Spring Boot release candidate adds client-network and telemetry controls
The Spring Boot 4.1.0-RC1 announcement lists HTTP client SSRF mitigation with InetAddressFilter. This draft covers only the Boot portion of the older roundup.
archive-renewal↗
archive-renewal33
Practical notes on Java, Spring, testing, and software engineering, with working examples and source references.
Spring Boot milestone: LDAP and telemetry changes
The Spring Boot 4.2.0-M2 milestone adds SSL bundle support for LDAP, including LDAPS for the embedded server. This draft verifies the Boot portion of the older roundup.
archive-renewal↗
Workers and Durable Objects gain on-demand resource profiles
Cloudflare announced CPU and memory profiling for Workers and Durable Objects, with on-demand collection and downloadable profiles described in the article.
archive-renewal↗
Buildkite scopes pipeline secrets and adds pipeline validation tools
Buildkite describes pipeline secrets as cluster secrets restricted to the current pipeline, with additional access conditions available.
archive-renewal↗
Cloudflare reports lower inference costs for its internal reviewer
Cloudflare reports its internal code reviewer averaged $0.77 per review, down 68% against a $2.43 baseline from its most expensive weeks. These are its workload results, not guaranteed savings for other teams.
archive-renewal↗
NetScaler protection requires patching and origin controls
Cloudflare starts its NetScaler guidance by telling affected customers to patch their gateway before considering additional protective layers.
archive-renewal↗
eMudhra incident: audit application trust as well as client updates
Cloudflare instructed Tunnel customers to upgrade cloudflared to 2026.10.2 and redeploy fixed container images where applicable. This is the version in the incident notice, not a claim about the latest version.
archive-renewal↗
PHP patches remain necessary alongside Cloudflare WAF protections
The PHP project lists 8.5.12, 8.4.27, 8.3.36 and 8.2.35 as fixes for the critical remote-code-execution vulnerabilities disclosed at the time.
archive-renewal↗
Cloudflare WAF response rules: actions and body limits
Cloudflare WAF lets customers create up to three custom response rules supporting Log and Block actions.
archive-renewal↗