Morning Briefing — 08/05/26
Verification cutoff: August 5, 2026, morning edition.
Executive Summary
Three actions clear the morning threshold. The free State of Technical Debt webinar happens today, making registration the only immediate task. Fedora Magazine has published a clean Podman workflow for running Ollama with persistent model storage and a local API. GitHub’s CodeQL 2.26.2 now understands Kotlin through version 2.4.10 and may surface new path-injection findings in Java/Kotlin repositories.
Read more →
Action Queue
1. Register or join today’s technical-debt webinar
Urgency: Immediate
Importance: ★★★★★
What it is: CODE Group founder Markus Egger is leading a live 90-minute online briefing on how AI can help inventory legacy applications, recover institutional knowledge, identify dependencies, prioritize modernization work, and reduce technical-debt risk.
Why it matters: This is directly applicable to older websites, inherited course examples, scripts, and long-running personal projects. The useful question is not whether AI can rewrite an application, but whether it can help expose what must be understood before safe modernization begins.
Recommended action: Register this morning or open the official event page’s live-event link. Before attending, choose one older project and write down its three largest maintenance unknowns; use those as a test of the presenter’s framework.
Status: Event, registration form, agenda, and live-event link verified active August 5, 2026.
Deadline: Wednesday, August 5, 2026. The agenda lists noon through 1:30 p.m. but does not identify the timezone; verify the time in the registration confirmation immediately.
Cost: Free. No regular price, completion certificate, or badge is advertised.
Requirements: Registration information, web browser, and audio. The session targets technology leaders and maintainers but lists no technical prerequisite.
Official links: Event details and live link · Free registration
2. Save the Fedora Podman recipe for a clean Ollama service
Urgency: This week
Importance: ★★★★☆
What it is: Fedora Magazine’s new guide runs the official Ollama container under Podman, stores model files in a persistent named volume, exposes the local REST API on port 11434, and lets the container be stopped or replaced without deleting downloaded models.
Why it matters: This offers a clean alternative to installing another AI stack directly on the Fedora host. It is especially useful for testing scripts, IDE integrations, or small self-hosted AI services without disturbing an existing LM Studio setup.
Recommended action: Save the guide. Before running it, check free disk space and whether an existing Ollama or LM Studio service already uses port 11434. If a separate local API would help, test one small model and stop the container when finished.
Status: Fedora Magazine guide verified active and published August 5, 2026; official Ollama container image and Podman workflow are linked in the instructions.
Deadline: None.
Cost: Podman and Ollama are free, open-source software; no regular price. Model licenses vary, and large downloads consume local storage and electricity.
Requirements: Fedora Workstation or Silverblue, Podman, a 64-bit system, enough RAM for the selected model, and roughly 4–40+ GB of free disk space depending on model size. GPU acceleration is optional; the basic command runs on CPU.
Official link: Run Ollama locally with Podman on Fedora
3. Recheck Kotlin repositories after the CodeQL 2.26.2 rollout
Urgency: This week
Importance: ★★★★☆
What it is: GitHub has deployed CodeQL 2.26.2 to code scanning on github.com. It adds support through Kotlin 2.4.10 and changes Java/Kotlin path-injection analysis because java.io.File.getName() is no longer treated as a complete sanitizer.
Why it matters: Kotlin teaching repositories and examples can now be analyzed against the current language release. Existing projects may also receive new findings where .. path components were previously overlooked.
Recommended action: If a public Kotlin repository already uses GitHub code scanning, open its Security tab and review the next CodeQL run. Treat newly surfaced path findings as prompts for inspection, not automatic proof of a vulnerability.
Status: Official GitHub changelog verified active August 5, 2026; release announced August 4 and automatically deployed to github.com code scanning.
Deadline: No external deadline; review after the next scheduled or pull-request scan.
Cost: CodeQL code scanning is available without added charge for public repositories. Private-repository availability and pricing depend on the organization’s GitHub security plan; no single regular price applies.
Requirements: GitHub repository with code scanning enabled. GitHub.com receives the update automatically; older GitHub Enterprise Server installations require a manual CodeQL upgrade.
Official link: CodeQL 2.26.2 release details
Free Software
Podman and Ollama are free, open-source components. The Fedora guide keeps downloaded model data in a named volume, so replacing the container does not force another multi-gigabyte download.
Free Courses & Certifications
State of Technical Debt 2026 is a free live professional-development webinar today. It is not a course, and no certificate or completion badge is advertised.
AI
The Podman pattern treats a local model server like any other replaceable service: isolate the runtime, persist only the data that matters, expose a narrow local API, inspect logs, and stop the process when it is not needed. That is more durable than accumulating overlapping host installations.
Open Source
Containerization does not remove model-license obligations. Podman and Ollama are open source, but each downloaded model has its own license, redistribution terms, and acceptable-use conditions that should be checked before classroom or public deployment.
GitHub Discoveries
CodeQL 2.26.2 connects two recent themes: current Kotlin tooling and testable AI/security workflows. The useful action is to inspect new findings with source context rather than grading a repository by alert count.
Linux & Self-Hosting
The Fedora Ollama recipe creates a persistent volume named ollama_storage, maps localhost port 11434, and exposes the service’s JSON API. Check for port conflicts before starting it, and avoid publishing that port beyond localhost without authentication and network controls.
Newsletter Highlights
TLDR and TLDR DevOps were checked for overnight leads. Their Siri claims were not used because the underlying product remains unreleased, while enterprise migration and Cloudflare stories did not offer a stronger action than the three official-source items above. Spam and Trash contained no exceptional ICYMI item.
Teaching Corner
A safe beginning exercise is to compare two forms of evidence:
- Ask a local model to explain a short Kotlin file.
- Run static analysis or tests against the same file and identify which claims are mechanically checked.
The lesson is that explanation, compilation, tests, and security analysis answer different questions; none replaces the others.
PKb Candidates
- Containerize replaceable AI runtimes; persist model data deliberately.
- Check disk, memory, ports, and model licenses before starting a local-LLM service.
- New static-analysis findings require source review, not blind acceptance.
- Modernization begins with inventory, dependencies, and recoverable institutional knowledge.
Trends Worth Watching
Local AI tooling is adopting ordinary infrastructure discipline—containers, persistent volumes, APIs, logs, and lifecycle controls—while code hosts are expanding language-aware security analysis. The practical convergence is clear: AI experimentation is becoming software operations, and it should be managed with the same restraint.
Related PTIR Coverage
- Evening Briefing — August 4, 2026 — Kotlin in BlueJ 6.0 and JetBrains’ open coding-agent benchmark.
- Evening Briefing — August 3, 2026 — the original technical-debt webinar notice and secret scanning.
- Morning Briefing — August 1, 2026 — Rails upload security, CISA SBOM guidance, and coding-model evaluation.
Sources Consulted
CODE’s official event and registration pages, Fedora Magazine’s August 5 Podman/Ollama guide, GitHub’s CodeQL release announcement, overnight technology newsletters used only for discovery, and the controlled Gmail Spam/Trash pass. The webinar is repeated solely because its deadline is now today; no unchanged item from the August 4 evening edition was repeated.