Latest security news

Tuesday June 20 2023 Security Releases

Elixir v1.15 released

Elixir v1.15 with improvements to compilation and boot times.

GitLab Patch Release: 16.0.5

On June 16, 2023, we released versions 16.0.5 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.0.5 Update gitlab-elasticsearch-indexer version Add Metrics Dashboard menu Fix HllRedisCounter overwriting know events aggregation with symbol instead of string (backport) Slowly iterate MigrateSharedVulnerabilityIdentifiers Do not run bulk cron indexer when cluster is unhealthy Use root_ref to index commits Important notes on upgrading This version does not include any new migrations, and…

Fresh 1.2 – welcoming a full-time maintainer, sharing state between islands, limited npm support, and more

Learn what new features the 1.2 release brings and about the future of Fresh.

Bun v0.6.9

Memory usage reductions in Bun.serve(), bun install, module imports, and crypto hashing. Crash in CommonJS modules fixed, plus additional bugfixes.

Announcing the Deno KV Hackathon

Rules, categories, prizes, and more about the Deno KV Hackathon.

Bun v0.6.8

Password hashing, function mocking, debugging, and bug squashing

PHP 8.1.20 Released!

The PHP development team announces the immediate availability of PHP 8.1.20. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.20 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.3.0 Alpha 1 available for testing

The PHP team is pleased to announce the first testing release of PHP 8.3.0, Alpha 1. This starts the PHP 8.3 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.3.0 Alpha 1 please visit the . download page Please carefully test this version and report any issues found using . the bug tracking system Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the…

PHP 8.2.7 Released!

The PHP development team announces the immediate availability of PHP 8.2.7. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.7 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Node.js 20.3.0 (Current)

International PHP Conference Munich 2023

is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: October 23 ‒ 27, 2023 Location: Holiday Inn Munich City Centre, Munich or Online Highlights: 70+ best practice sessions 50+ international top speakers PHPower:…

PHP 8.0.29 Released!

The PHP development team announces the immediate availability of PHP 8.0.29. This is a security release. All PHP 8.0 users are encouraged to upgrade to this version. For source downloads of PHP 8.0.29 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

GitLab Patch Release: 16.0.4

On June 8, 2023, we released versions 16.0.4 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.0.4 Fix LDAP tls_options not working Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This behavior can be changed by adding a /etc/gitlab/skip-auto-reco…

Vapor: Native Runtime Deprecations

Today, we’re announcing the deprecation of a number of our native runtimes and wanted to take the opportunity to communicate what this looks like both now and moving forward.

NSD 4.7.0 released

Today, we released version 4.7.0 of the authoritative DNS nameserver NSD. This release adds a script for bash autocompletion for nsd-control. Also nsd-control can be configured to use unencrypted operation also when compiled without openssl. There is also a systemd service unit example file contributed. The dnstap log …

GitLab Patch Release: 16.0.3

On June 7, 2023, we released versions 16.0.3 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. GitLab Community Edition and Enterprise Edition 16.0.3 Fix serialization of pull_requests in Bitbucket Server Import Fix memory leak in CI config includes entry Fix MR approval rules sync when disabling scan result policy LFS: Serve pre-signed URLs in /lfs/objects/batch Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by defa…

The State of Edge Functions 2023: The Year of Globally Distributed Apps

More developers are hosting entire apps at the edge and other major takeaways from the 2023 State of Edge Functions report.

GitLab Security Release: 16.0.2, 15.11.7, and 15.10.8

On June 5, 2023, we released versions 16.0.2, 15.11.7, and 15.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 22nd of each month), and ad-hoc security r…

Longhorn PHP 2023 - Call for Papers

Longhorn PHP is returning for 2023! Held in Austin, TX, the conference runs from Nov 2 - Nov 4, with a tutorial day on Thursday, followed by two main conference days. We are a community-run conference for PHP developers in Texas and beyond. We are excited to bring PHP developers from all backgrounds together again for three days of fun and education. We are currently accepting talk and tutorial submissions. While the CFP is open, we also have our Blind Bird tickets available for sale. . Follow us on , , or signup for emails at to get notified with important conference updates. Register today!…

Bun v0.6.7

Discord.js, Prisma, and Puppeteer support, faster node:crypto hashing, and lots of bug fixes

How to Build a CRUD API with Oak and Deno KV

Learn how to use secondary indexes, atomic transctions, and more with Deno KV in this introductory tutorial.

Bun v0.6.6

Lots of improvements to `bun test`, including Github Actions support, `bun test --only`, `test.if()`, `describe.skip()`, and more matchers

JavaScript Macros in Bun

Call JavaScript functions at bundle-time and inline results into the AST

Bun v0.6.5

Native CommonJS support, $npm_lifecycle_event, bugfix for Bun.serve() with streaming files, bugfix for Node.js createConnection and a bundler bugfix

Node.js built-ins on Deno Deploy

You can now use Node.js built-in modules like `node:http` on Deno Deploy, allowing you to run existing Node.js apps at the edge.

Bun v0.6.4

Up to 80% faster bun test, test timeouts, timezone support, bundler bugfixes, console.log() improvements, node:http bugfixes, and more

Deno 1.34: deno compile supports npm packages

This update augments compatibility with npm and Node.js, incorporates glob support, and enhances TLS certificates with IP addresses. It also brings forth improvements to the configuration, language server, APIs, and updates to V8 and TypeScript.

May 23rd, 2023 Deno Deploy Postmortem

Post-mortem report for the Deploy and Subhosting outage on May 23rd, 2023.

Bun v0.6.3

Introducing `node:vm` support, support for `socket.io` and `mongodb`, `test.todo()`, and many bug fixes for the bundler.

How immutable scripts in Deno allow Windmill.dev (YC S22) to build production-grade ops

We chose Deno for its low cold start times, ability to execute untrusted code securely, and ease in creating shareable, immutable scripts.

Bun v0.6.2

Up to 20% faster JSON.parse, 15% faster JSON.stringify, and Proxy gets faster. A couple bugfixes to the minifier and bundler

Node.js 20.2.0 (Current)

The Bun Bundler

The Bun toolkit gets a new addition. Bun's fast native bundler is now in beta.

Bun v0.6.0

A new JavaScript bundler, standalone executables, and lots of new features and improvements

PHP 8.1.19 Released!

The PHP development team announces the immediate availability of PHP 8.1.19. This is a bug fix release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.19 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Build your own ChatGPT-style doc search with Fresh, OpenAI, and Supabase

Learn how to setup a customized ChatGPT-style doc search and work with the OpenAI Chat-GPT3 API.

Vapor: Farewell to Debug Logs

When Vapor handles incoming HTTP requests or queued jobs, it writes debug information to your CloudWatch logs. This includes logging when your application's configuration is cached, environment variab...

PHP 8.2.6 Released!

The PHP development team announces the immediate availability of PHP 8.2.6. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.6 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Announcing Vue 3.3

Today we're excited to announce the release of Vue 3.3 "Rurouni Kenshin"! This release is focused on developer experience improvements - in particular, SFC <script setup> usage with TypeScript. Together with the 1.6 release of Vue Language Tools (previously known as Volar), we have resolved many long-standing pain points when using Vue with TypeScript. This post provides an overview of the highlighted features in 3.3. For the full list of changes, please consult the full changelog on GitHub .

Next.js 13.4

Next.js 13.4 moves App Router to stable, Turbopack to beta, and introduces experimental support for Server Actions.

Roll your own JavaScript runtime, pt. 3

We'll create and load a snapshot of our custom JavaScript runtime to optimize startup time.

Node.js 20.1.0 (Current)

React Canaries: Enabling Incremental Feature Rollout Outside Meta

We'd like to offer the React community an option to adopt individual new features as soon as their design is close to final, before they're released in a stable version--similar to how Meta has long used bleeding-edge versions of React internally. We are introducing a new officially supported [Canary release channel](/community/versioning-policy#canary-channel). It lets curated setups like frameworks decouple adoption of individual React features from the React release schedule.

Forge: Deployment Webhook Improvements

Laravel Forge's "quick deploy" feature gives your team a seamless push-to-deploy experience. Whenever new code is pushed to your deployed branch, Forge will kick off a new deployment. This ensures tha...

Announcing Deno KV

Introducing Deno KV, a global key-value database for effortless stateful app development on Deno Deploy, offering seamless integration, strong consistency, and versatility.

Deno 1.33: Deno 2 is coming

Deno 1.33 is a step towards our next major release, with improved LSP support, enhanced Node.js compatibility, and more.

A Gentle Introduction to Islands

What islands are, what they're not, and how they work.