AI Infrastructure and Dev Workflow Updates #92
Today's Letter
Vercel AI Gateway adds regional inference
- Vercel added regional inference to AI Gateway on July 27, 2026, with request-level region pinning.
- Requests can now be pinned to `us` or `eu`, while `global` remains the default routing mode.
- The setting is passed through `inferenceRegion`, and providers that support the selected region handle it through the same AI Gateway interface.
- Vercel says inference runs in the selected region, and any provider-retained data is stored there.
- If no provider can serve the requested region, the request fails instead of falling back to another location.
- Each response reports the region that served the request, giving teams a way to verify execution location per call.
- Vercel positions this as a simpler path for data residency and compliance cases that previously required per-provider routing setup.
- Region-pinned inference can cost more, with provider pricing often about 10% above standard rates and passed through without markup.
Source: vercel.com
GitHub Actions, suspicious workflows now held for approval
- GitHub introduced an automatic hold for GitHub Actions workflow runs that it identifies as potentially malicious in public repositories on github.com.
- The change targets supply chain attacks where compromised GitHub credentials are used to push workflows that steal CI/CD credentials or expand follow-on attacks.
- A held workflow does not start until a repository collaborator with write access reviews and approves it.
- Approval must be submitted through an authenticated web session, after which the workflow resumes normal execution.
- The protection requires no repository-side configuration and is applied automatically by GitHub.
- The feature currently applies only to public repositories on github.com.
- GitHub Enterprise Server does not include this protection at this time.
Source: github.blog
Jocoletter curates AI, software, and product trends for developers and builders.
#GitHub #Vercel