Notes on building observable systems and operating them at scale.
CVE-2019-10164 affects password handling in PostgreSQL and authentication handling in libpq. Updating the server alone leaves the client side of the issue unresolved.
Perl 5.31.1 enforces the deprecation of vec on strings containing code points above 255. The change clarifies what a byte-oriented operation can accept.
Conversion webhooks, OpenAPI publishing and pruning reach beta in Kubernetes 1.15. Structural schemas connect these changes by describing which data a custom API actually owns.
Istio 1.2 concentrates on build, test and release machinery after the delay before 1.1. Its operational improvements make configuration, diagnostics and capability maturity more explicit for users.
P1525R0 argues that generic execution needs explicit completion channels, including cancellation that cannot be inferred from callback destruction.
RubyGems 3.0.4 repairs uninstalling from a symlinked GEM_HOME and restores gem build behavior. The maintenance work concerns how package operations interpret their environment.
The team's migration guide separates checking from emission. JavaScript sources can gain diagnostics through configuration and declaration packages before any syntax conversion.
N2394 proposes a null pointer constant for C while allowing a minimal implementation based on void pointers.
Cockroach Labs plans to put future Core releases under the Business Source License. The additional-use grant restricts a defined database-service model while retaining broad application use.
The first Python 3.8 beta lets processes attach to named memory blocks. Avoiding serialized transfers introduces explicit responsibilities for layout and lifetime.
The governance working group opens public participation with a facilitation charter. Its initial work concerns team practices and decision processes, with authority remaining in the existing project structure.
Apple introduces SwiftUI with a declarative interface model and Xcode previews. The design moves update coordination into the framework while keeping application state explicit.
Ruby 2.7 preview 1 introduces experimental pattern matching and manual heap compaction. Both changes make existing structure easier to work with, in source and in memory.
Amazon MSK reaches general availability with managed brokers and ZooKeeper. Kafka compatibility preserves application choices while AWS takes responsibility for a defined part of cluster operation.
Omit standardizes a common type transformation, while stricter union checks and unknown generic constraints expose assumptions previously accepted by the checker.
CVE-2019-12243 affects Mixer-based authorization for TCP services in Istio 1.1 through 1.1.6. A direction error in generated proxy configuration prevented checks even when the operator had enabled policy enforcement.
CMake can now describe Swift targets for its Ninja generator. The initial support helps existing CMake projects integrate Swift without moving their whole build.
Perl 5.30 accepts experimental lookbehind with a maximum length of 255 characters. Unicode folding and the existing keep operator explain both the new capability and its limits.
Terraform 0.12 makes expressions and nested types central to configuration, with consequences for module design, unknown values, and upgrade compatibility.
Reaper 1.4.3 releases segment leadership before its intensity pause and repairs timestamp migrations. The changes clarify how repair execution and repair history fit together.
The key_in_value option makes a JSON changefeed value identify its row even after deletion. Cloud-storage sinks require that representation because they write values without a separate message key.
Datasette 0.28 can serve SQLite files updated by another process. The change requires different rules for row counts, database opening and HTTP cache identity.
The May maintenance release fixes stuck informers and delayed DaemonSet processing. Both changes concern the machinery that allows declared state to become running workloads after failures and node removal.
An empty application buffer caused Redis to skip pending AOF synchronization work. Redis 5.0.5 separates the need to write bytes from the need to schedule fsync.
CVE-2019-12083 lets a manual Error::type_id implementation mislead safe downcasting code. The announced mitigation withdraws a recently stabilized method whose result the library trusted for an unsafe cast.
Serokell's nixfmt alpha separates parsing from width-aware pretty printing. Its announcement distinguishes the ability to process Nixpkgs from agreement on a final formatting style.
PostgreSQL 11.3 prevents selectivity estimators from exposing sampled values hidden by row security. The release also fixes partition-routing disclosure and Windows installer permissions.
BuildKit confused filename prefixes with directory ancestry when selecting cache inputs. Docker 18.09.6 includes the correction for multi-source COPY and ADD operations.
The final planned alpha exposes slash syntax for Python functions and changes debug-build compatibility with native extensions.
Go 1.11.10 brings the system DLL loading fix to the older release branch. It also accepts valid ELF inputs with repeated section names when linking C++ code.