
Serguey Asael Shinder: An allowlist is a snapshot of what somebody had heard of, and it keeps enforcing it
The list does not get wrong loudly. It gets wrong quietly, and keeps returning the same answer with the same confidence.

The list does not get wrong loudly. It gets wrong quietly, and keeps returning the same answer with the same confidence.
Every release process guards the code it writes. Almost none guard the code that arrives on somebody else's schedule.
RFC 10008 defines QUERY - a GET with a body, safe, idempotent and cacheable. Handling in the wild already disagrees: nginx and Django reject it, Caddy, Traefik and FastAPI pass it through.
MilleMiglia produces realistic, privacy-preserving middle-mile instances in C++. The scarce resource in optimisation research is not algorithms - it is comparable problems.
The workaround everyone built - put the body in S3 and publish a pointer - is no longer required for messages under a megabyte.
The paste failed silently - no beep, no error, source still selected. The Register reports a fix has arrived for Excel 2016 only.
OpenID Connect gets specialised support, routing and request handling get quality-of-life changes, and the Kotlin Multiplatform client gets better defaults.
Point schema_cache_path at a .json file and Active Record stops paying the YAML cost at boot. A new herb:check task compiles every ERB template and fails the build.
Build 16 is tagged. The targeted list now includes a Simple JSON API in incubator, generational Shenandoah by default, and the deprecation of the macOS/x64 port.