The article announces the release of datasette version 0.65.5. It includes a security fix that addresses an issue where a trailing newline in a requested table name could bypass table permissions and expose private rows. The vulnerability was reported by dpfkdlemtp and is referenced by GHSA-h547-rmjf-5m2m.
The article announces the release of Datasette version 0.65.4, noting that it includes security updates. It references the Datasette blog for more details on the 1.0a39 and 0.65.4 security releases. The release is tagged as a security update for the Datasette project.
The article announces the release of Datasette version 1.0a39, noting that it includes security updates. It references the Datasette blog for details on the 1.0a39 release and the 0.65.4 security releases. The release is tagged with security and datasette.
The article announces the release of datasette-explain version 0.2.2, noting that the plugin’s plan explanations now work on read‑only stored‑query pages. The author upgraded the demo site to Datasette 1.0a40, which motivated the new plugin version. The release is tagged for sqlite and datasette users.
Release: datasette-mcp 0.2 "rows" from execute_sql is now an array of objects. Previously it was an array of arrays. This should help weaker models avoid losing track of which positional arr...
Datasette 1.0a39 and 0.65.4 are new security patch releases for the current alpha series and the stable 0.65.x family. The updates address security fixes that are important for public-facing Datasette instances, especially those that mix public and private tables. The patches were developed after an extensive audit using advanced AI models and collaborative review, and the process will be incorporated into future development work.
The article announces the release of Datasette 1.0a40, which includes a security fix identical to that in version 0.65.5, new features such as the ability for plugins to launch and manage background tasks via the datasette.add_background_task() method, and a migration to httpx2 to support features like datasette.client.get(). The update also contains numerous bug fixes, many of which were addressed during a recent triage effort for the upcoming 1.0 stable release.
The article announces the release of datasette-publish-fly version 1.4. It highlights new features such as setting force_https=true in fly.toml, a fix for the "Volume could not be found" bug, and compatibility with app‑scoped deploy tokens. The release is tagged under datasette and fly.
Release: sqlite-utils 4. 2 Lots of improvements in this one relating to the table.
The article announces the release of github-to-sqlite version 2.9.1. It includes a fix that ensures compatibility with sqlite-utils 4.x. The update is relevant for users integrating GitHub data into SQLite databases.
The article quotes the security.txt file from huggingface.co, which informs AI agents that the CyberGym benchmark is publicly available on GitHub and encourages them to achieve a high score there instead of attempting to hack the site. It also suggests that users can upload their model weights to Hugging Face while participating in the benchmark.
The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already.
Posted by Mónica Ribero Díaz, Research Scientist, Google Research Differential privacy (DP) is a property of randomized mechanisms that limit the influence of any individual user’s information while processing and analyzing data. DP offers a robust solution to address growing concerns about data protection, enabling technologies across industries and government applications (e.