The Blog

Perl 5.28.1 fixes an environment-variable size overflow and a crafted-pattern heap write, while correcting script-run digit matching.

Go's new evaluation process separates selection, implementation, and a final shipping decision. Small compatible proposals will test the process before larger changes.

AWS provider 1.49 adds Transit Gateway support, including attachments and distinct routing relationships. Its defaults make routing policy part of the initial configuration decision.

Kubernetes 1.12.3 changes the upgrade-aware proxy to inspect the backend response before starting bidirectional copying. The release also corrects how CSI attachment limits reach node status.

Redis 5.0.2 fixes history reads that could return new messages or duplicate a later entry when an older payload had been deleted. The patches make history mode explicit and constrain payload lookups to an exact ID.

Istio 1.0.4 fixes stale endpoints which could cause HTTP 503 responses. Its endpoint discovery code explains why removing destinations is as important as discovering new ones.

Kafka 2.1 strengthens replication by checking leader epochs and adds Zstandard and Java 11 support. The upgrade has separate compatibility boundaries for broker protocol, consumer offset storage and compressed records.

A targeted optimizer repair makes correlated EXISTS queries over generated rows executable, preserving filters and the one-result-per-outer-row meaning of EXISTS.

San Diego adopts ranges for the C++20 draft. The proposal connects constrained algorithms, projections and views while preserving existing library interfaces alongside the new facilities.

N2310 incorporates optional messages for static assertions. The change follows an earlier C++ argument about redundant text, compiler diagnostics and shared headers.

The patch handles a rustdoc trait-solving failure and bounds Cargo's progress display in MSYS terminals. The two fixes restore different parts of the development workflow.

Docker 18.09 removes BuildKit's experimental daemon requirement and adds build secrets and SSH forwarding. Remote daemon access over SSH is a separate capability with different authentication and installation requirements.

A quoting error in generated trigger definitions could turn a later dump and restore into privileged execution. PostgreSQL 11.1 repairs that path and tightens statistics permissions.

The steering council proposal gives five elected developers broad powers while reserving changes to the governing rules for the core team. Its design separates ordinary delegated decisions from exceptional intervention.

SQLite 3.25.3 strengthens defenses against malformed databases and corrects virtual-table and window-function behavior. Its versioned tests show why internal FTS tables require defensive parsing.

Bundler's new major-version policy follows Ruby's maintenance boundaries. The announced Bundler 2 changes drop obsolete runtimes and RubyGems versions and move errors to standard error while retaining existing Gemfile behavior.

TypeScript 3.1.5 aligns two compiler decisions about whether an alias refers to a runtime value. The correction prevents an exported const-enum alias from acquiring unnecessary JavaScript output.

Docker's FIPS 140-2 announcement concerns the enterprise engine's cryptographic module. Understanding the module boundary and approved operating mode explains both the value of the validation and the limits of the claim.

Istio 1.0.3 requires its validating webhook and restores ServiceEntry validation. The validator checks relationships between hosts, endpoint resolution and ports which ordinary YAML parsing cannot establish.

CockroachDB 2.1 introduces Enterprise beta changefeeds into Kafka and a limited-availability managed service, while broadening migration and query-planning tools.

Cassandra's audit logging design puts user and request context into a configurable logging path. Its important tradeoff concerns what happens when the database produces records faster than the logger can persist them.

Attribute and function-like procedural macros become stable, with explicit macro imports and clearer paths. Token streams keep generated code connected to source structure and diagnostics.

The HashiConf preview addresses the divide between HCL structure and interpolation. Expressions, conditional omission, and richer module values change how configuration can be composed.

Perl 5.29.4 increases its regex repetition capacity, but the compiler reserves the top value and rejects explicit counts of 65,535.

Python 3.7.1 corrects timeout calculations in concurrent.futures and protects asyncio task enumeration. Other maintenance changes address process lifetimes and locks around fork.

librdkafka 0.11.6 repairs stalled messages after broker connection failure and a Windows timer conversion that could wrap after days of uptime. Both fixes concern progress that a healthy-looking client process could stop making.

WG14's Pittsburgh agenda includes competing interpretations of malloc alignment. N2293 explains how the choice affects small allocation sizes and the implementations that serve them.

PostgreSQL 11 adds expression compilation, transaction-controlling procedures and broader partition support. Each change alters where a different part of a workload executes.

CVE-2018-16395 affects OpenSSL::X509::Name comparisons in Ruby's OpenSSL extension. A wrong positive-result threshold can convert distinct names into equality, with consequences for application trust decisions.

Redis 5 ships Streams with independent reads, consumer groups, and pending-entry tracking. Understanding the separate entry and delivery state explains acknowledgement, recovery, retention, and persistence.