ClickHouse view barriers, PostgreSQL DDL debates, QEMU modeling

Security hardening and long-running redesign threads set the pace across databases and infrastructure, with ClickHouse tightening view isolation and PostgreSQL core hackers revisiting catalog DDL helpers. QEMU work advanced device property typing, RP2040 machine support, and block-driver bounds checks.

ClickHouse strengthens DEFINER view security barriers

ClickHouse developers fixed security gaps in DEFINER and NONE views that interacted poorly with additional_table_filters and row-policy predicate pushdown. The changes reinforce barriers so that filters and policies cannot be bypassed through view expansion. Operators relying on row-level policies or multi-tenant filter isolation should treat the updates as material.

PostgreSQL hackers debate pg_get_*_ddl redesign

Core contributors on pgsql-hackers disputed the design and possible removal of pg_get_role_ddl() and related helpers, citing broken dependency ordering, unsafe password handling, and duplication of pg_dump logic. Nine participants argued over whether redesign or deprecation is preferable. Tooling that reconstructs role and object DDL from the catalog depends on the eventual direction.

QEMU associates QOM properties with QAPI schema types

A 62-patch series links QOM and qdev properties to QAPI schema types, replacing ad-hoc string handling. The work improves introspection and type consistency across the device model. Device and board authors gain a more structured property definition path once the series lands.

QEMU RFC adds Raspberry Pi Pico and RP2040 machine

An RFC v3 posts a large machine model for the RP2040 and Raspberry Pi Pico, covering DMA, XIP, boot ROM, USB, and accompanying tests. Two participants iterated on the 36-patch set. Embedded developers targeting the Pico platform gain a clearer path toward usable system-level emulation.

PostgreSQL reviews 8-byte TOAST pointer support

Active review continued on patches that introduce 8-byte TOAST pointers and Oid8 support behind a new reloption. Nine participants examined the v16 and v17 iterations. Tables with large toastable attributes stand to benefit from expanded pointer capacity and revised storage layout.

QEMU single-binary series for ARM and RISC-V draws pushback

A 12-patch proposal attempted to fold ARM and RISC-V support into one qemu-system binary. Reviewers challenged the build strategy and resulting command-line behavior across nine participants. The outcome will influence how multi-architecture QEMU binaries are assembled and invoked.

PostgreSQL patchset deduplicates relcache index shapes

A patchset proposes sharing identical index shape data inside the relcache and introducing a proxy memory context to shrink RelationData. Five participants assessed the memory savings. Long-running instances that open many relations can reduce steady-state cache footprint if the approach is accepted.

QEMU Parallels driver fixes assertions and bounds checks

A pull request updates the Parallels block driver to close reachable assertions and related bounds-checking gaps on malformed images. Four participants handled the nine-patch v2 series. The fixes harden parsing against corrupt or crafted Parallels disk images.