The Blog

The new Certified Kubernetes Security Specialist exam builds on current CKA certification and tests security across application build, deployment, and runtime. Its scope reflects the limits of treating cluster administration as sufficient security preparation.

WG21's first virtual plenary adopts the first C++23 changes. Literal suffixes for size types show how a small language addition can resolve recurring template and loop problems.

The November update closes a server privilege escalation and two client vulnerabilities. Safe maintenance depends on restricted execution, while clients must preserve connection policy and separate query data from control variables.

The November security release closes two paths from package inputs to build-time execution. It also corrects a recursive-division shift in math/big.

Terraform 0.14.0-rc1 previews dependency locking and sensitive values. Its transport, state and command changes also define concrete compatibility questions before the stable release.

Pebble becomes the default local storage engine while spatial indexing and Core backup support expand the database's uses. Each change has a distinct contract for storage, queries and recovery.

N2611 restates the principles governing the next C revision. Its scope puts existing code, implementation evidence, and understandable interfaces ahead of an unrestricted feature list.

Cassandra 4.0-beta3 aborts relevant repair sessions during truncation and propagates replica truncation failures. The changes address deletion races and the meaning of a successful response.

Rails 6.1 RC1 adds horizontal sharding and granular connection switching, while strict loading catches unintended association queries.

The new limits count manifest requests against authenticated users or anonymous IP addresses. That changes how shared infrastructure and automated image retrieval depend on registry authentication.

Datasette 0.51 combines a visual refresh with navigation hooks and URL helpers. Plugins can expose their tools within the application and respect its deployment prefix.

A Go runtime bug misinterprets daylight-saving information in slim zoneinfo files. Advisory A-56116 provides a SQL probe and a process-level workaround using an explicit zoneinfo archive.

PostgreSQL 13 support gives pglogical users another target for logical replication. Extension compatibility still leaves decisions about schemas, initial synchronization and application cutover.

The first Cassandra community changelog connects release work with technical explanations and usage research. Its value comes from making those different kinds of evidence easier to find.

Multicluster installation gains a configurable domain suffix, and diagnostics can fall back to exec when port forwarding is unavailable. The patch also adds an optional inbound TLS configuration change.

Nightingale adds desktop choices and updates Python while making container backends, option validation, and service access more explicit in configuration.

rqlite 5.5.1 fixes omitted CLI credentials and backup leader handling. Restore requests now recreate their body for each attempt, preserving the payload across redirects.

The 4.0.5 patch repairs noEmit and noEmitOnError handling in the semantic diagnostics builder. Build information must distinguish checked files from files whose output has been written.

Redis 6.0.9 fixes a potential heap overflow on affected allocators and changes WATCH handling of expired keys. Both changes correct assumptions about state that other code relies on.

Terraform 0.13.5 fixes provider configuration attachment through a module's local provider name. It also avoids repeated decoder-specification generation for deeply nested schemas.

A recursive-pattern correction and a new inspection function address different parts of understanding regex behavior.

The October Edge release displays existing Hub scan results locally. Understanding what triggered the scan and which image it describes remains part of using the report.

A missing runtime parameter changed how the garbage collector interpreted an argument pointer on 32-bit systems. The October maintenance release repairs that signature and other compiler-runtime assumptions.

Clang 11 applies P1766R1's restriction on unnamed classes with typedef names for linkage. Giving the class a tag resolves a problem caused by learning its identity too late.

The 2020 election fills three seats on Kubernetes' seven-member governing body. Its charter assigns technical ownership to SIGs while retaining responsibility for project structure and nontechnical escalation.

Clang 11 selects gnu17 when a C build omits -std. Making the language mode explicit separates a compiler upgrade from a change to the build's source assumptions.

Standard-library array implementations now use internal const-generics support across arbitrary lengths. That does not stabilize const generics for user code or remove every array limitation.

Confluent's Cluster Linking preview copies partition logs between independent clusters. Preserved offsets simplify migration, while asynchronous replication keeps a separate recovery boundary.

Python 3.9 removes the parallel collection names needed for type annotations. GenericAlias preserves type metadata while ordinary collection instances keep their existing runtime behaviour.

Ruby 2.7.2 disables deprecation warnings by default while retaining argument conversions scheduled for removal in Ruby 3.