building. Developer Roxy Rodriguez-Becker shared how she built an app to track her son's medically required diet, which later gained a wider user base that helped her refine it. Her key advice was to ship projects publicly and use real user feedback for improvement. Full talk recordings are expected to be released on the Dallas Software Developers' YouTube channel.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Elanat Releases WebForms Core 2.1 with Broader Browser Support and Declarative UI

Elanat has launched WebForms Core (WFC) 2.1, a significant update to its domain-specific language built on the Commander-Executor concept for defining and controlling UI behavior without direct client-side DOM logic. The new version introduces higher-level declarative capabilities that blend declarative and imperative development approaches, enabling metadata-driven and structure-centric UI generation beyond traditional component models. Unlike version 2, which required ES2022, version 2.1 targets JavaScript ES2020, extending compatibility to older browsers including Chrome 106 on Android 6.0 and Safari 15 on iOS 15. Elanat reports the release followed over three months of compatibility testing between WebForms classes and the WebFormsJS library, achieving a quality assurance success rate above 99%.

0 comments Read more at DEV Community