Operations | Monitoring | ITSM | DevOps | Cloud

Nokogiri sits under so much Ruby code that its patch releases are worth reading even when the version number looks routine. 1.19.5 is a patch release carrying three security advisories and a long list of crash and memory fixes, so it’s worth pulling in on your next dependency pass.

If your Node app talks to MongoDB through the official mongodb driver, 7.8.0 is worth upgrading to before your next routine dependency pass. It’s a minor version by the number, but it carries two security fixes, and one of them changes how a feature you may already be using behaves.