A Rust advisory showed Miri writing CI env vars into a cached target/ folder. Here's how I scope GitHub Actions secrets so no cache ever…
My mocked tests said the row level security policy was fine. It wasn't. How pgsql-test runs RLS policies under the real app role, and the…
Cloudflare cut 100TB of RAM by re-deriving the consistent hashing math behind a 2007 default. What the formula, and a Rust alignment gotcha, mean for…
ubuntu-latest moves to Ubuntu 26.04 from 19 October. I diffed the two runner images: PHP 8.5, MySQL 8.4, Postgres 18, twelve tools gone, and a…
Postgres encryption at rest is two different questions. What LUKS already covers, what pg_vault_tde adds, what stays plaintext, and the 1.7.1 TOAST upgrade trap.
PostgreSQL never indexes foreign keys and Laravel's constrained() won't either. Vacuum 1.2 lints the schema in CI, with a baseline for legacy apps. What I…
I pointed Dalibo's PostgreSQL Migrator 1.0 at a 140-table MariaDB database. Inspection is superb, the COPY is fast, and one missing feature still costs a…
PostgreSQL Anonymizer 3.2 adds seeded pseudonymisation and blocks superuser masking. How I replaced a risky staging dump with a masked role, with the SQL.
I switched this blog from gzip to zstd after reading Cloudflare's cache post. Real numbers on size and CPU, the Caddy config, and the three…
I fixed one CI bug in eleven repos before learning GitHub Actions reusable workflows properly. Before/after YAML, composite actions, secrets, and the gotchas.