The Blog

CVE-2018-8016 exposes an unauthenticated JMX/RMI endpoint in Cassandra 3.8 through 3.11.1. The implementation shows how a local connector and its registry acquired different network scopes.

IPVS and CoreDNS reach general availability in Kubernetes 1.11. Their integration shows why finding a Service and forwarding traffic to it remain separate operational problems.

Data classes generate ordinary object methods, while context variables associate state with execution context. Python 3.7 also formalizes dictionary order and introduces opt-in postponed annotations.

Confluent Hub launches with connectors, transformations and converters for Kafka Connect. Its catalog and client reduce artifact-handling work while leaving connector configuration and worker consistency as separate deployment concerns.

Perl 5.28 stabilizes separate numeric and string bitwise operations, while improving in-place editing and several other familiar constructs.

Stable architecture intrinsics let libraries choose specialized CPU implementations. The dyn Trait spelling makes an existing runtime dispatch choice visible in source.

The June 20 notice confirms that Ruby 2.2 support ended on March 31. Its maintenance history explains why the final patch is not a substitute for moving to a supported branch.

A new setting separates replacing node binaries from advancing the cluster version, preserving a deliberate point at which an operator can retain downgrade compatibility.

TypeScript 2.9.2 corrects JSON output under strict-mode, trailing-comma and source-map settings. The fixes preserve the distinction between a typed build input and an executable JavaScript source file.

Redis 4.0.10 fixes security defects in Lua helper libraries and a SCAN cursor error during hash-table shrinkage. The patches show why bounds checks and incremental iteration each require precise invariants.

C17 has completed its final vote and entered publication processing. The history of zero-size realloc explains why a correction revision can clarify a contract without making every implementation behave identically.

Rapperswil advances contracts for C++20 with separate controls for checking and continuation after a violation. The adopted wording also constrains side effects, redeclarations and postconditions.

The June Mac edge release fixes supervisor CPU consumption and a VPNKit memory leak. It also stops replacing an existing kubectl binary when managing the bundled Kubernetes environment.

A small compatibility change lets the existing go command consume some repositories adopting semantic import versioning before full module integration.

Day-zero EKS support brings the cluster into Terraform's AWS configuration. IAM readiness and control-plane lifecycle handling explain what that support provides.

SQLite 3.24.0 adds PostgreSQL-style UPSERT. Conflict targets, excluded values and conditional updates let a statement express how an existing row should change.

Istio 0.8 makes the new routing model available alongside streaming proxy configuration. The ADS implementation shows how declared mesh changes become updates to connected proxies.

Cachix launches hosted binary caches with an argument for sharing build results outside the central Nixpkgs package set.

Ruby 2.6 preview 2 exposes a method JIT that generates C and invokes GCC or Clang at runtime. The preview tests the compilation infrastructure before promising final application performance.

Numeric and symbolic properties now participate in keyof and mapped types. Import types separately let declarations refer to module types without changing a global script into a module.

Redis 5 RC1 introduces Streams with ordered entry IDs and non-destructive range reads. Its storage layout compresses repeated fields, while parts of the consumer-group implementation remain unfinished.

Kustomize introduces a way to reuse Kubernetes manifests without parameterizing every difference. Bases and overlays preserve resource declarations while recording environment-specific changes separately.

The Service Usage API becomes a prerequisite for managing project services. The provider's singular and plural resources express different ownership contracts.

The revised Go code of conduct addresses harmful behavior outside project forums and assigns enforcement to a trained Project Steward with institutional support.

Qualified index names expose a namespace difference between CockroachDB and PostgreSQL. Version 2.0.2 expands resolution for administrative statements used by existing tools.

The London NixCon announcement arrives after Nix 2.0, when common store operations and evaluation reproducibility offer concrete subjects for contributor discussion.

The planned retirement of search.cpan.org separates the maintenance of a documentation service from the continued use of CPAN packages.

The agreement to branch Cassandra 4.0 in early September follows an argument about who can validate it. A feature cutoff only helps when people can test the resulting database.

Strimzi 0.4 exposes Kubernetes resource settings and JVM memory options through its cluster configuration. The release also changes configuration keys and renames its controllers to operators.

impl Trait lets an API hide a concrete return type without requiring a boxed trait object. Rust 1.26 also simplifies matching borrowed values while preserving borrowing rules.