NewsBits: PostgreSQL 10.3 Released

Published

Welcome to NewsBits where you'll find the database, cloud, and developer news from around the net for the week ending March 2nd, 2018:

Here's those bits in full...

Database Bits

PostgreSQL 10.3: The PostgreSQL team has released version 10.3, which contains bug fixes and updated documentation to address CVE-2018-1058, a vulnerability that allows users to insert functions into the global namespace that override functions in other namespaces. They recommend that all users read A Guide to CVE 2018-1058: Protect Your Search Path to gauge exposure to the problem. The update is joined by updates PostgreSQL 9.6.8, 9.5.12, 9.4.17, and 9.3.22 as the issue affects all current PostgreSQL releases.

Elastic X-Pack: Elastic, the company behind ElasticSearch, Kibana, and LogStash, has announced that they are releasing the next versions of their X-Pack proprietary extensions as visible source code. The extensions, which encompass a wide array of features from securing data to machine learning, will still require a license of some form from Elastic. Paid features will still require a subscription but the free X-Pack features will be added to the default distributions of Elastic products with an added Elastic EULA. The previous free license registration and renewal requirements have been dropped though. There'll also be "-oss" versions of the distributions which contain only Apache 2.0 licensed open source code and none of the X-Pack components.

Grafana 5.0: Your data visualization dashboards have just received a major upgrade with release of Grafana 5.0. This major overhaul took almost a year of development, and includes many long-requested features including teams, new organization of dashboards into folders, and more fine-grained permissions on a per-dashboard and per-folder basis. The new layout engine and UX make creating dashboards more streamlined and intuitive, making this a release worth checking out.

Developer Bits

ARCore 1.0 - ARCore, the augmented reality SDK for Android, has reached version 1.0, and with it an update to the Google Lens project. Developers can use the kit to develop applications that overlay information onto video images through the camera of any supported Android device. With this release, developers can now publish ARCore applications to the Android store.

Webpack 4.0 - Production web applications received a major shot in the arm with the 4.0 release of Webpack, the packaging toolchain for web developers. This version has a major focus on supported WebAssembly projects, with support for WebAssembly modules in various formats. This version also includes new optimizations in syntax and configuration, as well as better performance.

Spring Boot 2.0: With the first major version change in 4 years, the Spring Boot team has announced the General Availability release of Spring Boot 2.0. Spring Boot is an application development framwork designed to quickly boostrap up Spring applications. The latest version has 4 years worth of features, with the highlights including support for Reactive web programming, HTTP/2 support, integrations with many different metric and logging engines, and new automatic configuration options for Cassandra, MongoDB, Couchbase, and Redis.

Let's Encrypt Wildcard Launch Delay: Develoopers that were hoping to for free wildcard SSL certificates will have to wait a bit longer. Let's Encrypt, the first-tier certificate authority that issues free SSL certificates, has announced a [delay in the release of the Wilcard Certificate launch](https://community.letsencrypt.org/t/acmev2-and-wildcard-launch-delay/53654 ). The delay was caused by the discovery of a flaw in the TLS-SNI validation, which required the team to immediately deprecate the feature. No new timeline has been announced for the availability of wildcard certificates.

And finally... confused about git flows and strategies? Then check out Gitflow Animated, a neat little React app that lets you easily visualize and animate git flows.

NewsBits. News in bits, every Friday at Compose.

Note: This article has been revised since publication.

John O'Connor
John O'Connor is a code junky, educator, and amateur dad that loves letting the smoke out of gadgets, turning caffeine into code, and writing about it all. Love this article? Head over to John O'Connor’s author page to keep reading.

Conquer the Data Layer

Spend your time developing apps, not managing databases.