Notes on building observable systems and operating them at scale.
Istio 1.0 declares its core ready for production and introduces permissive mutual TLS migration. Client destination rules and server authentication policy remain separate parts of the resulting behavior.
repmgr 4.1 changes exit statuses, command validation and daemon defaults. These small interface changes affect how automation interprets PostgreSQL replication health.
Rails 5.2.1 RC1 corrects Active Storage uploads for zero-byte files and fixes the metadata response shape. The empty-file case exposes a missing transition in chunked checksum calculation.
Kafka 2.0 adds SASL/OAUTHBEARER callbacks, prefixed access rules and hostname verification by default. The OAuth implementation supplies an integration framework whose built-in unsecured tokens are intended for development.
Project references separate compilation units and let build mode order their dependencies. The new unknown type separately requires callers to establish what a value supports before using it.
Swift 4.1.3 brings a Decimal correction to Linux users on the 4.1 branch. The patch repairs carry and borrow handling and avoids floating-point conversion when constructing decimals from integers.
Reaper 1.2.2 corrects repair-unit lookup and ownership. It also puts background executors under the application lifecycle so repair management shuts down more predictably.
Go Cloud launches with portable service APIs for AWS and GCP. Its blob example shows how familiar Go interfaces separate application operations from provider construction.
Perl 5.29.1 separates illegal brace syntax from literal uses that remain supported, and restricts delimiters to leave room for Unicode graphemes.
Docker 18.06 exposes BuildKit through docker build. Its dependency graph separates Dockerfile interpretation from execution and gives the builder a different basis for scheduling work and reusing results.
INSERT ON CONFLICT had an update path that omitted CHECK validation. CockroachDB 2.0.4 validates the updated values before queuing the write.
Guido van Rossum steps down as BDFL after accepting PEP 572. His announcement leaves proposal decisions and the admission of core developers for the existing committers to organize.
A new resource applies an instance template to a single VM. Its schema distinguishes inherited values from explicit overrides.
cache.nixos.org enables all CloudFront edge locations, with published cold and hot cache measurements showing why download locality matters.
The Kubernetes 1.11 CoreDNS guide explains the migration from kube-dns. Its default configuration preserves familiar discovery behavior while making the DNS server's responsibilities easier to inspect.
Datasette 0.23.2 makes CSV exports respect the CORS option and repairs row pages for table names containing slashes. Both fixes concern the HTTP representation of SQLite data.
A deprecated plugin loader can execute a library placed in a shared temporary directory. The advisory distinguishes this trust failure from the memory-safety guarantees of Rust.
C17's publication consolidates corrections to C11. Its mutex and condition-variable resolutions explain why failed acquisition and a returned wait do not establish application state.
P1143R0 proposes a constinit attribute for static and thread storage duration. It makes an initialization requirement explicit without claiming that compiler optimization alone supplies a portable guarantee.
SE-0216 accepts callable values for dynamic-language bindings. The design retains compile-time checks on argument structure while deferring the foreign call's meaning to a library.
The second PostgreSQL 11 beta exposes a gap between implementing channel binding and letting clients require it, changing how the project describes the feature.
CVE-2018-8016 exposes an unauthenticated JMX/RMI endpoint in Cassandra 3.8 through 3.11.1. The implementation shows how a local connector and its registry acquired different network scopes.
IPVS and CoreDNS reach general availability in Kubernetes 1.11. Their integration shows why finding a Service and forwarding traffic to it remain separate operational problems.
Data classes generate ordinary object methods, while context variables associate state with execution context. Python 3.7 also formalizes dictionary order and introduces opt-in postponed annotations.
Confluent Hub launches with connectors, transformations and converters for Kafka Connect. Its catalog and client reduce artifact-handling work while leaving connector configuration and worker consistency as separate deployment concerns.
Perl 5.28 stabilizes separate numeric and string bitwise operations, while improving in-place editing and several other familiar constructs.
Stable architecture intrinsics let libraries choose specialized CPU implementations. The dyn Trait spelling makes an existing runtime dispatch choice visible in source.
The June 20 notice confirms that Ruby 2.2 support ended on March 31. Its maintenance history explains why the final patch is not a substitute for moving to a supported branch.
A new setting separates replacing node binaries from advancing the cluster version, preserving a deliberate point at which an operator can retain downgrade compatibility.
TypeScript 2.9.2 corrects JSON output under strict-mode, trailing-comma and source-map settings. The fixes preserve the distinction between a typed build input and an executable JavaScript source file.