The Blog

Docker's FIPS 140-2 announcement concerns the enterprise engine's cryptographic module. Understanding the module boundary and approved operating mode explains both the value of the validation and the limits of the claim.

Istio 1.0.3 requires its validating webhook and restores ServiceEntry validation. The validator checks relationships between hosts, endpoint resolution and ports which ordinary YAML parsing cannot establish.

CockroachDB 2.1 introduces Enterprise beta changefeeds into Kafka and a limited-availability managed service, while broadening migration and query-planning tools.

Cassandra's audit logging design puts user and request context into a configurable logging path. Its important tradeoff concerns what happens when the database produces records faster than the logger can persist them.

Attribute and function-like procedural macros become stable, with explicit macro imports and clearer paths. Token streams keep generated code connected to source structure and diagnostics.

The HashiConf preview addresses the divide between HCL structure and interpolation. Expressions, conditional omission, and richer module values change how configuration can be composed.

Perl 5.29.4 increases its regex repetition capacity, but the compiler reserves the top value and rejects explicit counts of 65,535.

Python 3.7.1 corrects timeout calculations in concurrent.futures and protects asyncio task enumeration. Other maintenance changes address process lifetimes and locks around fork.

librdkafka 0.11.6 repairs stalled messages after broker connection failure and a Windows timer conversion that could wrap after days of uptime. Both fixes concern progress that a healthy-looking client process could stop making.

WG14's Pittsburgh agenda includes competing interpretations of malloc alignment. N2293 explains how the choice affects small allocation sizes and the implementations that serve them.

PostgreSQL 11 adds expression compilation, transaction-controlling procedures and broader partition support. Each change alters where a different part of a workload executes.

CVE-2018-16395 affects OpenSSL::X509::Name comparisons in Ruby's OpenSSL extension. A wrong positive-result threshold can convert distinct names into equality, with consequences for application trust decisions.

Redis 5 ships Streams with independent reads, consumer groups, and pending-entry tracking. Understanding the separate entry and delivery state explains acknowledgement, recovery, retention, and persistence.

The 2018 Steering Committee election fills three seats for two-year terms. The election process distinguishes contributor representation from corporate sponsorship and technical decision-making.

rqlite 4.3.1 keeps a removed node's Raft subsystem running. Reusing its address still requires clearing its old local data before joining again.

The October explanation of Wire shows how provider functions become ordinary initialization code, with missing dependencies detected during generation.

The new swift run --repl option builds a package and prepares imports and runtime symbols for interactive use. Its implementation combines module search paths with a temporary dynamic-library product.

P0980R0 proposes constant-evaluation support for basic_string. Character traits, storage lifetime and existing library instantiations explain why adding constexpr to the declarations is only part of the work.

NixOS 18.09 updates Nix and the system base while changing sandbox defaults, application wrappers, platform meanings, and Kubernetes permissions.

Mapped types can transform tuple elements without converting array methods and length into ordinary mapped properties. The compiler also supports version-specific declaration paths through typesVersions.

Kubernetes 1.12 brings kubelet client TLS bootstrapping to general availability. Its implementation separates local key generation, certificate requests and approval policy.

GORACE halt_on_error makes an instrumented test process exit after its first race report. The change concerns when execution stops, since detected races already fail Go tests.

The first Python 3.7 maintenance candidate disables default external-entity processing in selected XML parsers. It also repairs compatibility details in dataclasses and the contextvars C API.

The September 24 beta adds a fuller SQL interface for replication zones, including prepared statements and explicit operations for defaults and removal.

An unchecked size multiplication can leave str::repeat with too little storage for its raw copies. The disclosed fix checks capacity before the unsafe implementation uses it.

Perl 5.29.3 corrects spurious warnings involving overloaded constants and repairs an assignment followed by concatenation.

Clang 7 combines experimental C++2a support with fixes to existing C++ binary layout. Its release documentation distinguishes incomplete draft facilities from changes that already affect ordinary class arguments and inheritance.

Strimzi 0.7 adds external listeners through OpenShift Routes, load balancers and node ports. Each mode exposes individual brokers as well as bootstrap, with TLS and authentication configured as separate concerns.

Clang 7 adds a sanitizer for implicit integer conversions that lose data. It catches suspicious behavior that the C language can permit and that undefined-behavior checks therefore do not include by default.

Bundler 1.16.5 prefers stable versions during patch updates and handles a compact-index range failure. Its maintenance fixes concern both choosing dependencies and retrieving the metadata used to choose them.