Platformatic Upgrade, "Can I take your Subdmain", election algorithms and other Adventures in Nodeland

Hi Folks!

This weekend of turmoil for the startup world ended well. This is the best outcome for all our industry, so I'm glad everyone would be able to meet payroll, and there would be no layoff due to the SVB crack.

Videos

In this live stream, we finished the porting to PostgreSQL and implemented the election algorithm. Our progress is visible at https://github.com/platformatic/unscalable-queue-system/pull/39.

Platformatic v0.17.0

Platformatic v0.17.0 ships a new plugins configuration option, a new configuration schema store, a `plt upgrade command, and many more fixes!

Read the full announcement at: https://blog.platformatic.dev/platformatic-v0170-config-file-changes-a-schema-store-and-a-new-upgrade-command.

Releases

• @fastify/jwt v6.7.0 propagate user result.
• @fastify/multipart v7.4.2 fix empty bodies does not crash anymore.
• @fastify/csrf v6.2.0 adds hmac hashing of csrf tokens.
• find-my-way v7.6.0 uses internal trees for prettyPrint.
• readable-stream v3.6.2 fixes es5 compatibility.
• fastify-routes-stats v3.4.0 improves performance and fixes a bad bug when used on Node v16.
• pino-pretty v10.0.0 supports nested levelKey.
• undici v5.21.0 fixes 15 bugs and adds a clientFactory option to ProxyAgent. 13 contributors did this release!
• @fastify/reply-from v9.0.1 disables http/http2 timeouts for server-sent events.
• @fastify/multipart v7.5.0 use part.type for easy type narrowing.

Articles

• In "Can I take Your Subdomain? Exploring Same-Site Attacks in the Modern Web, Claudio Squarcina et al. discuss how exposing different subdomains in your application could expose your application to additional risk. This is a must-read for all working on the Web. TL; DR, please be careful when you expose multiple applications on different subdomains.

• Using the PlanetScale CLI with GitHub Actions workflows - is a interesting read. We are working on a tutorial that combines PlanetScale with Platformatic Cloud.

• David Heinemeir Hansson (creator of Ruby on Rails, Basecamp, and Hey) is on a quest to migrate out of the cloud. Take a read on "We stand to save $7m over five years from our cloud exit", "Don't be fooled by serverless", "Introducing MRSK".