Going nano with software updates

Bill Doerrfeld | January 30, 2026

My latest DirectorPlus column interviews Chainguard VP Dustin Kirkland on why software upgrades should be microscopic.

What does it mean to go nano with your software updates — to "carve with a scalpel" instead of swinging a hammer? For my latest DirectorPlus piece, I caught up with Chainguard VP Dustin Kirkland to dig into that idea.


In general, software stacks really varied these days, each relying on a mix of different major and minor versions of open-source languages, frameworks, and OS-level infrastructure. And, these components are releasing new versions at a fast rate.


Doing one one-size-fits-all, major version upgrades all at once is a quick way to break things. "Breakages are inevitable," says Kirkland. "I’d rather stub my toe than break my leg."


Dustin and I had a great conversation about the benefits of microscopic updates, the downsides of large-scale batch upgrades, and how teams can actually put this approach to work. (Including the leadership mindset required to do it well).


If you're an engineering leader, definitely consider signing up for DirectorPlus for a monthly check-in with an experienced director, VP, or CTO on a new subject!

Read: Shipping nano updates in the AI era

Other Blog Posts

How AI Agents Change API Interaction opening slide doerrfeld bill 2026 nordic apis
By Bill Doerrfeld • October 18, 2026
Here are my slides from my opening keynote at Nordic APIs Summit 2026, exploring how AI agents are changing API interaction patterns.
By Bill Doerrfeld • October 17, 2026
My latest research for AI Security University looks at AI tools and resources for pen-testers, red teamers, and bug bounty hunters.
By Bill Doerrfeld • October 16, 2026
My commissioned feature for Arthur D. Little's PRISM publication analyzes the big shifts underway now that generating code is becoming trivial.
By Bill Doerrfeld • October 11, 2026
Was happy to participate as a speaker and moderator at SecureMaine on October 8th, 2026.
By Bill Doerrfeld • October 5, 2026
My latest for LeadDev interviews a Meta engineer who built an agentic system to optimize their capacity planning, leading to real power use savings.
By Bill Doerrfeld • September 30, 2026
I set out expecting to write an article about how every enterprise was jumping on trendy alternative or "neo" clouds. That ended up not being the case.
By Bill Doerrfeld • September 28, 2026
Join the virtual AI Pen-Testing Conference to explore how AI is changing penetration testing, red teaming, and the security testing of AI systems.
By Bill Doerrfeld • September 28, 2026
Counting down to Nordic APIs Summit 2026 in Stockholm, featuring 60+ speakers exploring agentic AI, APIs, MCP, and security.
By Bill Doerrfeld • September 28, 2026
I covered a Yale and GitHub report on LeadDev that explores developer attitudes on climate change and curbing IT waste.
By Bill Doerrfeld • September 15, 2026
Does your agent really need access to every tool call under the sun?