The Blog

Docker 18.06 exposes BuildKit through docker build. Its dependency graph separates Dockerfile interpretation from execution and gives the builder a different basis for scheduling work and reusing results.

INSERT ON CONFLICT had an update path that omitted CHECK validation. CockroachDB 2.0.4 validates the updated values before queuing the write.

Guido van Rossum steps down as BDFL after accepting PEP 572. His announcement leaves proposal decisions and the admission of core developers for the existing committers to organize.

A new resource applies an instance template to a single VM. Its schema distinguishes inherited values from explicit overrides.

cache.nixos.org enables all CloudFront edge locations, with published cold and hot cache measurements showing why download locality matters.

The Kubernetes 1.11 CoreDNS guide explains the migration from kube-dns. Its default configuration preserves familiar discovery behavior while making the DNS server's responsibilities easier to inspect.

Datasette 0.23.2 makes CSV exports respect the CORS option and repairs row pages for table names containing slashes. Both fixes concern the HTTP representation of SQLite data.

A deprecated plugin loader can execute a library placed in a shared temporary directory. The advisory distinguishes this trust failure from the memory-safety guarantees of Rust.

C17's publication consolidates corrections to C11. Its mutex and condition-variable resolutions explain why failed acquisition and a returned wait do not establish application state.

P1143R0 proposes a constinit attribute for static and thread storage duration. It makes an initialization requirement explicit without claiming that compiler optimization alone supplies a portable guarantee.

SE-0216 accepts callable values for dynamic-language bindings. The design retains compile-time checks on argument structure while deferring the foreign call's meaning to a library.

The second PostgreSQL 11 beta exposes a gap between implementing channel binding and letting clients require it, changing how the project describes the feature.

CVE-2018-8016 exposes an unauthenticated JMX/RMI endpoint in Cassandra 3.8 through 3.11.1. The implementation shows how a local connector and its registry acquired different network scopes.

IPVS and CoreDNS reach general availability in Kubernetes 1.11. Their integration shows why finding a Service and forwarding traffic to it remain separate operational problems.

Data classes generate ordinary object methods, while context variables associate state with execution context. Python 3.7 also formalizes dictionary order and introduces opt-in postponed annotations.

Confluent Hub launches with connectors, transformations and converters for Kafka Connect. Its catalog and client reduce artifact-handling work while leaving connector configuration and worker consistency as separate deployment concerns.

Perl 5.28 stabilizes separate numeric and string bitwise operations, while improving in-place editing and several other familiar constructs.

Stable architecture intrinsics let libraries choose specialized CPU implementations. The dyn Trait spelling makes an existing runtime dispatch choice visible in source.

The June 20 notice confirms that Ruby 2.2 support ended on March 31. Its maintenance history explains why the final patch is not a substitute for moving to a supported branch.

A new setting separates replacing node binaries from advancing the cluster version, preserving a deliberate point at which an operator can retain downgrade compatibility.

TypeScript 2.9.2 corrects JSON output under strict-mode, trailing-comma and source-map settings. The fixes preserve the distinction between a typed build input and an executable JavaScript source file.

Redis 4.0.10 fixes security defects in Lua helper libraries and a SCAN cursor error during hash-table shrinkage. The patches show why bounds checks and incremental iteration each require precise invariants.

C17 has completed its final vote and entered publication processing. The history of zero-size realloc explains why a correction revision can clarify a contract without making every implementation behave identically.

Rapperswil advances contracts for C++20 with separate controls for checking and continuation after a violation. The adopted wording also constrains side effects, redeclarations and postconditions.

The June Mac edge release fixes supervisor CPU consumption and a VPNKit memory leak. It also stops replacing an existing kubectl binary when managing the bundled Kubernetes environment.

A small compatibility change lets the existing go command consume some repositories adopting semantic import versioning before full module integration.

Day-zero EKS support brings the cluster into Terraform's AWS configuration. IAM readiness and control-plane lifecycle handling explain what that support provides.

SQLite 3.24.0 adds PostgreSQL-style UPSERT. Conflict targets, excluded values and conditional updates let a statement express how an existing row should change.

Istio 0.8 makes the new routing model available alongside streaming proxy configuration. The ADS implementation shows how declared mesh changes become updates to connected proxies.

Cachix launches hosted binary caches with an argument for sharing build results outside the central Nixpkgs package set.