Elixir & Phoenix
ELIXIR PATCHES INTEGER PARSING VULNERABILITY
Elixir 1.20.1 shipped overnight with a critical fix for version number parsing that could allow attackers to exploit untrusted input.
read --wire →
$ tail -f topics/elixir.log
Daily updates from the BEAM ecosystem - the Elixir language, Phoenix, LiveView, and Ecto.
7 updates across 1 project this week.
One calm review of what shipped across Elixir & Phoenix - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Elixir & Phoenix projects - refine anytime. · Read a sample issue →
Elixir & Phoenix
Elixir 1.20.1 shipped overnight with a critical fix for version number parsing that could allow attackers to exploit untrusted input.
read --wire →
Elixir & Phoenix
Elixir core shipped a new trace helper that solves the hardest problem in testing concurrent systems: asserting on state when you don't control the timing.
read --wire →
Elixir & Phoenix
Stop guessing when your GenServer will receive that PubSub message. Elixir's new trace helper lets you assert on async process state without the timing games.
read --wire →
Elixir & Phoenix
Elixir is standardizing on package.hexdocs.pm URLs, replacing the older hexdocs.pm/package format across the ecosystem.
read --wire →
Elixir & Phoenix
Phoenix Live View shipped URL scheme validation for navigate and patch operations, closing a surface area for malformed routing.
read --wire →
Elixir & Phoenix
Three routine dependency bumps landed in Elixir core overnight, touching your security scanning, code signing, and security analysis pipeline.
read --wire →
Elixir & Phoenix
Elixir's type system got sharper overnight with reverse arrow refinement landing, while Ecto's query builder now accepts macros where it previously rejected them.
read --wire →
Elixir & Phoenix
Elixir's Registry just got faster at exact key matching, while the core repo tightens its security scanning.
read --wire →
Elixir & Phoenix
The Elixir compiler now optimizes `x in []` pattern matching to compile directly to `false` instead of calling lists.member, while ExUnit's capture_log spec finally forbids the crash-inducing `formatter: nil` option that was never actually supported.
read --wire →
Elixir & Phoenix
Phoenix just made websocket disconnections explicit and predictable, while Elixir's type system got smarter about tracking and fewer false positives.
read --wire →
Elixir & Phoenix
The compiler just got smarter about deduplicating type nodes, cutting through the union complexity that's been inflating inferred types for multi-clause functions.
read --wire →
Elixir & Phoenix
Elixir patched a cond expression bug that was silently losing variable bindings, while Phoenix Live View optimized rendering performance by eliminating unnecessary list reversals.
read --wire →
Elixir & Phoenix
Phoenix Live View patched critical documentation gaps in assign_async while Ecto modernizes its decimal dependency.
read --wire →
Elixir & Phoenix
Elixir is deprecating the xref exclude syntax and shipping a wave of diagnostic improvements that catch more bugs earlier in the compilation pipeline.
read --wire →
Elixir & Phoenix
Mix test now respects the --raise flag when warnings are treated as errors, closing a consistency gap in CI pipelines, while Ecto fixes a critical bug that exposed database credentials in SASL progress reports.
read --wire →