chore(deps): update dependency erlang to v29 #128
No reviewers
Labels
No labels
Area
Micropub
Compat
Breaking
Kind
Bug
Kind
Documentation
Kind
Enhancement
Kind
Feature
Kind
Infra
Kind
Security
Kind
Testing
Priority
Critical
Priority
High
Priority
Low
Priority
Medium
Reviewed
Confirmed
Reviewed
Duplicate
Reviewed
Invalid
Reviewed
Won't Fix
Status
Abandoned
Status
Blocked
Status
Need More Info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
inhji/hajur!128
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/erlang-29.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
28.4.2→29.0Release Notes
erlang/otp (erlang)
v29.0: OTP 29.0Compare Source
Check out the git tag OTP-29.0, and build a full OTP system including documentation.
HIGHLIGHTS
The JIT now generates better code for matching or creating binaries with multiple little-endian segments.
Own Id: OTP-19747
Application(s): erts
Related Id(s): PR-10126
In the documentation for the
compilemodule, a section has been added with recommendations for implementors of languages running on the BEAM. Documentation has also been added for theto_abstr,to_exp, andfrom_abstroptions.The documentation for erlc now lists
.abstras one of the supported options.When compiling with the
to_abstroption, the resulting.abstrfile now retains any-docattributes present in the source code.Own Id: OTP-19784
Application(s): compiler, erts
Related Id(s): PR-10230, PR-10234
Native records as described in EEP-79 has been implemented.
A native record is a data structure similar to the traditional tuple-based records, except that is a true data type.
Native records are considered experimental in Erlang/OTP 29 and possibly also in Erlang/OTP 30, meaning that their behavior may change, potentially requiring updates to applications that use them.
Own Id: OTP-19785
Application(s): compiler, debugger, dialyzer, erts, stdlib
Related Id(s): PR-10617
The guard BIF
is_integer/3has been added. It follows the design of the original EEP-16, only changing the name fromis_betweentois_integer. This BIF takes in 3 parameters,Term,LowerBound, andUpperBound.It returns
trueifTerm,LowerBound, andUpperBoundare all integers, andLowerBound =< Term =< UpperBound; otherwise, it returns false.Example:
Own Id: OTP-19809
Application(s): compiler, dialyzer, erts
Related Id(s): PR-10276
There are new functions for random permutation of a list:
rand:shuffle/1andrand:shuffle_s/2. They are inspired by a suggestion and discussion on ErlangForums.Own Id: OTP-19826
Application(s): stdlib
Related Id(s): PR-10281
In the default code path for the Erlang system, the current working directory (
.) is now in the last position instead of the first.Own Id: OTP-19842
Application(s): erts, kernel
*** POTENTIAL INCOMPATIBILITY ***
Function application is now left associative. That means one can now write:
instead of:
Own Id: OTP-19866
Application(s): compiler
Related Id(s): PR-9223
The old-style type tests in guards (
integer,atom, and so on) have been scheduled for removal in Erlang/OTP 30. They have been deprecated for a long time.Own Id: OTP-19887
Application(s): otp
Related Id(s): PR-10417
There will now be a warning when exporting variables out of a subexpression. For example:
To avoid the warning, this can be rewritten to:
The warning can be suppressed by giving option
nowarn_export_var_subexprto the compiler.Own Id: OTP-19898
Application(s): compiler, stdlib
Related Id(s): PR-9134
There is a new option
warn_obsolete_bool_opthat instruct the compiler to emit warnings for theandandoroperators. It is recommended to instead use the modernandalsoandorelseoperators, or,and;in guards.Own Id: OTP-19918
Application(s): compiler
Related Id(s): PR-9115
graphis a new module that is a functional equivalent of thedigraphanddigraph_utilsmodules.Own Id: OTP-19922
Application(s): stdlib
Related Id(s): PR-10532
Before Erlang/OTP 29, attempting to bind variables in a comprehension would compile successfully but fail at runtime. Example:
In Erlang/OTP 29, attempting to bind a variable in a comprehension will fail by default:
However, this example will work as expected if the
compr_assignfeature is enabled when starting the runtime system:Here is another example how
compr_assigncan be used:Own Id: OTP-19927
Application(s): compiler, stdlib
Related Id(s): PR-9153
*** POTENTIAL INCOMPATIBILITY ***
There will now be a warning when using the
catchoperator, which has been deprecated for a long time.It is recommended to instead use
try...catch...endbut is also possible to disable the warning by using thenowarn_deprecated_catchoption.Own Id: OTP-19938
Application(s): compiler, stdlib
Related Id(s): PR-10421
Multi-valued comprehensions according to EEP 78 has been implemented.
Example:
Own Id: OTP-19942
Application(s): compiler, debugger, stdlib, syntax_tools
Related Id(s): PR-9374
There will now be a warning for matches that unify constructors, such as the following:
Such a match can be rewritten to:
The compiler option
nowarn_match_alias_patscan be used to disable the warning.Own Id: OTP-19943
Application(s): compiler, stdlib
Related Id(s): PR-10433
There is no longer a 32-bit Erlang/OTP build for Windows.
Own Id: OTP-19960
Application(s): otp
While the iteration order for maps is undefined, it is now guaranteed that all ways of iterating over maps provides the elements in the same order. That is, all of the following ways of iterating will produce the elements in the same order:
maps:keys/1maps:values/1maps:to_list/1maps:to_list(maps:iterator(M))[{K,V} || K := V <- M]Own Id: OTP-19963
Application(s): erts, stdlib
Related Id(s): PR-10626
The default key exchange algorithm is now mlkem768x25519-sha256, a hybrid quantum-resistant algorithm combining ML-KEM-768 with X25519. This provides protection against both classical and quantum computer attacks while maintaining backward compatibility through automatic fallback to other algorithms when peers don't support it.
Own Id: OTP-19965
Application(s): ssh
Related Id(s): PR-10656
*** POTENTIAL INCOMPATIBILITY ***
The compiler now generates more efficient code for map comprehensions with constant values that don't depend on the generator, such as the following:
Own Id: OTP-19968
Application(s): compiler
Related Id(s): PR-10646
The SSH daemon now defaults to disabled for shell and exec services, implementing the "secure by default" principle. This prevents authenticated users from executing arbitrary Erlang code unless explicitly configured.
Applications requiring shell or exec functionality must now explicitly enable:
Own Id: OTP-19969
Application(s): ssh
Related Id(s): ERIERL-1319, PR-10970, PR-11080
*** POTENTIAL INCOMPATIBILITY ***
The
odbcapplication is now deprecated and is planned to be removed in Erlang/OTP 30.The
ftpandct_ftpmodules are now deprecated and are planned to be removed in Erlang/OTP 30.Own Id: OTP-19980
Application(s): ftp, odbc
Related Id(s): PR-10804
The
arraymodule have been extended with several new functions. The internal representation have been changed to allow the new functionality and optimizations. Arrays serialized withterm_to_binary/1in previous releases are not compatible.Own Id: OTP-20004
Application(s): stdlib
Related Id(s): PR-10578
*** POTENTIAL INCOMPATIBILITY ***
Added support for socket functions
recvmmsg()andsendmmsg().Own Id: OTP-20015
Application(s): erts, kernel
Related Id(s): PR-10564
m:erl_tarwill use less memory when extracting large tar entries to disk. Instead of reading each tar entry into memory,erl_tarwill now stream data in chunks of 64KB. The chunk size is settable using the new{chunks,ChunkSize}option.The new
{max_size,Size}option will set a limit on the total size of extracted data to protect against filling up the disk.Checking of symlinks has been improved. Some symlinks that were safe (such as
dir/link -> ../file) used to be rejected.Own Id: OTP-20023
Application(s): stdlib
Related Id(s): PR-10814, PR-10818, PR-10821
Added a new module called
io_ansithat allows the user to emit Virtual Terminal Sequences (a.k.a. ANSI sequences) to the terminal in order to add colors/styling to text or create fully-fledged terminal applications.io_ansiuses the local terminfo database in order to be as cross-platform compatible as possible.It also works across nodes so that if functions on a remote node call
io_ansi:fwrite/1it will use the destination terminal's terminfo database to determine which sequences to emit. In practice, this means that you can call functions in a remote shell session that useio_ansiand it will properly detect the terminal sequences the target terminal can handle and will print using them correctly.Own Id: OTP-20028
Application(s): kernel, stdlib
Related Id(s): PR-10905, PR-9940
The
ignore_xrefattribute has been handled as a post-analysis filter by build tools such as Rebar3. In this release,xrefitself does the filtering, ensuring that all tooling that callsxreffor any purpose can rely on these declarations to just work.Own Id: OTP-20032
Application(s): tools
Related Id(s): PR-10592
New in this release is
ct_doctest, a module that allows the user to test documentation examples in Erlang module docs and documentation files.ct_doctest allows you to:
edoc,asciidoc, and others can also be tested.See the documentation for more details.
Own Id: OTP-20034
Application(s): common_test
Related Id(s): PR-10824, PR-9315
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Application(s): asn1, common_test, compiler, crypto, debugger, dialyzer, diameter, edoc, eunit, inets, kernel, megaco, mnesia, observer, odbc, os_mon, otp, parsetools, public_key, reltool, runtime_tools, sasl, ssh, ssl, stdlib, syntax_tools, tftp, tools, wx, xmerl
Related Id(s): PR-10839
The post-quantum hybrid algorithm x25519mlkem768 is now the most preferred key exchange group in the default configuration.
Post-quantum hybrid algorithms secp384r1mlkem1024 and secp256r1mlkem768 are supported but have to be configured. The same goes for the plain post-quantum algorithms mlkem1024, mlkem768, and mlkem512.
The most preferred signature algorithms is now post-quantum algorithms ML-DSA followed by the fastest SLH-DSA (slh_dsa_sha2_256f) algorithm, if such a certificate is available in the configuration. Other SLH-DSA variants are also supported but are added to the end of the preferred list.
All these algorithms were available in OTP-28.4 but none of them were preferred and some of them changed default status.
Own Id: OTP-20070
Application(s): ssl
Related Id(s): PR-10949
*** POTENTIAL INCOMPATIBILITY ***
The
jsonmodule now encodes and decodes quoted strings faster. Improvements of up to 55 percent has been measured when decoding JSON data with long strings.The
string:length/1,string:slice/2, andstring:slice/3functions have been optimized. For some strings, they can be up to twice as fast.Own Id: OTP-20072
Application(s): stdlib
Related Id(s): PR-10938, PR-10948
The SFTP subsystem is no longer enabled by default when starting an SSH daemon. To enable it, add the subsystems option explicitly:
Own Id: OTP-20078
Application(s): ssh
Related Id(s): PR-10970
*** POTENTIAL INCOMPATIBILITY ***
The runtime system now supports generating encrypted crash dumps. See the description of
--enable-encrypted-crash-dumpsin Building and Installing Erlang/OTP.Own Id: OTP-20085
Application(s): crypto, erts, public_key, tools
Related Id(s): PR-10993
There is a new Hardening guide giving guidelines on how to strengthen the security for the
sslapplication.Own Id: OTP-20087
Application(s): ssl
Related Id(s): PR-11019
There is a new Hardening guide with advice for configuring Inets to be more secure.
Own Id: OTP-20133
Application(s): inets
Related Id(s): PR-11073
POTENTIAL INCOMPATIBILITIES
Fixed (
inet) module selection when calling (gen_tcp) listen and connect and (gen_udp) open. Depending on the order of the options, the module option (tcp_moduleorudp_module) was sometimes ignored.Own Id: OTP-19695
Application(s): kernel
Related Id(s): GH-9822, PR-10013
ssh:stop_deamonnow usessupervisor:stopfor shutting down daemons. With this change, the scenario whenssh:stop_daemonis called for a non-existing process results in calling process exiting. Previously an error tuple was returned (which was not documented).Own Id: OTP-19801
Application(s): ssh
Related Id(s): PR-10253
The
mnesia_registrymodule has been removed.Own Id: OTP-19807
Application(s): mnesia
Related Id(s): PR-7315
In the default code path for the Erlang system, the current working directory (
.) is now in the last position instead of the first.Own Id: OTP-19842
Application(s): erts, kernel
*** HIGHLIGHT ***
Before Erlang/OTP 29, attempting to bind variables in a comprehension would compile successfully but fail at runtime. Example:
In Erlang/OTP 29, attempting to bind a variable in a comprehension will fail by default:
However, this example will work as expected if the
compr_assignfeature is enabled when starting the runtime system:Here is another example how
compr_assigncan be used:Own Id: OTP-19927
Application(s): compiler, stdlib
Related Id(s): PR-9153
*** HIGHLIGHT ***
The default key exchange algorithm is now mlkem768x25519-sha256, a hybrid quantum-resistant algorithm combining ML-KEM-768 with X25519. This provides protection against both classical and quantum computer attacks while maintaining backward compatibility through automatic fallback to other algorithms when peers don't support it.
Own Id: OTP-19965
Application(s): ssh
Related Id(s): PR-10656
*** HIGHLIGHT ***
The SSH daemon now defaults to disabled for shell and exec services, implementing the "secure by default" principle. This prevents authenticated users from executing arbitrary Erlang code unless explicitly configured.
Applications requiring shell or exec functionality must now explicitly enable:
Own Id: OTP-19969
Application(s): ssh
Related Id(s): ERIERL-1319, PR-10970, PR-11080
*** HIGHLIGHT ***
Changed
ets:update_counter/4andets:update_element/4to always reject default tuples smaller than thekeyposof the table. Such keyless tuples are now rejected even if the key exists in the table and the default tuple would not be used. This is a subtle semantic change but is a nicer behavior for development and testing as it will detect faulty default tuple arguments earlier.Own Id: OTP-19975
Application(s): erts
Related Id(s): PR-10674
Added explicit size validation guards for pre-authentication SSH messages to improve defense-in-depth against DoS attacks. Messages now have per-field size limits based on RFC specifications:
This change enhances the existing 256KB global packet size limit with granular per-message validation. Compliant implementations are not affected.
Own Id: OTP-19995
Application(s): ssh
Related Id(s): PR-10739
The
arraymodule have been extended with several new functions. The internal representation have been changed to allow the new functionality and optimizations. Arrays serialized withterm_to_binary/1in previous releases are not compatible.Own Id: OTP-20004
Application(s): stdlib
Related Id(s): PR-10578
*** HIGHLIGHT ***
The SFTP subsystem
rootoption now properly rejects relative paths at daemon startup. Previously, relative paths would cause unpredictable behavior as file operations resolved relative to the Erlang VM's current working directory. The option now requires an absolute path or empty string.Own Id: OTP-20019
Application(s): ssh
Related Id(s): PR-10820
The
gb_sets:from_ordset/1andgb_trees:from_orddict/1functions would trust their inputs. If the input contained duplicates or was not properly sorted, the resulting gb_set or gb_tree would be invalid, and any number of interesting problems could occur.In this release, these functions will raise an exception if their input is not valid. That could mean that incorrect programs that seemed to work could now stop working altogether.
There is also a new
gb_trees:from_list/1function for directly creating a gb_tree from a list.Own Id: OTP-20061
Application(s): stdlib
Related Id(s): PR-10910
The post-quantum hybrid algorithm x25519mlkem768 is now the most preferred key exchange group in the default configuration.
Post-quantum hybrid algorithms secp384r1mlkem1024 and secp256r1mlkem768 are supported but have to be configured. The same goes for the plain post-quantum algorithms mlkem1024, mlkem768, and mlkem512.
The most preferred signature algorithms is now post-quantum algorithms ML-DSA followed by the fastest SLH-DSA (slh_dsa_sha2_256f) algorithm, if such a certificate is available in the configuration. Other SLH-DSA variants are also supported but are added to the end of the preferred list.
All these algorithms were available in OTP-28.4 but none of them were preferred and some of them changed default status.
Own Id: OTP-20070
Application(s): ssl
Related Id(s): PR-10949
*** HIGHLIGHT ***
The old Tcl-based implementation of
erl_errno_id()has been replaced by our own implementation now supporting moreerrnovalues on modern operating systems. It also returns the string"errno_<ERRNO_INTEGER>"corresponding to the integer given as argument if theerrnointeger is unknown instead of as previously just return the string"unknown".The result of
erl_errno_id()is often converted into an atom and passed as an error from a driver or a NIF.Own Id: OTP-20076
Application(s): erts
Related Id(s): PR-10958, PR-10969
The SFTP subsystem is no longer enabled by default when starting an SSH daemon. To enable it, add the subsystems option explicitly:
Own Id: OTP-20078
Application(s): ssh
Related Id(s): PR-10970
*** HIGHLIGHT ***
Secure renegotiation for TLS-1.2 specified in RFC 5746 from 2010 is now always used. The interoperability fallback option
{secure_renegotiate,SecureRenegotiate}is no longer needed.Own Id: OTP-20080
Application(s): ssl
Related Id(s): PR-10979
The
erlang:suspend_process/1anderlang:suspend_process/2BIFs now also suspend BIF timers that will send messages to the process if the timer was created using the PID of the process as destination. Timers created using registered names are not affected.Own Id: OTP-20095
Application(s): erts
Related Id(s): PR-10619, PR-11004
The TOS handling on socket has been significantlyupdated and improved. Socket did not properly handle set, get and recv (cmsg) of TOS.
Note that the returned TOS value has been changed. It was previously an atom or an integer. Now it is a map with different interpretations of the TOS octet. See the documentation.
Own Id: OTP-20102
Application(s): erts, kernel
Related Id(s): GH-10968, PR-11059
OTP-29.0
Fixed Bugs and Malfunctions
The
start_erlscript will now work on embedded systems.Own Id: OTP-20111
Related Id(s): GH-10342, PR-10346
Improvements and New Features
Vendor dependencies and OpenVEX statements in the
otprepository is now scanned for vulnerabilities. It is verified that OTP security issues reported at Github exist in the published OpenVEX statements, and issues are automatically opened in theotprepository if vendor vulnerabilities are detected.Own Id: OTP-19763
Related Id(s): PR-10145, PR-10166, PR-10168, PR-10189, PR-10193, PR-10195, PR-10197, PR-10202, OTP-19652, OTP-19775, OTP-19779
Documentation about how to validate the SBOM using sigstore has been added.
Own Id: OTP-19766
Related Id(s): GH-10151, PR-10187
The old-style type tests in guards (
integer,atom, and so on) have been scheduled for removal in Erlang/OTP 30. They have been deprecated for a long time.Own Id: OTP-19887
Related Id(s): PR-10417
*** HIGHLIGHT ***
Removed the undocumented
dyn_erlutility.Own Id: OTP-19933
Related Id(s): PR-10573
There is no longer a 32-bit Erlang/OTP build for Windows.
Own Id: OTP-19960
*** HIGHLIGHT ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The Upcoming Potential Incompatibilities page has been updated to note that in Erlang/OTP 30,
erlang:fun_info(Fun, pid)will no longer retrieve a pid, but will raise abadargexception.Own Id: OTP-20092
Related Id(s): PR-10998
Add security improvements to GitHub Actions workflows based on findings from
zizmor, a GitHub Actions security linter.Own Id: OTP-20103
Related Id(s): PR-11000
Improve mermaid diagram rending in documentation.
Own Id: OTP-20132
Related Id(s): PR-11047
asn1-5.5
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
common_test-1.31
Fixed Bugs and Malfunctions
Improved support for QuickCheck when writing property tests.
Own Id: OTP-20010
Related Id(s): PR-10783
Improvements and New Features
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
'EXIT'messages are now formatted in the same way asbadmatcherrors.Own Id: OTP-19910
Related Id(s): PR-10277
Error notifications now contain the name of the source file in which the error occurred.
Own Id: OTP-19925
Related Id(s): GH-10260, PR-10269
New in this release is
ct_doctest, a module that allows the user to test documentation examples in Erlang module docs and documentation files.ct_doctest allows you to:
edoc,asciidoc, and others can also be tested.See the documentation for more details.
Own Id: OTP-20034
Related Id(s): PR-10824, PR-9315
*** HIGHLIGHT ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
compiler-10.0
Fixed Bugs and Malfunctions
For a function such as the following:
the compiler would keep all of the calls to
setelement/3and emit extra unnecessaryset_tuple_elementinstructions.This has been corrected so that the compiler will never emit code that uses the
set_tuple_elementinstruction. In a future release, support for theset_tuple_elementwill be removed from the runtime system.Own Id: OTP-19751
Related Id(s): GH-10125, PR-10144
beam_lib:strip/1will now retain the Beam debug information chunk produced by thebeam_debug_infooption. The chunk will also be retained when combing thebeam_debug_infooption with the undocumentedslimoption.The runtime system will no longer crash when attempting to load modules that have been compiled with
beam_debug_infobut lack the actual Beam debug info chunk.Own Id: OTP-19991
Related Id(s): GH-10557, PR-10735
Improvements and New Features
In comprehensions, a generator that builds a list with a single element will now be optimized to avoid building and matching the list. Example:
Own Id: OTP-19672
Related Id(s): PR-9934
In the documentation for the
compilemodule, a section has been added with recommendations for implementors of languages running on the BEAM. Documentation has also been added for theto_abstr,to_exp, andfrom_abstroptions.The documentation for erlc now lists
.abstras one of the supported options.When compiling with the
to_abstroption, the resulting.abstrfile now retains any-docattributes present in the source code.Own Id: OTP-19784
Related Id(s): PR-10230, PR-10234
*** HIGHLIGHT ***
Native records as described in EEP-79 has been implemented.
A native record is a data structure similar to the traditional tuple-based records, except that is a true data type.
Native records are considered experimental in Erlang/OTP 29 and possibly also in Erlang/OTP 30, meaning that their behavior may change, potentially requiring updates to applications that use them.
Own Id: OTP-19785
Related Id(s): PR-10617
*** HIGHLIGHT ***
The guard BIF
is_integer/3has been added. It follows the design of the original EEP-16, only changing the name fromis_betweentois_integer. This BIF takes in 3 parameters,Term,LowerBound, andUpperBound.It returns
trueifTerm,LowerBound, andUpperBoundare all integers, andLowerBound =< Term =< UpperBound; otherwise, it returns false.Example:
Own Id: OTP-19809
Related Id(s): PR-10276
*** HIGHLIGHT ***
Function application is now left associative. That means one can now write:
instead of:
Own Id: OTP-19866
Related Id(s): PR-9223
*** HIGHLIGHT ***
There will now be a warning when exporting variables out of a subexpression. For example:
To avoid the warning, this can be rewritten to:
The warning can be suppressed by giving option
nowarn_export_var_subexprto the compiler.Own Id: OTP-19898
Related Id(s): PR-9134
*** HIGHLIGHT ***
There is a new option
warn_obsolete_bool_opthat instruct the compiler to emit warnings for theandandoroperators. It is recommended to instead use the modernandalsoandorelseoperators, or,and;in guards.Own Id: OTP-19918
Related Id(s): PR-9115
*** HIGHLIGHT ***
Before Erlang/OTP 29, attempting to bind variables in a comprehension would compile successfully but fail at runtime. Example:
In Erlang/OTP 29, attempting to bind a variable in a comprehension will fail by default:
However, this example will work as expected if the
compr_assignfeature is enabled when starting the runtime system:Here is another example how
compr_assigncan be used:Own Id: OTP-19927
Related Id(s): PR-9153
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
There will now be a warning when using the
catchoperator, which has been deprecated for a long time.It is recommended to instead use
try...catch...endbut is also possible to disable the warning by using thenowarn_deprecated_catchoption.Own Id: OTP-19938
Related Id(s): PR-10421
*** HIGHLIGHT ***
Multi-valued comprehensions according to EEP 78 has been implemented.
Example:
Own Id: OTP-19942
Related Id(s): PR-9374
*** HIGHLIGHT ***
There will now be a warning for matches that unify constructors, such as the following:
Such a match can be rewritten to:
The compiler option
nowarn_match_alias_patscan be used to disable the warning.Own Id: OTP-19943
Related Id(s): PR-10433
*** HIGHLIGHT ***
The compiler now generates more efficient code for map comprehensions with constant values that don't depend on the generator, such as the following:
Own Id: OTP-19968
Related Id(s): PR-10646
*** HIGHLIGHT ***
Compilation times of modules with a huge number of calls to
element/2has been improved.Own Id: OTP-20020
Related Id(s): GH-10807, PR-10819
The format of the debug information stored by the
beam_debug_infooption (used by the edb debugger) has been updated to more easily extendible and to contain more information about call targets. (See the linked PR for more details.)Own Id: OTP-20048
Related Id(s): PR-9814
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
crypto-5.9
Fixed Bugs and Malfunctions
Fixed
crypto:hash_equals/2and FIPS when crypto is statically linked to the beam (with--enable-static-nifsand--disable-dynamic-ssl-lib).Own Id: OTP-20025
Related Id(s): PR-10817
Improvements and New Features
The
rand:bytes/1andrand:bytes_s/2functions have been optimized by implementing a new internal callback function thatcrypto:rand_seed_alg/1andcrypto:alg_seed_alg_s/1have been updated to use.A new algorithm
crypto_prng1, which also takes advantage of this new internal callback, has been added tocrypto:rand_seed_alg/2andcrypto:rand_seed_alg_s/2. It is much faster then the existingcrypto_aes, in particular for generating bytes.Own Id: OTP-19882
Related Id(s): PR-10453, OTP-19827
In interactive mode, application
cryptois automatically loaded when thecryptomodule is loaded. This will ensure that the correct value of configuration parameterfips_modeis used to initialize OpenSSL if modulecryptois called/loaded before the applicationcryptohas been loaded. In embedded mode, modulecryptowill fail to load if the application has not been loaded.Own Id: OTP-20035
Related Id(s): PR-10830
OpenSSL engine support has been removed on Windows.
Own Id: OTP-20036
Related Id(s): PR-10836
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The runtime system now supports generating encrypted crash dumps. See the description of
--enable-encrypted-crash-dumpsin Building and Installing Erlang/OTP.Own Id: OTP-20085
Related Id(s): PR-10993
*** HIGHLIGHT ***
debugger-7.0
Improvements and New Features
Native records as described in EEP-79 has been implemented.
A native record is a data structure similar to the traditional tuple-based records, except that is a true data type.
Native records are considered experimental in Erlang/OTP 29 and possibly also in Erlang/OTP 30, meaning that their behavior may change, potentially requiring updates to applications that use them.
Own Id: OTP-19785
Related Id(s): PR-10617
*** HIGHLIGHT ***
Tools such as the debugger,
beam_lib, andxrefno longer support BEAM files created before OTP 13B.Own Id: OTP-19906
Related Id(s): PR-10519
Multi-valued comprehensions according to EEP 78 has been implemented.
Example:
Own Id: OTP-19942
Related Id(s): PR-9374
*** HIGHLIGHT ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
dialyzer-6.0
Improvements and New Features
Native records as described in EEP-79 has been implemented.
A native record is a data structure similar to the traditional tuple-based records, except that is a true data type.
Native records are considered experimental in Erlang/OTP 29 and possibly also in Erlang/OTP 30, meaning that their behavior may change, potentially requiring updates to applications that use them.
Own Id: OTP-19785
Related Id(s): PR-10617
*** HIGHLIGHT ***
The guard BIF
is_integer/3has been added. It follows the design of the original EEP-16, only changing the name fromis_betweentois_integer. This BIF takes in 3 parameters,Term,LowerBound, andUpperBound.It returns
trueifTerm,LowerBound, andUpperBoundare all integers, andLowerBound =< Term =< UpperBound; otherwise, it returns false.Example:
Own Id: OTP-19809
Related Id(s): PR-10276
*** HIGHLIGHT ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
diameter-2.7
Improvements and New Features
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
edoc-1.5
Improvements and New Features
Changed behavior of EDoc so that when a module defines a private type and a private function spec uses it, that type no longer gets included in the EDoc chunk.
Own Id: OTP-20030
Related Id(s): PR-10770
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
eldap-1.3
Improvements and New Features
Only minor internal changes.
Own Id: OTP-19964
erl_interface-5.8
Improvements and New Features
Improved name consistency of EPMD protocol messages in documentation and code. Renamed
PORT_PLEASE2_REQtoPORT2_REQand added prefixEPMD_.Own Id: OTP-19734
Related Id(s): GH-10071, PR-10078
Replaced embedded OpenSSL MD5 implementation.
Own Id: OTP-20045
Related Id(s): PR-10870
Known Bugs and Problems
The
eiAPI for decoding/encoding terms is not fully 64-bit compatible since terms that have a representation on the external term format larger than 2 GB cannot be handled.Own Id: OTP-16607
Related Id(s): OTP-16608
erts-17.0
Fixed Bugs and Malfunctions
For a function such as the following:
the compiler would keep all of the calls to
setelement/3and emit extra unnecessaryset_tuple_elementinstructions.This has been corrected so that the compiler will never emit code that uses the
set_tuple_elementinstruction. In a future release, support for theset_tuple_elementwill be removed from the runtime system.Own Id: OTP-19751
Related Id(s): GH-10125, PR-10144
Improved the handling of the logging directory for the start script on Unix-like systems, so that it no longer crashes when
$ROOTDIR/logis not writable.Own Id: OTP-19874
Related Id(s): GH-10341, PR-10348
The
-nocookieoption forerlis now documented.Own Id: OTP-19935
Related Id(s): PR-10549
beam_lib:strip/1will now retain the Beam debug information chunk produced by thebeam_debug_infooption. The chunk will also be retained when combing thebeam_debug_infooption with the undocumentedslimoption.The runtime system will no longer crash when attempting to load modules that have been compiled with
beam_debug_infobut lack the actual Beam debug info chunk.Own Id: OTP-19991
Related Id(s): GH-10557, PR-10735
Fixed potential symbol clashing on MacOS by passing
RTLD_LOCALtodlopen. This will make symbols to not be resolvable between subsequently loaded NIF/drivers, which is the default behavior on Linux and BSD.Own Id: OTP-20026
Related Id(s): PR-10805
The
configurescript used to callisfinite()with argument0. That could fail on some platforms. This has been changed to callisfinite()with1.0instead.Own Id: OTP-20088
Related Id(s): PR-10965
The TOS handling on socket has been significantlyupdated and improved. Socket did not properly handle set, get and recv (cmsg) of TOS.
Note that the returned TOS value has been changed. It was previously an atom or an integer. Now it is a map with different interpretations of the TOS octet. See the documentation.
Own Id: OTP-20102
Related Id(s): GH-10968, PR-11059
*** POTENTIAL INCOMPATIBILITY ***
Fixed
erlang:md5_initto always return the same deterministic context binary. Only an issue in OTP 28.5 when OTP was built with--disable-builtin-opensslor--enable-use-embedded-3pp-alternatives.Own Id: OTP-20123
Added explicit configure test for C++ function
std::to_charsif options--disable-builtin-ryuor--enable-use-embedded-3pp-alternativesis used.Own Id: OTP-20126
Related Id(s): PR-11067
Improvements and New Features
The exported name space of the
beamexecutable has been cleaned to only expose symbols of documented interfaces like NIF and driver APIs. This will avoid accidental name clashes with, for example, our statically linked variants of PCRE2 and ZSTD. NIFs and drivers that abuse undocumented internal interfaces will fail to load due to this change.Own Id: OTP-19643
Related Id(s): PR-9864
Improved name consistency of EPMD protocol messages in documentation and code. Renamed
PORT_PLEASE2_REQtoPORT2_REQand added prefixEPMD_.Own Id: OTP-19734
Related Id(s): GH-10071, PR-10078
The JIT now generates better code for matching or creating binaries with multiple little-endian segments.
Own Id: OTP-19747
Related Id(s): PR-10126
*** HIGHLIGHT ***
In the documentation for the
compilemodule, a section has been added with recommendations for implementors of languages running on the BEAM. Documentation has also been added for theto_abstr,to_exp, andfrom_abstroptions.The documentation for erlc now lists
.abstras one of the supported options.When compiling with the
to_abstroption, the resulting.abstrfile now retains any-docattributes present in the source code.Own Id: OTP-19784
Related Id(s): PR-10230, PR-10234
*** HIGHLIGHT ***
Native records as described in EEP-79 has been implemented.
A native record is a data structure similar to the traditional tuple-based records, except that is a true data type.
Native records are considered experimental in Erlang/OTP 29 and possibly also in Erlang/OTP 30, meaning that their behavior may change, potentially requiring updates to applications that use them.
Own Id: OTP-19785
Related Id(s): PR-10617
*** HIGHLIGHT ***
Task stealing between schedulers has been further optimized.
Own Id: OTP-19793
Related Id(s): PR-9984
The guard BIF
is_integer/3has been added. It follows the design of the original EEP-16, only changing the name fromis_betweentois_integer. This BIF takes in 3 parameters,Term,LowerBound, andUpperBound.It returns
trueifTerm,LowerBound, andUpperBoundare all integers, andLowerBound =< Term =< UpperBound; otherwise, it returns false.Example:
Own Id: OTP-19809
Related Id(s): PR-10276
*** HIGHLIGHT ***
Calls to
trace:info(_, {M,F,A}, Item), withItemascall_time,call_memory, orall, will no longer block all scheduler threads from running.Own Id: OTP-19811
Related Id(s): PR-10207
Full support for SCTP in
socket. Not (yet) supported for FreeBSD.Own Id: OTP-19834
In the default code path for the Erlang system, the current working directory (
.) is now in the last position instead of the first.Own Id: OTP-19842
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
Tools such as the debugger,
beam_lib, andxrefno longer support BEAM files created before OTP 13B.Own Id: OTP-19906
Related Id(s): PR-10519
Optimized ETS named table lookup scalability by replacing read locks with lockless atomic operations.
Own Id: OTP-19919
Related Id(s): PR-7118
Removed the undocumented
dyn_erlutility.Own Id: OTP-19933
Related Id(s): PR-10573
Added
zstd:flush/2for flushing compressed data without closing the compression context.Own Id: OTP-19936
Related Id(s): GH-10345, PR-10511
While the iteration order for maps is undefined, it is now guaranteed that all ways of iterating over maps provides the elements in the same order. That is, all of the following ways of iterating will produce the elements in the same order:
maps:keys/1maps:values/1maps:to_list/1maps:to_list(maps:iterator(M))[{K,V} || K := V <- M]Own Id: OTP-19963
Related Id(s): PR-10626
*** HIGHLIGHT ***
Improved the performance of code loading.
Own Id: OTP-19966
Related Id(s): PR-10615
Changed
ets:update_counter/4andets:update_element/4to always reject default tuples smaller than thekeyposof the table. Such keyless tuples are now rejected even if the key exists in the table and the default tuple would not be used. This is a subtle semantic change but is a nicer behavior for development and testing as it will detect faulty default tuple arguments earlier.Own Id: OTP-19975
Related Id(s): PR-10674
*** POTENTIAL INCOMPATIBILITY ***
Improved compatibility with systems that lack certain shell utilities.
Own Id: OTP-20002
Related Id(s): PR-10647
It was previously not possible to check on the socket nif load result. A successful load was self-evident, but a failure was only visible from the fact that most
socketfunctions failed withnotsup. This has now been improved such that the (socket nif) load result is visible in the info map (fromsocket:info/0).Own Id: OTP-20003
The default for the
configureoption--{enable,disable}-use-embedded-3pp-alternativeshas changed and the subset of embedded third-party products (3pps) affected by it has also changed. Currently this option affectszstd,zlib,ryu(withSTL). By defaultzstdandzlibavailable on the OS will be used if they fulfill the requirements. The builtinryu(withSTL) will be used by default. The 3ppsopensslandtclthat previously were present have been replaced by our own implementations.Requirements for the affected 3pps alternatives are still the same as before:
zstd- Static library and include files of at least version 1.5.6 needs to be available.zlib- Library and include files of at least version 1.2.5 needs to be available.ryu(withSTL) - A usable C++ compiler with C++17 library support.Own Id: OTP-20013
Related Id(s): PR-10894, PR-10986, OTP-20106
Added support for socket functions
recvmmsg()andsendmmsg().Own Id: OTP-20015
Related Id(s): PR-10564
*** HIGHLIGHT ***
There is a new NIF function
enif_term_size().Own Id: OTP-20016
Related Id(s): PR-10782
Call trace match specs can use
[Arg1, Arg2 | '_']syntax to match functions with at least N number of arguments.Own Id: OTP-20017
Related Id(s): PR-10754
Replaced embedded OpenSSL MD5 implementation.
Own Id: OTP-20045
Related Id(s): PR-10870
The format of the debug information stored by the
beam_debug_infooption (used by the edb debugger) has been updated to more easily extendible and to contain more information about call targets. (See the linked PR for more details.)Own Id: OTP-20048
Related Id(s): PR-9814
There are new functions
erlang:exit_signal/2,3replacing the olderlang:exit/2,3. The primary purpose is better naming to distinguish between exit exceptions and exit signals. The newexit_signalfunctions will also avoid a historical quirk when a process sends an exit signal to itself with reasonnormal.The old
erlang:exit/2,3will work as before, but it is recommended to use the newexit:signal/2,3functions for new or modified code. Deprecation oferlang:exit/2,3with a compiler warning is planned for OTP 30.Own Id: OTP-20069
Related Id(s): PR-10801
The old Tcl-based implementation of
erl_errno_id()has been replaced by our own implementation now supporting moreerrnovalues on modern operating systems. It also returns the string"errno_<ERRNO_INTEGER>"corresponding to the integer given as argument if theerrnointeger is unknown instead of as previously just return the string"unknown".The result of
erl_errno_id()is often converted into an atom and passed as an error from a driver or a NIF.Own Id: OTP-20076
Related Id(s): PR-10958, PR-10969
*** POTENTIAL INCOMPATIBILITY ***
The runtime system now supports generating encrypted crash dumps. See the description of
--enable-encrypted-crash-dumpsin Building and Installing Erlang/OTP.Own Id: OTP-20085
Related Id(s): PR-10993
*** HIGHLIGHT ***
When implementing an alternate distribution implementors can now use an alternate handshake complete fun of arity 4 if needed.
Own Id: OTP-20090
Related Id(s): PR-10478
The
erlang:suspend_process/1anderlang:suspend_process/2BIFs now also suspend BIF timers that will send messages to the process if the timer was created using the PID of the process as destination. Timers created using registered names are not affected.Own Id: OTP-20095
Related Id(s): PR-10619, PR-11004
*** POTENTIAL INCOMPATIBILITY ***
Added support for socket option SO_TIMESTAMPNS (not available on all platforms).
Own Id: OTP-20115
Related Id(s): PR-10929
et-1.8
Improvements and New Features
Only minor internal changes.
Own Id: OTP-19964
eunit-2.11
Improvements and New Features
Added
randomDelaymacro.Own Id: OTP-19997
Related Id(s): PR-10614
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
ftp-1.2.5
Fixed Bugs and Malfunctions
The
odbcapplication is now deprecated and is planned to be removed in Erlang/OTP 30.The
ftpandct_ftpmodules are now deprecated and are planned to be removed in Erlang/OTP 30.Own Id: OTP-19980
Related Id(s): PR-10804
*** HIGHLIGHT ***
inets-9.7
Fixed Bugs and Malfunctions
A call to httpd:reload_config/2 now validates the new configuration before removing the old one, leaving the server running in case of faulty config, instead of putting it in an unrecoverable state.
Own Id: OTP-20128
Related Id(s): ERIERL-1314, PR-11079
Improvements and New Features
A new option
max_connections_openhas been added to thehttpcHTTP client profile configuration. It limits the maximum number of concurrent HTTP handler processes that can be open simultaneously.When the limit is reached, new requests are queued internally and started automatically as existing handlers complete. This prevents bandwidth exhaustion in high-load scenarios where too many parallel connections cause remote servers to close sockets before transfers finish (the socket_closed_remotely error).
The option can be set via
httpc:set_options([{max_connections_open, 10}], Profile).The default value is
infinity(unlimited), preserving backward compatibility. The value must be a positive integer orinfinityand must be greater than or equal tomax_sessions.Own Id: OTP-19587
Related Id(s): GH-8841, PR-9712
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The
mod_cgiandmod_actionsmodules are now deprecated and are scheduled to be removed in OTP 30.Own Id: OTP-20071
Related Id(s): PR-10950
There is a new Hardening guide with advice for configuring Inets to be more secure.
Own Id: OTP-20133
Related Id(s): PR-11073
*** HIGHLIGHT ***
jinterface-1.16
Improvements and New Features
The
jinterfacebuild now honorsSOURCE_DATE_EPOCHfor deterministic build ofOtpErlang.jar.Own Id: OTP-19956
Related Id(s): PR-10556
Removed prebuilt java files from source tar file to avoid issues with different version of the java runtime.
Own Id: OTP-20073
Related Id(s): PR-10951
kernel-11.0
Fixed Bugs and Malfunctions
Fixed (
inet) module selection when calling (gen_tcp) listen and connect and (gen_udp) open. Depending on the order of the options, the module option (tcp_moduleorudp_module) was sometimes ignored.Own Id: OTP-19695
Related Id(s): GH-9822, PR-10013
*** POTENTIAL INCOMPATIBILITY ***
The TCP/UDP compatibility layer has been fixed so that
inet_backend = socketnow supports socket optionsreuseportandreuseport_lbforgen_tcpandgen_udp.Own Id: OTP-19917
Related Id(s): PR-10514
Some errors in config files for the application controller would result in very cryptic crashes. Error handling has been improved to ensure that the file name and line number of the offending token are now printed.
Own Id: OTP-20054
Related Id(s): GH-10214, PR-10259
The TOS handling on socket has been significantlyupdated and improved. Socket did not properly handle set, get and recv (cmsg) of TOS.
Note that the returned TOS value has been changed. It was previously an atom or an integer. Now it is a map with different interpretations of the TOS octet. See the documentation.
Own Id: OTP-20102
Related Id(s): GH-10968, PR-11059
*** POTENTIAL INCOMPATIBILITY ***
Replaced a sleep clause in user_drv shutdown with a flush of the output buffer.
Own Id: OTP-20124
Related Id(s): PR-10808
Improvements and New Features
Added an option to set the
erl_boot_serverlisten port.Own Id: OTP-19708
Related Id(s): PR-9894
The memory footprint of some supervisors has been reduced by purging obsoleted data when the supervisor is transitioning to and from hibernation.
Own Id: OTP-19713
Related Id(s): PR-9866
Improved name consistency of EPMD protocol messages in documentation and code. Renamed
PORT_PLEASE2_REQtoPORT2_REQand added prefixEPMD_.Own Id: OTP-19734
Related Id(s): GH-10071, PR-10078
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
Refactored a
kernel_load_completedclause in theinitmodule for conciseness.Own Id: OTP-19786
Related Id(s): PR-10134
Full support for SCTP in
socket. Not (yet) supported for FreeBSD.Own Id: OTP-19834
In the default code path for the Erlang system, the current working directory (
.) is now in the last position instead of the first.Own Id: OTP-19842
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
It was previously not possible to check on the socket nif load result. A successful load was self-evident, but a failure was only visible from the fact that most
socketfunctions failed withnotsup. This has now been improved such that the (socket nif) load result is visible in the info map (fromsocket:info/0).Own Id: OTP-20003
Added support for socket functions
recvmmsg()andsendmmsg().Own Id: OTP-20015
Related Id(s): PR-10564
*** HIGHLIGHT ***
Added a new module called
io_ansithat allows the user to emit Virtual Terminal Sequences (a.k.a. ANSI sequences) to the terminal in order to add colors/styling to text or create fully-fledged terminal applications.io_ansiuses the local terminfo database in order to be as cross-platform compatible as possible.It also works across nodes so that if functions on a remote node call
io_ansi:fwrite/1it will use the destination terminal's terminfo database to determine which sequences to emit. In practice, this means that you can call functions in a remote shell session that useio_ansiand it will properly detect the terminal sequences the target terminal can handle and will print using them correctly.Own Id: OTP-20028
Related Id(s): PR-10905, PR-9940
*** HIGHLIGHT ***
Polished the documentation groups, essentially removed groups that did nothing but obscure the documentation.
Own Id: OTP-20029
Related Id(s): PR-10755
Added a new behavior,
data_publisher, for building eventually consistent, replicated data stores across distributed nodes. This is a generalization of thepgmodule.Own Id: OTP-20055
Related Id(s): PR-10426
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
When implementing an alternate distribution implementors can now use an alternate handshake complete fun of arity 4 if needed.
Own Id: OTP-20090
Related Id(s): PR-10478
Added support for socket option SO_TIMESTAMPNS (not available on all platforms).
Own Id: OTP-20115
Related Id(s): PR-10929
Added a flag
log_missed_net_ticks = true | falsethat controls whether a warning is logged for each missed sub-tick on a distribution connection. A sub-tick is missed when no data has been received from a connected node during one tick interval. A warning is emitted on every subsequent missed sub-tick until the node is declared down afternet_tickintensityconsecutive missed sub-ticks, at which point a final timeout warning is always logged regardless of this setting. Defaults tofalse.Own Id: OTP-20117
Related Id(s): PR-11031
megaco-4.9
Fixed Bugs and Malfunctions
Running Dialyzer on Windows in an Erlang repo, causes Dialyzer warnings for the megaco_flex_scanner module. This is because the flex scanner is not built on Windows. These warnings are now suppressed.
Own Id: OTP-20114
Related Id(s): PR-11025
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
mnesia-4.26
Improvements and New Features
mnesianow has new functionsselect_reverse/1-6supporting iteration over tables in reverse order.Own Id: OTP-19611
Related Id(s): GH-8993, PR-9475
The
mnesia_registrymodule has been removed.Own Id: OTP-19807
Related Id(s): PR-7315
*** POTENTIAL INCOMPATIBILITY ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
observer-2.19
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
odbc-2.17
Fixed Bugs and Malfunctions
The
odbcapplication is now deprecated and is planned to be removed in Erlang/OTP 30.The
ftpandct_ftpmodules are now deprecated and are planned to be removed in Erlang/OTP 30.Own Id: OTP-19980
Related Id(s): PR-10804
*** HIGHLIGHT ***
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
os_mon-2.12
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
parsetools-2.8
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
public_key-1.21
Improvements and New Features
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
Added an option for relaxed encoding of certificates to allow some values to be empty. This may be used by other applications for interoperability reasons. This option is not used by the
sslapplication.Own Id: OTP-19822
Related Id(s): PR-10033
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The runtime system now supports generating encrypted crash dumps. See the description of
--enable-encrypted-crash-dumpsin Building and Installing Erlang/OTP.Own Id: OTP-20085
Related Id(s): PR-10993
*** HIGHLIGHT ***
reltool-1.1
Improvements and New Features
Removed the undocumented
dyn_erlutility.Own Id: OTP-19933
Related Id(s): PR-10573
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
runtime_tools-2.4
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
sasl-4.4
Fixed Bugs and Malfunctions
UNC paths are now handled on Windows.
Own Id: OTP-19949
Related Id(s): PR-10601
Improvements and New Features
Removed the undocumented
dyn_erlutility.Own Id: OTP-19933
Related Id(s): PR-10573
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
snmp-5.20.3
Improvements and New Features
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
ssh-6.0
Fixed Bugs and Malfunctions
Password-based authentication has been updated to follow current security best practices. Key-based authentication remains recommended for production systems.
Own Id: OTP-19982
Related Id(s): PR-10571
Added explicit size validation guards for pre-authentication SSH messages to improve defense-in-depth against DoS attacks. Messages now have per-field size limits based on RFC specifications:
This change enhances the existing 256KB global packet size limit with granular per-message validation. Compliant implementations are not affected.
Own Id: OTP-19995
Related Id(s): PR-10739
*** POTENTIAL INCOMPATIBILITY ***
The SFTP subsystem
rootoption now properly rejects relative paths at daemon startup. Previously, relative paths would cause unpredictable behavior as file operations resolved relative to the Erlang VM's current working directory. The option now requires an absolute path or empty string.Own Id: OTP-20019
Related Id(s): PR-10820
*** POTENTIAL INCOMPATIBILITY ***
Dynamic atom creation has been replaced with static lookups in
ssh_transportandssh_connection, using a dedicated OID-to-algorithm mapping function inssh_message.Own Id: OTP-20127
Related Id(s): PR-11078
Improvements and New Features
Using KEX strict extension names as specified in draft-ietf-sshm-strict-kex-00. Pre standard names are still supported.
Own Id: OTP-19709
Related Id(s): PR-10115
Added an
aliveoption to detect and terminate dead SSH connections. Functionally equivalent to OpenSSH's ClientAlive*/ServerAlive* settings.Own Id: OTP-19750
Related Id(s): PR-10372, PR-9125
ssh:stop_deamonnow usessupervisor:stopfor shutting down daemons. With this change, the scenario whenssh:stop_daemonis called for a non-existing process results in calling process exiting. Previously an error tuple was returned (which was not documented).Own Id: OTP-19801
Related Id(s): PR-10253
*** POTENTIAL INCOMPATIBILITY ***
The default key exchange algorithm is now mlkem768x25519-sha256, a hybrid quantum-resistant algorithm combining ML-KEM-768 with X25519. This provides protection against both classical and quantum computer attacks while maintaining backward compatibility through automatic fallback to other algorithms when peers don't support it.
Own Id: OTP-19965
Related Id(s): PR-10656
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
The SSH daemon now defaults to disabled for shell and exec services, implementing the "secure by default" principle. This prevents authenticated users from executing arbitrary Erlang code unless explicitly configured.
Applications requiring shell or exec functionality must now explicitly enable:
Own Id: OTP-19969
Related Id(s): ERIERL-1319, PR-10970, PR-11080
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
Added SFTP resource limits section to hardening guide covering
max_handles,max_path, andmax_fileswith deployment recommendations.Own Id: OTP-20031
Related Id(s): PR-10838
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The SFTP subsystem is no longer enabled by default when starting an SSH daemon. To enable it, add the subsystems option explicitly:
Own Id: OTP-20078
Related Id(s): PR-10970
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
The SSH hardening guide has been improved with a timeout overview table replacing the previous image, corrected terminology ("authenticated" instead of "authorized"), and new examples for loopback binding, public key user checking, and password lockout using ETS.
Own Id: OTP-20079
Related Id(s): PR-10970
With this change usage of
zlibcompression algorithm in SSH is deprecated and scheduled for removal in OTP 30.0Own Id: OTP-20099
Related Id(s): PR-11010
Updated SSH documentation with current OTP 29 algorithm defaults, including the new mlkem768x25519-sha256 post-quantum key exchange. Fixed stale examples, typos, and improved document structure.
Own Id: OTP-20100
Related Id(s): PR-11012
ssl-11.7
Fixed Bugs and Malfunctions
Add missing clauses to ssl_handshake:extension_value/1. If an hello extension, missing a handling clause was present in a paused handshake, the handshake would fail.
Own Id: OTP-20116
Related Id(s): GH-11030, PR-11062
Improvements and New Features
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The post-quantum hybrid algorithm x25519mlkem768 is now the most preferred key exchange group in the default configuration.
Post-quantum hybrid algorithms secp384r1mlkem1024 and secp256r1mlkem768 are supported but have to be configured. The same goes for the plain post-quantum algorithms mlkem1024, mlkem768, and mlkem512.
The most preferred signature algorithms is now post-quantum algorithms ML-DSA followed by the fastest SLH-DSA (slh_dsa_sha2_256f) algorithm, if such a certificate is available in the configuration. Other SLH-DSA variants are also supported but are added to the end of the preferred list.
All these algorithms were available in OTP-28.4 but none of them were preferred and some of them changed default status.
Own Id: OTP-20070
Related Id(s): PR-10949
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
Secure renegotiation for TLS-1.2 specified in RFC 5746 from 2010 is now always used. The interoperability fallback option
{secure_renegotiate,SecureRenegotiate}is no longer needed.Own Id: OTP-20080
Related Id(s): PR-10979
*** POTENTIAL INCOMPATIBILITY ***
There is a new Hardening guide giving guidelines on how to strengthen the security for the
sslapplication.Own Id: OTP-20087
Related Id(s): PR-11019
*** HIGHLIGHT ***
stdlib-8.0
Fixed Bugs and Malfunctions
Fixed an issue in
digraph_utils:roots/1where roots could be missed in some cases.Own Id: OTP-19932
Related Id(s): PR-10510
beam_lib:strip/1will now retain the Beam debug information chunk produced by thebeam_debug_infooption. The chunk will also be retained when combing thebeam_debug_infooption with the undocumentedslimoption.The runtime system will no longer crash when attempting to load modules that have been compiled with
beam_debug_infobut lack the actual Beam debug info chunk.Own Id: OTP-19991
Related Id(s): GH-10557, PR-10735
Fixed a crash when
zstd:compress/2was asked to compress empty data.Own Id: OTP-20001
Related Id(s): GH-10650, PR-10653
Replaced a sleep clause in user_drv shutdown with a flush of the output buffer.
Own Id: OTP-20124
Related Id(s): PR-10808
The
calendar:seconds_to_time/1function now checks the range for each of the components of a time tuple ({Hours,Minutes,Seconds}) and fail with an exception if a component is out of range.Own Id: OTP-20125
Related Id(s): PR-11069
Improvements and New Features
Error return values from functions in
zipnow also specify which file in the archive the error belongs to.Own Id: OTP-19663
Related Id(s): PR-9899
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
The undocumented and unsupported function
lists:zf/2is now deprecated.Own Id: OTP-19783
Related Id(s): PR-10161
Native records as described in EEP-79 has been implemented.
A native record is a data structure similar to the traditional tuple-based records, except that is a true data type.
Native records are considered experimental in Erlang/OTP 29 and possibly also in Erlang/OTP 30, meaning that their behavior may change, potentially requiring updates to applications that use them.
Own Id: OTP-19785
Related Id(s): PR-10617
*** HIGHLIGHT ***
The new
supervior:stop/1,2functions can be used to manage the dynamic parts of a supervisor tree in an application from outside the tree but in the same application.Own Id: OTP-19800
Related Id(s): PR-9209
Added a new constructor
array:from/2.Own Id: OTP-19815
Related Id(s): PR-10304
There are new functions for random permutation of a list:
rand:shuffle/1andrand:shuffle_s/2. They are inspired by a suggestion and discussion on ErlangForums.Own Id: OTP-19826
Related Id(s): PR-10281
*** HIGHLIGHT ***
The undocumented functions
erl_eval:extended_parse_exprs/1anderl_eval:extended_parse_term/1will now be faster when called with a long list of tokens. (These functions are used byqlcand the shell.)Own Id: OTP-19838
Related Id(s): PR-10338
The
unicodemodule now supports the Unicode 17 standard.Own Id: OTP-19853
Related Id(s): PR-10382
Added functions to
unicodefor recognizing whitespaces and identifiers.Own Id: OTP-19858
Related Id(s): PR-10387
The
rand:bytes/1andrand:bytes_s/2functions have been optimized by implementing a new internal callback function thatcrypto:rand_seed_alg/1andcrypto:alg_seed_alg_s/1have been updated to use.A new algorithm
crypto_prng1, which also takes advantage of this new internal callback, has been added tocrypto:rand_seed_alg/2andcrypto:rand_seed_alg_s/2. It is much faster then the existingcrypto_aes, in particular for generating bytes.Own Id: OTP-19882
Related Id(s): PR-10453, OTP-19827
There will now be a warning when exporting variables out of a subexpression. For example:
To avoid the warning, this can be rewritten to:
The warning can be suppressed by giving option
nowarn_export_var_subexprto the compiler.Own Id: OTP-19898
Related Id(s): PR-9134
*** HIGHLIGHT ***
There are new functions in the shell for returning process information.
The
pi/1function is shortcut forerlang:process_info/1. Thepi/3function takes the three numbers from a pid, constructs a pid, and callsprocess_info/1.Examples:
Own Id: OTP-19903
Related Id(s): PR-10422
Tools such as the debugger,
beam_lib, andxrefno longer support BEAM files created before OTP 13B.Own Id: OTP-19906
Related Id(s): PR-10519
The
calendarmodule has been updated to use the much faster than before Neri-Schneider algorithm for Gregorian calendar calculations, and been extended to handle negative years.Own Id: OTP-19912
Related Id(s): PR-10449
graphis a new module that is a functional equivalent of thedigraphanddigraph_utilsmodules.Own Id: OTP-19922
Related Id(s): PR-10532
*** HIGHLIGHT ***
Before Erlang/OTP 29, attempting to bind variables in a comprehension would compile successfully but fail at runtime. Example:
In Erlang/OTP 29, attempting to bind a variable in a comprehension will fail by default:
However, this example will work as expected if the
compr_assignfeature is enabled when starting the runtime system:Here is another example how
compr_assigncan be used:Own Id: OTP-19927
Related Id(s): PR-9153
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
Removed the undocumented
dyn_erlutility.Own Id: OTP-19933
Related Id(s): PR-10573
The functions
erl_tar:add/3anderl_tar:add/4now accepts the{mode,Mode}option for setting the permission of the file.Own Id: OTP-19934
Related Id(s): PR-10524
Added
zstd:flush/2for flushing compressed data without closing the compression context.Own Id: OTP-19936
Related Id(s): GH-10345, PR-10511
There will now be a warning when using the
catchoperator, which has been deprecated for a long time.It is recommended to instead use
try...catch...endbut is also possible to disable the warning by using thenowarn_deprecated_catchoption.Own Id: OTP-19938
Related Id(s): PR-10421
*** HIGHLIGHT ***
Multi-valued comprehensions according to EEP 78 has been implemented.
Example:
Own Id: OTP-19942
Related Id(s): PR-9374
*** HIGHLIGHT ***
There will now be a warning for matches that unify constructors, such as the following:
Such a match can be rewritten to:
The compiler option
nowarn_match_alias_patscan be used to disable the warning.Own Id: OTP-19943
Related Id(s): PR-10433
*** HIGHLIGHT ***
While the iteration order for maps is undefined, it is now guaranteed that all ways of iterating over maps provides the elements in the same order. That is, all of the following ways of iterating will produce the elements in the same order:
maps:keys/1maps:values/1maps:to_list/1maps:to_list(maps:iterator(M))[{K,V} || K := V <- M]Own Id: OTP-19963
Related Id(s): PR-10626
*** HIGHLIGHT ***
The
arraymodule have been extended with several new functions. The internal representation have been changed to allow the new functionality and optimizations. Arrays serialized withterm_to_binary/1in previous releases are not compatible.Own Id: OTP-20004
Related Id(s): PR-10578
*** HIGHLIGHT ***
*** POTENTIAL INCOMPATIBILITY ***
m:erl_tarwill use less memory when extracting large tar entries to disk. Instead of reading each tar entry into memory,erl_tarwill now stream data in chunks of 64KB. The chunk size is settable using the new{chunks,ChunkSize}option.The new
{max_size,Size}option will set a limit on the total size of extracted data to protect against filling up the disk.Checking of symlinks has been improved. Some symlinks that were safe (such as
dir/link -> ../file) used to be rejected.Own Id: OTP-20023
Related Id(s): PR-10814, PR-10818, PR-10821
*** HIGHLIGHT ***
Added a new module called
io_ansithat allows the user to emit Virtual Terminal Sequences (a.k.a. ANSI sequences) to the terminal in order to add colors/styling to text or create fully-fledged terminal applications.io_ansiuses the local terminfo database in order to be as cross-platform compatible as possible.It also works across nodes so that if functions on a remote node call
io_ansi:fwrite/1it will use the destination terminal's terminfo database to determine which sequences to emit. In practice, this means that you can call functions in a remote shell session that useio_ansiand it will properly detect the terminal sequences the target terminal can handle and will print using them correctly.Own Id: OTP-20028
Related Id(s): PR-10905, PR-9940
*** HIGHLIGHT ***
Polished the documentation groups, essentially removed groups that did nothing but obscure the documentation.
Own Id: OTP-20029
Related Id(s): PR-10755
The
gb_sets:from_ordset/1andgb_trees:from_orddict/1functions would trust their inputs. If the input contained duplicates or was not properly sorted, the resulting gb_set or gb_tree would be invalid, and any number of interesting problems could occur.In this release, these functions will raise an exception if their input is not valid. That could mean that incorrect programs that seemed to work could now stop working altogether.
There is also a new
gb_trees:from_list/1function for directly creating a gb_tree from a list.Own Id: OTP-20061
Related Id(s): PR-10910
*** POTENTIAL INCOMPATIBILITY ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The
jsonmodule now encodes and decodes quoted strings faster. Improvements of up to 55 percent has been measured when decoding JSON data with long strings.The
string:length/1,string:slice/2, andstring:slice/3functions have been optimized. For some strings, they can be up to twice as fast.Own Id: OTP-20072
Related Id(s): PR-10938, PR-10948
*** HIGHLIGHT ***
syntax_tools-4.1
Fixed Bugs and Malfunctions
merl:compile_and_load/1could crash when compiling code containing comments.merl:quote/2would fail to handle literal UTF-8 encoded binaries.Own Id: OTP-20077
Related Id(s): PR-10243, PR-10962
Improvements and New Features
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
Multi-valued comprehensions according to EEP 78 has been implemented.
Example:
Own Id: OTP-19942
Related Id(s): PR-9374
*** HIGHLIGHT ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
tftp-1.3
Improvements and New Features
The legacy
andandoroperators have been replaced with other language constructs.Own Id: OTP-19744
Related Id(s): PR-10114, PR-10554, PR-10568, PR-10579, PR-10580, PR-10585, PR-10598, PR-10710, PR-10718, PR-10730
All use of legacy
catchin the TFTP application has been rewritten.In the process, deep return using
exit/1orthrow/1from callbacks has been changed to only work withthrow/1, as customary. This was considered a misfeature.Explicit loading of callback module or logger module has been removed, since that was against what one would expect for embedded mode.
Own Id: OTP-19996
Related Id(s): PR-10753
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
tools-4.2
Fixed Bugs and Malfunctions
Fixed "unbalanced parenthesis" issue when pressing TAB in emacs erlang shell.
Own Id: OTP-19921
Related Id(s): GH-8569, PR-10642
The minimum supported Emacs version for
erlang-modehas been raised from 24.3 to 27.1. Compatibility shims for older Emacs versions have been removed.The
erlang-modepackage version now tracks the Erlang/OTP release version (29.0) for consistent version numbers across package managers.Own Id: OTP-20059
Related Id(s): PR-10892
Improvements and New Features
Tools such as the debugger,
beam_lib, andxrefno longer support BEAM files created before OTP 13B.Own Id: OTP-19906
Related Id(s): PR-10519
The
ignore_xrefattribute has been handled as a post-analysis filter by build tools such as Rebar3. In this release,xrefitself does the filtering, ensuring that all tooling that callsxreffor any purpose can rely on these declarations to just work.Own Id: OTP-20032
Related Id(s): PR-10592
*** HIGHLIGHT ***
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
The runtime system now supports generating encrypted crash dumps. See the description of
--enable-encrypted-crash-dumpsin Building and Installing Erlang/OTP.Own Id: OTP-20085
Related Id(s): PR-10993
*** HIGHLIGHT ***
wx-2.6
Fixed Bugs and Malfunctions
The examples for
wxare now only installed in one place (indoc/examples).Own Id: OTP-20119
Related Id(s): ERIERL-1315, PR-11032
Improvements and New Features
Documentation about how to validate the SBOM using sigstore has been added.
Own Id: OTP-19766
Related Id(s): GH-10151, PR-10187
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
xmerl-2.2
Improvements and New Features
Added support for
-unsafeattributes, which is used to mark functions as unsafe to use.This is similar to but separate from deprecation, and the compiler will by default now generate warnings for calls to functions in Erlang/OTP that are known to be always unsafe.
Furthermore,
xrefcan now be used to find calls to functions in another application that lack a-docattribute (undocumented_function_calls), calls to functions in another application marked-doc false.(private_function_calls), as well as calls to unsafe functions (unsafe_function_calls).Own Id: OTP-20066
Related Id(s): PR-10839
*** HIGHLIGHT ***
Thanks to
Alexandre Rodrigues, Alex Mickelson, Andreas Hasselberg, Andrew Bennett, Ayanda Dube, Bentheburrito, Bernhard M. Wiedemann, Bozhidar Batsov, Claes Nästén, Daniel Gorin, Daniel Kukula, dependabot[bot], Eksperimental, Eric Meadows-Jönsson, erlang-bot-app[bot], felipe stival, Fernando Areias, Holger Weiß, Ievgen Pyrogov, Ilya Averyanov, ilya-klyuchnikov, Ilya Klyuchnikov, Jan Uhlig, Jérôme de Bretagne, João Henrique Ferreira de Freitas, Johannes Christ, Jonatan Männchen, José Valim, krishnadas, Loïc Hoguin, loscher, lud, Maria Scott, Marko Mindek, matt, Mend Renovate, Michael Daniels, Michał Muskała, Nelson Vides, Nick Vatamaniuc, Olexandr88, Paul Guyot, Paulo F. Oliveira, Paulo Tomé, Petr Sumbera, Preet, Radek Szymczyszyn, Rasmus Précenth, Richard Carlsson, Robert Ismo, Robin Morisset, Sam Weaver, Sébastien Saint-Sevin, Sergey Fedorov, siiky, Simon Cornish, spoo, Stefan Grundmann, Takeru Ohta, Vadim Yanitskiy, Vance Shipley, Wade Mealing, Wei Huang, williamthome, yagogarea, Zabrane, Zeyu Zhang, наб
v28.5: OTP 28.5Compare Source
Check out the git tag OTP-28.5, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
HIGHLIGHTS
There is a new "Secure Coding Guidelines" document in Design Principles describing how to write secure Erlang code.
Own Id: OTP-20043
Application(s): otp
Related Id(s): PR-10431
OTP-28.5
Improvements and New Features
There is a new "Secure Coding Guidelines" document in Design Principles describing how to write secure Erlang code.
Own Id: OTP-20043
Related Id(s): PR-10431
*** HIGHLIGHT ***
erl_interface-5.7
The erl_interface-5.7 application can be applied independently of other applications on a full OTP 28 installation.
Improvements and New Features
A new
configureoption--{enable,disable}-use-embedded-3pp-alternativeshas been added. When enabled,configureis forced to find alternatives, to a subset, of the embedded third-party products (3pps) in the runtime system, and when disabled,configurewill use all internal embedded 3pps. Currently this option affectszstd,zlib,ryu(withSTL),opensslandtcl. The default is to use all built-in embedded 3pps except forzlibwhich by default will usezlibon the OS if available.Requirements for alternatives:
zstd- Static library and include files of at least version 1.5.6 needs to be available.zlib- Library and include files of at least version 1.2.5 needs to be available.ryu(withSTL) - A usable C++ compiler with C++17 support.openssl- No requirements. Our own MD5 implementation will be used.tcl- Thestrerrorname_np()function (introduced in glibc 2.32) mapping errno integers to symbolic names needs to be available.The argument
embedded_3ppshas been added toerlang:system_info/1. It returns a map with information about the use of embedded 3pps in the runtime system.Own Id: OTP-20106
Related Id(s): PR-11045
Known Bugs and Problems
The
eiAPI for decoding/encoding terms is not fully 64-bit compatible since terms that have a representation on the external term format larger than 2 GB cannot be handled.Own Id: OTP-16607
Related Id(s): OTP-16608
erts-16.4
The erts-16.4 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed bug in
enif_make_map_from_arraysfor arrays with at least 33 keys. If duplicate keys existed, instead of failing, it would skip the duplicates. If less than 33 unique keys existed, an internally inconsistent and broken map was returned.Own Id: OTP-20098
Related Id(s): PR-10976
Fixed an issue when supplying the args_file option to erl.exe on windows that did not handle unicode characters correctly.
Own Id: OTP-20101
Related Id(s): GH-10667
Improvements and New Features
A new
configureoption--{enable,disable}-use-embedded-3pp-alternativeshas been added. When enabled,configureis forced to find alternatives, to a subset, of the embedded third-party products (3pps) in the runtime system, and when disabled,configurewill use all internal embedded 3pps. Currently this option affectszstd,zlib,ryu(withSTL),opensslandtcl. The default is to use all built-in embedded 3pps except forzlibwhich by default will usezlibon the OS if available.Requirements for alternatives:
zstd- Static library and include files of at least version 1.5.6 needs to be available.zlib- Library and include files of at least version 1.2.5 needs to be available.ryu(withSTL) - A usable C++ compiler with C++17 support.openssl- No requirements. Our own MD5 implementation will be used.tcl- Thestrerrorname_np()function (introduced in glibc 2.32) mapping errno integers to symbolic names needs to be available.The argument
embedded_3ppshas been added toerlang:system_info/1. It returns a map with information about the use of embedded 3pps in the runtime system.Own Id: OTP-20106
Related Id(s): PR-11045
mnesia-4.25.3
The mnesia-4.25.3 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
Added documentation for
user_propertiesand functionsread_table_property/2,write_table_property/2,delete_table_property. Enhanced documentation forfrag_properties.Own Id: OTP-20038
Related Id(s): GH-10812, PR-10881
Fixed a bug where stacktrace was not returned from
mnesia:transaction/1when transaction aborts with an error exception.Own Id: OTP-20094
Related Id(s): GH-10967, PR-11002
ssl-11.6
Note! The ssl-11.6 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Preserve inet option order, as inet_backend option must be first option. Will make inet_backend option work for ssl independently of number of inet supplied options.
Own Id: OTP-19162
Related Id(s): PR-10908
Missing conformance check for signature algorithms in TLS-1.3 could cause selection of incompatible certificate when a server is configured with more than one possible certificate.
Own Id: OTP-20082
Related Id(s): GH-10915, PR-10924
Improvements and New Features
Avoid unnecessary memory consumption for temporary processes in a supervision tree.
Own Id: OTP-19967
Related Id(s): PR-10957
Thanks to
felipe stival, Hewwho, Hugo Baraúna, Nick Vatamaniuc, Viktor Söderqvist, William Yang
v28.4.3: OTP 28.4.3Compare Source
Check out the git tag OTP-28.4.3, and build a full OTP system including documentation. Apply one or more applications from this build as patches to your installation using the 'otp_patch_apply' tool. For information on install requirements, see descriptions for each application version below.
OTP-28.4.3
Fixed Bugs and Malfunctions
Fix the
otp_patch_applyscript to properly handle installation of documentation for OTP versions with more than one digit in version parts less significant than the major version.Own Id: OTP-20086
Related Id(s): PR-10985
kernel-10.6.3
The kernel-10.6.3 application can be applied independently of other applications on a full OTP 28 installation.
Fixed Bugs and Malfunctions
On Windows, sockets has to be bound when using 'socket'. Therefor when using gen_tcp with inet_backend = socket, gen_tcp_socket bind even if the caller has not provided an explicit bind address. In that case it attempts to locate a "proper" address on its own. But if the connect address is the loopback address, this could lead to an attempt to bind to an external interface. So, this has now been changed so that if the connect address is the loopback address, the loopback address will also be used when binding.
Own Id: OTP-20104
Related Id(s): #10968
ssh-5.5.2
Note! The ssh-5.5.2 application cannot be applied independently of other applications on an arbitrary OTP 28 installation.
Fixed Bugs and Malfunctions
Fixed a vulnerability in the SFTP server where file attributes could be modified outside the configured root directory. When using FSETSTAT on an open file handle, the operation used the path stored in the handle without verifying it was within the root directory, allowing attribute changes to files outside the chroot boundary.
Thanks to John Downey.
Own Id: OTP-20081
Related Id(s): PR-11027, CVE-2026-32147
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.
Update dependency erlang to v29to chore(deps): update dependency erlang to v29chore(deps): update dependency erlang to v29to Update dependency erlang to v29Update dependency erlang to v29to chore(deps): update dependency erlang to v29chore(deps): update dependency erlang to v29to Update dependency erlang to v29Update dependency erlang to v29to chore(deps): update dependency erlang to v29chore(deps): update dependency erlang to v29to Update dependency erlang to v29Update dependency erlang to v29to chore(deps): update dependency erlang to v29chore(deps): update dependency erlang to v29to Update dependency erlang to v29Update dependency erlang to v29to chore(deps): update dependency erlang to v29View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.