ZeroHour
Product

Datasette

4 mentions in 7 days · 6 in 30 days · 6 total · first seen · last

Timeline

datasette-publish-fly 1.4

Datasette-publish-fly 1.4 sets force_https in fly.toml, fixes a volume detection bug, and adds support for app-scoped Fly deploy tokens.

Version 1.4 of the datasette-publish-fly plugin for deploying Datasette to Fly.io has been released. It sets force_https=true in fly.toml, fixes a 'Volume could not be found' bug, and adds compatibility with app-scoped deploy tokens. No security vulnerabilities are mentioned in the release notes.

Simon Willison · 5d agoTools1

github-to-sqlite 2.9.1

github-to-sqlite 2.9.1 fixes compatibility with sqlite-utils 4.x in issue #85; no security changes are mentioned.

github-to-sqlite 2.9.1 is a small maintenance release of the tool that imports GitHub data into SQLite databases. Its only documented change is a fix for compatibility with sqlite-utils 4.x, tracked as issue #85. No security fixes are included.

Simon Willison · 5d agoTools2

datasette 0.65.4

Datasette shipped the 0.65.4 security patch release for its stable branch, with fixes documented in the blog post covering 1.0a39 and 0.65.4.

Datasette 0.65.4 is a security patch release for the 0.x stable branch of the popular data exploration tool. Details of the fixed issues are published in the 'Datasette 1.0a39 and 0.65.4 security releases' blog post. No CVE identifiers or vulnerability specifics are provided in the announcement itself.

Simon Willisonupdated · 4d agofirst · 5d agoTools 3 sources

datasette 1.0a39

Datasette 1.0a39 is an alpha security release whose fixes are documented in the Datasette blog post covering it and 0.65.4.

Datasette 1.0a39 is an alpha release in the 1.0 series that also serves as a security release. The fixed vulnerabilities are described in the 'Datasette 1.0a39 and 0.65.4 security releases' blog post. The announcement provides no CVE identifiers or further technical detail.

Simon Willisonupdated · 4d agofirst · 5d agoTools 3 sources1

Creepy crawlies

git.kernel.org spends more CPU rendering commit pages for abusive AI-era scrapers than on all legitimate access including git clones.

Konstantin Ryabitsev reports that abusive crawler 'background radiation' at git.kernel.org consumes more CPU cycles rendering commit HTML than all legitimate access, with 14 cores across five geo-distributed nodes dedicated to scraper traffic. Simon Willison highlights the implications for crawlable web services like Datasette.

Simon Willison · 8d agoAI industry1

datasette-mcp 0.2

Simon Willison released datasette-mcp 0.2, changing MCP SQL results to object arrays for better small-model usability.

Datasette-mcp 0.2 changes the execute_sql 'rows' output from an array of arrays to an array of objects, helping weaker models avoid losing track of positional column mappings. The plugin now depends on mcp>=2.1.1. This is the first non-alpha release, and the author reports using it extensively.

Simon Willison · 14d agoAI tools & infra

Appears with

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.