E-Maj 5.0.1 closes a PostgreSQL superuser escalation path for extension administrators
E-Maj 5.0.1 patches an emaj_adm-to-superuser escalation flaw in a niche but security-sensitive PostgreSQL rollback extension.
Search
Search results for “Git storage”
Find published research by company, product, platform or technology.
Showing 161–180 of 244 dossiers
PostgreSQL Anonymizer 3.3 patches 12 masking bypasses — upgrades require more than a version bump
PostgreSQL Anonymizer 3.3 fixes a dozen privacy and privilege flaws. Its migration is unusually sensitive: no ALTER EXTENSION UPDATE, possible salt exposure, and new restrictions on masking functions.
pg_plan_filter 1.0 lets PostgreSQL reject expensive query plans — but not hostile users
PostgreSQL operators gain per-statement and per-transaction estimated-cost limits across versions 14–18, useful for runaway reports and ORMs. The guard is disabled by default and can be bypassed by users allowed to change planner cost parameters.
Claude Code Projects turns one engineering goal into parallel cloud-agent branches
The important change is not simply that Claude can run several agents. Projects now owns decomposition, shared context, branch isolation and progress coordination across full Claude Code sessions, while the trade-offs become usage burn, cloud-only execution and ordinary merge conflicts when parallel work overlaps.
NVIDIA OpenShell makes gateway authentication mandatory and changes agent audit records
OpenShell 0.1.6 and 0.1.7 harden gateway access and adjust sandbox supervision, DNS checks and audit compatibility. Operators must configure auth and migrate OCSF consumers; these releases do not prove Sentry's hardware quarantine independently.
Caddy 2.11.9 fixes PHP directory regressions and FastCGI security bypasses
The immediate follow-up to 2.11.8 restores trailing-slash PHP directory indexes and hardens FastCGI script selection and authentication boundaries.
DataGrip 2026.3 joins data across different databases using embedded DuckDB
DataGrip 2026.3 embeds DuckDB to run cross-database joins over existing connections, reducing ad hoc data export and ETL setup.
PostgreSQL retires RHEL 9.6 and 10.0 RPM repositories, ending package updates on those minor releases
PGDG's 20 October repository retirement requires RHEL, Rocky and AlmaLinux 9.6/10.0 operators to update their OS minor release or deliberately switch to the frozen archive. Rolling EL9 and EL10 repository packages are unaffected.
Web DevelopmentCloud & InfrastructureCloud PlatformsDeveloper ToolsDatabases & StorageClosed dossier
Cloudflare makes Python Workers GA — with Hyperdrive and first-class platform bindings
The Hyperdrive integration was the practical database unlock; the larger September 21 change is that Python Workers themselves are now GA. Cloudflare is explicitly positioning Python as a production language on Workers, with native platform bindings and framework support rather than an experimental compatibility layer.
Mistral Large 4 is GA at $0.70/$2.10 per million API tokens — with a licence boundary for model hosting
Mistral Large 4 now has explicit GA and hosted token pricing alongside downloadable weights; self-hosters must still check the model-service licence exception and actual serving costs.
NativePHP Mobile 4.7 removes bundled secrets; 3.3.12 adds post-retest security hardening
NativePHP Mobile 3.3.12 adds November 7 security hardening after retesting; 4.7 already strips bundled Composer credentials and release logs. Installed apps need new builds.
Raspberry Pi 5's 16GB model climbs to $385 as memory shortages reshape edge-compute costs
The latest DRAM-driven increase forces makers, edge deployments and small teams to re-evaluate whether high-RAM single-board computers still offer the right economics.
Web DevelopmentSaaSCloud & InfrastructureSaaS OperationsDeveloper ToolsDatabases & StorageActive dossier
Canada's November 1 time-zone change leaves Cloud SQL and Looker an hour behind
The issue is software time-zone data, not changed stored timestamps. A fixed-offset workaround can affect historical date conversions.
Web DevelopmentCloud & InfrastructureDeployment & DevOpsDeveloper ToolsDatabases & StorageActive dossier
PostgreSQL 19's AI-discovered bug backlog helps explain its November release delay
The RC2/GA schedule has not changed. A PostgreSQL committer now explains why review and backpatch workload overwhelmed the release process, with caveats around attributing every extra bug to AI.
OpenAI adds API credits to ChatGPT Pro and Business — but grants expire and Codex is excluded
OpenAI's new API credit grants can lower the cost of prototyping apps and agents, but eligibility, expiration, API limits and excluded Codex usage matter.
Chrome 155 stops firing unload by default after a years-long rollout — sites must use page lifecycle alternatives
Chrome 155 no longer fires unload handlers by default. Sites relying on unload for saves, analytics or cleanup should migrate to visibilitychange, pagehide and resilient delivery paths.
SQLite 3.54.1 fixes a 32-bit heap-buffer overflow after major 3.54 CLI and authorizer changes
SQLite 3.54 adopters on 32-bit targets should move to 3.54.1 rather than staying on 3.54.0; users on 64-bit builds should assess the other maintenance fixes and compatibility changes.
Grafana Marketplace opens a paid plugin channel for specialist observability developers
At ObservabilityCON 2026, Grafana opened paid plugin distribution to verified partners. Cloud customers can trial and subscribe to integrations on their Grafana bill; partner maintenance and security requirements are part of the model.
Reflection releases Beam: a 501B open-weight coding model under Apache 2.0
Beam makes a large agent-focused model commercially reusable without a bespoke licence, but the open weights are not a small local download.
Grafana Adaptive Metrics adds cost-first auto-apply to prevent metrics-series growth
The existing coverage-first mode keeps more query detail at the cost of possible series growth. Cost-first applies all reductions but only restores detail within the same series budget; it is a guardrail against metric-cardinality spikes, not a guarantee of a fixed bill.