The Blog

Builders could leave setuid programs that recovered a nixbld identity during later builds. Nix 1.11.10 blocks that route and rejects filesystem metadata that its archive format cannot represent.

The second edition of the Rust book reaches the release documentation as an incomplete draft. Changes to visibility and field layout show why accurate explanations of guarantees matter alongside new syntax.

SQLite 3.19.3 fixes an auto_vacuum regression introduced in January. Its storage code and regression tests explain why returning free space requires more than deleting rows.

fish 2.6 brings terminal-aware substitutions and disown into a stable release. New read options distinguish hidden input, literal prompts and bounded input consumption.

The early data-class prototype uses Python variable annotations to generate ordinary class methods, with defaults and equality still under active design.

The first Kubernetes Istio tutorial keeps Bookinfo's application images intact while inserting Envoy proxies. Its metrics and tracing examples show both the value and the limits of observing services through their network traffic.

SE-0179 combines building and running package executables. The accepted revisions settle how executable selection and working directories should behave at the shell.

Perl 5.26 removes the current directory from the default module search path. Its compatibility controls explain why a successful CPAN build can conceal a runtime dependency on the old behavior.

Terraform 0.9.6 relaxes a list syntax convention inherited from string-based interpolation. The change exposes the distinction between a collection's type and how much Terraform knows about its members.

Google, IBM and Lyft release Istio 0.1 for Kubernetes. Envoy sidecars and a shared control plane provide a way to apply routing, telemetry and service authentication across applications written in different languages.

A small assembly correction fixes a carry bug in the optimized P-256 implementation. The accompanying regression vectors explain the scope more precisely than a general security warning.

SQLite 3.19.0 avoids recomputing indexed expressions and removes several other kinds of redundant query work. The changes affect execution without requiring applications to change their SQL.

The new TypeScript quick starts move beyond compiler setup to integrated framework examples, while deferring to framework documentation where it already provides a complete path.

Bundler 1.15 reduces startup work through indexed dependencies, lazy comparisons and stub specifications. It also moves Git gem validation to installation and adds commands for inspecting and restoring dependencies.

The May newsletter describes ongoing documentation migration and points readers to community replacements. The old server's removal separates retiring a service from updating the knowledge it held.

A default assigned too late could overwrite an explicit Lua time limit. Redis 3.2.9 fixes that ordering and improves error reporting and descriptor cleanup on uncommon paths.

PyCon 2017 opens in Portland with a program that combines scheduled instruction, implementation discussions, and attendee-created Open Spaces.

fish 2.6b1 adds disown and lets command substitutions access the terminal. The changes give interactive programs more explicit control over job lifetime and user interaction.

The May security update fixes leaks through planner statistics and foreign-server mappings, and restores libpq's required-SSL environment setting. Existing databases need attention beyond binary replacement.

CockroachDB 1.0 reaches general availability with distributed ACID transactions and PostgreSQL-compatible clients. Transaction retries and launch-time limits remain part of the application contract.

Confluent introduces early access to managed Kafka on AWS, separating cluster operations from the application's retained-log design.

Rust launches coordinated reviews of foundational crates, with API guidelines and a problem-oriented cookbook. The process seeks standard-library consistency while leaving packages free to evolve independently.

rqlite 3.14.0 changes the toolchain used for its release binaries. Go's HTTP redirect changes show why a compiler and standard-library update can affect database protocol behavior.

Docker 17.05 introduces named build stages and cross-stage copies, putting artifact selection inside the Dockerfile.

GCC 7 offers experimental support for the current C++17 draft. if constexpr changes template instantiation, while structured bindings and deduction reduce repetition at interfaces.

GCC 7 implements the floating types from TS 18661-3. Their names specify formats more directly, while distinct type identity and target support still shape how interfaces use them.

References in constants and statics can use an implicit static lifetime. The change shortens declarations without changing the lifetime they promise, alongside field initialization shorthand and clearer ownership diagnostics.

TypeScript 2.3 adds opt-in JavaScript checking, a strict configuration preset, generic defaults, and downlevel iteration with explicit runtime requirements.

Rails 5.1 integrates Capybara system tests and supports JavaScript dependencies through Yarn. The release also separates encrypted secrets from their master key and adds parameterized mailers.

The maintenance release distinguishes sensitive ZooKeeper paths from ordinary metadata and repairs several Streams and broker failures.