Notes on building observable systems and operating them at scale.
Docker Hub now accepts personal access tokens through docker login. Independent revocation improves integration management, while the CLI's credential-storage rules still apply.
CRDs reach general availability with stronger schema requirements in Kubernetes 1.16. The release also stops serving older workload APIs, demonstrating the version lifecycle that extension authors now need to design for.
Experimental outbound protocol detection and in-proxy HTTP metrics address two costs of adopting a mesh. Istio 1.3 also changes inbound port capture and adds diagnostics for the configuration that remains.
The maintenance release corrects which emitted file supplies an incremental signature when declaration maps are enabled, and separates processed files from emitted files.
gorqlite's CircleCI job pairs Go 1.12 with an rqlite 4.5.0 container. The configuration exercises a client that depends on server status and HTTP behavior as well as SQL results.
The Terraform Cloud launch extends shared state into hosted plans and applies, making execution location, approvals, and workspace configuration part of the collaboration model.
The source-only release candidate repairs email and URL parsing while retaining the restricted scope of Python 3.5 security maintenance.
The first Cassandra 4.0 alpha exposes changes to repair semantics, query logging and compatibility. Its versioned notes explain what needs evaluation before a major-version upgrade.
Nix 2.3 switches from POSIX to BSD file locks. The release requires consistent store users and adds more explicit build logs and post-build hook behavior.
A quoting change in sqlite-utils exposed an assumption in Datasette schema inspection. The September maintenance release restores automatic search discovery for those databases.
Go 1.13 adds inspectable error wrapping and makes public module authentication a default. Both changes preserve information that callers previously had to reconstruct or trust.
Confluent Cloud is generally available in three Azure regions. Regional placement changes where a managed cluster runs while Kafka's partition and consumer contracts remain application decisions.
The public module mirror caches dependency inputs, while the checksum database checks their contents against an auditable log. The separation lets availability improve without making the mirror the authority on code identity.
The last planned beta exposes hooks for named runtime events. Their ordering, exception behavior and event schemas define a new integration contract.
Generator declarations preserve the difference between yielded items and terminal results. A new downlevel spread helper also corrects observable sparse-array behavior.
Reaper adjusts datacenter widths in its cluster display and improves executable JAR discovery. The same release adds method-based permissions to its REST endpoints.
The new regex and regexall functions return structured captures, with different behavior for missing matches and different result types for each capture style.
Perl 5.31.3 treats the plain string zero numerically in list ranges. A special case intended to preserve padded strings had produced an unexpected sequence through 99.
Rails 6 adds multiple-database support with writing and reading roles. Its connection APIs organize access, while replica consistency and cross-database operations retain concrete limits.
Cargo now fetches and unpacks dependency sources with a built-in vendor command. Its generated source configuration is a necessary second step, while profile-guided optimization changes how the compiler uses workload feedback.
CVE-2019-14993 allows large request URIs to crash Envoy where affected regex matching is configured. The August security releases also fix separate HTTP/2 resource-exhaustion vulnerabilities at the proxy boundary.
Swift 5.1 development snapshots bring Thread Sanitizer to Linux. Runtime instrumentation finds conflicting accesses that value semantics alone cannot prevent.
Docker Desktop's August update bundles Engine 19.03.1 and Kubernetes 1.14.3. Its DNS corrections address a host-to-container difference that can masquerade as an application failure.
A temporary type could capture an inexact function call inside a privileged function. PostgreSQL 11.5 tightens functional cast resolution and fixes several other security issues.
Cockroach Labs announces a $55 million Series C and plans further work on its managed offering. The engineering context includes deployment, query locality and the operational consequences of distributed state.
Gatekeeper expresses reusable policy logic through templates and applies it through Kubernetes constraints. Its audit and data replication mechanisms explain how admission policy can cover existing objects and relationships between resources.
P1842R0 extends compiler and build-system communication so dependency discovery can resolve headers before preprocessing them.
New Linux wrappers make kernel interfaces directly available through glibc, with distinct lifetime and record-layout contracts.
rqlite's 5.0 development branch adopts Go modules. Explicit requirements make the selected Raft and SQLite driver dependencies visible to contributors and build tooling.
Ian Lance Taylor's generics argument distinguishes reusable typed algorithms from interface-based workarounds. The current draft uses type parameters and contracts, with implementation experiments still underway.