Notes on building observable systems and operating them at scale.
Kubernetes 1.12 brings kubelet client TLS bootstrapping to general availability. Its implementation separates local key generation, certificate requests and approval policy.
GORACE halt_on_error makes an instrumented test process exit after its first race report. The change concerns when execution stops, since detected races already fail Go tests.
The first Python 3.7 maintenance candidate disables default external-entity processing in selected XML parsers. It also repairs compatibility details in dataclasses and the contextvars C API.
The September 24 beta adds a fuller SQL interface for replication zones, including prepared statements and explicit operations for defaults and removal.
An unchecked size multiplication can leave str::repeat with too little storage for its raw copies. The disclosed fix checks capacity before the unsafe implementation uses it.
Perl 5.29.3 corrects spurious warnings involving overloaded constants and repairs an assignment followed by concatenation.
Clang 7 combines experimental C++2a support with fixes to existing C++ binary layout. Its release documentation distinguishes incomplete draft facilities from changes that already affect ordinary class arguments and inheritance.
Strimzi 0.7 adds external listeners through OpenShift Routes, load balancers and node ports. Each mode exposes individual brokers as well as bootstrap, with TLS and authentication configured as separate concerns.
Clang 7 adds a sanitizer for implicit integer conversions that lose data. It catches suspicious behavior that the C language can permit and that undefined-behavior checks therefore do not include by default.
Bundler 1.16.5 prefers stable versions during patch updates and handles a compact-index range failure. Its maintenance fixes concern both choosing dependencies and retrieving the metadata used to choose them.
PostgreSQL publishes a Code of Conduct with a named committee, defined reporting arrangements and Core Team oversight of serious sanctions.
Swift 4.2 introduces Hasher and hash(into:), separating component selection from hash-function design. The change improves composition and lets the library control hashing policy for Set and Dictionary.
SQLite 3.25.0 adds analytical queries that retain individual rows and schema renames that update dependent SQL. Both changes reduce work previously left to applications.
Docker's Mac beta adopts a desktop version number and removes AUFS and OS X 10.11 support. The storage change requires separating replaceable image artifacts from local state before resetting an older disk image.
The new CloudFront resource manages uploaded public keys for uses such as field-level encryption. Its schema makes key replacement and configuration updates distinct operations.
A September tooling meeting proposal exposes the package-loading work behind module support in editors and analysis tools.
Istio 1.0.2 fixes a sidecar crash on the mutual TLS port and validates SNI hosts. These changes address different failure points between traffic arrival and configuration acceptance.
Redis 5 RC5 changes script replication and replica memory-limit defaults. It also fixes blocking reads of streams whose entries have all been deleted.
Nix 2.1 adds a systemd Linux multi-user installation route and extends the evaluator and cache implementation.
SwiftSyntax now has its own SwiftPM repository and toolchain-specific tags. The move simplifies use by tools while retaining compiler dependencies for generated syntax definitions and tests.
Istio 1.0.1 improves Pilot scalability and adds limited same-host configuration merging. The DestinationRule implementation shows exactly which settings combine and which conflicts remain significant.
rqlite's CircleCI 2.0 migration separates ordinary tests, race detection and system tests into explicit jobs. Its configuration shows why testing the daemon needs more than a Go image.
Babel 7 can process TypeScript source inside an existing Babel pipeline. Type checking remains a separate compiler operation, and single-file transformation places limits on the supported constructs.
Go 1.11 lets dependency identity move beyond GOPATH and compiles programs for JavaScript WebAssembly hosts. Both changes arrive with explicit experimental boundaries.
Redis Labs confirms that core Redis remains BSD-licensed while its modules use Apache 2.0 with Commons Clause restrictions. The module license defines selling broadly enough to include certain hosted services.
Docker 18.06.1 stops its managed containerd from starting the CRI plugin by default. The change addresses an unexpected listener on port 10010 and clarifies the difference between embedded and standalone runtime configurations.
Unicode 11 support in Perl 5.29.2 preserves whitespace tailoring and exposes the practical consequences of new Georgian case mappings.
The first remote backend maps local workspace names to Enterprise workspaces and runs plans remotely. Other execution operations still require the web interface.
Replacing nix-devel with Discourse changes the shared discussion venue while leaving archive import and email participation as distinct practical concerns.
A double iterator advance could omit a live row after a deletion marker. The August release repairs the export loop and bounds storage batch grouping for recovery.