Vulnerabilities & updates

NSD 4.10.0 released

Today, we released version 4.10.0 of the authoritative DNS nameserver NSD. Version 4.10.0 integrates simdzone and drops the Flex+Bison zone parser. NSD used a Flex+Bison based zone parser since version 1.4.0. The parser served NSD well, but zones have increased in size …

PHPCon Poland 2024

PHPCon Poland is the oldest and most unique conference in Poland, aimed at PHP developers and enthusiasts. We have been on the Polish market since 2010 and have contributed to educating a new generation of PHP developers! This is an event where you will make new contacts and exchange experiences and ideas for the near future. But not only that! It's a conference you'll love coming back to, both for the atmosphere and the new contacts and also for your development - as a listener, speaker, or maybe as a recruiter looking for new talent. Who knows? For the first time this year, PHPCon Poland wi…

Elixir v1.17 released: set-theoretic data types, calendar durations, and Erlang/OTP 27 support

Elixir v1.17 released: set-theoretic data types, calendar durations, and Erlang/OTP 27 support.

Node.js 22.3.0 (Current)

International PHP Conference Munich 2024

is the world's first PHP conference and stands since more than a decade for top-notch pragmatic expertise in PHP and web technologies. At the IPC, internationally renowned experts from the PHP industry meet up with PHP users and developers from large and small companies. Here is the place where concepts emerge and ideas are born - the IPC signifies knowledge transfer at highest level. The International PHP Conference Basic facts: Date: November 11 ‒ 15, 2024 Location: Munich Marriott Hotel City West, Munich or Online Highlights: 60+ best practice sessions 50+ international top speakers PHPowe…

The stabilization process of the Standard Library has begun

The Deno Standard Library is going to reach 1.0.0 shortly. We hope you try RC versions of the packages and give us feedback!

Forum PHP 2024 - Paris (France)

Join the biggest PHP event organized by the French PHP user group, organized for the third time in Disneyland Paris, at the Hotel New York - The Art of Marvel ! During two days, on October 10th and 11th, enjoy the company of our friendly audience, share your knowledge with +700 attendees, meet the companies who use PHP every day, in a environment that will bring even more magic to the language. Date: October 10 & 11 Check out more details at Afup.org

RTRTR 0.3.0 ‘Filmed Before a Live Studio Audience’ released

We are happy to announce the latest release of RTRTR, version 0.3.0 ‘Filmed Before a Live Studio Audience.’ RTRTR is a tool to collect RPKI data from one or more sources in multiple formats and dispatch it onwards. It provides the means to implement multiple distribution architectures for …

PHP 8.2.20 Released!

The PHP development team announces the immediate availability of PHP 8.2.20. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.20 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.3.8 Released!

The PHP development team announces the immediate availability of PHP 8.3.8. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.8 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.1.29 Released!

The PHP development team announces the immediate availability of PHP 8.1.29. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.29 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Bun v1.1.13

Fixes 97 bugs (addressing 211 👍). Reliability improvements to bun install, WebSocket server, fetch, worker_threads. worker_threads now supports eval. `URL.createObjectURL`, stack trace error location improvements, several `bun install` fixes, and many crashes and bugs fixed.

Laravel Application Monitoring & Debugging with Sentry

At Laravel, we equip PHP developers with the most advanced tools to create exceptional applications. Today, we announce our partnership with Sentry, making it a preferred monitoring and debugging solution for Laravel projects using Forge or Vapor. This collaboration marks a significant step forward in our mission to ensure that PHP developers have access to modern, powerful tools to streamline app development.

Bun v1.1.11

Fixes 36 bugs (addressing 362 👍). bun update saves dependency updates to package.json. A peer dependencies resolution bug in bun install is fixed. setTimeout gets 5x faster throughput on Linux. Node.js compatibility improvements to fs, zlib, timers, http, dgram and module. Event loop improvements on macOS. Windows reliability improvements.

Deno 1.44: Private npm registries, improved Node.js compat, and performance boosts

Deno 1.44 adds support for private npm registries, gRPC connections, improved Node.js compat with initial Next.js support, and significant performance improvements.

Node.js 20.14.0 (LTS)

Bun v1.1.10

Fixes 20 bugs. 2x faster uncached bun install on Windows. fetch() uses up to 2.8x less memory. Several bugfixes to bun install, sourcemaps, Windows reliability improvements and Node.js compatibility improvements

Next.js 15 RC

The Next.js 15 Release Candidate (RC) is now available. This early version allows you to test the latest features before the upcoming stable release.

Bun v1.1.9

Fixes 67 bugs (addressing 150 👍). Fixes to: workspaces in `bun install`, sourcemaps in bun build, IPv6 & VPN connectivity, Loading UNC paths, junctions, symlinks, and pnpm on Windows, `fetch()` gets faster, added `dns.prefetch()` API, `atob()` gets 8x faster, `toString('base64url')` gets 5x faster, expect().toBeReturned() matcher, Node.js compatibility improvements, Bun Shell fixes, and lots more bugfixes.

React Conf 2024 Recap

Last week we hosted React Conf 2024, a two-day conference in Henderson, Nevada where 700+ attendees gathered in-person to discuss the latest in UI engineering. In this post, we'll summarize the talks and announcements from the event.

Node.js 18.20.3 (LTS)

How we built a secure, performant, multi-tenant cloud platform to run untrusted code

When building a modern cloud platform to securely run untrusted code, it can be difficult to balance cost and performance. Here’s how we built Deno Deploy and Deno Subhosting.

Gezocht: Voorzitter voor de Raad van Toezicht

Wij zoeken per 1 juli 2024 een nieuwe voorzitter voor onze Raad van Toezicht (RvT) vanwege het aflopen van de termijn van onze huidige voorzitter. Over NLnet Labs NLnet Labs is een stichting, opgericht in 1999. Onze missie is het ontwikkelen van open-source software en open protocolstandaarden voor het internet …

PHP Velho Oeste 2024

is a community that aims to move the PHP language ecosystem in the western region of Santa Catarina, Brazil, known as Velho Oeste(Old West). PHP Velho Oeste Knowledge + Networking In this event, several relevant topics will be covered, from the latest language updates to best development practices. You will have the opportunity to expand your PHP knowledge and stay up to date with the latest market trends. Date: May 17-18, 2024 Location: Unochapecó Noble Hall in Chapecó, Santa Catarina, Brazil. For more information about the event, visit our website: PHP Velho Oeste

Node.js 22.2.0 (Current)

The Deno Standard Library is now available on JSR

The Deno Standard Library has moved to JSR, supporting SemVer ranges in imports and compatibility with Node.js, Cloudflare Workers, and more.

Bun v1.1.8

Fixes 54 bugs (addressing 184 👍). Support for `process.on("uncaughtException")` and `process.on("unhandledRejection")`, Brotli support in `node:zlib`, Faster JSON.parse, `[Symbol.dispose]` in Bun APIs, fixes lots of crashes on Windows, and many other bugfixes.

PHP 8.3.7 Released!

The PHP development team announces the immediate availability of PHP 8.3.7. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.7 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.2.19 Released!

The PHP development team announces the immediate availability of PHP 8.2.19. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.19 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Node.js 20.13.1 (LTS)

GitLab Patch Release: 16.9.8

On May 9, 2024, we released versions 16.9.8 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition Bug Fixes Pin parser dependency in chef-bin Important notes on upgrading This version does not include any new migrations, and for multi-node deployments, should not require any downtime . Please be aware that by default the Omnibus packages will stop, run migrations, and start again, no matter how “big” or “small” the upgrade is. This beh…

Unbound 1.20.0 released

We are pleased to announce the release of version 1.20.0 of the Unbound recursive DNS resolver. This release has a fix for the DNSBomb issue CVE-2024-33655. This has a low severity for Unbound, since it makes Unbound complicit in targeting others, but does not affect Unbound so much …

Node.js 20.13.0 (LTS)

Your Low Code Solution Needs an Escape Hatch

A low-code solution is a simple way to offer some flexibility for your users. However, to accommodate further customization (especially for enterprise users), you should have an “escape hatch” — simple, code-level customization. Here are three product scenarios and where an escape hatch makes most sense.

Bun v1.1.7

Fixes 28 bugs (addressing 11 👍). Glob workspace names in bun install. Asymmetric matcher support in expect.extends() equals. bunx --version. Bugfixes to JSX transpilation, sourcemaps, cross-compilation of standalone executables, bun shell, RegExp, Worker on Windows, and Node.js compatibility improvements.

Node.js 22.1.0 (Current)

Deno 1.43: Improved Language Server performance

Deno 1.43 enhances productivity with a faster language server, improved npm compatibility, a new `deno serve` subcommand, URL.parse() API, and announcements regarding Deno 2.

How Slack used Deno to save months of engineering effort in launching their new platform

Learn how building with Deno helped Slack launch their new development platform in weeks and not months.

Domain 0.10.0 released

We are pleased to announce the release of version 0.10.0 of domain, our Rust crate for interacting with the Domain Name System (DNS). This release is the result of the first three months of increased focus on the library. We have written more about our plans for the …

Bun v1.1.6

Fixes 10 bugs (addressing 512 👍). UDP sockets! node:dgram! DataDog and ClickHouseDB! Fixes a bug impacting SvelteKit. Array#sort gets 15% - 135% faster. Fixes a regression in node:http from v1.1.5. Node.js compatibiltiy improvements and bugfixes.

Bun v1.1.5

Fixes 64 bugs (addressing 101 👍). Cross-compile standalone JavaScript & TypeScript executables to other platforms with bun build --compile. import any file as text via the `type: 'text'` import attribute. Introduces a new crash reporter. package.json with comments and trailing commas. Fixes a bug where `bun run --filter` exited with 0. Fixes a bug in bun install with file: dependencies. Fixes bugs in `node:tls`, `node:crypto`, `node:readline`, `node:http`, `node:worker_threads`

bun.report is Bun's new crash reporter

How we built an anonymous Zig/C++ crash reporter that doesn't require debug symbols to be shipped with the application.

React 19 Upgrade Guide

The improvements added to React 19 require some breaking changes, but we've worked to make the upgrade as smooth as possible and we don't expect the changes to impact most apps. In this post, we will guide you through the steps for upgrading apps and libraries to React 19.

Statement on glibc/iconv Vulnerability

EDIT 2024-04-25: Clarified when a PHP application is vulnerable to this bug. Recently, a bug in version 2.39 and older () was uncovered where a buffer overflow in character set conversions the ISO-2022-CN-EXT character set can result in remote code execution. glibc CVE-2024-2961 to This specific buffer overflow in glibc is exploitable through PHP, which exposes the iconv functionality of glibc to do character set conversions via the . Although the bug is exploitable in the context of the PHP Engine, the bug is not in PHP. It is also not directly exploitable remotely. iconv extension The bug i…

Node.js 22.0.0 (Current)

JSR Is Not Another Package Manager

JSR introduces a new way to share JavaScript and TypeScript code across platforms, focusing on simplifying distribution without replacing existing package managers.