The Blog

A deprecated plugin loader can execute a library placed in a shared temporary directory. The advisory distinguishes this trust failure from the memory-safety guarantees of Rust.

C17's publication consolidates corrections to C11. Its mutex and condition-variable resolutions explain why failed acquisition and a returned wait do not establish application state.

P1143R0 proposes a constinit attribute for static and thread storage duration. It makes an initialization requirement explicit without claiming that compiler optimization alone supplies a portable guarantee.

SE-0216 accepts callable values for dynamic-language bindings. The design retains compile-time checks on argument structure while deferring the foreign call's meaning to a library.

The second PostgreSQL 11 beta exposes a gap between implementing channel binding and letting clients require it, changing how the project describes the feature.

CVE-2018-8016 exposes an unauthenticated JMX/RMI endpoint in Cassandra 3.8 through 3.11.1. The implementation shows how a local connector and its registry acquired different network scopes.

IPVS and CoreDNS reach general availability in Kubernetes 1.11. Their integration shows why finding a Service and forwarding traffic to it remain separate operational problems.

Data classes generate ordinary object methods, while context variables associate state with execution context. Python 3.7 also formalizes dictionary order and introduces opt-in postponed annotations.

Confluent Hub launches with connectors, transformations and converters for Kafka Connect. Its catalog and client reduce artifact-handling work while leaving connector configuration and worker consistency as separate deployment concerns.

Perl 5.28 stabilizes separate numeric and string bitwise operations, while improving in-place editing and several other familiar constructs.

Stable architecture intrinsics let libraries choose specialized CPU implementations. The dyn Trait spelling makes an existing runtime dispatch choice visible in source.

The June 20 notice confirms that Ruby 2.2 support ended on March 31. Its maintenance history explains why the final patch is not a substitute for moving to a supported branch.

A new setting separates replacing node binaries from advancing the cluster version, preserving a deliberate point at which an operator can retain downgrade compatibility.

TypeScript 2.9.2 corrects JSON output under strict-mode, trailing-comma and source-map settings. The fixes preserve the distinction between a typed build input and an executable JavaScript source file.

Redis 4.0.10 fixes security defects in Lua helper libraries and a SCAN cursor error during hash-table shrinkage. The patches show why bounds checks and incremental iteration each require precise invariants.

C17 has completed its final vote and entered publication processing. The history of zero-size realloc explains why a correction revision can clarify a contract without making every implementation behave identically.

Rapperswil advances contracts for C++20 with separate controls for checking and continuation after a violation. The adopted wording also constrains side effects, redeclarations and postconditions.

The June Mac edge release fixes supervisor CPU consumption and a VPNKit memory leak. It also stops replacing an existing kubectl binary when managing the bundled Kubernetes environment.

A small compatibility change lets the existing go command consume some repositories adopting semantic import versioning before full module integration.

Day-zero EKS support brings the cluster into Terraform's AWS configuration. IAM readiness and control-plane lifecycle handling explain what that support provides.

SQLite 3.24.0 adds PostgreSQL-style UPSERT. Conflict targets, excluded values and conditional updates let a statement express how an existing row should change.

Istio 0.8 makes the new routing model available alongside streaming proxy configuration. The ADS implementation shows how declared mesh changes become updates to connected proxies.

Cachix launches hosted binary caches with an argument for sharing build results outside the central Nixpkgs package set.

Ruby 2.6 preview 2 exposes a method JIT that generates C and invokes GCC or Clang at runtime. The preview tests the compilation infrastructure before promising final application performance.

Numeric and symbolic properties now participate in keyof and mapped types. Import types separately let declarations refer to module types without changing a global script into a module.

Redis 5 RC1 introduces Streams with ordered entry IDs and non-destructive range reads. Its storage layout compresses repeated fields, while parts of the consumer-group implementation remain unfinished.

Kustomize introduces a way to reuse Kubernetes manifests without parameterizing every difference. Bases and overlays preserve resource declarations while recording environment-specific changes separately.

The Service Usage API becomes a prerequisite for managing project services. The provider's singular and plural resources express different ownership contracts.

The revised Go code of conduct addresses harmful behavior outside project forums and assigns enforcement to a trained Project Steward with institutional support.

Qualified index names expose a namespace difference between CockroachDB and PostgreSQL. Version 2.0.2 expands resolution for administrative statements used by existing tools.