Latest security news

Node.js 21.2.0 (Current)

Deno Subhosting: the easiest and most secure way to run untrusted multi-tenant code

Subhosting is a new way to leverage Deno Deploy's fast, scalable multi-tenant v8 isolate cloud to run your users code securely.

GitLab Patch Release: 16.5.2

On November 14, 2023, we released versions 16.5.2 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.5.2 Backport to 16.5: Geo: Bring back legacy project Prometheus metrics Backport artifacts page breadcrumb fixes Fix broken issue rendering when initial ID is null Backport - Create group wiki repo if absent when verifying on primary backport to 16.5: Fix Geo verification state backfill job can exceed batch size Fix assign security check permission checks Update postgres_exporter from…

Announcing self-hosted Deno KV, continuous backups, and replicas

Deno KV is now even more flexible and powerful with self-hosted options, replicas, and S3 and GCS continuous backup support.

PHP 8.3.0 RC 6 available for testing

The PHP team is pleased to announce the release of PHP 8.3.0, RC 6. This is the sixth and final release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 6 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files c…

Unbound 1.19.0 released

We are pleased to announce the release of version 1.19.0 of the Unbound recursive DNS resolver. This release fixes a number of bugs, and adds some smaller features. The redis-logical-db option and cachedb-no-store option can be used for cachedb configuration. The disable-edns-do option can be used for working …

Bun v1.0.11

Fixes 5 bugs, adds Bun.semver, fixes a bug in bun install and fixes bugs impacting astro and @google-cloud/storage

Bun v1.0.10

Fixes 14 bugs (addressing 102 👍 reactions), node:http gets 14% faster, stability improvements to Bun for Linux ARM64, bun install bugfix, and node:http bugfixes

Bun v1.0.9

Fixes a glibc symbol version error, illegal instruction error, a Bun.spawn bug, an edgecase with peer dependency installs, and a JSX transpiler bugfix

Bun v1.0.8

Fixes 138 bugs (addressing 257 👍 reactions), makes `require()` use 30% less memory, adds module mocking to `bun test`, and improves reliability of `bun install` and Bun.spawn

Deno 1.38: HTML doc generator and HMR

Deno 1.38 ships with HTML doc output, hot module replacement, improved Node.js compatibility by allowing you to use your own `node_modules` folder, and more.

GitLab Security Release: 16.5.1, 16.4.2, 16.3.6

On October 31, 2023, we released versions 16.5.1, 16.4.2, 16.3.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3rd Thursday of each month), and ad-hoc secu…

Dutch PHP Conference 2024 - Call for Papers

We are thrilled to announce the return of the of the in 2024! Join us for an exciting in-person event, set to take place from at Pathé Noord Amsterdam. :elephant::tada: 18th edition Dutch PHP Conference March 12 to March 15, 2024 We’re on the lookout for exceptional, technical, and non-technical sessions from speakers who can delve into advanced topics, spark creativity, and captivate our live audience. In the past, we’ve had remarkable speakers covering a wide range of subjects within the PHP ecosystem, including frameworks, DevOps, architecture, JavaScript, scaling, testing, performance, an…

PHP 8.1.25 Released!

The PHP development team announces the immediate availability of PHP 8.1.25. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.25 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

OpenSSL Recent Security Patches

PHP 8.2.12 Released!

The PHP development team announces the immediate availability of PHP 8.2.12. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.12 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Next.js 14

Next.js 14 includes included performance, stability for Server Actions, a new course teaching the App Router, and more.

PHP 8.3.0 RC 5 available for testing

The PHP team is pleased to announce the release of PHP 8.3.0, RC 5. This is the fifth release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 5 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…

Node.js 20.9.0 (LTS)

Node.js 21.1.0 (Current)

How to Think About Security in Next.js

Learn about what security protections are built-in Next.js and view a guide for auditing applications.

Bun v1.0.7

Fixes 59 bugs (addressing 78 👍 reactions), support for optional `peerDependencies`, improvements to Node.js compatibility, and more stability for `bun install`.

phpday 2024

20 years of ! On May 16-17 2024 you can attend the in-person event in or online. phpday Verona (Italy) Organized by (the Italian PHP user group), phpday is one of the first historic European conferences dedicated to PHP, development tools and best practices. We are a community whose intent is to improve the web development ecosystem and to organize affordable, high-quality events and workshops for developers. GrUSP We are committed to values: we apply a and we have a . diversity, inclusion and accessibility Code of Conduct Scholarship program Our will be .The event is international and all se…

Node.js 21.0.0 (Current)

Node.js 18.18.2 (LTS)

Node.js 20.8.1 (Current)

Friday October 13 2023 Security Releases

PHP 8.3.0 RC 4 available for testing

The PHP team is pleased to announce the release of PHP 8.3.0, RC 4. This is the fourth release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 4 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…

Bun v1.0.6

Fixes 3 bugs (addressing 85 👍 reactions), implements support for the 'overrides' & 'resolutions' fields in package.json and a regression impacting Docker usage with Bun

Bun v1.0.5

Fixes 41 bugs + a memory leak in `fetch()`, `KeyObject` support in `crypto` module, import package-lock.json, install peer dependencies, bun pm migrate subcommand, bun install bugfixes, and `toEqualIgnoringWhitespace` matcher in `bun:test`

Node.js 18.18.1 (LTS)

Fresh 1.5: Partials, client side navigation and more

Discover new improvements in Fresh 1.5 that makes your site quicker to load and comes with several improvements to make authoring complex projects easier.

Bun v1.0.4

Bun v1.0.4 fixes 62 bugs, adds `server.requestIP`, supports virtual modules in runtime plugins, fixes many bun install bugs, and reduces memory consumption in `Bun.serve()`

Node.js 20.8.0 (Current)

PHP 8.1.24 Released!

The PHP development team announces the immediate availability of PHP 8.1.24. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.24 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.3.0 RC 3 available for testing

The PHP team is pleased to announce the release of PHP 8.3.0, RC 3. This is the third release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…

PHP 8.2.11 Released!

The PHP development team announces the immediate availability of PHP 8.2.11. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.11 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

GitLab Security Release: 16.4.1, 16.3.5, and 16.2.8

On September 28, 2023, we released versions 16.4.1, 16.3.5, and 16.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 22nd of each month), and ad-hoc securi…

Announcing Deno Queues

Introducing Deno Queues - zero config, scalable messaging with a guaranteed at-least-once delivery. This new primitive builds on the foundation set by Deno KV, and is available today in the Deno JavaScript runtime and Deno Deploy.

Register for Deno Fest Tokyo, October 20th 2023

Join us to learn about the past, present, and future of Deno as we co-host Deno Fest in Tokyo on October 20th!

Bun v1.0.3

emitDecoratorMetadata, Nest.js support, better private registry support, bunx bugfix, console.log() depth 8 -> 2, silence .env loaded message, and many bugfixes

Vapor: RDS Certificate Authority Expiry

AWS has been providing certificates from the rds-ca-2019 Certificate Authority, but these certificates are due to expire in August 2024. If you are running an RDS instance using this Certificate Authority, it must be updated to prevent any interruption in connectivity after this date.

Routinator 0.13.0 ‘Should Have Started This in a Screen’ released

We are pleased to announce the latest release of Routinator, version 0.13.0 ‘Should Have Started This in a Screen.’ Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the …

Deno 1.37: Modern JavaScript in Jupyter Notebooks

Deno 1.37 ships with a Jupyter notebook integration and improved VSCode and LSP features.

Strong arrows: a new approach to gradual typing

An introduction to strong arrows and how it leverages the Erlang VM to provide sound gradual typing.

Next.js 13.5

Next.js 13.5 includes 22% faster local server startup, 29% faster HMR (Fast Refresh), 40% less memory usage, and more.

Node.js 18.18.0 (LTS)

Node.js 20.7.0 (Current)

The State of Web Frameworks on Deno

With npm compatibility in Deno improving, and npm specifiers now available on Deno Deploy, there are more options than ever to build web apps on Deno. Let's explore some options, including Fresh, SvelteKit, Nuxt/Vue, Astro, and beyond.