Vulnerabilities & updates
Page 38
Tue, March 5
Scaling a streaming service to hundreds of thousands of concurrent viewers at Veeps
A case study of how Elixir is being used at Veeps.
Mon, March 4
Bun v1.0.30
Fixes 27 bugs (addressing 103 👍 reactions), fixes an 8x perf regression in Bun.serve(), adds a new `--conditions` flag to `bun build` and Bun's runtime, adds support for `expect.assertions()` and `expect.hasAssertions()` in Bun's test runner, fixes crashes and improves Node.js compatibility
Fri, March 1
Introducing JSR - the JavaScript Registry
The JavaScript Registry (JSR) is a TypeScript-first, ESM-only module registry designed for the entire JavaScript ecosystem. Use JSR modules from Deno and npm-based projects. JSR is free and open source. Available today in public beta.
Thu, February 29
How to add Monaco to a Next.js app and securely run untrusted user code
Enabling your users to deploy and run code can make your platform more useful. Here's a guide to building a platform that deploys and runs untrusted user code via a browser IDE with Monaco, Next.js, and Subhosting.
Wed, February 28
Survey Results and Roadmap
You answered our survey and we listened. Here’s what we’re working on currently and what you can expect from Deno next.
Mon, February 26
Routinator 0.13.2 ‘Existential Funk’ released
Today we released version 0.13.2 ‘Existential Funk’ of Routinator. Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow. This release fixes an issue in the RTR …
Fri, February 23
PHPerKaigi 2024
PHPerKaigi 2024, Nakano, Tokyo, Japan Date: Mar 07 - 09, 2024 PHPerKaigi is an event for PHPers, that is, those who are currently using PHP, those who have used PHP in the past, those who want to use PHP in the future, and those who love PHP, to share technical know-how and "" for PHP. #love The conference consists of talk sessions by public speakers. In addition to we have unconference, social gathering and so on for all of developers from all from Japan. Let's talk about PHP! Follow us on X (Formerly Twitter) , . @phperkaigi #phperkaigi https://phperkaigi.jp/2024/ Note: *Kaigi* means meetin…
Bun v1.0.29
Fixes 8 bugs. Bun.stringWidth(a) is a ~6,756x faster drop-in replacement for the popular 'string-width' package. bunx checks for updates more frequently. Adds expect().toBeOneOf() in bun:test. Memory leak impacting Prisma is fixed. Shell now supports advanced redirects like '2>&1', '&>'. Reliability improvements to bunx, bun install, WebSocket client, and Bun Shell
Deno 1.41: smaller deno compile binaries
We've roughly halved the size of `deno compile` binaries, added official Linux ARM64 builds, continued to land Node.js compatibility improvements, and more.
Thu, February 22
Webhooks suck, but here are alternatives
Webhooks, originally proposed as a way to consume asynchronous feeds, became the one-size-fits-all solution for integrating cloud software. Here’s why we think there’s a better solution.
Wed, February 21
GitLab Security Release: 16.9.1, 16.8.3, 16.7.6
On February 21, 2024, we released versions 16.9.1, 16.8.3, 16.7.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3rd Thursday of each month), and ad-hoc sec…
Tue, February 20
Bun v1.0.28
Fixes 6 bugs (addressing 26 👍 reactions). Fixes bugs impacting Prisma and Astro, 'events', 'readline', and 'http2'. Fixes a bug in Bun Shell involving stdin redirection and fixes bugs in bun:test with test.each and describe.only
Sat, February 17
Bun v1.0.27
Fixes 72 bugs (addressing 192 👍 reactions), Bun Shell supports throwing on non-zero exit codes, stream Response bodies using async generators, improves reliability of fetch(), http2 client, Bun.Glob and Bun Shell. Fixes a regression with bun --watch on Linux. Improves Node.js compatibility
Fri, February 16
PHP 8.2.16 Released!
The PHP development team announces the immediate availability of PHP 8.2.16. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.16 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
PHP 8.3.3 Released!
The PHP development team announces the immediate availability of PHP 8.3.3. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.3 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, February 15
React Labs: What We've Been Working On – February 2024
In React Labs posts, we write about projects in active research and development. We’ve made significant progress since our last update, and we’d like to share our progress.
Tue, February 13
Unbound 1.19.1 released
We are pleased to announce the release of version 1.19.1 of the Unbound recursive DNS resolver. This security release fixes two DNSSEC validation vulnerabilities: CVE-2023-50387 (referred here as the KeyTrap vulnerability) and CVE-2023-50868 (referred here as the NSEC3 vulnerability). The KeyTrap vulnerability works by using a combination of …
Dutch PHP Conference 2024
Get ready for 4 days of the Dutch PHP Conference 2024 - In Person Edition 🔥 ! Two training days, a tutorial day and a conference day. Training day 1 & 2 We are offering 2 in-depth workshop days this year, to dive into a particular topic together with an experienced coach & speaker: by Nic Wortel (2 workshop days - Tuesday & Wednesday) Dockerizing PHP Applications by Craig Spence (1 workshop day - Tuesday) Advanced TypeScript Workshop by Ramon de la Fuente (1 workshop day - Wednesday) Lessons learned from playing terrible games by Mark Niebergall (1 workshop day - Wednesday) Effective Unit Te…
Fri, February 9
Introducing Deno Deploy onboarding tutorials
We revamped Deno Deploy’s onboarding to show you how easy it is to use Deno’s cloud primitives in your projects.
Wed, February 7
GitLab Security Release: 16.8.2, 16.7.5, 16.6.7
On February 7, 2024, we released versions 16.8.2, 16.7.5, 16.6.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3rd Thursday of each month), and ad-hoc secu…
Sun, February 4
Bun v1.0.26
Fixes 30 bugs (addressing 60 👍 reactions), adds support for multi-statement queries in bun:sqlite, makes bun --watch more reliable in longer-running sessions, Bun.FileSystemRouter now supports more than 64 routes, fixes a bug with expect().toStrictEqual(), fixes 2 bugs with error.stack, improves Node.js compatibility
Fri, February 2
Deno in 2023
2023 marked a significant step towards our vision of radically simplifying web development. Here are the biggest updates and what’s coming up next.
Thu, February 1
Using Deno Subhosting vs. AWS Lambda to Run Untrusted User Code
Which technology is best for building a deployment platform for running third party code? Let's dive into the key differences in feature set, billing model, and performance.
Wed, January 31
php[tek] 2024 - Sheraton Suites O'Hare, Rosemont, IL
Join us for the 16th Annual Web Developer Conference, php[tek] 2024, April 23-25 2024. php[tek] 2024 combines leadership, expertise, and networking in one event. A relaxing atmosphere for tech leaders and developers to share, learn and grow professionally while also providing you with the knowledge to solve your everyday problems. We are the longest-running web developer conference in the United States, focusing on the PHP programming language. The event is broken up into multiple days. The main conference happens over the course of 3 days (April 23-25) and includes keynotes, talks, and netwo…
Fri, January 26
Deno 1.40: Temporal API
Deno 1.40 introduces the Temporal API, TC39 decorators, and a range of deprecations and stabilizations, along with improvements in Node.js compatibility, LSP, diagnostics, and handling of unstable features, paving the way for a seamless upgrade to Deno 2.
Thu, January 25
GitLab Critical Security Release: 16.8.1, 16.7.4, 16.6.6, 16.5.8
On January 25, 2024, we released versions 16.8.1, 16.7.4, 16.6.6, 16.5.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important security fixes, and we strongly recommend that all GitLab installations be upgraded to one of these versions immediately. GitLab.com and GitLab Dedicated environments are already running the patched version. GitLab releases patches for vulnerabilities in dedicated security releases. There are two types of security releases: a monthly, scheduled security release, released a week after the feature release (which deploys on the 3…
Wed, January 24
Routinator 0.13.1 ‘Aziz, Light!’ released
We are pleased to announce the latest release of Routinator, version 0.13.1 ‘Aziz, Light!’ Routinator is an RPKI relying party software that collects and validates statements in the Resource Public Key Infrastructure (RPKI) about allowed route origins and makes them available to the BGP workflow. This release includes …
PHP UK Conference 2024
Our aim is for PHP UK to offer attendees a forum for learning and networking with the most up-to-date topics in PHP development and related tools, tailored specifically to the needs of developers and CTOs. Event Details Date: 15th & 16th February 2024 (GMT) Location: The Brewery, 52 Chiswell St, London, EC1Y 4SA For more information, see: . PHP UK Conference 2024 Follow us on . 𝕏
Tue, January 23
Sun, January 21
Bun v1.0.25
Fixes 4 bugs, adds vm.createScript. Fixes a crash in fs.readFile, a crash in Bun.file().text(), a crash in IPC, and a transpiler bug involving loose equals
Sat, January 20
PHP Conference Odawara 2024
PHP Conference Odawara will be held for the first time in 2024. Inspired by the enthusiasm of PHP conferences held in Japan, we have decided to host an event in "Odawara" with the aim of creating the same enthusiasm. Our aim is to liven up the PHP community even more, with the help of Odawara's appeals. This conference would get you hyped to "learn" even more!🏯🥷🍥♨️ (This conference will be conducted in Japanese) Basic information Date: April 13, 2024(JST) Location: Odawara Civic Exchange Center "UMECO", Kanagawa Prefecture, Japan For more information, see the event page: . PHP Conference O…
The Bun Shell
The Bun Shell is a cross-platform shell that allows you to run shell scripts in JavaScript & TypeScript
Bun v1.0.24
Fixes 9 bugs and adds Bun Shell, a fast cross-platform shell with seamless JavaScript interop. Fixes a socket timeout bug, a potential crash when socket closes, a Node.js compatibility issue with Hapi, a process.exit bug, and bun install binlinking bug, bun inspect regression, and bun:test expect().toContain bug
Fri, January 19
Next.js 14.1
Next.js 14 includes improvements to self-hosting, error messages, parallel and intercepted routes, Turbopack, and more.
PHP 8.2.15 Released!
The PHP development team announces the immediate availability of PHP 8.2.15. This is a bug fix release. All PHP 8.2 users are encouraged to upgrade to this version. For source downloads of PHP 8.2.15 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Thu, January 18
PHP 8.3.2 Released!
The PHP development team announces the immediate availability of PHP 8.3.2. This is a bug fix release. All PHP 8.3 users are encouraged to upgrade to this version. For source downloads of PHP 8.3.2 please visit our , Windows source and binaries can be found on . The list of changes is recorded in the . downloads page windows.php.net/download/ ChangeLog
Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001
Project: Drupal core Project machine name: drupal Date: 2024-January-17 Security risk: Moderately critical 11 ∕ 25 AC:None/A:None/CI:None/II:None/E:Theoretical/TD:Default Vulnerability: Denial of Service Affected versions: >=8.0 <10.1.8 || >=10.2 <10.2.2 CVE IDs: CVE-2024-11941 Description: The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS). Sites that do not use the Comment module are not affected. Solution: Install the latest version: If you are using Drupal 10.2, update to Drupal…
Wed, January 17
Build Your Own Cloud IDE with the Subhosting API
This tutorial will show you how to build a simple cloud IDE using the Deno Subhosting API.
Tue, January 16
Bun v1.0.23
Fixes 40 bugs (addressing 194 👍 reactions). import & embed sqlite databases in Bun, Resource Management ('using' TC39 stage3) support, bundler improvements when building for Node.js, bugfix for peer dependency resolution, semver bugfix, 4% faster TCP on linux, Node.js compatibility improvements and more
Mon, January 15
Spark 5.0 Now Available
We're happy to announce the immediate availability of Spark 5.0 for both Paddle and Stripe.
SymfonyCon Vienna 2024
is the global conference in English for Symfony and PHP developers. Two days of workshops (December 3-4) followed by two days (December 5-6) full of talks on PHP, Symfony and its ecosystem. SymfonyCon Vienna 2024 Join us and discover the amazing city of Vienna (Austria) while you share fun and knowledge with developers from all around the World. Check out all the conference details
SymfonyLive Paris 2024
is the Symfony conference for French-speaking developers. Two days of workshops (March 26-27) followed by two days (March 28-29) full of talks on PHP, Symfony and its ecosystem. SymfonyLive Paris 2024 Check out all the conference details
SymfonyOnline January 2024
is the online conference in English for Symfony and PHP developers from all around the World. Two days of online workshops (January 16-17) followed by two days (June 18-19) full of online talks on PHP, Symfony and its ecosystem. SymfonyOnline June 2024 Check out all the conference details
Sun, January 14
Web Summer Camp 2024
Web Summer Camp is a 3-day conference with first two days consisting of . Third day is reserved for keynotes, speaking sessions and un-conference. hands-on workshops in several tracks, including PHP and Symfony This year's edition will be held on . Call for papers is open till March 31st 2024. For more information see the web site: . July 4ht-6th 2024 in Opatija, Croatia Web Summer Camp 2024
Sat, January 13
Laravel Live Denmark 2024
Information: Laravel Live is a two-day Laravel conference held in Copenhagen, Denmark the 22 - 23. August 2024. This will be the first Laravel Conference in the nordic countries, where 350 Laravel and PHP enthusiasts from around the world will gather for two days of talks, learning and networking. August 22-23, 2024 Copenhagen, Denmark 16 speakers 350 Laravel and PHP enthusiasts For more information, see . Laravel Live Denmark 2024 You can also find us at . Twitter