JavaGolangJavaScriptSwiftAndroidRustMiddleware
3 hours ago
questdb
questdb

9.3.1

QuestDB 9.3.1

QuestDB 9.3.1 follows the major 9.3.0 release, focusing on stability, correctness, and performance refinements based on early feedback and production usage.

This release delivers important fixes across joins, views, and checkpointing, alongside continued performance improvements on hot SQL execution paths.

Improvements

Arithmetic expressions in window functions

Window functions now support arithmetic expressions directly, allowing analytical queries to compute derived values inline without requiring subqueries or post-processing:

SELECT
  symbol,
  price,
  price - lag(price) OVER (PARTITION BY symbol ORDER BY ts) AS delta
FROM trades

This simplifies common patterns such as calculating deltas, ratios, and scaled values within window definitions.

Extended tables() metadata

The tables() system view now exposes two additional columns:

  • table_min_timestamp
  • table_max_timestamp

These columns provide quick visibility into the temporal bounds of each table, useful for diagnostics, retention checks, and operational tooling.

ksum() window function

The ksum() function now works as a window function, using the Kahan summation algorithm for improved floating-point precision. This complements the existing ksum() aggregate function by enabling its use in window contexts:

-- Cumulative sum with reduced floating-point error
SELECT ksum(price) OVER (ORDER BY ts ROWS UNBOUNDED PRECEDING) FROM trades;

-- Sliding window
SELECT ksum(price) OVER (ORDER BY ts ROWS BETWEEN 3 PRECEDING AND CURRENT ROW) FROM trades;

-- Partitioned
SELECT ksum(price) OVER (PARTITION BY symbol) FROM trades;

All standard window frame types are supported: ROWS, RANGE, partitioned, unbounded, and sliding windows.

Performance

Streaming Parquet export

Parquet exports via the HTTP /exp endpoint now stream directly from page frames, eliminating intermediate temporary tables. This reduces memory overhead and improves export throughput for large result sets.

Reduced garbage on parallel query hot paths

Parallel query execution has been optimized to reduce garbage generation on hot paths. This lowers GC pressure and improves throughput and tail latency under sustained analytical workloads.

Avoid repeated expression execution

Queries where columns reference other columns now avoid redundant expression evaluation. This improves performance for wide projections and queries with multiple derived columns.

Bug fixes

SQL and query execution

  • Fixed an error when using WINDOW JOIN (introduced in 9.3.0) with ORDER BY ts DESC.
  • Fixed a crash in ASOF JOIN queries when the ON clause mixes SYMBOL and non-symbol columns.
  • Fixed transient "file does not exist" errors that could surface during query execution.

Views and materialized views

  • Fixed an issue where views (introduced in 9.3.0) could become suspended after being altered.
  • Fixed a rare bug that could write invalid data into a materialized view under specific conditions.

Core, storage, and checkpoints

  • Fixed checkpoint restore logic by removing phantom table directories left on disk.
  • Fixed a rare issue where process memory was not fully released on Linux when jemalloc is enabled.

Thanks to everyone who reported issues, shared production feedback, and contributed fixes and improvements. Your input continues to shape QuestDB's reliability and performance.

For questions or feedback, please join us on Slack or Discourse, and check the full changelog on GitHub for detailed PR information.

What's Changed

Full Changelog: https://github.com/questdb/questdb/compare/9.3.0...9.3.1

8 hours ago
MeiliSearch
meilisearch

v1.32.1

🌈 Improvements

Skip cleaning up the field-ID based databases

Introduce a MEILI_EXPERIMENTAL_DISABLE_FID_BASED_DATABASES_CLEANUP env var to opt out of the field ID-based database cleanup when upgrading a Meilisearch <1.32.0.

by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6096

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.32.0...v1.32.1

1 days ago
node
nodejs

2026-01-13, Version 20.20.0 'Iron' (LTS), @marco-ippolito

This is a security release.

Notable Changes

lib:

Commits

1 days ago
node
nodejs

2026-01-13, Version 22.22.0 'Jod' (LTS), @marco-ippolito

This is a security release.

Notable Changes

lib:

  • (CVE-2025-59465) add TLSSocket default error handler
  • (CVE-2025-55132) disable futimes when permission model is enabled lib,permission:
  • (CVE-2025-55130) require full read and write to symlink APIs src:
  • (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks src,lib:
  • (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle tls:
  • (CVE-2026-21637) route callback exceptions through error handlers

Commits

1 days ago
node
nodejs

2026-01-13, Version 24.13.0 'Krypton' (LTS), @marco-ippolito

This is a security release.

Notable Changes

lib:

Commits

1 days ago
node
nodejs

2026-01-13, Version 25.3.0 (Current), @RafaelGSS

This is a security release.

Notable Changes

lib:

Commits

1 days ago
ClickHouse
ClickHouse

Release v25.12.3.21-stable

1 days ago
undertow
undertow-io

v2.3.21.Final

Release 2.3.21.Final fixes CVE-2024-3884 CVE-2024-4027 CVE-2025-12543 Full list of Jiras: view in Jira

    Release Notes - Undertow - Version 2.3.21.Final

Sub-task

  • [UNDERTOW-2490] - Improve the documentation of UndertowOptions.HTTP_HEADERS_CACHE_SIZE / DEFAULT_HTTP_HEADERS_CACHE_SIZE

Feature Request

  • [UNDERTOW-2580] - Support SameSite and custom cookie attributes

Bug

  • [UNDERTOW-1359] - HTTP2 - java.lang.IllegalStateException: UT000091: Buffer has already been freed
  • [UNDERTOW-1561] - ServletContext.getResourcePaths() omits Resources that are not available directly on the file system
  • [UNDERTOW-2157] - UndertowOutputStream.transferFrom appears to have a broken signature
  • [UNDERTOW-2165] - READ_TIMEOUT is not taken into account in HTTP2 listener
  • [UNDERTOW-2269] - Encode Query string on forward/include and properly handle merging
  • [UNDERTOW-2377] - CVE-2024-3884 CVE-2024-4027 OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded
  • [UNDERTOW-2421] - ServletSessionConfig is missing support for arbitrary cookie attributes
  • [UNDERTOW-2534] - ClassLoader of deployed websockets application leaks to XnioWorker
  • [UNDERTOW-2582] - ServerWebSocketContainer keeps reference to CLs
  • [UNDERTOW-2591] - SSEHandler header Connection is set to close
  • [UNDERTOW-2605] - FixedLengthStreamSourceConduit does not clean up ReadTimeoutStreamSourceConduit after an exact Content-Length read
  • [UNDERTOW-2609] - Previous fixes in the handling of decoded characters in query requests reflect in getQueryString of APIs
  • [UNDERTOW-2656] - CVE-2025-12543 Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF
  • [UNDERTOW-2662] - Quoted cookie versions cannot be parsed correctly
  • [UNDERTOW-2668] - ServletRelativePathAttribute switch to %U from %R and return absolute path
  • [UNDERTOW-2674] - Wrong codes sent on WebSocket connection close
  • [UNDERTOW-2675] - Make Undertow compatible with RFC6265

Task

Component Upgrade

Enhancement

  • [UNDERTOW-2231] - Test Flakiness occurs for io.undertow.server.handlers.proxy.LoadBalancingProxyTestCase#testLoadSharedWithServerShutdown
  • [UNDERTOW-2638] - Process all buffers in ChunkedStreamSinkConduit.write(ByteBuffer[], int, int)
  • [UNDERTOW-2643] - At ServletOutputStreamImpl.close remove the conversion of int to String
2 days ago
telegraf
influxdata

v1.37.1

v1.37.1 [2026-01-12]

Bugfixes

  • #18138 config Add missing validation for labels in plugins
  • #18108 config Make labels and selectors conform to specification
  • #18144 inputs.procstat Isolate process cache per filter to fix tag collision
  • #18191 outputs.sql Populate column cache for existing tables

Dependency Updates

  • #18125 deps Bump cloud.google.com/go/auth from 0.17.0 to 0.18.0
  • #18140 deps Bump cloud.google.com/go/auth from 0.17.0 to 0.18.0
  • #18094 deps Bump cloud.google.com/go/storage from 1.57.2 to 1.58.0
  • #18157 deps Bump github.com/BurntSushi/toml from 1.5.0 to 1.6.0
  • #18124 deps Bump github.com/ClickHouse/clickhouse-go/v2 from 2.41.0 to 2.42.0
  • #18101 deps Bump github.com/SAP/go-hdb from 1.14.13 to 1.14.14
  • #18153 deps Bump github.com/SAP/go-hdb from 1.14.14 to 1.14.15
  • #18199 deps Bump github.com/SAP/go-hdb from 1.14.15 to 1.14.16
  • #18123 deps Bump github.com/apache/arrow-go/v18 from 18.4.1 to 18.5.0
  • #18200 deps Bump github.com/apache/inlong/inlong-sdk/dataproxy-sdk-twins/dataproxy-sdk-golang from 1.0.6 to 1.0.7
  • #18197 deps Bump github.com/gophercloud/gophercloud/v2 from 2.9.0 to 2.10.0
  • #18198 deps Bump github.com/gosnmp/gosnmp from 1.42.1 to 1.43.1
  • #18132 deps Bump github.com/jedib0t/go-pretty/v6 from 6.7.5 to 6.7.7
  • #18169 deps Bump github.com/jedib0t/go-pretty/v6 from 6.7.7 to 6.7.8
  • #18189 deps Bump github.com/likexian/whois from 1.15.6 to 1.15.7
  • #18187 deps Bump github.com/likexian/whois-parser from 1.24.20 to 1.24.21
  • #18150 deps Bump github.com/lxc/incus/v6 from 6.19.1 to 6.20.0
  • #18130 deps Bump github.com/miekg/dns from 1.1.68 to 1.1.69
  • #18149 deps Bump github.com/nats-io/nats-server/v2 from 2.12.2 to 2.12.3
  • #18147 deps Bump github.com/nats-io/nats.go from 1.47.0 to 1.48.0
  • #18172 deps Bump github.com/netsampler/goflow2/v2 from 2.2.3 to 2.2.6
  • #18190 deps Bump github.com/prometheus/common from 0.67.4 to 0.67.5
  • #18102 deps Bump github.com/prometheus/prometheus from 0.307.3 to 0.308.0
  • #18155 deps Bump github.com/prometheus/prometheus from 0.308.0 to 0.308.1
  • #18129 deps Bump github.com/snowflakedb/gosnowflake from 1.18.0 to 1.18.1
  • #18103 deps Bump github.com/tinylib/msgp from 1.5.0 to 1.6.1
  • #18188 deps Bump github.com/tinylib/msgp from 1.6.1 to 1.6.3
  • #18186 deps Bump github.com/yuin/goldmark from 1.7.13 to 1.7.15
  • #18201 deps Bump github.com/yuin/goldmark from 1.7.15 to 1.7.16
  • #18092 deps Bump go.step.sm/crypto from 0.74.0 to 0.75.0
  • #18098 deps Bump golang.org/x/crypto from 0.45.0 to 0.46.0
  • #18100 deps Bump golang.org/x/mod from 0.30.0 to 0.31.0
  • #18127 deps Bump golang.org/x/net from 0.47.0 to 0.48.0
  • #18095 deps Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0
  • #18093 deps Bump golang.org/x/sync from 0.18.0 to 0.19.0
  • #18096 deps Bump golang.org/x/sys from 0.38.0 to 0.39.0
  • #18099 deps Bump golang.org/x/term from 0.37.0 to 0.38.0
  • #18097 deps Bump golang.org/x/text from 0.31.0 to 0.32.0
  • #18104 deps Bump google.golang.org/api from 0.256.0 to 0.257.0
  • #18173 deps Bump google.golang.org/grpc from 1.77.0 to 1.78.0
  • #18131 deps Bump google.golang.org/protobuf from 1.36.10 to 1.36.11
  • #18128 deps Bump k8s.io/api from 0.34.2 to 0.34.3
  • #18148 deps Bump k8s.io/apimachinery from 0.34.3 to 0.35.0
  • #18126 deps Bump k8s.io/client-go from 0.34.2 to 0.34.3
  • #18154 deps Bump k8s.io/client-go from 0.34.3 to 0.35.0
  • #18152 deps Bump modernc.org/sqlite from 1.40.1 to 1.41.0
  • #18171 deps Bump modernc.org/sqlite from 1.41.0 to 1.42.2
  • #18170 deps Bump software.sslmate.com/src/go-pkcs12 from 0.6.0 to 0.7.0
  • #18158 deps Bump super-linter/super-linter from 8.3.0 to 8.3.1
  • #18174 deps Bump super-linter/super-linter from 8.3.1 to 8.3.2
  • #18091 deps Bump the aws-sdk-go-v2 group with 11 updates
  • #18146 deps Bump the aws-sdk-go-v2 group with 3 updates
  • #18121 deps Bump the aws-sdk-go-v2 group with 8 updates
  • #18120 deps Bump tj-actions/changed-files from 47.0.0 to 47.0.1
  • #18115 deps Update golangci-lint to 2.7.2

Packages

Arch Platform Package SHA256
arm64 CentOS telegraf-1.37.1-1.aarch64.rpm fa98ced83037771da2d64a09ce40777bb6d7e4b7de9af5959e6c35780e693ae5
armel CentOS telegraf-1.37.1-1.armel.rpm cebaefb8ecb4fa2447acf347f8c64a53f59aa6ab849bca0d6c57dcdd9f436d2c
armv6hl CentOS telegraf-1.37.1-1.armv6hl.rpm 46d82da77388a57a3aa0fd1a0e6c063fec086fa875c5abbbc8aad6da40ab43bd
i386 CentOS telegraf-1.37.1-1.i386.rpm d1d707ee9a449f81d5af2edbc2883d77f6277ac0598ccc905388b3e4ab310a2d
unknown CentOS telegraf-1.37.1-1.loongarch64.rpm 62705ac19e4191590e871c9db15b397671212a044a549717d2a5411c8f9943b8
ppc64le CentOS telegraf-1.37.1-1.ppc64le.rpm 69059ff0ffadb7378268994f233a5f3c43bdd11d4fb837cff16d401c7ae0285f
riscv64 CentOS telegraf-1.37.1-1.riscv64.rpm cc64be04253725e7bbc0b6eba8413c444fa6bc82469c03c751315eecb9243804
s390x CentOS telegraf-1.37.1-1.s390x.rpm 540e27a77f2eed90359a668ac8a3d185dc07d274cc106126651a3a64a0d52f90
amd64 CentOS telegraf-1.37.1-1.x86_64.rpm 840846e64e8bee650dfe42da41c33877f1f0f4d2bf3493f3855d6fd8698a925d
amd64 macOS telegraf-1.37.1_darwin_amd64.dmg b1e4551a72b192b7fc9ed4a4189fcddf7f74c4f1333a831d739e45ceef8616be
amd64 macOS telegraf-1.37.1_darwin_amd64.tar.gz 2dd091fd3a6bd0acdf8589f4e7b94630deeccf0171cc37c11051c0de05b95dc0
arm64 macOS telegraf-1.37.1_darwin_arm64.dmg e2ec4cbe8c08c37f985b9827a6e9c1a8a3962d0835f2fc2f85ccb7323901b566
arm64 macOS telegraf-1.37.1_darwin_arm64.tar.gz 8157af7fbb5dab90f6c4c34377267d192c6c9bb22227c2764bf652d994600c50
amd64 FreeBSD telegraf-1.37.1_freebsd_amd64.tar.gz c2ed78e2e58fe8b9ee03b1ef021057b37554b2fefa0d9218ff8450a3273f2045
armv7 FreeBSD telegraf-1.37.1_freebsd_armv7.tar.gz 92116e5332213e89af3f81d34dbd975dc62807cf107940e03c78274c0f2264c6
i386 FreeBSD telegraf-1.37.1_freebsd_i386.tar.gz c0d4f25f4a07cc3b2624a9c87fbff76ca076fbb52f1ad31b2a0af370f8932eb7
amd64 Linux telegraf-1.37.1_linux_amd64.tar.gz ed0eee7ff3b4542d14e4a866eb77e972f3c42f3a8cdf83788cd294ae66332c84
arm64 Linux telegraf-1.37.1_linux_arm64.tar.gz 3c6a5c30aec5ed74ec2d2c0f5802ce0f1b45346fefb2065b5cc7802751e24a38
armel Linux telegraf-1.37.1_linux_armel.tar.gz 321d8f99c0497d203f1dc09ef1ea127b959ae2ad3b7709c80164245ad9a4fd2a
armhf Linux telegraf-1.37.1_linux_armhf.tar.gz 8d46ad65fc054f7d2487e882f34ada721e7de9bc525a1e5bc0173228b8a9a82b
i386 Linux telegraf-1.37.1_linux_i386.tar.gz 4ba3f8d6c73fae30483543fbc52b287c817ce3c5001255b42a4e20ede61968c4
loong64 Linux telegraf-1.37.1_linux_loong64.tar.gz 1f54e5c2c783e3881e1d11012d0dddbce316dde2dffd4a6f202b39d09402e21c
mips Linux telegraf-1.37.1_linux_mips.tar.gz d0b7b89ef7e53ff97d7c1cf37055b6c1ed70683d0be8e3b1f6a809093c4e0c00
mipsel Linux telegraf-1.37.1_linux_mipsel.tar.gz b2762f2b36225f710dc785e7e2e0b270a31aad122ecd3db1a5395060697d7603
ppc64le Linux telegraf-1.37.1_linux_ppc64le.tar.gz 6868d804e37427dcc04b7ff21036c7d525f9d3551bdd00acb147dde61e3a0e00
riscv64 Linux telegraf-1.37.1_linux_riscv64.tar.gz c1befff43e6a1ed27cce01cfa9ba3893ce1bb7f0e79f6d1bdf4e150f51b2224c
s390x Linux telegraf-1.37.1_linux_s390x.tar.gz 8838978b2af21a3cb7fa7f75d07f69cf5badff1e880ab98ddbda778817ba9f8e
amd64 Windows telegraf-1.37.1_windows_amd64.zip 01632c642c328b98fbe5083b762663ead7a3ffa3a59f9d2e9929c38663e700dd
arm64 Windows telegraf-1.37.1_windows_arm64.zip c9da394b0e976c1589fce53befad18ab61c9d79dab7860308f578b8a416ffa0f
i386 Windows telegraf-1.37.1_windows_i386.zip a354a7d090193dd7c15b596887eeeb44a468d36fda3288764ceef8599e3299d1
amd64 Debian telegraf_1.37.1-1_amd64.deb 5be9ba3c2efb6a2883fcc6771b0f0c58177981ad59b7a22ac23a5afcd6ee3b91
arm64 Debian telegraf_1.37.1-1_arm64.deb a37c9a54aae965a23444ce161b5c4243eec64debf6e587271114ded08bd974b0
armel Debian telegraf_1.37.1-1_armel.deb 6f36c75d328ea35e1d3214c6bf6a26cb084ba01af215aa11ac89ba533d9d83f4
armhf Debian telegraf_1.37.1-1_armhf.deb 111ac7eac9e65c79498f00687a4680094c2a545450f926e90ed389827b70e48b
i386 Debian telegraf_1.37.1-1_i386.deb 8d487f973582dfd4bc06f7105649e90dced26141f82429631f0686d2300fba1a
loong64 Debian telegraf_1.37.1-1_loong64.deb d7414c65eb185bf2ff243defdf84464d6dbab96e4f6ac60f9a8428ac31f4f0e7
mips Debian telegraf_1.37.1-1_mips.deb 1b43fc67c94160f4f83724d8af7f0b68facbe89bfe997340589aafc0e5d558a3
mipsel Debian telegraf_1.37.1-1_mipsel.deb 2934282b0c7f84745271ac51e46cc072cd0f341f90140a3fdecc4f3f75132226
ppc64el Debian telegraf_1.37.1-1_ppc64el.deb 5824d7cc28879a67f4f3cbfd2fba89027f75641d83d31804289d9d769a1ad3fb
riscv64 Debian telegraf_1.37.1-1_riscv64.deb 0dcfc083d17544efc69fae655e26e0d1eab5e2489efc96146a84a93eb7d7d5e9
s390x Debian telegraf_1.37.1-1_s390x.deb 737a8afc47c0cc6936d0d9eb394768d478e42ce5bf7bc28323884006c7e7ded3
2 days ago
MeiliSearch
meilisearch

v1.32.0

🌈 Improvements

Log Search performance trace

Introduces comprehensive progress tracking and logging for search operations in Meilisearch. It adds detailed timing information for each step of the search process, enabling better observability and performance analysis.

by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6072

Extract document operations from payloads in parallel

We accelerate document indexing by processing a large number of tasks in batches or a large number of records in parallel. We expedited the preparation of the payloads by extracting the various changes and assigning internal IDs in parallel. We achieved a 7x speedup on a four-million-document insertion using four CPUs, and the performance scales with the number of CPUs.

The indexedDocuments field in tasks using skipCreation no longer precisely reflects the number of document operations performed, specifically for POST and PUT operations. This count may be higher than the actual number of operations, but it doesn't affect the computation; only the reported count is impacted. We prioritize speed over perfect accuracy here, and the documents are still correctly indexed as before.

by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6080

🐛 Bug fixes

Vector sort: Bucket documents with same similarity

Fixed vector sort bucketing so documents with identical similarity scores are grouped together, ensuring subsequent ranking rules are applied correctly.

by @dureuill in https://github.com/meilisearch/meilisearch/pull/6081

Properly Delete Documents from FID-Based Databases

Fixes a bug where changing searchableAttributes from ["*"] to a subset of fields left orphaned data in fid-based databases, causing corruption and warnings during search.

by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6076

Rebuild the graph links when dumpless-upgrading

Bumps hannoy to v0.1.3-nested-rtxns, which fixes graph-related recall issues and adds a method to rebuild graph links to recover previously malformed graphs. Also fixes a minor issue in the dumpless upgrade flow where the upgrade description was not displayed correctly and related operations were not properly associated with the upgrade.

by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6055

🛠️ Maintenance and Misc.

Update JS SDKs tests to use pnpm instead of yarn

Updated the JavaScript SDK tests to use pnpm instead of yarn in CI workflows, switching the package manager across test configurations to ensure the SDK test suite runs correctly and consistently with the current tooling.

by @Strift in https://github.com/meilisearch/meilisearch/pull/6075

Adapt JS tests in SDK tests CI

Updated the SDK tests CI workflow for the JavaScript SDKs

by @curquiza in https://github.com/meilisearch/meilisearch/pull/6050

Bump lru from 0.16.2 to 0.16.3

Fix Stacked Borrows violation in IterMut.

by @dependabot[bot] in https://github.com/meilisearch/meilisearch/pull/6087

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.31.0...v1.32.0