Notes on building observable systems and operating them at scale.
Gatekeeper expresses reusable policy logic through templates and applies it through Kubernetes constraints. Its audit and data replication mechanisms explain how admission policy can cover existing objects and relationships between resources.
P1842R0 extends compiler and build-system communication so dependency discovery can resolve headers before preprocessing them.
New Linux wrappers make kernel interfaces directly available through glibc, with distinct lifetime and record-layout contracts.
rqlite's 5.0 development branch adopts Go modules. Explicit requirements make the selected Raft and SQLite driver dependencies visible to contributors and build tooling.
Ian Lance Taylor's generics argument distinguishes reusable typed algorithms from interface-based workarounds. The current draft uses type parameters and contracts, with implementation experiments still underway.
An AWS SDK update changes which credentials the S3 backend selects when a named profile and static environment credentials coexist.
Rails 6 reaches its second release candidate with process and thread based test parallelism. Separate worker databases solve one part of isolation, while external resources still need explicit ownership.
A maintenance update improves index compatibility and repairs parallel DDL execution on subscribers. Its changes sit within a replication model that selects tables and changes at database level.
Cockroach Labs announces an October conference about hybrid and multi-cloud systems. The useful engineering questions concern data placement and operational boundaries as much as application portability.
Experimental rootless operation changes the host authority of the Docker daemon. GPU device requests add another explicit resource contract, with different requirements and limitations.
Cologne sends the C++20 draft to national-body review, removes contracts and adds library facilities for formatting and cooperative thread shutdown.
Perl 5.31.2 makes a missing digit after 0x or 0b fatal. The preceding development release had allowed tokenization that could silently change a program's meaning.
Generator types now distinguish yielded values, terminal returns and values supplied by next. Iterator results use done to preserve that distinction in control flow.
July's deprecation notice gives operators time to migrate before Kubernetes 1.16. Selectors and rollout defaults make the workload API changes a behavioral migration as well as a change of endpoint.
The Linux maintenance release fixes Calendar, DateFormatter, and HTTP response handling. Its changes show why shared Swift source still depends on platform library behavior.
RFC 49 proposes a standard structure and locked dependencies for Nix projects. Its central concern is reproducing evaluation before a build begins.
SQLite 3.29.0 adds separate controls for legacy string quoting in DML and DDL. Disabling the fallback makes an unresolved quoted identifier fail instead of becoming a string value.
Python 3.7.4 rejects control characters in HTTP URL paths and stops implicitly searching the current directory when PATH is absent on Unix.
N2402 proposes caller-owned conversion buffers and more explicit clock semantics, using existing C syntax to make interface requirements visible.
The July client release distinguishes certificate verification from hostname checks and adds an application-managed OAuth token lifecycle. Its tagged API explains what each setting actually guarantees.
Future supplies a stable polling and wakeup contract while async syntax remains forthcoming. The same release separates allocation from operating-system support and represents uninitialized storage without pretending it contains a valid value.
The July patch closes a gap between sidecar and ingress protocol configuration. Pilot now passes the HTTP/1.0 acceptance option into gateway connection managers when the compatibility mode is enabled.
The Top-K module capability uses HeavyKeeper to retain likely frequent items without a counter for every identity. Its command results also expose changes to the retained candidate list.
RedisTimeSeries adds retention, label filtering and aggregation to timestamped numeric samples. Its first general release replaces application-maintained time-series conventions with a dedicated data type.
A registry hostname was too broad a key for BuildKit's GCR authentication workaround. Docker 18.09.7 also turns comment-only Dockerfiles into a defined input error.
Go's proposed try built-in shortens a conditional return while leaving error context to defer or explicit checks. Its restrictions expose the design choices behind that separation.
Kafka 2.3 introduces incremental cooperative rebalancing for Connect. Workers retain tasks until explicit revocation, and deferred reassignment gives briefly absent workers time to return.
GCS module sources add an authenticated package distribution option, while a map-key lifecycle fix restores a narrower way to share resource management.
CVE-2019-10164 affects password handling in PostgreSQL and authentication handling in libpq. Updating the server alone leaves the client side of the issue unresolved.
Perl 5.31.1 enforces the deprecation of vec on strings containing code points above 255. The change clarifies what a byte-oriented operation can accept.