Serverless news and engineering summaries

Deno’s entire team is joining Cloudflare to develop a shared platform based on Cloudflare Workers and Durable Objects, aiming to make distributed server development simpler. The team will stop developing a separate Deno runtime after one year of monthly bug-fix and security releases, while Deno remains open source. Deno Deploy will shut down after six months, with migration support for paying customers. JSR continues on Cloudflare, and rusty_v8 will be supported and integrated into workerd.

EmDash is an open-source, TypeScript-based CMS designed as a modern successor to WordPress. It utilizes serverless architecture, Astro for frontend development, and isolated Dynamic Workers for plugin security. EmDash addresses WordPress's legacy security and marketplace issues by enforcing granular plugin permissions, while supporting native x402 payments and AI-driven automation via the Model Context Protocol.

The Deno team is joining Cloudflare to simplify self-hosting Workers and Durable Objects, allowing developers to use the same primitives in more environments. Ryan Dahl and Kenton Varda explain the motivation and background behind the move, which connects Deno’s work with Cloudflare’s developer platform.

Talorys is an open-source, single-user personal AI assistant deployed entirely in the user’s own Cloudflare account with one command. It provides streaming chat, editable memory, tasks, notes, projects, reminders and scheduled routines through Cloudflare Pages, a private Worker, a SQLite-backed Durable Object and Workers AI. It has no developer-operated server, database, accounts or telemetry; non-AI features continue working when AI quotas are exhausted, and the installer manages deployment, secrets and updates.

Deno has introduced Deno Sandbox, a specialized environment designed for running untrusted LLM-generated code safely. Recognizing the security risks of prompt-injected code exfiltrating API keys or accessing unauthorized networks, Deno Sandbox utilizes lightweight Linux microVMs with sub-second boot times. Key features include a robust secret management system where real credentials only materialize during requests to approved hosts, and strict network egress controls to block malicious outbound traffic. It supports JavaScript and Python SDKs, allowing developers to manage sandboxes programmatically and deploy them directly to production on Deno Deploy. This tool is ideal for building AI agents, secure plugin systems, and ephemeral CI runners while maintaining defense-in-depth security.

The author successfully replaced a cloud VPS with a repurposed CMF Phone 1 running a rooted Android OS. Leveraging Termux, runit, and chroot environments, the phone acts as a power-efficient, battery-backed server for personal web applications. Ansible manages the infrastructure as code, ensuring reliability, automated deployments, and connectivity via Tailscale and Cloudflare Tunnels.

The author migrated their decade-old Ubuntu VPS to a new Hetzner FreeBSD server, utilizing Bastille and Jails for virtualized site management. The transition improved server performance, security, and cost. Despite initial configuration hurdles, the new stack demonstrates significantly higher request capacity and stable latency under heavy load compared to the previous aging infrastructure.

AWS introduces Lambda MicroVMs, a serverless compute primitive powered by Firecracker. It offers virtual machine-level isolation, near-instant launch times, and stateful execution for multi-tenant applications running untrusted code. MicroVMs retain memory and disk state across sessions, allowing developers to provide dedicated environments for tasks like AI coding assistants without managing complex underlying infrastructure.

Cloudflare Flagship is a feature flag service that enables developers to control feature visibility in applications without redeploying code. It integrates natively with Cloudflare Workers, supports OpenFeature standards, and offers robust features like targeting rules, percentage rollouts, and multi-type variations for serverless application management.

Cloudflare has made Python Workers generally available, making Python a first-class language on the Cloudflare Developer Platform. Developers can use Python packages and frameworks including FastAPI, Django, and Flask, native bindings, PostgreSQL/MySQL through Hyperdrive, expanded WebAssembly package support, and AI libraries. Production patterns span AI agents, RAG, queues, workflows, storage, and real-time streaming.

Netlify rebuilt Edge Functions from V8 isolates to Firecracker MicroVMs running inside its edge network. The architecture delivers 5–6ms median warm-invocation latency, 47.4% faster p99 performance, 99.998% availability, and faster logs. It adds stronger isolation, caching, snapshot-based scale-to-zero, and operational control, enabling broader npm package support, higher limits, and network-dependent capabilities without customer changes.

AWS Lambda Web Functions let standard HTTP applications built with frameworks such as Express, Hono, Fastify, and Next.js run on Lambda without adapters or event-handler rewrites. They support up to 128 concurrent requests per environment, active CPU billing, automatic scaling, multi-region latency routing, revisions, canary traffic splitting, and CloudFront OAC. A single AWS CLI command deploys them. They launch in five Regions with Node.js 24 on Arm64 and VPC connectivity, alongside Event Functions and Lambda MicroVMs.

Cloudflare has introduced Moltworker, a middleware adaptation of the open-source AI agent Moltbot (formerly Clawdbot), designed to run on the Cloudflare Developer Platform. This implementation allows users to host their personal AI assistants in the cloud rather than on dedicated local hardware like Mac minis. By leveraging Cloudflare Workers' enhanced Node.js compatibility, the platform supports 98.5% of popular NPM packages. Moltworker utilizes several Cloudflare services: Sandboxes for secure isolated code execution, Browser Rendering for web automation tasks, R2 for persistent data storage, and AI Gateway for centralized AI provider management and cost tracking. The project is available as an open-source proof of concept on GitHub, showcasing how the edge network can handle complex, stateful AI agents with built-in security through Zero Trust Access.

Cloudflare introduces Kitesurf, a lightweight, agent-focused browser built for the Cloudflare Workers platform. Unlike traditional browsers like Chromium, Kitesurf is stateless, isolated, and utilizes WebAssembly to provide AI agents with efficient HTML extraction and screenshot capabilities, significantly reducing CPU and memory consumption while ensuring scalability for bursty, automation-driven workloads.

FxEmbed is an open-source Cloudflare Worker powering FxTwitter, FixupX, and FxBluesky. It enhances social-media links with embedded videos, polls, quotes, translations, and more across Discord and Telegram. Users can self-host it with Docker and Wrangler, configure realms and secrets, test Host-based routing, and deploy under the MIT license.

This guide details how to boot Debian over a network using iSCSI and Netboot.xyz. By separating the OS from local hardware using a remote storage ZFS ZVol, the author avoids dual-booting conflicts and hardware repartitioning on their gaming PC. The setup involves configuring TFTP, DNSMasq, and iSCSI targets on a Proxmox host for a remote networked server installation.

bookshelf is an MIT-licensed, self-hosted ebook library serving EPUB and PDF readers, downloads, search, profiles, and reading positions. It runs as a Node server over filesystem storage or as Cloudflare Workers over R2, with Docker support and a generated demo collection. There is no authentication, so deployment requires a trusted network or an external access-control layer.

Telegram Serverless enables deploying bot backends directly onto Telegram’s infrastructure. By writing JavaScript modules, engineers skip server provisioning and maintenance. The platform offers a V8 sandbox for code execution, a built-in SQLite-powered database, and an SDK for the Bot API, streamlining development through a CLI that manages project state, local testing, and atomic deployments.

Wasmer has introduced Edge.js, an open-source JavaScript runtime that executes Node.js workloads within a WebAssembly sandbox. Unlike other edge runtimes, Edge.js maintains full Node.js compatibility by isolating system calls and native modules using WASIX, eliminating the need for Docker containers and providing high-density, secure serverless execution with rapid startup times.

Cloudflare introduced on-demand CPU and memory profiling for Workers and Durable Objects, available through the Workers Observability dashboard or CLI. Developers can profile active production isolates, inspect interactive flamegraphs, and download profiles. Flamegraphs identify resource-intensive functions: optimizing recursive JSON processing made `genericR2JsonReplacer` 2.7x faster, while removing partially disabled Prometheus instrumentation reduced P999 memory from 133 MB to 118 MB. Profiling requires sufficient traffic; Cloudflare is developing continuous profiling for rare events.