The Blog

The April patch fixes a nested-attribute diff crash and duplicate quoting of map keys, both caused by losing track of a value's representation.

Nix 2.8 experiments with fetching closures and building impure derivations into content-addressed paths. Its new formatting command applies the more familiar idea of declaring a project tool in the flake.

CVE-2022-28738 affects construction of regex objects from crafted pattern strings. Ruby 3.0.4 and 3.1.2 repair the memory handling, independently of the risks of expensive pattern matching.

Advisory A-79281 concerns duplicate logical keys imported into regional-by-row tables. The repair adds post-import validation for constraints that physical index keys do not enforce by themselves.

The 4.7 beta introduces node12 and nodenext modes. Package type, output extensions and conditional exports become part of how TypeScript resolves and emits modules.

pgAdmin 6.8 makes LDAP distinguished-name matching case insensitive by default. Its configuration option preserves the previous behavior where an installation needs it.

Stable coverage instrumentation connects runtime counters to source regions embedded in the binary. Cargo's build timings provide separate evidence about compilation and dependency scheduling.

musl adds qsort_r with an explicit callback argument and makes free preserve errno. Both changes improve the contracts between reusable C code and its callers.

The Go team's workspace guidance explains how to develop related modules without temporary edits to every go.mod. Workspace selection and dependency synchronization remain distinct operations.

Python 3.11.0a7 includes tomllib. Its read-only API addresses a packaging dependency while leaving document editing and formatting to other libraries.

March's readiness guidance separates application image compatibility from node runtime and agent dependencies. cri-dockerd also gives Docker Engine users a path through the coming removal.

SQLite 3.38.2 repairs a wrong-result query optimization. A predicate about null-extended join results cannot safely define which stored rows enter a Bloom filter.

PgBouncer 1.17 adds host lists and changes when clients can learn about missing databases and backend failures. Credential-file reloads also become explicit.

A signal-stack improvement broke Python builds on Red Hat Enterprise Linux 6. Python 3.10.4 repairs the feature detection while retaining support for larger processor state.

Redis Stack combines module capabilities with Redis, client libraries, and RedisInsight. The launch reduces integration work while preserving distinct server, module, and licensing boundaries.

Two documentation fixes in RubyGems show how comment placement can hide an API or detach its example. The release also installs Bundler 2.3.10 as a default gem.

if consteval lets a constexpr function call immediate functions on its constant-evaluation path. Clang 14 also implements alias declarations in statement initializers, correcting a smaller grammar inconsistency.

OpenCL C 3.0 requires a compiler to understand absent capabilities as well as available ones. Clang 14 completes its experimental implementation and adds a SPIR-V route through external translation tools.

Experimental VirtioFS changes how a Linux guest accesses Mac source files. The release addresses the cost of shared directories while exposing the importance of filesystem semantics across the virtual machine boundary.

Go 1.18 adds type parameters, native fuzzing and workspaces. Their practical value depends on understanding the distinct contracts each mechanism establishes.

Swift 5.6 adds the any spelling for existential types and package plugins for generated build commands. Both changes expose decisions that previously hid behind convenient syntax or external tooling.

A catch block with a lexical declaration could break B::Deparse. Perl 5.34.1 repairs that tooling failure while retaining the compatibility policy of the maintenance branch.

Dollar-parenthesis substitutions let fish preserve multiline command output inside double quotes, while terminal theme selection reduces configuration overhead.

The maintenance release fixes producer default handling and distinguishes implicit idempotence from an explicit requirement. Conflicting acknowledgement, retry and in-flight settings determine whether construction succeeds.

The upcoming Cassandra 4.1 release can consume PEM credentials directly through a configurable SSL context factory. Its implementation preserves Java key managers while removing an external conversion step.

CVE-2022-24726 lets unauthenticated input crash istiod through an exposed webhook. The advisory connects a Go parsing defect to the control plane's network exposure.

A Stage 0 proposal would let JavaScript accept erasable type syntax. Engines would ignore the annotations while external checkers retain responsibility for their meaning.

Advisory A-76522 concerns join filters lost during optimization. The repair removes redundant eligibility logic that could prevent a valid predicate from reaching the reordered plan.

CVE-2022-24713 bypasses compilation limits by repeating expressions that consume time without growing the compiled program. Regex 1.5.5 restores the budget by accounting for that work.

Nix 2.7 standardizes default packages and development shells as entries named default. Compatibility fallbacks keep older output names usable while flake check reports the deprecated forms.