Find published dossiers by topic, company, product or technology.

Showing 201–220 of 528 dossiers

Supabase fixes broken client trace propagation and now preserves trace IDs even for unsampled requests

supabase-js 2.112.3 materially improves the tracing rollout BTN covered earlier: unsampled requests now still carry traceparent for backend log correlation, tracing misconfiguration produces warnings, and browser Edge Function calls need current CORS headers to admit W3C trace context.

Amazon Aurora Serverless gets faster burst scaling

Aurora Serverless can now add roughly 12 ACUs in the first second of a scale-up event on platform versions 3 and 4. The change is automatic and is most useful for bursty SaaS, API, batch and agent workloads, but it does not remove the separate resume delay when a database has scaled all the way to zero.

LiteLLM 1.107.0 was backdoored on PyPI and Docker: startup hooks stole credentials even without an import

The unusual risk is that Python startup hooks execute without an application importing LiteLLM, while the public source tag lacked the malicious files. Check the exact installed wheel or image digest, not just the repository.

GitHub’s OAuth apps get short-lived tokens, multiple callbacks — and a wildcard setting worth auditing

GitHub OAuth apps can now use eight-hour access tokens with rotating refresh tokens, register up to 10 callback URLs, and explicitly control wildcard callback matching. New apps default to expiring tokens, while existing single-callback apps should review a legacy wildcard setting GitHub has now made visible.