The Blog

Richard Hipp explains how malicious FTS shadow-table changes could turn SQL access into native code execution. SQLite 3.26.0 fixes the bug and adds a separate defensive connection option.

The December release repairs replica-count decisions during node outages and delays splits that would multiply pending snapshot work during bulk operations.

Core developers select PEP 8016 as a Condorcet winner. The result establishes a five-person council model while leaving the choice of the council's members to a separate election.

Confluent moves selected components to its Community License while Apache Kafka remains Apache 2.0. The new restriction concerns offering the licensed software as a competing online service, making deployment purpose part of the license assessment.

The release adds detailed compatibility messages and repairs configuration uploads. Its tagged configuration path does not invoke the new checker for populated constraints.

The security release restricts malicious import paths in GOPATH mode and bounds certificate-chain signature checks. Build tools and deployed programs need different responses.

Redis 5.0.3 rejects queued writes if the server becomes a read-only replica before EXEC. It also narrows fatal error handling and improves local slot-repair transactions in redis-cli.

N2328 proposes storage instance as a term for the region reserved by an allocation or object definition. The distinction separates the storage's lifetime from an address that can later be reused.

dbForge Studio 2.0 introduces Standard edition around data movement, reporting and repeatable query work, while retaining a free Express edition.

The December mac81 build updates Compose to 1.23.2. Its most consequential correction reverses random suffixes for containers created by up while retaining collision avoidance for one-off run containers.

Rust 1.31 ships the 2018 edition with per-crate opt-in, a more precise borrow checker, and revised module paths. Existing dependencies can remain on Rust 2015.

IntelliCode's experimental TypeScript and JavaScript support brings contextual ranking to VS Code completion lists. The change helps choose among suggestions while leaving program meaning and correctness to the developer and existing tools.

Nightly Swift 5.0 development snapshots are available. Their value is testing the release branch against its compatibility goals while the release process still permits selected corrections.

nix-review 1.0 improves build selection, logs, and reports while preserving the distinction between reviewing a merged result and a standalone branch.

Kubeadm and CSI reach general availability in Kubernetes 1.13. Both establish supported integration points while leaving infrastructure-specific responsibilities outside the core workflow.

Cassandra's experimental transient replication uses incremental repair to move temporary data onto full replicas. The design reduces steady storage requirements while adding specific read, repair and failure constraints.

P1242R1 proposes a private implementation fragment inside a primary module interface file. The boundary reconciles refactoring-resistant export semantics with keeping an opaque type's definition in the same source file.

SE-0236 accepts minimum deployment versions in package manifests while removing the proposed platform restrictions. The distinction affects dependency compatibility and how authors interpret the platforms field.

Strict bind, call and apply checking preserves function parameter relationships through indirect invocation. BigInt support introduces a distinct numeric type and an explicit runtime-target requirement.

Perl 5.28.1 fixes an environment-variable size overflow and a crafted-pattern heap write, while correcting script-run digit matching.

Go's new evaluation process separates selection, implementation, and a final shipping decision. Small compatible proposals will test the process before larger changes.

AWS provider 1.49 adds Transit Gateway support, including attachments and distinct routing relationships. Its defaults make routing policy part of the initial configuration decision.

Kubernetes 1.12.3 changes the upgrade-aware proxy to inspect the backend response before starting bidirectional copying. The release also corrects how CSI attachment limits reach node status.

Redis 5.0.2 fixes history reads that could return new messages or duplicate a later entry when an older payload had been deleted. The patches make history mode explicit and constrain payload lookups to an exact ID.

Istio 1.0.4 fixes stale endpoints which could cause HTTP 503 responses. Its endpoint discovery code explains why removing destinations is as important as discovering new ones.

Kafka 2.1 strengthens replication by checking leader epochs and adds Zstandard and Java 11 support. The upgrade has separate compatibility boundaries for broker protocol, consumer offset storage and compressed records.

A targeted optimizer repair makes correlated EXISTS queries over generated rows executable, preserving filters and the one-result-per-outer-row meaning of EXISTS.

San Diego adopts ranges for the C++20 draft. The proposal connects constrained algorithms, projections and views while preserving existing library interfaces alongside the new facilities.

N2310 incorporates optional messages for static assertions. The change follows an earlier C++ argument about redundant text, compiler diagnostics and shared headers.

The patch handles a rustdoc trait-solving failure and bounds Cargo's progress display in MSYS terminals. The two fixes restore different parts of the development workflow.