The Blog

Docker 18.09 removes BuildKit's experimental daemon requirement and adds build secrets and SSH forwarding. Remote daemon access over SSH is a separate capability with different authentication and installation requirements.

A quoting error in generated trigger definitions could turn a later dump and restore into privileged execution. PostgreSQL 11.1 repairs that path and tightens statistics permissions.

The steering council proposal gives five elected developers broad powers while reserving changes to the governing rules for the core team. Its design separates ordinary delegated decisions from exceptional intervention.

SQLite 3.25.3 strengthens defenses against malformed databases and corrects virtual-table and window-function behavior. Its versioned tests show why internal FTS tables require defensive parsing.

Bundler's new major-version policy follows Ruby's maintenance boundaries. The announced Bundler 2 changes drop obsolete runtimes and RubyGems versions and move errors to standard error while retaining existing Gemfile behavior.

TypeScript 3.1.5 aligns two compiler decisions about whether an alias refers to a runtime value. The correction prevents an exported const-enum alias from acquiring unnecessary JavaScript output.

Docker's FIPS 140-2 announcement concerns the enterprise engine's cryptographic module. Understanding the module boundary and approved operating mode explains both the value of the validation and the limits of the claim.

Istio 1.0.3 requires its validating webhook and restores ServiceEntry validation. The validator checks relationships between hosts, endpoint resolution and ports which ordinary YAML parsing cannot establish.

CockroachDB 2.1 introduces Enterprise beta changefeeds into Kafka and a limited-availability managed service, while broadening migration and query-planning tools.

Cassandra's audit logging design puts user and request context into a configurable logging path. Its important tradeoff concerns what happens when the database produces records faster than the logger can persist them.

Attribute and function-like procedural macros become stable, with explicit macro imports and clearer paths. Token streams keep generated code connected to source structure and diagnostics.

The HashiConf preview addresses the divide between HCL structure and interpolation. Expressions, conditional omission, and richer module values change how configuration can be composed.

Perl 5.29.4 increases its regex repetition capacity, but the compiler reserves the top value and rejects explicit counts of 65,535.

Python 3.7.1 corrects timeout calculations in concurrent.futures and protects asyncio task enumeration. Other maintenance changes address process lifetimes and locks around fork.

librdkafka 0.11.6 repairs stalled messages after broker connection failure and a Windows timer conversion that could wrap after days of uptime. Both fixes concern progress that a healthy-looking client process could stop making.

WG14's Pittsburgh agenda includes competing interpretations of malloc alignment. N2293 explains how the choice affects small allocation sizes and the implementations that serve them.

PostgreSQL 11 adds expression compilation, transaction-controlling procedures and broader partition support. Each change alters where a different part of a workload executes.

CVE-2018-16395 affects OpenSSL::X509::Name comparisons in Ruby's OpenSSL extension. A wrong positive-result threshold can convert distinct names into equality, with consequences for application trust decisions.

Redis 5 ships Streams with independent reads, consumer groups, and pending-entry tracking. Understanding the separate entry and delivery state explains acknowledgement, recovery, retention, and persistence.

The 2018 Steering Committee election fills three seats for two-year terms. The election process distinguishes contributor representation from corporate sponsorship and technical decision-making.

rqlite 4.3.1 keeps a removed node's Raft subsystem running. Reusing its address still requires clearing its old local data before joining again.

The October explanation of Wire shows how provider functions become ordinary initialization code, with missing dependencies detected during generation.

The new swift run --repl option builds a package and prepares imports and runtime symbols for interactive use. Its implementation combines module search paths with a temporary dynamic-library product.

P0980R0 proposes constant-evaluation support for basic_string. Character traits, storage lifetime and existing library instantiations explain why adding constexpr to the declarations is only part of the work.

NixOS 18.09 updates Nix and the system base while changing sandbox defaults, application wrappers, platform meanings, and Kubernetes permissions.

Mapped types can transform tuple elements without converting array methods and length into ordinary mapped properties. The compiler also supports version-specific declaration paths through typesVersions.

Kubernetes 1.12 brings kubelet client TLS bootstrapping to general availability. Its implementation separates local key generation, certificate requests and approval policy.

GORACE halt_on_error makes an instrumented test process exit after its first race report. The change concerns when execution stops, since detected races already fail Go tests.

The first Python 3.7 maintenance candidate disables default external-entity processing in selected XML parsers. It also repairs compatibility details in dataclasses and the contextvars C API.

The September 24 beta adds a fuller SQL interface for replication zones, including prepared statements and explicit operations for defaults and removal.