The Blog

CVE-2020-8557 lets a sufficiently privileged container consume node disk through its hosts file without that usage entering pod eviction accounting. The fix connects the generated file to the pod's ephemeral storage total.

P2183R0 reviews how executor properties compose. Its examples distinguish a requested preference from a guarantee and expose the limits of generic blocking adaptation.

A request-body read can write an HTTP response, and a platform verifier can omit requested policy. The July security release repairs both assumptions.

Google plans to transfer Istio's marks to the Open Usage Commons. The announcement separates trademark stewardship from source licensing and the project's still-evolving decision-making rules.

N2543 proposes checked addition, subtraction, and multiplication. Its success flag describes representability, while the caller still decides how to handle failure.

A copied drop-job identifier could prevent a truncated table from being renamed. The repair separates preventing new bad metadata from handling descriptors already affected by the bug.

The new terminal browser follows store-path dependencies, helping explain closure size without confusing a dependency graph with reclaimable disk space.

Datasette 0.45 adds magic parameters for canned queries. Actor fields and server-generated timestamps can enter SQL without becoming editable form inputs.

The June advisory fixes several resource-exhaustion vulnerabilities, but CVE-2020-8663 also requires configuring a downstream connection ceiling. A patched binary and an effective runtime limit are separate parts of the mitigation.

Salvatore Sanfilippo steps back as Redis maintainer and asks Yossi Gottlieb and Oran Agra to lead the project. Their proposed core team changes how development responsibility is shared while preserving a stated preference for simplicity.

SIG Windows describes a common orchestration model with distinct operating system behavior. Its June spotlight explains the worker-node focus and the cross-project work required to support existing Windows applications.

Debug HTTP handlers gain session and role checks, while changefeeds without a resolved interval flush less often. The patch addresses access control and the cost of slow downstream sinks.

A hang in the SSL tests exposed an unsupported OpenSSL configuration. Python 3.7.8 makes the thread-safety requirement explicit when compiling its extension modules.

Generic tuple spreads let one signature preserve the order and types of concatenated inputs. Labeled elements improve how those argument lists appear to callers.

The ACI beta changes a Docker context from a choice of engine into a choice of execution platform. Familiar commands now need an explicit account of their target and supported behavior.

Beta 2 changes hash aggregation controls and improves reporting of worker resource use. Its implementation shows how spilling bounds new groups while continuing work on existing groups.

Terraform 0.12.28 corrects the Go version used to build the maintenance binary. The reported failure occurred before ordinary configuration work, even during terraform version.

Sawyer X's plan uses a major version to change defaults while retaining the 5.32 implementation, with compatibility and support details still to settle.

The first upstream patch handles macOS version numbering, showing how a hardware transition reaches shared compiler infrastructure before Swift-specific support.

Transactional producers need to survive missing responses and classify failures correctly. The June maintenance release fixes crashes and makes several offset-enrollment errors retryable.

Reaper 2.0.5 raises the default segment count per node from 16 to 64 and changes the Docker setting. The change reduces the work assigned to an individual repair segment.

CVE-2020-8185 allowed untrusted requests to invoke pending application migrations. The patch changes the middleware condition that enables error actions.

The June generics experiment removes contracts and adds a translation tool. Its purpose is to test whether the design solves concrete problems without committing Go to an implementation.

rqlite 5.4.0 exposes join attempt counts and intervals at startup. The implementation retries the configured address list in rounds, which matters when interpreting the settings.

P2093R0 proposes connecting C++ formatting directly to output. It also addresses Unicode terminals and keeps argument preparation separate from the shared output implementation.

N2534 proposes _ExtInt types for explicitly sized arithmetic. Its exception to integer promotion is central to the hardware use case.

Async code can now compile without std because polling context no longer depends on thread-local storage. Cargo also gains built-in dependency and feature graph inspection.

SQLite 3.32.2 corrects a bytecode-engine defect that could report a successful COMMIT after failure. The transaction rules explain why the returned outcome matters.

The first release candidate exposes changes to ranges, constants, and byte operations that matter more to existing code than a feature list alone.

Cass Operator 1.2 adds a rack-specific recovery path for broken configuration changes. Its implementation shows why database controllers need a way to apply corrections while nodes are unhealthy.