Software Development
237 articles RSS
GitHub Adds Immutable IDs to Actions OIDC Subject Claims to Close a Repository-Name Recycling Hole
GitHub is embedding permanent owner and repository IDs into Actions OIDC subject claims, with the new format becoming the default for repos created after July 15, 2026.
Valkey 9.1 Adds Database-Level ACLs, JSON Logging, and a Redesigned I/O Threading Model for the Redis Fork
The Linux Foundation's Redis fork ships multi-tenant access control, native JSON logs, and throughput gains, cutting per-key memory by up to 10 percent.
rsync 3.4.4 Ships to Fix Regressions From the Six-CVE 3.4.3 Security Release as Tridgell Pledges Expanded Testing
rsync 3.4.4, released June 8, repairs regressions introduced by the May 20 security update that patched six CVEs, after a debate over the maintainer's AI-assisted test-suite rewrite.
Scala 3.8.4 Ships Security Hardening From the OSTIF and Quarkslab Audit, Patching a Scaladoc XSS and a TASTy Parser Infinite Loop
The maintenance release folds in fixes from Scala's first external security audit, which found no critical or major issues but flagged a stored XSS in Scaladoc and an infinite loop in TASTy parsing.
Postgres Managed by ClickHouse Enters Public Beta, Free Until Metering Begins June 15
ClickHouse moved its NVMe-backed managed Postgres service to public beta at Open House 2026, pairing transactional Postgres with native CDC into ClickHouse. It stays free until metering starts June 15.
VS Code 1.123 Syncs Agent Sessions to GitHub and Adds a /chronicle Command, Pushing the Editor Toward Persistent AI Workflows
The June 3 release adds cross-machine chat session sync, a Research Agent preview, 1M-token context windows, and a two-hour delay on extension updates.
Rust Foundation Launches Maintainers Fund and a 'Maintainer in Residence' Program to Pay Core Compiler, Cargo, and Clippy Developers
The Rust Foundation opened a donation-backed fund on June 2 to pay maintainers of the compiler, standard library, Cargo, and Clippy, with the first Maintainer in Residence expected in the coming months.
Kotlin 2.4.0 Ships Stable Context Parameters and Explicit Backing Fields, Retiring the K1 Compiler
JetBrains released Kotlin 2.4.0 on June 4, promoting context parameters and explicit backing fields to Stable, dropping the K1 compiler, and adding Swift package dependencies for Multiplatform.
Ruby's Bundler Adds an Opt-In 'Cooldown' That Skips Gem Versions Until They Have Been Public for a Set Number of Days
Bundler 4.0.13's cooldown filter excludes brand-new gem versions from dependency resolution to blunt supply-chain attacks that exploit the minutes after a malicious release.
Gleam 1.17 Adds 'gleam export escript' for Single-File BEAM Programs and a Create-Module Code Action
Gleam v1.17.0 bundles whole programs into a single escript runnable with only Erlang installed, and adds a language-server action that creates missing modules on import.
systemd 261 Reaches Its First Release Candidate With a Built-In OS Installer, a Cloud Metadata Subsystem, and Live-Update Kernel Handover
systemd 261-rc1 adds systemd-sysinstall, an IMDS subsystem, a storagectl tool, and PID1 support for the kernel's Live Update Orchestration and Kexec Handover.
PostgreSQL 19 Beta 1 Lands With Parallel Autovacuum, Self-Scaling Async I/O, and a Planner-Hint Extension
PostgreSQL 19 Beta 1, released June 4, brings parallel autovacuum, self-scaling async I/O workers, a new pg_plan_advice planner extension, SQL/PGQ graph queries, and turns JIT off by default. GA is targeted for September/October 2026.