Languages
pgAdmin 4 v9.19 fixes 15 vulnerabilities, most of them in server mode
The 31 October release patches CVE-2026-116238 to CVE-2026-116252, replaces free-text password exec commands with an allowlist and adds an extended-statistics node.
Dev News Daily — Software news, read and annotated by a working engineer
Ktor 3.6.0 adds HTTP/3 and typed authentication
OpenID Connect gets specialised support, routing and request handling get quality-of-life changes, and the Kotlin Multiplatform client gets better defaults.
Rails loads a JSON schema cache 22x faster than YAML
Point schema_cache_path at a .json file and Active Record stops paying the YAML cost at boot. A new herb:check task compiles every ERB template and fails the build.
JDK 28 targets six JEPs, including a JSON parser
Build 16 is tagged. The targeted list now includes a Simple JSON API in incubator, generational Shenandoah by default, and the deprecation of the macOS/x64 port.
Rust maintainers targeted by phishing through fake job calls
The Rust project warns of an ongoing campaign against maintainers of popular crates. The target is the publish token, not the laptop.
pgAdmin 9.18 fixes four CVEs, including an auth bypass
pgAdmin 4 v9.18 closes an authentication bypass and two connection-string injections that redirect the connection, and the exported password, to a host of the caller's choosing.
OpenAI publishes a misalignment disclosure framework and six reports
A process for tracking, investigating and disclosing model behaviour, plus six cases observed over the last six months.