The Blog

CVE-2022-41862 concerns libpq clients negotiating Kerberos encryption. The same maintenance release repairs generated-column and replication correctness.

The second 3.11 maintenance release repairs small standard-library contracts whose failures reach scientific code, subprocess handling and archive readers.

Kafka 3.4 adds an early-access path from ZooKeeper to KRaft. The migration driver shows why changing the metadata authority requires more than restarting brokers with a different setting.

The global NOSQLLOGIN privilege did not block SQL access in early 22.2 releases. The older role option provides a workaround with different inheritance behavior.

The April freeze of k8s.gcr.io affects supported patch releases as well as Kubernetes 1.27. Its replacement changes how image distribution works and where restricted networks need a local boundary.

Dragonfly 0.15 adds the protocol behaviour needed for Sentinel-managed failover. Its integration tests show how discovery and promotion fit together, and where the evidence remains limited.

A new getent option exposes address-family filtering, while the runtime removes legacy loader searches and fixes a syslog disclosure.

Engine 23 routes Linux builds through Buildx and BuildKit. The change makes build dependencies, temporary mounts and explicit outputs part of the ordinary Docker workflow.

Go 1.20 previews profile-guided inlining using CPU profiles. Its library and language changes also make existing abstractions carry information that previously required custom conventions.

PubGrub changes how Bundler searches for compatible versions and explains failure, while Rust extension templates connect gem scaffolding to Cargo.

Istio's published assessment finds issues in file fetching and HTTP handling while examining its threat model and continuous testing. The results distinguish implementation security from the policies a deployed mesh must enforce.

January ballot review exposes the tension between generic C code and declarations that state an arithmetic contract explicitly.

The beta supports the Stage 3 decorator proposal with target and context arguments. Existing experimental decorators retain a separate checking and emission mode.

The Core Team report for 2022 records a time-zone compatibility decision alongside conduct policy and trademark work.

Redis 7.0.8 fixes integer overflows in string, sorting, and random-member commands. The patches validate derived sizes before they reach allocation or reply construction.

Perl 5.37.8 adds embedded regex code forms that leave engine optimizations enabled. Their execution frequency explains the tradeoff between observing a matcher and preserving its performance.

The announced Summit program brings transaction work together with deployment and application concerns. Its proposed direction is easier to assess against Cassandra's existing partition-oriented model.

An internal Console API gave Cloud Developer users SQL administrator-like access. The fix restricts the per-cluster SQL identities used by the Console.

The maintenance release continues Swift 5.7, whose optional-binding shorthand reduces repetition while preserving explicit value semantics.

Nix 2.13 connects flake references to the older command interface. The change lets source resolution evolve without requiring every expression and build invocation to change together.

Docker Desktop 4.16 makes Extensions generally available. Its image packaging and search integration explain how Docker is extending the local development environment.

Rust 1.66.1 fixes Cargo's missing SSH host-key verification. The advisory also identifies Git URL rewrites that can make an apparently HTTPS-based dependency workflow use the affected transport.

The optional GIL proposal moves synchronization into reference counting and containers, with consequences for native extensions and package distribution.

Go 1.19.5 fixes atomic comparisons on several architectures and restores typed certificate errors on macOS. Both changes preserve behavior that application code should be able to take for granted.

Datasette adds a convenient default for disabling arbitrary SQL. SpatiaLite explains why read-only database access does not establish that every callable function is safe for public use.

P2757R0 proposes closing a compile-time checking gap for dynamic formatting parameters without requiring their runtime values.

fish 3.6 adds a searchable history pager and programmable abbreviation expansion. Both changes keep command construction visible in the interactive editor.

rqlite 7.13.1 corrects the filesystem behavior of disabled CLI history. The small fix distinguishes retaining no commands from retaining no history file.

The planned Immerok acquisition puts stateful computation beside Confluent's Kafka service. Event time and checkpoint recovery explain why operating that computation is a separate problem.

Kubernetes 1.26 gives disruption budgets a choice about unhealthy pods. That choice separates preserving a chance of recovery from allowing node maintenance to proceed.