The Blog

A new getent option exposes address-family filtering, while the runtime removes legacy loader searches and fixes a syslog disclosure.

Engine 23 routes Linux builds through Buildx and BuildKit. The change makes build dependencies, temporary mounts and explicit outputs part of the ordinary Docker workflow.

Go 1.20 previews profile-guided inlining using CPU profiles. Its library and language changes also make existing abstractions carry information that previously required custom conventions.

PubGrub changes how Bundler searches for compatible versions and explains failure, while Rust extension templates connect gem scaffolding to Cargo.

Istio's published assessment finds issues in file fetching and HTTP handling while examining its threat model and continuous testing. The results distinguish implementation security from the policies a deployed mesh must enforce.

January ballot review exposes the tension between generic C code and declarations that state an arithmetic contract explicitly.

The beta supports the Stage 3 decorator proposal with target and context arguments. Existing experimental decorators retain a separate checking and emission mode.

The Core Team report for 2022 records a time-zone compatibility decision alongside conduct policy and trademark work.

Redis 7.0.8 fixes integer overflows in string, sorting, and random-member commands. The patches validate derived sizes before they reach allocation or reply construction.

Perl 5.37.8 adds embedded regex code forms that leave engine optimizations enabled. Their execution frequency explains the tradeoff between observing a matcher and preserving its performance.

The announced Summit program brings transaction work together with deployment and application concerns. Its proposed direction is easier to assess against Cassandra's existing partition-oriented model.

An internal Console API gave Cloud Developer users SQL administrator-like access. The fix restricts the per-cluster SQL identities used by the Console.

The maintenance release continues Swift 5.7, whose optional-binding shorthand reduces repetition while preserving explicit value semantics.

Nix 2.13 connects flake references to the older command interface. The change lets source resolution evolve without requiring every expression and build invocation to change together.

Docker Desktop 4.16 makes Extensions generally available. Its image packaging and search integration explain how Docker is extending the local development environment.

Rust 1.66.1 fixes Cargo's missing SSH host-key verification. The advisory also identifies Git URL rewrites that can make an apparently HTTPS-based dependency workflow use the affected transport.

The optional GIL proposal moves synchronization into reference counting and containers, with consequences for native extensions and package distribution.

Go 1.19.5 fixes atomic comparisons on several architectures and restores typed certificate errors on macOS. Both changes preserve behavior that application code should be able to take for granted.

Datasette adds a convenient default for disabling arbitrary SQL. SpatiaLite explains why read-only database access does not establish that every callable function is safe for public use.

P2757R0 proposes closing a compile-time checking gap for dynamic formatting parameters without requiring their runtime values.

fish 3.6 adds a searchable history pager and programmable abbreviation expansion. Both changes keep command construction visible in the interactive editor.

rqlite 7.13.1 corrects the filesystem behavior of disabled CLI history. The small fix distinguishes retaining no commands from retaining no history file.

The planned Immerok acquisition puts stateful computation beside Confluent's Kafka service. Event time and checkpoint recovery explain why operating that computation is a separate problem.

Kubernetes 1.26 gives disruption budgets a choice about unhealthy pods. That choice separates preserving a chance of recovery from allowing node maintenance to proceed.

Terraform 1.3.7 fixes an inconsistency in module version constraints and a null-block panic in lifecycle processing.

Dragonfly 0.13 moves eligible string payloads into SSD files while retaining its in-memory dictionary. Its implementation shows how batching and asynchronous writes shape the memory savings.

SQLite 3.40.1 corrects safe mode in the command-line shell so functions such as writefile are blocked. A SELECT statement can have filesystem effects when the host registers functions that perform them.

Ruby 3.2 pairs a memoized regex matcher with timeout controls and moves YJIT out of experimental status. The release also brings CRuby to WASI with explicit limits on the initial port.

A UK committee-draft comment asks what preserving a value means across floating-point types. Complex values, signed zero, and NaNs expose ambiguities beyond ordinary rounding.

Perl 5.37.7 adds defined-or and logical-or defaults to signature parameters. The choice determines whether zero, empty text, or an explicitly undefined argument survives parameter binding.