Every release process guards the code it writes. Almost none guard the code that arrives on somebody else's schedule.
Victoria Shinder19 Sep3 min readThe workaround everyone built - put the body in S3 and publish a pointer - is no longer required for messages under a megabyte.
The paste failed silently - no beep, no error, source still selected. The Register reports a fix has arrived for Excel 2016 only.
OpenID Connect gets specialised support, routing and request handling get quality-of-life changes, and the Kotlin Multiplatform client gets better defaults.
Point schema_cache_path at a .json file and Active Record stops paying the YAML cost at boot. A new herb:check task compiles every ERB template and fails the build.
Build 16 is tagged. The targeted list now includes a Simple JSON API in incubator, generational Shenandoah by default, and the deprecation of the macOS/x64 port.
Serguey Asael Shinder17 Sep3 min readThe Rust project warns of an ongoing campaign against maintainers of popular crates. The target is the publish token, not the laptop.
pgAdmin 4 v9.18 closes an authentication bypass and two connection-string injections that redirect the connection, and the exported password, to a host of the caller's choosing.
A process for tracking, investigating and disclosing model behaviour, plus six cases observed over the last six months.