Keeping the Rust Off the Ship: An Automated Weekly Upgrade Watch

Fri, 23 Oct 2026 15:24:00 +0700

TLDR

Vulnerability discovery has gone from a trickle to a firehose. AI models are finding bugs – PHP2Shell is the headline example, a class of critical unauthenticated RCEs in PHP that AI tooling surfaced in October 2026 – and the defenders are struggling to keep up. For a one-person infrastructure like mine, the answer is not to work faster. It is to automate the boring part.

The Weekly Upgrade Watch is an n8n workflow that runs every Monday morning. It reads the running images from my three Kubernetes clusters, checks upstream for newer releases, and hands the facts – versions, dates, security advisories, reported problems, release notes – to a local model (Qwen-3.8-Flash-Next, running through LiteLLM as zeu). The model writes a short assessment for each candidate upgrade: priority, recommendation, security fixes, breaking changes, manual steps. The workflow then files or updates tickets in my personal/infrastructure GitLab project, de-duplicated against what already exists, and emails me a summary.

Self-Hosting on [snowgoons.ro:~] timwa%

Keeping the Rust Off the Ship: An Automated Weekly Upgrade Watch

TLDR