Show Notes
Peter announces Pushin.eu, a GitHub competitor hosted in the EU, written in Elixir. Other topics include Phoenix ships security patches spanning four versions, Oban 2.24 and Oban Pro 1.8rc land, and Ash publishes a batch of CVEs alongside a wave of new Elixir tool releases. ## FOLLOW UPS
- Steffen Deusch — Phoenix gets security patches going back 4 versions (1.5 to 1.8) https://bsky.app/profile/steffend.me/post/3mthapcxlwk2v - "Apps using old Phoenix should still update, for sure, but not necessarily for security reasons" - "As a general note: a common misconception is also that people think they have to copy whatever changes we did to the generators. That's not the case. You can of course do that, but it's in no way a requirement to update to later Phoenix versions. It's 1.x, so updates are generally non-breaking." ## NEWS - Nerves has an AI policy now https://github.com/nerves-project/nerves/blob/main/CONTRIBUTING.md#ai-assisted-contributions - Oban 2.24 and Oban Pro 1.8rc are out - Oban v2.24.0 released https://elixirforum.com/t/oban-v2-24-0-released/76462 - Oban Pro announcement https://bsky.app/profile/oban.pro/post/3mtwjkkwzy22v - oban-bg/oban v2.24.0 release notes https://github.com/oban-bg/oban/releases/tag/v2.24.0 - Oban Pro changelog https://oban.pro/docs/pro/changelog.html - samly (Elixir SAML client) has security issues and needs maintainers https://forum.elixirforum.com/t/samly-add-saml-sso-to-your-phoenix-application-now-with-multiple-identity-provider-support/8511/50 - Ash releases a bunch of CVEs https://cna.erlef.org/cves - Quite a lot of small tools were released. An overview: - Abuuba — a drop-in replacement for Mastodon https://elixirforum.com/t/abuuba-a-drop-in-replacement-for-mastodon/76501 - BeamConsole — an embeddable process map and flight recorder for BEAM applications https://elixirforum.com/t/beamconsole-an-embeddable-process-map-and-flight-recorder-for-beam-applications/76486 - Voyager — a modern alternative to Observer https://elixirforum.com/t/voyager-a-modern-alternative-to-observer/76247 - MapLibreX — MapLibre GL JS as Phoenix LiveView components https://elixirforum.com/t/maplibrex-maplibre-gl-js-as-phoenix-liveview-components/76457 - Temper — flaky test detection for ExUnit https://elixirforum.com/t/temper-flaky-test-detection-for-exunit/76476 - DSH — a DeepSeek coding harness written in Elixir https://elixirforum.com/t/dsh-the-deepseek-harness/76497 - Probex — exact answers to structural questions about Elixir source, built by agents for agents https://elixirforum.com/t/probex-exact-answers-to-structural-questions-about-elixir-source-built-by-agents-for-agents/76366 - PaperForge — a pure Elixir platform for building, securing, and transforming PDFs https://elixirforum.com/t/paperforge-a-pure-elixir-platform-for-building-securing-and-transforming-pdfs/76241 - Press — a HTML-to-PDF library, 100% in Elixir https://elixirforum.com/t/press-a-html-to-pdf-library-100-in-elixir/76418 - Announcing Pushin ## BLOGS - Gleam — Takeaways from the GitHub Secure Open Source Fund https://gleam.run/news/help-from-the-github-security-lab/ - LiveView Local: first release https://swmansion.com/blog/local-live-view-first-release/ - River — We replaced our ledger with two functions https://river.com/content/we-replaced-our-ledger-with-two-functions - Johanna Larson — Speeding up a Phoenix LiveView web app with a CDN https://jola.dev/posts/speeding-up-phoenix-liveview-cdn - Aleksei Matiushkin (mudasobwa) - Anti-Antipatterns in Elixir Libraries https://rocket-science.ru/hacking/2026/08/09/anti-antipatterns-in-elixir-libraries - Why LLMs Rock (or: BooLLMean Logic for the Uninitiated) https://rocket-science.ru/hacking/2026/08/29/why-llm-rock - Lars Wikman — Nerves, apparently popular with agents https://underjord.io/nerves-iot-framework-apparently-popular-with-agents.html - Terence Tao — Mathematics in the age of AI https://arxiv.org/html/2608.16753v1 - "The goal of training a mathematician is not ach
More from Macro Mayhem
A tribute to Margaret Hamilton’s fault-tolerant software opens a broad roundup of BEAM news: changes to Gleam compilation, Elixir type-system research, Sobelow and other library updates, faster Hologram compilation, Android devices running Nerves, and easier access to Hex-built images. The rest covers Goatmire recaps, Bluesky’s ATProto, doc tests and regression testing, community events, secure handling of local and production credentials, and AI-assisted vulnerability scanning. NEWS Margaret Hamilton dieshttps://news.mit.edu/2026/margaret-hamilton-computing-pioneer-dies-1007
Recorded live from Goatmire in Varberg, we recap the conference, its Nerves-powered orchestra, LED tree, and badges, and discuss José Valim's post on evolving programming languages in the AI era. Plus OTP security patches you should install now. NEWS OTP 29.1.1, plus 28 and 27 patch releases, fix three CVEs https://forum.elixirforum.com/t/patch-package-otp-29-1-1-released/76775 https://nvd.nist.gov/vuln/detail/cve-2026-65634 https://nvd.nist.gov/vuln/detail/cve-2026-68956 https://nvd.nist.gov/vuln/detail/cve-2026-89422 Explorer 0.13 is out https://hex.pm/packages/explorer/0.13.0/changelog LetMe 3.0.4 released https://elixirforum.com/t/letme-3-0-4-released/76850 Flop 0.29.0 and Flop Phoenix 0.27.0 released https://github.com/woylie/flop/blob/main/CHANGELOG.md https://elixirforum.com/t/flop-phoenix-0-27-0-released/76849 Atomic Bucket 0.5 released https://forum.elixirforum.com/t/atomic-bucket-fast-single-node-rate-limiter-impl ementing-token-bucket-algorithm/74225/16 SmolNet, a user-mode TCP/IP stack https://forum.elixirforum.com/t/smolnet-a-user-mode-tcp-ip-stack/76739 ExRatatui 0.16 released https://forum.elixirforum.com/t/exratatui-elixir-bindings-for-the-rust-ratatui-t erminal-ui-library/74403/17 Gale, a Phoenix adapter for HTTP/1.1, HTTP/2, and HTTP/3 https://elixirforum.com/t/gale-phoenix-adapter-for-http-1-1-http-2-and-http-3-qu ic-without-needing-to-replace-bandit/76880 BLOGS José Valim - Evolving programming languages in the AI era https://dashbit.co/blog/evolving-ai-era Discussion on ElixirForum: https://forum.elixirforum.com/t/thoughts-on-evolving- programming-languages-in-the-ai-era/76825/3 Ryan Zidago - Keep product knowledge close to the code https://ryanzidago.com/posts/keep-product-knowledge-close-to-the-code/ Herman Verschooten - Blue/Green deployments https://til.verschooten.name/til/2026-09-19/blue_green Mentioned in the Xamal thread: https://forum.elixirforum.com/t/xamal-deploy-elix ir-releases-to-bare-metal-servers-via-ssh/74398/35 MEETUPS AND CONFERENCES Nerves Meetup EU, Oct 14, 7 PM CET, remote via Zoom EEF Unconference and Code BEAM Europe, Haarlem, Oct 21 - 22 DISCUSSION Goatmire recap
We recap ElixirConf US in Chicago, unveil this year's AtomVM-powered Goatmire name badges, and dig into what happened after Pushin hit the front page of Hacker News. Plus OTP security releases and a Rebar4 call for input. NEWS • Jonatan is #69 and Peter is #102 globally for number of reported CVEs – CVE reporter credits ranking (CIRCL): https://cve.circl.lu/credits/?q=&page=7 • OTP security releases, and OTP 29.1 released – OTP security updates (EEF CNA): https://com.erlef.org/wg/cna/2026/09/01/otp-updates.html – Erlang/OTP 29.1 released: https://erlangforums.com/t/erlang-otp-29-1-released/5949 • Rebar4 asks for input: which plugins to prioritize for compatibility testing – Rebar v4: which Rebar plugins should we prioritize for compatibility testing? https://erlangforums.com/t/rebar-v4-which-rebar-plugins-should-we-prior itize-for-compatibility-testing/5908 – Rebar3: integrating with Erlang/OTP (Kickstarter): https://www.kickstarter. com/projects/peerstritzinger/rebar3-integrating-with-erlang-otp • ElixirConf EU 2026 videos are also being released (43 videos as of this morning) – ElixirConf EU 2026 playlist: https://youtube.com/playlist?list=PLvL2NEhYV4Z sIgecSexrk26--PBWiEyUy&si=6DYo_JX4Cl_uSHXp BLOGS • Announcing Pushin: https://peterullrich.com/announcing-pushin • Nathan Long — Label your processes: https://nathanmlong.com/2026/09/label-your-processes/ • EEF — Defending our ecosystem against AI threats: https://com.erlef.org/wg/sec/2026/09/02/our-self-defense.html MEETUPS & CONFERENCES • Goatmire — Sept 27 – Oct 3, Varberg, SE: https://goatmire.com • CodeBEAM — Oct 21 – 22, Haarlem, NL: https://codebeameurope.com DISCUSSION • ElixirConf US was last week — keynotes are already available – ElixirConf US 2026 playlist: https://www.youtube.com/playlist?list=PLVqsKC3zWaDc • Deep dish pizza is a casserole • Goatmire badges • Pushin follow up
FOLLOW UPS — 00:00 - Audio. We'll do better. - No interviews on this podcast (for now). But thanks for reaching out.
FOLLOW UPS Deep dish is indeed pizza not a pie. (Is it though?) Hologram is written in Elixir NEWS OTP Emergency Patch releases for OTP 27, 28, 29 fix a bunch of vulnerabilities https://elixirforum.com/t/patch-package-otp-29-0-4-released/76127 https://elixirforum.com/t/patch-package-otp-28-5-0-4-released/76128 https://elixirforum.com/t/patch-package-otp-27-3-4-15-released/76129