InfoQ Homepage Development Content on InfoQ
-
Heuristic Static Analysis Tool GuardDog Used to Detect Several Malicious PyPi Packages
GuardDog is new open source tool aimed at identifying malicious Python Packages using Sempreg and package metadata analysis. Thanks to a set of source code heuristics, GuardDog can detect malicious packages never seen before and has been used to identify several malicious PyPi packages in the wild.
-
C# 11 Improvements for Strings, List Patterns and Object Creation
As part of the .NET 7 launch, on November 8th Microsoft unveiled the new features of C# 11, the latest version of the popular .NET programming language. The most prominent improvements include string enhancements, static method abstractions, list patterns and required members for object creation.
-
Vanilla Extract - a Modern CSS in JS Library
Vanilla Extract is a new "CSS in JS" library that offers type safety, good theming support, and plenty of extensions, making it an exciting alternative to existing solutions such as Styled Components.
-
AWS Announces Redis 7 Compatibility to Amazon ElastiCache for Redis
Recently AWS announced Redis 7 compatibility with Amazon ElastiCache for Redis, which brings several new features, such as Redis Functions, ACL improvements, and Sharded Pub/Sub.
-
.NET 7 Adds Aggressive Garbage Collection for Kubernetes
In a Kubernetes cluster, idle services may consume too much memory, resulting in an out-of-memory situation for the whole server even nothing significant is occurring. The new GCCollectionMode.Aggressive option allows the application to tell the runtime to release memory it doesn’t need when going idle.
-
Java News Roundup: Spring Framework 6, JCP Election, Project Valhalla, OpenJDK Updates
This week's Java roundup for November 14th, 2022, features news from OpenJDK, JDK 20, Project Valhalla, JavaFX 20, JCP election results, Spring Framework 6.0, Spring Data 2022.0, Spring Cloud Dataflow 2.10-RC2, Spring Modulith 0.1-RC1, Quarkus 2.14.1 and 3.0.Alpha1, Micronaut 3.7.4, Piranha 22.11.0, Eclipse Vert.x 4.3.5, Apache Tomcat 10.1.2 and 9.0.69, Apache Beam 2.43.0 and PrimeFaces 12.0.2.
-
Angular 15 - Standalone Components are Stable
Google recently released Angular 15, the latest version of their popular SPA framework. The update includes a stable API for standalone components alongside several other significant improvements.
-
Tagged Strings in Visual Studio and .NET 7
As part of .NET 7, developers now have the ability to tag strings using the StringSyntax attribute. These tags inform tools such as Visual Studio as to the nature of the string. For example, you can mark the string as containing JSON or RegEx, and Visual Studio will apply the appropriate syntax highlighting.
-
Upgrade to Apache Commons Text 1.10 to Avoid New Exploit
A new vulnerability in the Apache Commons Text, AKA Text4Shell, allows an attacker to execute arbitrary code on the host machine. Originally reported by Alvaro Munoz, principal security researcher at GitHub, CVE-2022-42889 is similar to Spring4Shell and Log4Shell, allowing remote code execution (RCE).
-
Fermyon Built a WebAssembly Cloud to Push Serverless Microservices Beyond Containers
At KubeCon/CloudNativeCon 2022, Fermyon launched its microservice-oriented platform for WebAssembly apps, called Fermyon Cloud, which is now available in open beta.
-
Microsoft Introduces New Azure HX and HBv4 Virtual Machines for High-Performance Computing
Microsoft recently announced new HBv4-series and HX-series virtual machines (VMs) in preview suitable for high-performance computing (HPC) workloads such as computational fluid dynamics (CFD), finite element analysis, frontend and backend electronic design automation (EDA), rendering, molecular dynamics, computational geoscience, weather simulation, AI inference, and financial risk analysis.
-
AWS Introduces Resource Explorer to Simplify Search and Discovery of Resources
AWS recently announced the general availability of Resource Explorer, a managed capability to search and discover resources inside an AWS account. The new option is available at no additional charge and can query multiple regions but not multiple accounts.
-
Google Releases a Guide to Android App Modularization
Google has recently released a guide to Android app modularization. This guide is designed to bring best practices and recommended patterns for developers to build multi-module Android apps, focusing on mitigating problems that arise when the codebase grows, such as scalability, readability, stability and testability.
-
New Metrics Capabilities for OpenTelemetry on Azure Monitor
Microsoft released for preview a series of updates to its Azure Monitor OpenTelemetry Exporter packages for .NET, Node.js and Python applications.
-
First Open Source Copyright Lawsuit Challenges GitHub Copilot
A class-action lawsuit has been filed in a US federal court challenging the legality of GitHub Copilot and the related OpenAI Codex. The suit against GitHub, Microsoft, and OpenAI claims violation of open-source licenses and could have a wide impact in the world of artificial intelligence.