Kubernetes 1.37 adds noexec mount options for volumes
Every writable volume in a pod has been executable by default. Two alpha gates in v1.37 let you say noexec, nosuid, nodev, and set a permission mode on emptyDir.
Victoria Shinder
Contributing writer
Writes for Dev News Daily on the parts of software work that are not code: process, release discipline and what teams actually do with a change.
Signed pieces
A vendor patch is an unreviewed change
Every release process guards the code it writes. Almost none guard the code that arrives on somebody else's schedule.
RFC 10008 defines QUERY, a sixth HTTP method
RFC 10008 defines QUERY - a GET with a body, safe, idempotent and cacheable. Handling in the wild already disagrees: nginx and Django reject it, Caddy, Traefik and FastAPI pass it through.
Google Research open-sources a logistics benchmark generator
MilleMiglia produces realistic, privacy-preserving middle-mile instances in C++. The scarce resource in optimisation research is not algorithms - it is comparable problems.
Ktor 3.6.0 adds HTTP/3 and typed authentication
OpenID Connect gets specialised support, routing and request handling get quality-of-life changes, and the Kotlin Multiplatform client gets better defaults.