The Blog

CVE-2020-10933 comes from changing a reusable string buffer before a nonblocking read succeeds. The fix separates capacity from the visible string length.

Redis 6.0 RC3 fixes a critical connection-management crash and introduces ordered timeout tracking for blocking commands. The timeout implementation separates request waiting from idle-connection handling.

Beta 4 fixes writes racing with column backfills and restricts node-local uploads to administrators. The changes clarify how online schema work and operational file access cross different boundaries.

rqlite 5.1.1 corrects how freshness interacts with consistency levels. The implementation now applies its leader-contact threshold only to reads using level none.

ts-expect-error reports an unused directive when the following line stops producing a diagnostic. That gives negative type tests and temporary workarounds an explicit expiry condition.

Topology Manager reaches beta with a node admission policy for NUMA alignment. Kubernetes 1.18 also adds alpha debugging through ephemeral containers and improves the tools used to inspect resource changes.

Datasette 0.39 adds base_url for deployments under a proxy path and table metadata for choosing the initial sort order.

Clang 10 implements concepts under -std=c++2a. Its experimental caching switch exposes the interaction between constraint semantics and compile-time cost.

Swift 5.2 improves error diagnosis inside the type checker and adds more direct ways to express property projections in APIs.

The new PostgreSQL APT archive makes historical packages available through repository indexes. Package selection still depends on APT policy and the distribution being reconstructed.

Clang 10 lets optimization use more pointer-arithmetic guarantees and extends UBSan to diagnose the corresponding errors. New warnings also expose misleading C source.

Terraform 0.12.24 signs its Windows executables and fixes login file handling. A registry error-path repair also preserves useful diagnostics when no server response exists.

The maintenance release fixes a pattern leak, an invalid numeric read, and an overbroad recursion check without intentional language incompatibilities.

Producer buffer allocation and Connect offset reads could outlive a shutdown request. The maintenance release repairs those lifecycle paths within the 2.4 series.

Subslice patterns describe prefixes, suffixes, and borrowed remainders directly. The release also adds matches! and moves standard-library panic locations to their callers.

An embedding bug exposed how duplicate interpreter thread identities could corrupt context-variable lookups. The repair moves identity allocation under an existing lock.

The strengthened mitigation for CVE-2019-14271 shows how archive metadata can cause a host process to load code from a container filesystem.

Istiod combines control plane functions while Telemetry v2 becomes the default. Proxy-Wasm introduces an alpha extension path whose maturity differs from the native telemetry extensions shipped in this release.

The new protobuf API describes messages through their protobuf schema. That enables descriptor-driven tools and custom message implementations while a compatibility layer supports gradual migration.

Reaper 2.0.3 changes how sidecars store metrics and corrects a premature repair abort. The implementation shows why repair automation needs its own data model and timeout semantics.

The new knex-rqlite library gives Knex a rqlite client dialect. Its original interface shows both the convenience of integration and the distributed-database controls still outside that interface.

The point release repairs a static-item regression and projected Copy checks. A separate LLVM revert restores bounds checks lost during optimization.

Go 1.14 removes a scheduling dependency on function calls. Its runtime checks where a goroutine stopped before injecting a call that saves registers and enters the scheduler.

A Python 3.8 regression made readinto mandatory for C unpickling. Python 3.8.2 restores compatibility and exposes a useful distinction between stream and buffer interfaces.

Datasette 0.36 documents the application object, adds database registration methods, and supplies database context to connection hooks.

musl 1.2.0 gives 32-bit targets a 64-bit time_t. Compatibility depends on which interface crosses the boundary between old and newly compiled code.

ECMAScript private fields protect state after TypeScript has emitted JavaScript. Their inheritance behaviour and WeakMap-based output distinguish them from the existing private modifier.

Unicode 13 beta support arrives alongside identifier properties and character-name matching, with distinct consequences for regex authors.

A one-line dependency fix prevents Gem::Specification#to_ruby from relying on another part of the process to load the OpenSSL constants it uses.

Confluent reports more than 100 supported connectors. The useful distinction is between a reusable integration framework, a connector's behavior and the support attached to a particular implementation.