The Blog

Perl 5.30.1 fixes a scalar leak on repeated matches involving Unicode literals. Its maintenance changes also address argument context and negative formatting precision.

The November meeting resolves 73 percent of national-body comments, with the remaining work centered on specifying an already selected feature set.

Stable async functions return suspended futures, and await drives their progress within another asynchronous computation. The syntax improves composition without choosing a runtime or scheduling work merely because a function was called.

Swift Numerics launches with Real and Complex modules. It makes mathematical operations available through generic constraints and gives numerical APIs room to develop outside the standard library.

Optional chaining and nullish coalescing distinguish absence from truthiness. Assertion signatures extend control-flow checking across validation helpers.

A CDN problem served some users a prerelease 3.5.8 source archive. Python 3.5.9 republishes the proper release under a new version without new runtime changes.

Local-only operations now preserve the meaning of workspace variables marked as HCL, and represent unavailable sensitive inputs as unknown values.

Cassandra 4.0-alpha2 lets token allocation use an explicit local replication factor. The preview also replaces snapshot dependencies and corrects repair messaging.

WG14's October meeting brings pointer semantics and interface changes into the same revision discussion, with proposals whose effects extend beyond syntax.

Kafka 2.3.1 continues the work behind cooperative Connect rebalancing. The worker distinguishes a received assignment from tasks already running and tasks stopped for reconfiguration.

Docker Hub's two-factor beta requires personal access tokens for CLI login. Browser account protection and unattended registry access now have explicitly different credential paths.

Swift explains a diagnostic architecture that records failed constraints while solving the rest of an expression. That context lets errors point to the operation that needs correction.

A compiler ordering inference could remove a required bounds check. A separate DSA fix rejects a missing modular inverse instead of using it in a multiplication.

The managed CockroachDB beta puts cluster provisioning and routine operations behind a service interface. Its value depends on the operational work behind that interface and the topology an application selects.

CVE-2019-11253 permits resource exhaustion through malicious request bodies. October's advisory explains why an upgraded cluster can retain anonymous access that a fresh installation would not grant.

Rustup searches backward for a nightly with the installed components instead of treating the newest compiler as the only update candidate. Installation profiles also make the initial tool selection explicit.

The Raku rename separates two source-incompatible languages whose names implied a version upgrade. The accepted transition plan preserves compatibility while changing documentation and tooling.

Assignment expressions let a condition retain the value it tests. Their usefulness depends on evaluation order, scope and keeping the binding easy to interpret.

Loris changes installer privileges and moves GitLab secrets into runtime files. Its service migrations show why a declarative upgrade still needs explicit treatment of persistent state.

CVE-2019-15226 consumes proxy CPU with many small headers that remain below the request-header size limit. The fix addresses repeated size calculation and adds a separate bound on header count.

P1887R0 explores user-defined attributes whose parameters become compile-time objects, with validation delayed until reflection queries them.

SQLite 3.30.0 adds per-aggregate FILTER clauses and explicit NULL ordering. Reports can retain their input groups while calculating conditional measurements and ordering missing results deliberately.

PostgreSQL 12 changes CTE optimization and adds SQL/JSON paths and stored generated columns. Each feature makes a different decision about where expressions execute and when results are retained.

CVE-2019-16255 lets an untrusted Shell test selector invoke unintended Ruby methods. The fix limits named selectors to FileTest methods instead of allowing unrestricted dispatch.

Optional chaining and nullish coalescing add precise checks for null and undefined. Their boundaries differ from familiar truthiness-based expressions.

CockroachDB's maintenance update fixes cases involving transaction restarts and unresolved intents in a read's uncertainty interval. It also bounds memory use in SQL range deletion.

CVE-2019-16760 affects Cargo versions that ignore the package key used for renamed dependencies. A manifest written for newer tools can cause an older tool to fetch a different crate under the alias name.

PostgreSQL 12's first release candidate includes final changes to nondeterministic collation handling and an upgrade requirement for earlier beta installations.

Redis 5.0.6 adds an end-of-buffer check to sparse HyperLogLog updates. The maintainers identify untrusted client access as the condition that makes this release critical.

Ruby Central restores Chef access to four gem names after reviewing a documented request. The statement exposes the distinction between registry permissions, source history, and dependency continuity.