Vulnerabilities & updates

Announcing the Hookdeck SDK on JSR

Hookdeck, an event gateway for distributed and async architecture, now has an SDK on JSR.

Announcing the Neon Serverless Driver on JSR

Neon, a performant, edge-compatible, serverless Postgres driver, arrives on JSR.

An intro to TSConfig for JavaScript Developers

TypeScript, one of the fastest growing languages, helps JavaScript developers improve code quality and productivity. But getting started can be challenging. Here's an introduction to TSConfig.

Bun v1.1.4

Fixes 40 bugs (addressing 84 👍 reactions). `bun run --filter

GitLab Patch Release: 16.10.3, 16.9.5, 16.8.7

On April 15, 2024, we released versions 16.10.3, 16.9.5, 16.8.7 for GitLab Community Edition and Enterprise Edition. These versions resolve a number of regressions and bugs. This patch release does not include any security fixes. GitLab Community Edition and Enterprise Edition 16.10.3 Fix patroni no longer working with update to ydiff 1.3 16.9.5 Update Go packages to address vulnerabilities in 16-9-stable Make Gitaly no downtime upgrades work again in 16.9 Fix patroni no longer working with update to ydiff 1.3 16.8.7 Fix patroni no longer working with update to ydiff 1.3 Important notes on up…

How we built JSR

A modern JavaScript registry needs to be fast, reliable, and be as simple as possible for end users. Here's how we built JSR.

PHP 8.1.28 Released!

The PHP development team announces the immediate availability of PHP 8.1.28. This is a security release. All PHP 8.1 users are encouraged to upgrade to this version. For source downloads of PHP 8.1.28 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Next.js 14.2

Next.js 14.2 includes development, production, and caching improvements. Including new configuration options, 99% Turbopack tests passing, and more.

PHP 8.3.6 Released!

The PHP development team announces the immediate availability of PHP 8.3.6. This is a security release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.6 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

How Netlify used Deno Subhosting to build a successful edge functions product

Learn why Netlify chose Deno Subhosting over building their own solution with AWS Lambda to offer a successful edge functions product within weeks.

PHP 8.2.18 Released!

The PHP development team announces the immediate availability of PHP 8.2.18. This is a security release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.18 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Node.js 21.7.3 (Current)

Node.js 20.12.2 (LTS)

Node.js 18.20.2 (LTS)

Wednesday, April 10, 2024 Security Releases

Bun v1.1.3

Fixes 5 bugs. bun install gets 50% faster on Windows. A bug that could cause bun install to hang in rare cases has been fixed. A bug where some errors in bun install would not produce a non-zero exit code has been fixed. A bug that could cause specific certain combinations of dependencies to fail to install has been fixed. A bug on Windows where CTRL + C on cmd.exe after exiting bun would not behave as expected has been fixed. A bug where missing permissions on Windows for reading a directory could lead to a crash has been fixed.

Bun v1.1.2

Fixes 4 bugs (addressing 44 👍 reactions). EBUSY on Windows in vite dev, next dev, and saving bun.lockb has been fixed. Object cloning gets 6x faster. Bun Shell gets support for seq, yes, basename and dirname. A TypeScript parsing edgecase has been fixed. A bug causing 'unreachable code' errors has been fixed. fs.watch on Windows has been rewritten to improve performance and reliability.

Bun v1.1.1

Fixes 20 bugs (addressing 60 👍). Add subshell and positional argument support to Bun Shell, fixing an issue with bun install + sharp on Windows. Printed source code in errors no longer fill up your terminal. Upgrades JavaScriptCore, which includes performance improvements to RegExp, typed arrays, String indexOf and String replace. Error objects and JIT'd function calls use less memory. Fixes several bugs with bun install on Windows. Fixes a bug with Bun.serve() on Windows. Fixes a TOML parser bug impacting escape sequences and windows paths in .toml files

NSD 4.9.1 released

Today, we released version 4.9.1 of the authoritative DNS nameserver NSD. This release fixes the builds scripts in the release of version 4.9.0. Version 4.9.0 adds support for DNS Catalog Zones (RFC 9432) version "2". Both producer and consumer roles for catalog zones are …

Encryption and the In-between

Last year, we introduced a simple but surprisingly useful feature to Laravel Forge: the ability to add notes to servers. While checking the uptake of this feature, we noticed that customers were ofte...

NSD 4.9.0 released

Today, we released version 4.9.0 of the authoritative DNS nameserver NSD. This release adds support for DNS Catalog Zones (RFC 9432) version "2". Both producer and consumer roles for catalog zones are implemented, but only a single consumer zone is allowed. The "coo" property, relevant when multiple consumer …

Node.js 18.20.1 (LTS)

Node.js 21.7.2 (Current)

Node.js 20.12.1 (LTS)

Introducing Simpler Project Creation in Deno Deploy

Introducing a more simplified project creation flow in Deno Deploy, including seamless CI/CD setup, a more transparent build and deployment step, and more.

Wednesday, April 3, 2024 Security Releases

Bun 1.1

Bun now supports Windows!

Bun v1.0.36

Fixes 13 bugs. Adds support for `fs.openAsBlob` and `fs.opendir`, fixes edgecase in bun install with multiple `bin` entries in `package.json`, fixes `bun build --target bun` encoding, fixes bug with process.stdin & process.stdout, fixes bug in http2, fixes bug with .env in bun run, fixes various Bun shell bugs and improves Node.js compatibility.

Deno 1.42: Better dependency management with JSR

Deno 1.42 revolutionizes dependency management with the seamless integration of JSR, enhancing Node/npm compatibility and introducing significant performance improvements.

GitLab Security Release: 16.10.1, 16.9.3, 16.8.5

On March 27, 2024, we released versions 16.10.1, 16.9.3, 16.8.5 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3rd Thursday of each month), and ad-hoc secur…

Node.js 20.12.0 (LTS)

Node.js 18.20.0 (LTS)

Bun v1.0.34

Fixes 7 bugs, bunx uses less memory, bun install gets faster on Docker & WSL, a conflicting devDependency hoisting bug is fixed, a cyclical CommonJS & ESM import crash is fixed, cross-mount fs.cp & fs.copyFile get 50% faster on Linux, and reliability improvements for bun install & bun's runtime

CakeFest 2024: The Official CakePHP Conference

- our annual conference dedicated to CakePHP. One full workshop day (plus one hybrid day) that is an ideal way to learn as both beginners and advanced users, followed by a full day of presentations, discussions and talks on CakePHP related technologies. CakeFest 2024 will be held in Luxembourg at Technoport - we are excited to see you there! CakeFest 2024 Date: July 24, 25 & 26 Time: 09:00am CET Check out more details at CakeFest.org

Announcing VitePress 1.0

Today we are happy to announce the (long overdue) 1.0 release of VitePress ! VitePress is a Static Site Generator (SSG) designed for building fast, content-centric websites. In a nutshell, VitePress takes your source content written in Markdown, applies a theme to it, and generates static HTML pages that can be easily deployed anywhere. VitePress is built on top of Vite and Vue , and is the spiritual successor and modern replacement of VuePress .

Bun v1.0.33

Fixes 2 bugs, including a bug with the mv command in Bun Shell and an error in node:crypto when verifying signatures

Bun v1.0.32

Fixes 13 bugs, including 3 I/O regressions from v1.0.31. Improves Node.js compatibility. 'ws' package can now send & receive ping/pong events. util.promisify'd setTimeout setInterval, setImmediate work now. FileHandle methods have been implemented

Introducing deployctl, the command line interface for Deno Deploy

Deno Deploy’s command line interface, deployctl, is the simplest way to deploy your projects to the cloud. Here’s how to do it.

Bun v1.0.31

Fixes 54 bugs (addresses 113 👍 reactions), introduces `bun --print`, ` | bun run -`, `bun add --trust`, `fetch()` with Unix sockets, fixes macOS binary size regression, fixes high CPU usage bug in spawn() on older linux, adds `util.styleText`, Node.js compatibiltiy improvements, bun install bugfixes, and bunx bugfixes

PHP 8.3.4 Released!

The PHP development team announces the immediate availability of PHP 8.3.4. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.4 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

PHP 8.2.17 Released!

The PHP development team announces the immediate availability of PHP 8.2.17. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.17 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog

Unbound 1.19.3 released

We are pleased to announce the release of version 1.19.3 of the Unbound recursive DNS resolver. This release has a number of bug fixes. The CNAME synthesized for a DNAME record uses the original TTL, of the DNAME record, and that means it can be cached for the …

Spark Stripe: SEPA and Link Support

We're happy to announce that Spark Stripe now supports SEPA Direct Debit payments and Link payments.

Laravel 11 Now Available

Today, we're thrilled to announce the release of Laravel 11 and Laravel Reverb.

Node.js 21.7.1 (Current)

Unbound 1.19.2 released

We are pleased to announce the release of version 1.19.2 of the Unbound recursive DNS resolver. This security release fixes CVE-2024-1931. NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain …

Node.js 21.7.0 (Current)

GitLab Security Release: 16.9.2, 16.8.4, 16.7.7

On March 6, 2024, we released versions 16.9.2, 16.8.4, 16.7.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3rd Thursday of each month), and ad-hoc securit…