Latest security news

Node.js 20.7.0 (Current)

The State of Web Frameworks on Deno

With npm compatibility in Deno improving, and npm specifiers now available on Deno Deploy, there are more options than ever to build web apps on Deno. Let's explore some options, including Fresh, SvelteKit, Nuxt/Vue, Astro, and beyond.

Bun v1.0.2

Faster watch mode, bunx @latest bugfix, Bun uses V8's date parser, bugfixes to node:readline, node:dns, bun run, http streaming, transpiler, node:tty and more

Deno KV internals: building a database for the modern web

How we built a performant, scalable, ACID-compliant, JavaScript-native database on FoundationDB.

PHP 8.3.0 RC 2 available for testing

The PHP team is pleased to announce the release of PHP 8.3.0, RC 2. This is the second release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also b…

Routinator 0.12.2 ‘Brutti, sporchi e cattivi’ released

Today we have released version 0.12.2 of Routinator. Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow. This release fixes two issues in Routinator that can …

Bun v1.0.1

Named imports for .json & .toml files, bugfixes to bun install, node:path, Buffer. Support for NODE_TLS_REJECT_UNAUTHORIZED=0

GitLab Patch Release: 16.3.3

On September 12, 2023, we released versions 16.3.3 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.3.3 Pin redis-client to v0.17.0 Backport !6251 to 16-3-stable Backport create ci_pipelines iid sequence on new projects to 16.3 Backport 16.3 Fix cluster service reindexing params Patch UpdateCiMaxTotalYamlSizeBytesDefaultValue - stable branch Remove gdk base image and pin gdk sha Backport Enable sync with package metadata db by default Backport “Prevent pipeline creation while import…

GitLab Patch Release: 16.2.6

On September 12, 2023, we released versions 16.2.6 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.2.6 Pin redis-client to v0.14.1 praefect: Handle replica paths in ’track-repository’ and ’track-repositories’ subcommands Backport create ci_pipelines iid sequence on new projects to 16.2 Backport “Drop bridge jobs on unknown failures” to 16.2 Backport “Prevent pipeline creation while import is running” to 16.2 Important notes on upgrading This version does not include any new migrati…

Node.js 20.6.1 (Current)

Dutch PHP Conference 2023 - Schedule

Get ready for the Dutch PHP Conference 2023 - Online Edition! 🚀 us on October 13 for an exciting day filled with tech talks and networking. Here's a sneak peek of what's in store: Join 🌐 by Building the World: The Story behind Wolfi, the Linux undistro built for containers Erika Heidi 🚀 by Our Journey from Gitflow to Trunk Based Development Ludovic Toison 🔍 by Generics Aren't Coming Brent Roose 📚 by Internships - MBO / Medium Level Education Sophie Fischer 🐘 by How to Eat an ElePHPant: Modernize Your Legacy PHP Applications Ayesh Karunaratne 🧠 by Making PHP Smarter: Introduction of AI…

Bun 1.0

Bun is stable and ready for production.

Announcing native npm support on Deno Deploy

Deno Deploy becomes the first isolate serverless platform to natively support more than two million modules on npm.

PHP Conference Japan 2023

is the largest PHP event in Japan and has been held once a year since 2000. As an event for a popular language, it is attended by a wide range of web engineers, from beginners to advanced users. PHP Conference Japan 2023 Date: October 8, 2023 Location: Tokyo, Japan. For more details, See the . event page

Deno KV is in Open Beta

Deno KV, the easiest way to add a strongly consistent database to your app, is now in open beta.

GitLab Patch Release: 16.3.2

On September 5, 2023, we released versions 16.3.2 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.3.2 Fix Code Suggestions in Web IDE on GitLab 16.3 Backport “Drop bridge jobs on unknown failures” to 16.3 Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgr…

Node.js 20.6.0 (Current)

Build a Cross-Platform CLI with Deno in 5 minutes

Here's how Deno's built-in tools and APIs make it easy to build a CLI and distribute it to all major platforms.

PHP 8.1.23 Released!

The PHP development team announces the immediate availability of PHP 8.1.23. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.2.10 Released!

The PHP development team announces the immediate availability of PHP 8.2.10. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.10 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.3.0 RC 1 available for testing

The PHP team is pleased to announce the release of PHP 8.3.0, RC 1. This is the first release candidate, continuing the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0, RC 1 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file or the file for a complete list of upgrading notes. These files can also be…

GitLab Security Release: 16.3.1, 16.2.5, and 16.1.5

On August 31, 2023, we released versions 16.3.1, 16.2.5 and 16.1.5 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 22nd of each month), and ad-hoc security r…

Unbound 1.18.0 released

We are pleased to announce the release of version 1.18.0 of the Unbound recursive DNS resolver. This release adds DNS cookies downstream, support to respond with EDE error codes from cache, NAT64 support, and the capability to use a socket queue timeout to discard old packets, and other …

Longhorn PHP 2023

Hosted in Austin, Texas, Longhorn PHP is back for its fifth year! This year's conference will be start with an optional tutorial day on Thursday, November 2, with main conference days on Friday and Saturday, November 3-4. Longhorn PHP is a regional conference designed to help PHP developers level up their craft and connect with the larger PHP community. Our , with Early Bird pricing available through the end of September. full schedule is available now

Bun v0.8.1

Bun.serve() gets unix domain socket support, a performance regression has been fixed, and bugs in bun install, node:http and napi have been fixed

Teknasyon PHPKonf 2023

What is PHPKonf PHPKonf, the signature event of Istanbul PHP, is a landmark for PHP enthusiasts around the world. Now stepping into its 9th year, this annual conference is renowned for its dedication to spreading knowledge and building connections within the PHP community. Join us at PHPKonf, where PHP meets Istanbul. Date: September 2, 2023 in Istanbul, Turkiye. For more information about the event, visit the website: Teknasyon PHPKonf 2023

Bun v0.8.0

Bun gets debugger support, fetch streaming, and `bun update`. ReadStream and WriteStream from `node:tty` are implemented, including raw mode on `process.stdin`. SvelteKit now works in Bun. Plus bug fixes and stability improvements.

August 22nd, 2023 Deno Deploy Post-mortem

Post-mortem report for the Deploy outage on August 22nd, 2023.

ConFoo Montreal 2024: Call for Papers is Now Open

is a multi-technology conference specifically crafted for developers. With over 150 presentations, offered by local and international speakers, the conference wish to bring outstanding diversity of content to expand your knowledge, increase developer’s skills and productivity. ConFoo Want to share your knowledge and expertise to hundreds of experts in your field? Want to be part of our talented team of renowned speakers? The team at ConFoo is looking for speakers and conference proposals for its 2024 event in Montreal. Our talks are both dynamic and educational and are set to help participant…

PHP 8.3.0 Beta 3 available for testing

The PHP team is pleased to announce the third beta release of PHP 8.3.0, Beta 3. This continues the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Beta 3 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rele…

Forge: Zero-Downtime Deployments

Zero-downtime deployments are now native to Laravel Forge, allowing users to avoid even brief milliseconds of downtime. Deployments of sites to multiple servers are available via Envoyer.

PHP 8.2.9 Released!

The PHP development team announces the immediate availability of PHP 8.2.9. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. Windows source and binaries are not synchronized and do not contain a fix for GH-11854. For source downloads of PHP 8.2.9 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Fresh 1.4 – Faster Page Loads, Layouts and More

Discover new improvements in Fresh 1.4 that makes your site quicker to load and comes with several improvements to make authoring complex projects easier.

GitLab Patch Release: 16.2.4

On August 11, 2023, we released versions 16.2.4 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.2.4 Backport ‘420347-fix-new-index-settings’ to 16.2 Backport Fix max number of slices to 16.2 Put back broadcast messages to sign-in page for self-hosted Revert “Remove log_response_length feature flag” - 16.2 Backport Fix broken dependency list for invalid Container Scanning pkg mgr type Replace vscode-cdn.net with web-ide.gitlab-static.net (Backport) Set proxy_http_version v1.0 for he…

PHPeste 2023

About the Conference Introducing , a distinguished PHP conference, championed by the resilient communities of Brazil's Northeast. Over the years, this event has graced cities including João Pessoa, Salvador, São Luis, Recife, Natal, and once again returns to the coastal beauty of Fortaleza. PHPeste Spanning two enriching days, attendees can anticipate: Dive deep into the world of PHP through hands-on sessions and workshops. Comprehensive Learning: Engage with passionate PHP enthusiasts and professionals who embody the spirit and vigor of the Northeast. Networking Opportunities: Gain insights…

Node.js 20.5.1 (Current)

Node.js 18.17.1 (LTS)

Node.js 16.20.2 (LTS)

Node.js's Config Hell Problem

Why a Next.js project has over 30 configuration files and what we can do to avoid it.

Wednesday August 9th 2023 Security Releases

Bun v0.7.3

bun test gets code coverage reporting. bun test -t pattern lets you filter tests to run by regex pattern. Fixes a crash in bun:sqlite, node.js compatiblity improvements, and more.

PHP 8.0.30 Released!

The PHP development team announces the immediate availability of PHP 8.0.30. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.30 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.3.0 Beta 2 available for testing

The PHP team is pleased to announce the second beta release of PHP 8.3.0, Beta 2. This continues the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Beta 2 please visit the . download page Please carefully test this version and report any issues found in the . bug reporting system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the rel…

Deno 1.36: More flexible security and expanded testing APIs

Deno 1.36 introduces new runtime security options plus expanded testing and benchmarking APIs.

PHP 8.1.22 Released!

The PHP development team announces the immediate availability of PHP 8.1.22. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.22 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Bun v0.7.2

worker_threads, BroadcastChannel, diagnostics_channel, Node.js compatibility improvements, bun ., bugfixes and 2 memory leaks fixed

GitLab Patch Release: 16.2.3

On August 3, 2023, we released versions 16.2.3 for GitLab Community Edition and Enterprise Edition. This version resolves a bug. GitLab Community Edition and Enterprise Edition 16.2.3 Backport “Fix artifacts object storage geo replication” to 16.2 Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by adding a /etc/gitlab/skip-auto…

GitLab Patch Release: 16.1.4

On August 3, 2023, we released version 16.1.4 for GitLab Community Edition and Enterprise Edition. This version resolves a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.1.4 Backport “Fix artifacts object storage geo replication” to 16.1 Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by addi…

GitLab Security Release: 16.2.2, 16.1.3, and 16.0.8

On August 1, 2023, we released versions 16.2.2, 16.1.3, and 16.0.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 22nd of each month), and ad-hoc security r…