Vulnerabilities & updates
Page 29
Wed, July 16
Unbound 1.23.1 released
We are pleased to announce the release of version 1.23.1 of the Unbound recursive DNS resolver. This security release fixes CVE-2025-5994. A multi-vendor cache poisoning vulnerability named "Rebirthday Attack" has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with …
Tue, July 15
Next.js 15.4
Next.js 15.4 includes updates to performance, stability, and Turbopack compatibility.
Wed, July 9
GitLab Patch Release: 18.1.2, 18.0.4, 17.11.6
On July 9, 2025, we released versions 18.1.2, 18.0.4, 17.11.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases and ad-hoc critical patches for high-severity vulnerabilities. Scheduled…
Fri, July 4
PHP 8.5.0 Alpha 1 available for testing
The PHP team is pleased to announce the first testing release of PHP 8.5.0, Alpha 1. This starts the PHP 8.5 release cycle, the rough outline of which is specified in the . PHP Wiki For source downloads of PHP 8.5.0 Alpha 1 please visit the . download page Please carefully test this version and report any issues found . on GitHub Please DO NOT use this version in production, it is an early test version. For more information on the new features and other changes, you can read the file, or the file for a complete list of upgrading notes. These files can also be found in the release archive. NEW…
PHP 8.3.23 Released!
The PHP development team announces the immediate availability of PHP 8.3.23. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.23 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, July 3
PHP 8.1.33 Released!
The PHP development team announces the immediate availability of PHP 8.1.33. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.33 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.2.29 Released!
The PHP development team announces the immediate availability of PHP 8.2.29. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.29 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.10 Released!
The PHP development team announces the immediate availability of PHP 8.4.10. This is a security release. Version 8.4.9 was skipped because it was tagged without including security patches. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.10 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Bun v1.2.18
Fixes 52 issues (addressing 112 👍). ReadableStream text(), json(), bytes(), blob(), WebSocket client compression with `permessage-deflate`, `bun pm version`, reduced memory usage for large `fetch()` and `S3` uploads, faster `napi_create_buffer`, faster sliced string handling in native addons, `fs.glob` now matches directories by default, `net.createConnection()` now validates `options.host`, `http.ClientRequest#flushHeaders` now correctly sends the request body, `net.connect` `keepAlive` and `keepAliveInitialDelay` options are now correctly handled, `fs.watchFile` emits `stop` on next tick,…
Wed, July 2
Deno 2.4: deno bundle is back
Deno bundle is back, alongside the addition of bytes and text imports, stabilized built-in OpenTelemetry, a new --preload flag, simplified dependency management with deno update, and more.
Sat, June 28
JavaScript™ Trademark Update
The Trademark Trial and Appeal Board has dismissed our fraud claim against Oracle. We disagree with this decision.
Fri, June 27
What's coming to JavaScript
Here are proposals that were advanced at the last TC39 meeting and what that means for the future of JavaScript.
Wed, June 25
Nightwatch Found 78K Exceptions in 2.7B Events on Forge
How we tested Laravel monitoring using Nightwatch on Forge to surface real-world insights from 2.76 billion events.
GitLab Patch Release: 18.1.1, 18.0.3, 17.11.5
On June 25, 2025, we released versions 18.1.1, 18.0.3, 17.11.5 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases and ad-hoc critical patches for high-severity vulnerabilities. Scheduled…
Tue, June 24
Building a Multi-Tenant Architecture Platform to Scale the Emmys
How Crowd Favorite built their multi-tenant Emmy Awards management platform and scaled it to handle user spikes of up to 570%.
Mon, June 23
Sun, June 22
Bun v1.2.17
Fixes 50 issues (addressing 80 👍), and adds +24 passing Node.js tests. Ahead-of-time bundling for HTML imports, more reliable Bun Shell, `setTimeout` and `setImmediate` use 8-15% less memory, `columnTypes` & `declaredTypes` in `bun:sqlite`, `bun info` is the new `bun pm view`, Node.js compatibility improvements to `child_process.fork`, `fs.glob` options are now optional, `tls.getCACertificates()` is now implemented, `bun init` generates `CLAUDE.md` when claude code is installed, and more.
Fri, June 20
Dropping security updates for WordPress versions 4.1 through 4.6
As of July 2025, the WordPress Security Team will no longer provide security updates for WordPress versions 4.1 through 4.6. These versions were first released nine or more years ago and over 99% of WordPress installations run a more recent version. The chances this will affect your site, or sites, is very small. If you […]
Tue, June 17
160+ Servers. 550M+ HTTP Requests. Geocodio Monitors with Laravel Nightwatch
Read how Geocodio uses Nightwatch for Laravel performance monitoring in production, unearthing issues across 160+ servers with zero system impact.
Announcing Laravel Nightwatch
Nightwatch is a monitoring solution for Laravel applications. See how to track and solve issues like slow controllers, failing jobs, and timed-out API endpoints.
Thu, June 12
Bun v1.2.16
Fixes 73 issues (addressing 124 👍), and adds +119 passing Node.js tests. Serve files with `Bun.serve` through `routes`, `install.linkWorkspacePackages` option in `bunfig.toml`, `bun outdated` support for catalogs, `Bun.hash.rapidhash`, `node:net` compatibility, `vm.SyntheticModule` support, `HTTPParser` binding, and memory leak fixes.
Wed, June 11
CakeFest 2025 Madrid: The Official CakePHP Conference
CakeFest is the official conference dedicated to the framework and community. Whether you're a seasoned developer or just starting out, CakeFest offers two days of workshops, talks, networking, and learning from top contributors and professionals in the ecosystem. CakePHP CakePHP In 2025, we’re celebrating 20 years of - a major milestone in open-source history! CakePHP Quick links: CakeFest 2025 Schedule Get your CakeFest ticket Join us in Madrid for this special anniversary edition of CakeFest: connect with fellow developers, discover the latest in , and enjoy an unforgettable community expe…
GitLab Patch Release: 18.0.2, 17.11.4, 17.10.8
On June 11, 2025, we released versions 18.0.2, 17.11.4, 17.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases and ad-hoc critical patches for high-severity vulnerabilities. Schedule…
Tue, June 10
Mon, June 9
Longhorn PHP 2025 - Call For Papers
Longhorn PHP returns for 2025! Held in Austin, TX, the conference will run from October 23-25, with a tutorial day on Thursday, followed by two main conference days. We are excited to bring PHP developers from all backgrounds together again for three days of fun and education. While the CFP is open, we also have our Blind Bird tickets available for sale. We are currently accepting talk and tutorial submissions. Register today! Follow us on signup for emails at to get notified with important conference updates. Mastodon longhornphp.com
Fri, June 6
International PHP Conference Munich 2025
is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: October 27 ‒ 31, 2025 Location: Munich or Online Highlights: 60+ best practice sessions 50+ international top speakers PHPower: Hands-on Power Workshops Expo w…
PHP 8.3.22 Released!
The PHP development team announces the immediate availability of PHP 8.3.22. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.22 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.4.8 Released!
The PHP development team announces the immediate availability of PHP 8.4.8. This is a bug fix release. All PHP 8.4 users are encouraged to upgrade to this version. For source downloads of PHP 8.4.8 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Wed, June 4
PHPverse 2025
Celebrate 30 Years of PHP at PHPverse! PHP turns 30 this year, and the community is coming together to celebrate. PHPverse is a global online event organized by JetBrains, featuring talks, stories, and demos from prominent community leaders. Whether you’ve been writing PHP for decades or just joined the party, you’re invited! 📅 📍 – free and open to everyone June 17, 2025 Online and be part of the celebration! Join PHPverse
Mon, June 2
Elixir Outreach stipend for speakers and trainers
We announce the Elixir Outreach stipend in partnership with Dashbit, Oban, and the Erlang Ecosystem Foundation.
Thu, May 29
Laravel Certification: Does It Make You a Better Developer?
There's no official Laravel certification. Taylor Otwell explains why it barely matters and the three steps that actually build real skill.
Bun v1.2.15
Fixes 11 issues (addressing 261 👍). bun audit scans dependencies for security vulnerabilities, bun pm view shows package metadata from npm. bun init adds a Cursor rule to use Bun instead of Node.js/Vite/npm/pnpm, `node:vm SourceTextModule` and `node:perf_hooks createHistogram` are now implemented.
Fri, May 23
A brief history of JavaScript
In 30 years, JavaScript went from being a little scripting language to one of the world's most popular. Here are key moments to show how it has evolved and where it is headed.
Thu, May 22
Wed, May 21
Bun v1.2.14
Fixes 39 issues (addressing 179 👍). Adds support for catalogs in bun install, --react flag for bun init, improved HTTP routing with method-specific routes, better TypeScript default module settings, fixes a HTTPS proxy issue impacting Codex, and several Node.js compatibility improvements including worker_threads reliability enhancements and http2 server improvements.
GitLab Patch Release: 18.0.1, 17.11.3, 17.10.7
On May 21, 2025, we released versions 18.0.1, 17.11.3, 17.10.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch releases: scheduled releases, and ad-hoc critical patches for high-severity vulnerabilities. Schedule…
Tue, May 20
Reports of Deno's Demise Have Been Greatly Exaggerated
Addressing recent Deno criticisms and sharing our vision for the future
Rotonda 0.4.1 ‘Melolontha²’ released
We are delighted to announce a new release of Rotonda, version 0.4.1 ‘Melolontha²’. Rotonda is a programmable, analytical BGP engine, that allows users to gather routing data from various sources, such as routers, routing software and files, and over various protocols, such as BMP, BGP and MRT. Rotonda …
Thu, May 15
An Update on Fresh
Fresh 2.0 is very much still active. Here’s an update and how to try out the alpha.