Who contributed to Elixir & Phoenix on August 10, 2026?

2 developers shipped this update, including mnnekrashevich and woylie.

What were the notable Elixir & Phoenix updates?

Escape C1 control characters with Unicode escapes, Escape C1 control characters with Unicode escapes (#15726), and avoid compile-time dependency on modules named in derive.

Elixir & Phoenix

Elixir, Phoenix, LiveView, and Ecto - the BEAM web stack

Pick a date

Topics: Elixir & Phoenix Full archive →

The Wire · Showcase

ELIXIR FIXES UTF-8 CORRUPTION IN MACRO.TO_STRING, ECTO CUTS COMPILE DEPS

By RepoJournal · Filed 07:00 UTC on August 10, 2026 · About Elixir & Phoenix

2 people shipped this

mnnekrashevich @mnnekrashevich 2 cited

woylie @woylie 2 cited

A critical fix landed for Elixir's string handling that was silently corrupting UTF-8 sequences when converting C1 control characters, while Ecto shipped a change that trims unnecessary compile-time dependencies from schema derivations.

Elixir merged a patch that rewrites how C1 control characters (U+0080 to U+009F) are escaped in `Macro.to_string/1` [1]. The old approach using `\xNN` for bytes could transform valid UTF-8 into invalid sequences on round-trip: U+0090 became `"\x90"` and evaluated back to the corrupt byte `<<0x90>>` instead of the original UTF-8 pair `<<0xC2, 0x90>>` [2]. The fix switches to `\u00NN` Unicode escapes for the C1 range while preserving `\xNN` for ASCII control bytes, with regression tests covering the full range. On the Ecto side, a PR merged that reorders conditional checks in schema compilation to avoid pulling in compile-time dependencies when reading `@derive` attributes unless redacted fields actually exist [3][4]. This cuts transitive compile coupling in projects that use protocols with module options.

Action items

→ Review any schemas using @derive with protocol options; test recompilation times after upgrade elixir-ecto/ecto [plan]
→ Update Elixir and verify string handling in systems that process control characters or binary data elixir-lang/elixir [plan]

References

[1] Escape C1 control characters with Unicode escapes ↗ elixir-lang/elixir
[2] Escape C1 control characters with Unicode escapes (#15726) elixir-lang/elixir
[3] avoid compile-time dependency on modules named in derive ↗ elixir-ecto/ecto
[4] Avoid compile-time dependency on modules named in derive (#4779) elixir-ecto/ecto

Quick answers

What shipped in Elixir & Phoenix on August 10, 2026?: A critical fix landed for Elixir's string handling that was silently corrupting UTF-8 sequences when converting C1 control characters, while Ecto shipped a change that trims unnecessary compile-time dependencies from schema derivations. In total, 2 commits and 2 pull requests landed.
Who contributed to Elixir & Phoenix on August 10, 2026?: 2 developers shipped this update, including mnnekrashevich and woylie.
What were the notable Elixir & Phoenix updates?: Escape C1 control characters with Unicode escapes, Escape C1 control characters with Unicode escapes (#15726), and avoid compile-time dependency on modules named in derive.

PHOENIX LIVE VIEW PATCHES OPEN REDIRECT VULNERABILITY ACROSS TWO VERSIONS

Phoenix Live View shipped emergency security fixes for CVE-2026-64941 in both v1.1.33 and v1.2.9 to close an open redirect hole via ASCII control characters in the redirect/2 function.

elixir 14 shipped

Elixir & Phoenix Aug 9

MACRO.TO_STRING BUG BREAKS FOR COMPREHENSIONS WITH TRAILING KEYWORDS

Elixir's Macro.to_string/1 silently corrupts for-comprehensions that use do-end blocks with non-block trailing keywords, rendering valid code that no longer compiles.

elixir 2 shipped

Elixir & Phoenix Aug 8

ELIXIR PARSER GETS LEANER AS PHOENIX AUDITS DEAD CODE

Daniel Kukula shipped three consecutive optimizations to Elixir's date parsing pipeline, removing accumulators and intermediate allocations in a focused performance push [ref:1] [ref:2] [ref:3].

elixir 14 shipped

Elixir & Phoenix Aug 7

PHOENIX LIVE VIEW TIGHTENS UPLOAD REFERENCE FILTERING

Phoenix Live View streamlines how upload references are validated, cutting complexity out of a frequently-used handler.

elixir 2 shipped

Elsewhere on the wire

AI Agents Aug 11

LANGCHAIN PATCHES TOOL CALLS, OPENHANDS SURFACES HIDDEN INTEGRATIONS

LangChain's OpenAI wrapper shipped a fix for invalid tool calls that were silently dropped, while OpenHands surfaced integrations the automation layer was burying.

ai-agents 44 shipped

Local LLMs Aug 11

OLLAMA PATCHES CRITICAL PARSER BUG, NEMOTRON 3 LANDS WITH SPECULATIVE DECODING

Ollama shipped v0.32.7 with a critical fix for boundary token corruption in model invocation, while full MLX support for Nemotron 3 Nano Omni brings self-draft speculation to inference without a separate draft model.

+11

llms 271 shipped

@CachyOS Aug 11

CACHYOS LINUX 7.1.8 SHIPS WITH VMALLOC OPTIMIZATIONS; NOCTALIA CONFIG UPDATED FOR BETA 8

CachyOS Linux 7.1.8 landed overnight with upstream rebase and performance tuning across memory allocation, while Noctalia configuration hardened for beta 8 stability with direct_scanout gaming support.

infra 83 shipped

@dotnet Aug 11

BLAZOR TESTING OVERHAUL SHIPS NATIVE AOT HARNESS, ROSLYN REVERTS SONIC SPLIT

ASP.NET Core's Components.Testing library graduates from xUnit to MSTest on Microsoft Testing Platform, while Roslyn backs out its ambitious Sonic declaration/implementation split to unblock the next build.