Scout Monitoring is the all-in-one monitoring platform for devs who own it all—combining APM, errors, and logs in one simple tool.
Joined April 2009
- Tweets2.4K
- Following1.3K
- Followers1.8K
- Likes1.6K
FastAPI shipped three breaking changes in 21 hours. The quietest: 0.148 stops validating defaults, so validators that transform a default stop running. What to check before you upgrade: scoutapm.com/blog/fastapi-0-… #FastAPI #Python
Symfony 5.4.54 fixes three CVEs: bounded nesting in ExpressionLanguage, no more backtracking in HeaderUtils::split(), and bounded recursion in the Yaml inline lexer. Still on 5.4? Upgrade. github.com/symfony/symfony/r… #Symfony #PHP
Node.js memory climbing under load with Mongoose? cls-hooked keeps a Map entry for every long-lived async resource and never cleans them up. Swapping it for AsyncLocalStorage took our agent from ~1.8 GB to ~180 MB: scoutapm.com/blog/nodejs-cls…
Five engineers with full New Relic access on Standard: ~$406/mo in user fees before any data overage. A sixth engineer pushes you to Pro. We broke down the math, compared 7 alternatives, and wrote a step-by-step migration plan: scoutapm.com/blog/best-new-r…
In Grape, calling error! inside an Active Record transaction commits the writes. The client gets a 409, the row stays. A fix is merged for Grape 4.1 but not released. How to check and work around it: scoutapm.com/blog/grape-erro…
On SQLAlchemy 2.1.0 and 2.1.1, selectinload() can drop extra join conditions on many-to-many relationships. Your N+1 fix gets faster and quietly returns rows it shouldn't. We reproduced it. Fixed in 2.1.2: scoutapm.com/blog/sqlalchemy…
FastAPI 0.142 turns on OpenTelemetry by default: traces, metrics, and error logs with zero code. It won't show your SQL queries, and it can double-export. What it records and 4 settings to check: scoutapm.com/blog/fastapi-na…
Which monitoring tools let Claude Code or Cursor read production data over MCP? We compared 9: what each server exposes, which can change data, and which meter tool calls. Only two are read-only. scoutapm.com/blog/best-monit…
A detailed Rails bug report this week, with a repro script and benchmarks: on 8.1, every 404 walks every view resolver's template cache, ~13 MB per scanner hit with 5,000 templates. A fix PR is up. Workarounds: scoutapm.com/blog/rails-404-…
Starlette 1.7.0 ships built-in OpenTelemetry tracing and exposes scope["route"] for accurate endpoint naming, plus a breaking AnyIO 4 requirement. What it means for your APM: scoutapm.com/blog/starlette-…
Predis 3.6.1 patches a real CRLF command-smuggling CVE (GHSA-w6f5-v2h6-g786) in the Redis connection layer. If your Laravel app uses the redis cache driver, queues, or sessions, this is worth prioritizing over routine deps. scoutapm.com/blog/predis-3-6…
openai-python 3.17.0 has a real breaking change queued: local shell tool output must now declare a call ID. If you're using the local shell tool, check this before upgrading. scoutapm.com/blog/openai-pyt…
Predis v3.6.1 is officially out, packaging the CRLF command-smuggling fix (CVE GHSA-w6f5-v2h6-g786) we covered when it merged, plus deprecating CommandInterface::deserializeCommand() as part of closing the gap. github.com/predis/predis/rel…
ruby-pg had a real SQL injection: PG::Connection#set_client_encoding interpolated its argument into a SET statement. The fix's repro ran pg_sleep(0.25) through it to prove arbitrary SQL executed. Patched now: github.com/ged/ruby-pg/pull/…
Anomaly Detection is out of beta and on every Scout plan, including free. It learns each endpoint's normal behavior and flags real deviations, no thresholds to set, no pages for normal Monday traffic spikes. scoutapm.com/blog/anomaly-de…
Express 5.3.0 fixes CVE-2026-2391: a qs arrayLimit bypass that let arbitrarily large arrays in a query string cause a DoS. Also fixes a Content-Length/Transfer-Encoding header conflict in res.send(). Update if you're on Express. github.com/expressjs/express…
Context is a budget and most AGENTS.md files spend it badly. Here are the three levers for what an AI coding agent actually sees, and why bigger isn't better. scoutapm.com/blog/prompts-sk…
An AI coding agent running real CI needs real credentials, unless you sandbox it first. Corral runs Claude in Docker-in-Docker, zero blast radius if it goes wrong. scoutapm.com/blog/can-we-liv…
Laravel v13.27.0 adds a Cloud facade, refreshForUpdate() for Eloquent models, and re-introduces orWhereKey()/orWhereKeyNot() without breaking Builder subclasses. Solid QoL release. #Laravel #PHP
github.com/laravel/framework…
