The Blog

Cargo now fetches and unpacks dependency sources with a built-in vendor command. Its generated source configuration is a necessary second step, while profile-guided optimization changes how the compiler uses workload feedback.

CVE-2019-14993 allows large request URIs to crash Envoy where affected regex matching is configured. The August security releases also fix separate HTTP/2 resource-exhaustion vulnerabilities at the proxy boundary.

Swift 5.1 development snapshots bring Thread Sanitizer to Linux. Runtime instrumentation finds conflicting accesses that value semantics alone cannot prevent.

Docker Desktop's August update bundles Engine 19.03.1 and Kubernetes 1.14.3. Its DNS corrections address a host-to-container difference that can masquerade as an application failure.

A temporary type could capture an inexact function call inside a privileged function. PostgreSQL 11.5 tightens functional cast resolution and fixes several other security issues.

Cockroach Labs announces a $55 million Series C and plans further work on its managed offering. The engineering context includes deployment, query locality and the operational consequences of distributed state.

Gatekeeper expresses reusable policy logic through templates and applies it through Kubernetes constraints. Its audit and data replication mechanisms explain how admission policy can cover existing objects and relationships between resources.

P1842R0 extends compiler and build-system communication so dependency discovery can resolve headers before preprocessing them.

New Linux wrappers make kernel interfaces directly available through glibc, with distinct lifetime and record-layout contracts.

rqlite's 5.0 development branch adopts Go modules. Explicit requirements make the selected Raft and SQLite driver dependencies visible to contributors and build tooling.

Ian Lance Taylor's generics argument distinguishes reusable typed algorithms from interface-based workarounds. The current draft uses type parameters and contracts, with implementation experiments still underway.

An AWS SDK update changes which credentials the S3 backend selects when a named profile and static environment credentials coexist.

Rails 6 reaches its second release candidate with process and thread based test parallelism. Separate worker databases solve one part of isolation, while external resources still need explicit ownership.

A maintenance update improves index compatibility and repairs parallel DDL execution on subscribers. Its changes sit within a replication model that selects tables and changes at database level.

Cockroach Labs announces an October conference about hybrid and multi-cloud systems. The useful engineering questions concern data placement and operational boundaries as much as application portability.

Experimental rootless operation changes the host authority of the Docker daemon. GPU device requests add another explicit resource contract, with different requirements and limitations.

Cologne sends the C++20 draft to national-body review, removes contracts and adds library facilities for formatting and cooperative thread shutdown.

Perl 5.31.2 makes a missing digit after 0x or 0b fatal. The preceding development release had allowed tokenization that could silently change a program's meaning.

Generator types now distinguish yielded values, terminal returns and values supplied by next. Iterator results use done to preserve that distinction in control flow.

July's deprecation notice gives operators time to migrate before Kubernetes 1.16. Selectors and rollout defaults make the workload API changes a behavioral migration as well as a change of endpoint.

The Linux maintenance release fixes Calendar, DateFormatter, and HTTP response handling. Its changes show why shared Swift source still depends on platform library behavior.

RFC 49 proposes a standard structure and locked dependencies for Nix projects. Its central concern is reproducing evaluation before a build begins.

SQLite 3.29.0 adds separate controls for legacy string quoting in DML and DDL. Disabling the fallback makes an unresolved quoted identifier fail instead of becoming a string value.

Python 3.7.4 rejects control characters in HTTP URL paths and stops implicitly searching the current directory when PATH is absent on Unix.

N2402 proposes caller-owned conversion buffers and more explicit clock semantics, using existing C syntax to make interface requirements visible.

The July client release distinguishes certificate verification from hostname checks and adds an application-managed OAuth token lifecycle. Its tagged API explains what each setting actually guarantees.

Future supplies a stable polling and wakeup contract while async syntax remains forthcoming. The same release separates allocation from operating-system support and represents uninitialized storage without pretending it contains a valid value.

The July patch closes a gap between sidecar and ingress protocol configuration. Pilot now passes the HTTP/1.0 acceptance option into gateway connection managers when the compatibility mode is enabled.

The Top-K module capability uses HeavyKeeper to retain likely frequent items without a counter for every identity. Its command results also expose changes to the retained candidate list.

RedisTimeSeries adds retention, label filtering and aggregation to timestamped numeric samples. Its first general release replaces application-maintained time-series conventions with a dedicated data type.