The Blog

ProxyConfig moves selected sidecar settings into a scoped custom resource. The release also resolves hostname-based network gateways and expands Telemetry API controls.

CVE-2021-44521 concerns scripted functions with the UDF executor disabled. The fix adds explicit consent for unsafe execution and restricts access to the JVM security manager.

Swift 5.5.3 updates the Linux and Windows toolchains. A task group fix shows why an atomic operation can be correct in isolation and still be wrong for its caller.

February's Go security release fixes coordinate validation, rational-number parsing and module version resolution. Each defect concerns a value that looked acceptable before the next operation used it.

Desktop 4.5 unifies its menu and reports the Desktop version through the CLI. Its maintenance fixes show why the workstation package needs an identity separate from the container engine.

Two PostgreSQL 14.2 fixes explain how storage optimizations depend on correct tuple references and locking. Updating the binaries and repairing an affected index are separate operations.

std::expected joins the C++ working draft as the design schedule closes to ordinary new proposals. Its value-or-error model makes failure part of a function's return type while preserving explicit choices about access and propagation.

Advisory A-74736 concerns incomplete query results when a scan crosses ranges and mixes isolated keys with enough data. The failure came from metadata describing unfinished requests.

rqlite 7.3.0 stops resolving configured hostnames into stored IP addresses. The change preserves the name an operator supplied so later network connections can follow its current address.

Python 3.11.0a5 previews a faster interpreter and changes to frame access. Extension compatibility depends on respecting object ownership and using the documented accessors.

Automatic restartable-sequence registration and C.UTF-8 support move shared responsibilities into glibc. The release also changes dynamic linking and brings several draft C2x facilities into the library.

Redis 7.0 RC1 introduces multipart append-only persistence and server-side Functions. Both change which artifacts an operator must preserve and how those artifacts relate to the running database.

A new workgroup will develop the Swift and C++ interoperability model. The difficult decisions concern ownership, API mapping and the cost of making foreign types feel native.

The January deadline applies to Docker Desktop in larger businesses. Its significance lies in the distinction between a maintained development environment and the open source container tools it contains.

The second Go 1.18 beta fixes obscure generics bugs. Its significance lies in testing a new abstraction mechanism against the language and tools that already exist.

rqlite 7.0.0 adds discovery through Consul and etcd key-value stores. The integration helps nodes form and join a cluster while retaining a separate role for rqlite's own consensus system.

Alex Gilding's revised proposal would let C functions participate in constant expressions while preserving ordinary runtime calls. Its restrictions expose the cost of adding compile-time evaluation to small C implementations.

Kafka 3.1 adds concrete OIDC token retrieval and validation handlers. The client obtains a service-account token while the broker validates its signature and claims through a separately configured path.

Nix 2.6 searches parent directories for flake.nix within repository and filesystem boundaries. The change improves local commands while retaining the source-selection rules of Git-backed flakes.

Bundler 2.3 and RubyGems 3.3 cooperate to install and run the version recorded in Gemfile.lock. The change removes a fallback that let local tool installations override an application's intended installer.

TypeScript 4.6 beta can narrow related bindings from a discriminated union. The implementation follows shared origin while limiting the analysis to bindings whose relationship remains valid.

Perl 5.35.8 adds a cleanup block to try and catch. Its treatment of return and loop control explains why this belongs in the language grammar.

Range formatting needs consistent representations and element-level customization. The January revision of P2286 turns those choices into library wording while retaining support for views that cannot be iterated through const.

Two module-boundary bugs explain why variable defaults and automatic resource-address changes need consistent treatment inside Terraform.

CVE-2022-21679 affects host-based authorization when a 1.12.0 or 1.12.1 control plane configures 1.11 proxies. The fix selects a compatible host matcher.

Python 3.10.2 arrives early to fix a native allocation leak. The investigation shows how a small mistake in the interpreter can accumulate in extension-heavy applications.

Cassandra 4.0 can carry encrypted and unencrypted internode connections on one storage port. Its configuration separates the listener, advertised address, and encryption policy.

Rust 1.58 lets format strings refer to local identifiers while retaining explicit arguments for expressions. Its Windows command lookup change addresses a separate source of implicit behavior.

pgAdmin 6.4 adds a graphical import and export wizard for server definitions. Its JSON format moves connection settings while leaving passwords out of the transfer.

The January migration announcement keeps dockershim removal on the 1.24 schedule. The difficult boundary is between portable container workloads and tools that depend on Docker Engine.