QEMU AI policy shift, websock crash fix, PostgreSQL checksum bugs

QEMU maintainers moved on AI contribution rules, a pre-auth crash fix, and several architecture targets, while PostgreSQL hackers pressed checksum, catalog, and logical replication correctness issues. Security and data integrity threads led the day.

QEMU proposes AGENTS.md rules for AI-generated contributions

A QEMU maintainer posted an RFC PATCH v2 series that introduces AGENTS.md as a completely new policy on AI-generated contributions, reversing a prior blanket ban after it proved unenforceable. The thread on qemu-devel drew 33 messages from 8 participants covering docs and development process. Contributors and downstream packagers need the clarified rules because the old prohibition could not be applied consistently in practice.

Unauthenticated crash fixed in QEMU websock VNC handshake

A six-patch series fixes a pre-authentication crash in QIOChannelWebsock during the VNC handshake that could be triggered by malformed HTTP and ERR_BLOCK mishandling. Five participants discussed the changes on qemu-devel. Anyone exposing VNC over websockets should treat the fix as a denial-of-service hardening item that lands before authentication completes.

Offline checksum changes leave PostgreSQL standbys inconsistent

pgsql-hackers examined bugs in which offline data checksum changes can leave standbys with mismatched or unreadable checksum state. Three participants exchanged 27 messages while patch discussion continued. Operators who enable checksums and rely on standbys risk incorrect recovery state until the mismatch paths are closed.

LoongArch LVZ nested virtualization added to QEMU TCG

A v4 fourteen-patch series implements LVZ guest support for LoongArch under QEMU TCG, enabling nested virtualization. Two participants iterated on the target/loongarch changes. The work matters for developers and testers who need LoongArch virtualization features without hardware passthrough.

Raspberry Pi Pico and RP2040 machine support for QEMU

An RFC v2 series of more than thirty patches adds a Raspberry Pi Pico and RP2040 machine to QEMU, covering dual M0+ cores, boot ROM, peripherals, and TCG tests. Three participants reviewed the arm target work. Embedded developers gain a software model for earlier bring-up and testing of RP2040 firmware.

PGQ catalog, dump, and locking problems raise readiness doubts

Andres Freund and others reported multiple bugs in PGQ catalog representation, pg_dump support, locking, and consistency. The release management team flagged design issues and questioned readiness for version 19 across 17 messages from 6 participants. Extension authors and packagers depending on PGQ need the design questions settled before treating the catalog layout as stable.

Arm Realm confidential VM support proposed for QEMU

An RFC v3 twenty-four-patch series adds Arm Realm (CCA/RME) confidential VM support to QEMU-VMM, building on prior KVM work. Four participants discussed the proposal on qemu-devel. The series extends confidential computing options for Arm guests that require realm isolation.

Logical replication row filter nulls unchanged toasted columns

A bug report and fix discussion on pgsql-hackers shows that logical replication row filters can turn unchanged toasted columns into NULL on the subscriber. Nine participants produced 38 messages on the failure mode. Deployments that combine row filters with large toasted values face silent data divergence until the handling is corrected.