Episode Details

News includes EEF board elections with voting beginning May 9th, Gleam v1.10.0 enhancing security with SBoMs and SLSA build provenance, an AshAuthentication vulnerability with mitigation steps, the Elixir Secure Coding Training project finding a permanent home at the EEF, announcements for both ElixirConf US 2025 in Orlando and ElixirConfEU in Krakow with speaker lineup, and more!

Show Notes online - http://podcast.thinkingelixir.com/250

Elixir Community News

• https://paraxial.io/ – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a limited time offer.
• https://erlef.org/blog/eef/election-2025 – EEF board elections announced with important dates - candidacy submissions by May 8th, voting open May 9-16th.
• https://x.com/TheErlef/status/1911847956308959650 – Gleam v1.10.0 will ship with Build SBoMs and SLSA build provenance for all release artifacts and Docker images, improving visibility into dependencies and software supply chain security.
• https://x.com/theerlef/status/1910348770514006242 – The "Elixir Secure Coding Training (ESCT)" project has been transferred to the Erlang Ecosystem Foundation for a more permanent home and maintainership.
• https://bsky.app/profile/davelucia.com/post/3lmcqhzoc7c26 – Dave Lucia shares information about the ESCT project transfer from Podium to TvLabs and ultimately to the EEF.
• https://github.com/erlef/elixir-secure-coding – An interactive cybersecurity curriculum designed for enterprise use at software companies using Elixir.
• https://github.com/phoenixframework/phoenix/pull/6184 – Fix for Plug.Debugger screen which was showing ANSI codes in HTML.
• https://github.com/phoenixframework/phoenix/pull/6194 – Fix for the Phoenix installer's incorrect application of custom variants in tailwind v4.
• https://github.com/team-alembic/ash_authentication/security/advisories/GHSA-3988-q8q7-p787 – AshAuthentication vulnerability published with mitigation steps - update packages, set require_interaction to true, and add confirm_route above auth_routes.
• https://elixirconf.com/ – ElixirConf US 2025 is open for submitting talks and workshops in Orlando. Talk submissions due April 29, workshop submissions due April 15.
• https://x.com/elixirconf/status/1907843035544826137 – Announcement for ElixirConf US 2025 in Orlando with deadlines for talk and workshop submissions.