Latest security news

PHP 8.1.28 Released!

The PHP development team announces the immediate availability of PHP 8.1.28. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Next.js 14.2

Next.js 14.2 includes development, production, and caching improvements. Including new configuration options, 99% Turbopack tests passing, and more.

PHP 8.3.6 Released!

The PHP development team announces the immediate availability of PHP 8.3.6. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.6 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

How Netlify used Deno Subhosting to build a successful edge functions product

Learn why Netlify chose Deno Subhosting over building their own solution with AWS Lambda to offer a successful edge functions product within weeks.

PHP 8.2.18 Released!

The PHP development team announces the immediate availability of PHP 8.2.18. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.18 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Node.js 21.7.3 (Current)

Node.js 20.12.2 (LTS)

Node.js 18.20.2 (LTS)

Wednesday, April 10, 2024 Security Releases

Bun v1.1.3

Fixes 5 bugs. bun install gets 50% faster on Windows. A bug that could cause bun install to hang in rare cases has been fixed. A bug where some errors in bun install would not produce a non-zero exit code has been fixed. A bug that could cause specific certain combinations of dependencies to fail to install has been fixed. A bug on Windows where CTRL + C on cmd.exe after exiting bun would not behave as expected has been fixed. A bug where missing permissions on Windows for reading a directory could lead to a crash has been fixed.

Bun v1.1.2

Fixes 4 bugs (addressing 44 👍 reactions). EBUSY on Windows in vite dev, next dev, and saving bun.lockb has been fixed. Object cloning gets 6x faster. Bun Shell gets support for seq, yes, basename and dirname. A TypeScript parsing edgecase has been fixed. A bug causing 'unreachable code' errors has been fixed. fs.watch on Windows has been rewritten to improve performance and reliability.

Bun v1.1.1

Fixes 20 bugs (addressing 60 👍). Add subshell and positional argument support to Bun Shell, fixing an issue with bun install + sharp on Windows. Printed source code in errors no longer fill up your terminal. Upgrades JavaScriptCore, which includes performance improvements to RegExp, typed arrays, String indexOf and String replace. Error objects and JIT'd function calls use less memory. Fixes several bugs with bun install on Windows. Fixes a bug with Bun.serve() on Windows. Fixes a TOML parser bug impacting escape sequences and windows paths in .toml files

NSD 4.9.1 released

Today, we released version 4.9.1 of the authoritative DNS nameserver NSD. This release fixes the builds scripts in the release of version 4.9.0. Version 4.9.0 adds support for DNS Catalog Zones (RFC 9432) version "2". Both producer and consumer roles for catalog zones are …

Encryption and the In-between

Last year, we introduced a simple but surprisingly useful feature to Laravel Forge: the ability to add notes to servers. While checking the uptake of this feature, we noticed that customers were ofte...

NSD 4.9.0 released

Today, we released version 4.9.0 of the authoritative DNS nameserver NSD. This release adds support for DNS Catalog Zones (RFC 9432) version "2". Both producer and consumer roles for catalog zones are implemented, but only a single consumer zone is allowed. The "coo" property, relevant when multiple consumer …

Node.js 18.20.1 (LTS)

Node.js 21.7.2 (Current)

Node.js 20.12.1 (LTS)

Introducing Simpler Project Creation in Deno Deploy

Introducing a more simplified project creation flow in Deno Deploy, including seamless CI/CD setup, a more transparent build and deployment step, and more.

Wednesday, April 3, 2024 Security Releases

Bun 1.1

Bun now supports Windows!

Bun v1.0.36

Fixes 13 bugs. Adds support for `fs.openAsBlob` and `fs.opendir`, fixes edgecase in bun install with multiple `bin` entries in `package.json`, fixes `bun build --target bun` encoding, fixes bug with process.stdin & process.stdout, fixes bug in http2, fixes bug with .env in bun run, fixes various Bun shell bugs and improves Node.js compatibility.

Deno 1.42: Better dependency management with JSR

Deno 1.42 revolutionizes dependency management with the seamless integration of JSR, enhancing Node/npm compatibility and introducing significant performance improvements.

GitLab Security Release: 16.10.1, 16.9.3, 16.8.5

On March 27, 2024, we released versions 16.10.1, 16.9.3, 16.8.5 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3rd Thursday of each month), and ad-hoc secur…

Node.js 20.12.0 (LTS)

Node.js 18.20.0 (LTS)

Bun v1.0.34

Fixes 7 bugs, bunx uses less memory, bun install gets faster on Docker & WSL, a conflicting devDependency hoisting bug is fixed, a cyclical CommonJS & ESM import crash is fixed, cross-mount fs.cp & fs.copyFile get 50% faster on Linux, and reliability improvements for bun install & bun's runtime

CakeFest 2024: The Official CakePHP Conference

- our annual conference dedicated to CakePHP. One full workshop day (plus one hybrid day) that is an ideal way to learn as both beginners and advanced users, followed by a full day of presentations, discussions and talks on CakePHP related technologies. CakeFest 2024 will be held in Luxembourg at Technoport - we are excited to see you there! CakeFest 2024 Date: July 24, 25 & 26 Time: 09:00am CET Check out more details at CakeFest.org

Announcing VitePress 1.0

Today we are happy to announce the (long overdue) 1.0 release of VitePress ! VitePress is a Static Site Generator (SSG) designed for building fast, content-centric websites. In a nutshell, VitePress takes your source content written in Markdown, applies a theme to it, and generates static HTML pages that can be easily deployed anywhere. VitePress is built on top of Vite and Vue , and is the spiritual successor and modern replacement of VuePress .

Bun v1.0.33

Fixes 2 bugs, including a bug with the mv command in Bun Shell and an error in node:crypto when verifying signatures

Bun v1.0.32

Fixes 13 bugs, including 3 I/O regressions from v1.0.31. Improves Node.js compatibility. 'ws' package can now send & receive ping/pong events. util.promisify'd setTimeout setInterval, setImmediate work now. FileHandle methods have been implemented

Introducing deployctl, the command line interface for Deno Deploy

Deno Deploy’s command line interface, deployctl, is the simplest way to deploy your projects to the cloud. Here’s how to do it.

Bun v1.0.31

Fixes 54 bugs (addresses 113 👍 reactions), introduces `bun --print`, ` | bun run -`, `bun add --trust`, `fetch()` with Unix sockets, fixes macOS binary size regression, fixes high CPU usage bug in spawn() on older linux, adds `util.styleText`, Node.js compatibiltiy improvements, bun install bugfixes, and bunx bugfixes

PHP 8.3.4 Released!

The PHP development team announces the immediate availability of PHP 8.3.4. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.2.17 Released!

The PHP development team announces the immediate availability of PHP 8.2.17. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Unbound 1.19.3 released

We are pleased to announce the release of version 1.19.3 of the Unbound recursive DNS resolver. This release has a number of bug fixes. The CNAME synthesized for a DNAME record uses the original TTL, of the DNAME record, and that means it can be cached for the …

Spark Stripe: SEPA and Link Support

We're happy to announce that Spark Stripe now supports SEPA Direct Debit payments and Link payments.

Laravel 11 Now Available

Today, we're thrilled to announce the release of Laravel 11 and Laravel Reverb.

Node.js 21.7.1 (Current)

Unbound 1.19.2 released

We are pleased to announce the release of version 1.19.2 of the Unbound recursive DNS resolver. This security release fixes CVE-2024-1931. NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain …

Node.js 21.7.0 (Current)

GitLab Security Release: 16.9.2, 16.8.4, 16.7.7

On March 6, 2024, we released versions 16.9.2, 16.8.4, 16.7.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3rd Thursday of each month), and ad-hoc securit…

Scaling a streaming service to hundreds of thousands of concurrent viewers at Veeps

A case study of how Elixir is being used at Veeps.

Bun v1.0.30

Fixes 27 bugs (addressing 103 👍 reactions), fixes an 8x perf regression in Bun.serve(), adds a new `--conditions` flag to `bun build` and Bun's runtime, adds support for `expect.assertions()` and `expect.hasAssertions()` in Bun's test runner, fixes crashes and improves Node.js compatibility

Introducing JSR - the JavaScript Registry

The JavaScript Registry (JSR) is a TypeScript-first, ESM-only module registry designed for the entire JavaScript ecosystem. Use JSR modules from Deno and npm-based projects. JSR is free and open source. Available today in public beta.

How to add Monaco to a Next.js app and securely run untrusted user code

Enabling your users to deploy and run code can make your platform more useful. Here's a guide to building a platform that deploys and runs untrusted user code via a browser IDE with Monaco, Next.js, and Subhosting.

Survey Results and Roadmap

You answered our survey and we listened. Here’s what we’re working on currently and what you can expect from Deno next.

Routinator 0.13.2 ‘Existential Funk’ released

Today we released version 0.13.2 ‘Existential Funk’ of Routinator. Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow. This release fixes an issue in the RTR …

PHPerKaigi 2024

PHPerKaigi 2024, Nakano, Tokyo, Japan Date: Mar 07 - 09, 2024 PHPerKaigi is an event for PHPers, that is, those who are currently using PHP, those who have used PHP in the past, those who want to use PHP in the future, and those who love PHP, to share technical know-how and "" for PHP. #love The conference consists of talk sessions by public speakers. In addition to we have unconference, social gathering and so on for all of developers from all from Japan. Let's talk about PHP! Follow us on X (Formerly Twitter) , . @phperkaigi #phperkaigi https://phperkaigi.jp/2024/ Note: *Kaigi* means meetin…