InfoQ Homepage Programming Content on InfoQ
-
AWS Lambda Now Has Support for Node.js 18 Runtime
Recently AWS announced that Node.js version 18 supports its Function as a Service (FaaS) AWS Lambda and is in active LTS status (ready for general use).
-
Critical Vulnerability in VM2 Sandbox Found Affecting Spotify Portal Platform Backstage
Spotify Backstage, an open-source platform used to build developer portals and in use at a number of large companies, has been found vulnerable to a critical remote code execution vulnerability. Confirming that most vulnerabilities are found in indirect dependencies, the Backstage vulnerability is enabled by another vulnerability found in its JavaScript VM2 sandbox dependency.
-
JetBrains Previews Aqua, New Test Automation-Oriented IDE
JetBrains Aqua, now available in preview, is a new IDE focusing on test automation and integrating a number of distinct tools that are at the core of an automation engineer's daily routine, says JetBrains. Its features include multi-language support, an HTTP client and a Web inspector, database management, integrated Docker support, and more.
-
Developing Applications in Space with Azure Orbital Space SDK
Microsoft recently announced the preview release of the Azure Orbital Space SDK to provide developers with a secure hosting platform and application toolkit designed to enable them to create, deploy, and operate applications on-orbit.
-
.NET 7 Removes Its Insecure XmlSecureResolver
.NET 7 has replaced the insecure XmlSecureResolver with a new ThrowingResolver type.
-
Spring Boot 3 and Spring Framework 6 Use Java 17 and Jakarta EE 9, Support Native Java with GraalVM
VMware released Spring Framework 6 and Spring Boot 3, a new generation for the Spring ecosystem. Spring Framework 6 requires Java 17 and Jakarta EE 9. It also embeds observability through Micrometer with tracing and metrics. Spring Boot 3 requires Spring Framework 6. It has built-in support for creating native executables through static Ahead-of-Time (AOT) compilation with GraalVM Native Image.
-
How We Can Use Data to Improve System Quality
To understand how systems are being used, we can collect metrics and identify trends over time. The data and insights gained can be used to improve system quality by improving software design or testing patterns.
-
Heuristic Static Analysis Tool GuardDog Used to Detect Several Malicious PyPi Packages
GuardDog is new open source tool aimed at identifying malicious Python Packages using Sempreg and package metadata analysis. Thanks to a set of source code heuristics, GuardDog can detect malicious packages never seen before and has been used to identify several malicious PyPi packages in the wild.
-
C# 11 Improvements for Strings, List Patterns and Object Creation
As part of the .NET 7 launch, on November 8th Microsoft unveiled the new features of C# 11, the latest version of the popular .NET programming language. The most prominent improvements include string enhancements, static method abstractions, list patterns and required members for object creation.
-
Vanilla Extract - a Modern CSS in JS Library
Vanilla Extract is a new "CSS in JS" library that offers type safety, good theming support, and plenty of extensions, making it an exciting alternative to existing solutions such as Styled Components.
-
Google Open-Sources Secure ML Operating System KataOS
Google's AmbiML team recently open-sourced KataOS, a provably secure operating system for embedded ML hardware. KataOS is based on the seL4 microkernel and is implemented in Rust. Along with KataOS, Google is releasing Sparrow, a reference implementation of the operating system targeted for a secure hardware platform based on the RISC-V architecture.
-
Instagram Notification Management Now Uses Causal Inference Instead of Click-through Rate
Instagram has changed the way of creating notifications, moving from CTR to causal inference and ML models to identify highly active users who are likely to receive the notifications.
-
.NET 7 Adds Aggressive Garbage Collection for Kubernetes
In a Kubernetes cluster, idle services may consume too much memory, resulting in an out-of-memory situation for the whole server even nothing significant is occurring. The new GCCollectionMode.Aggressive option allows the application to tell the runtime to release memory it doesn’t need when going idle.
-
AWS Lambda Telemetry API Provides Enhanced Observability Data
AWS has released the AWS Lambda Telemetry API, a new way for extensions to receive enhanced function telemetry from the Lambda service. The new API simplifies collecting traces, logs, and custom and enhanced metrics from Lambda functions. Along with several example extensions, there are several extensions available from third parties including Datadog, Dynatrace, Serverless, and Sumo Logic.
-
Java News Roundup: Spring Framework 6, JCP Election, Project Valhalla, OpenJDK Updates
This week's Java roundup for November 14th, 2022, features news from OpenJDK, JDK 20, Project Valhalla, JavaFX 20, JCP election results, Spring Framework 6.0, Spring Data 2022.0, Spring Cloud Dataflow 2.10-RC2, Spring Modulith 0.1-RC1, Quarkus 2.14.1 and 3.0.Alpha1, Micronaut 3.7.4, Piranha 22.11.0, Eclipse Vert.x 4.3.5, Apache Tomcat 10.1.2 and 9.0.69, Apache Beam 2.43.0 and PrimeFaces 12.0.2.