<p>News includes a major milestone for Elixir's set-theoretic types as inference of all language constructs is completed and merged with Elixir v1.20.0-rc.5 hot on its heels, OTP 29.0 drops as a major release with secure-by-default SSH, post-quantum SSL key exchange, Erlang doctests, and more, a wave of high-severity CVEs hits the Elixir and Phoenix stack prompting the EEF CNA to take on a larger work load as AI-driven vulnerability reports surge, string processing in Elixir gets a serious speed boost via SWAR (SIMD Within A Register) optimizations with 1.5–5x improvements across Base and String operations, and a handy tip for enabling state-preserving hot reloads in Phoenix LiveView with just a small dev.exs config tweak, and more!</p>
<p>Show Notes online - <a href="http://podcast.thinkingelixir.com/304" rel="nofollow noopener">http://podcast.thinkingelixir.com/304</a></p>
<p><strong>Elixir Community News</strong></p>
<ul>
<li><a href="https://paraxial.io/?utm_source=thinkingelixir&utm_campaign=thinkingelixir-oct2025" rel="nofollow noopener">https://paraxial.io/</a> – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.</li>
<li><a href="https://x.com/josevalim/status/2054202778990383152?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://x.com/josevalim/status/2054202778990383152</a> – José Valim announces that "inference of all language constructs" for Elixir's set-theoretic types has been completed and merged.</li>
<li><a href="https://github.com/elixir-lang/elixir/issues/14558?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://github.com/elixir-lang/elixir/issues/14558</a> – The meta-issue tracking set-theoretic type inference of all Elixir constructs, now wrapped up. Includes occurrence typing for high-degree precision. A new RC is expected soon on the way to Elixir v1.20.</li>
<li><a href="https://x.com/josevalim/status/2054631923893313662?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://x.com/josevalim/status/2054631923893313662</a> – José Valim announces the release of Elixir v1.20.0-rc.5 with the latest batch of typing and performance improvements.</li>
<li><a href="https://github.com/elixir-lang/elixir/releases/tag/v1.20.0-rc.5?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://github.com/elixir-lang/elixir/releases/tag/v1.20.0-rc.5</a> – Release notes for Elixir v1.20.0-rc.5. The team says they are very close to the final release and encourages users to try it and report issues.</li>
<li><a href="https://cna.erlef.org/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://cna.erlef.org/</a> – The EEF CNA (CVE Numbering Authority) has seen a large increase in volume of CVEs, largely driven by AI tools. They are considering a funding campaign to cover the increased costs of fixing and administering CVEs.</li>
<li><a href="https://bsky.app/profile/tylerayoung.com/post/3mlsxbdmrw22e?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://bsky.app/profile/tylerayoung.com/post/3mlsxbdmrw22e</a> – Tyler Young highlights a heap of recent high-severity CVEs published against the typical Elixir + Phoenix web stack. Packages to check include cowboy < 2.15.0, cowlib < 2.16.1, plug < 1.19.2, bandit < 1.11.1, and decimal < 3.0.0.</li>
<li><a href="https://cna.erlef.org/cves/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://cna.erlef.org/cves/</a> – Full list of CVEs issued by the EEF CNA.</li>
<li><a href="https://hex.pm/packages/mix_audit?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://hex.pm/packages/mix_audit</a> – The mix_audit package can be installed and run via <code>mix deps.audit</code> to check your app against up-to-date published CVEs. Recommended to make it part of your CI pipeline.</li>
<li><a href="https://www.erlang.org/news/188?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://www.erlang.org/news/188</a> – OTP 29.0 released as a new major version. Highlights include unsafe function warnings, SSH daemon now defaults to disabled shell/exec services, SFTP no longer enabled by default, post-quantum hybrid key exchange as default in SSL, ANSI terminal support, Erlang doctest support, and xref now handles ignore_xref natively. Note that 32-bit Windows builds are no longer available.</li>
<li><a href="https://bsky.app/profile/peterullrich.com/post/3mlmb7kwgoc2w?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://bsky.app/profile/peterullrich.com/post/3mlmb7kwgoc2w</a> – Peter Ullrich highlights performance improvements landing in Elixir — Base.valid(16|32|64)? is now 1.5-2.8x faster thanks to SWAR (SIMD Within A Register) optimizations.</li>
<li><a href="https://github.com/elixir-lang/elixir/pull/15357?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://github.com/elixir-lang/elixir/pull/15357</a> – PR adding SWAR (SIMD Within A Register) versions of Base validations to Elixir. SWAR treats a CPU register like a small vector to check multiple bytes at once instead of one by one.</li>
<li><a href="https://github.com/elixir-lang/elixir/pull/15255?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://github.com/elixir-lang/elixir/pull/15255</a> – PR applying SWAR optimization to ASCII fast paths in String.length/1 and String.slice, yielding 2-5x improvements for pure-ASCII strings.</li>
<li><a href="https://github.com/erlang/otp/pull/10948?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://github.com/erlang/otp/pull/10948</a> – The SWAR technique was also applied to Erlang itself, accelerating binary ASCII traversal using 56-bit SWAR. Improvements range from 0x to 2x depending on the operation.</li>
<li><a href="https://www.linkedin.com/posts/jskalec_phoenix-liveview-has-one-massive-dx-feature-share-7459520758126473216-glO8?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow noopener">https://www.linkedin.com/posts/jskalec_phoenix-liveview-has-one-massive-dx-feature-share-7459520758126473216-glO8</a> – The creator of the live_vue project shares a tip for enabling state-preserving hot reloads in Phoenix LiveView.</li>
</ul>
<p>Do you have some Elixir news to share? Tell us at <a href="https://x.com/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir</a> or email at <a href="mailto:show@thinkingelixir.com" rel="nofollow noopener">show@thinkingelixir.com</a></p>
<p><strong>Find us online</strong></p>
<ul>
<li>Message the show - <a href="https://bsky.app/profile/thinkingelixir.com" rel="nofollow noopener">Bluesky</a></li>
<li>Message the show - <a href="https://x.com/ThinkingElixir" rel="nofollow noopener">X</a></li>
<li>Message the show on Fediverse - <a href="https://genserver.social/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir@genserver.social</a></li>
<li>Email the show - <a href="mailto:show@thinkingelixir.com" rel="nofollow noopener">show@thinkingelixir.com</a></li>
<li>Mark Ericksen on X - <a href="https://x.com/brainlid" rel="nofollow noopener">@brainlid</a></li>
<li>Mark Ericksen on Bluesky - <a href="https://bsky.app/profile/brainlid.bsky.social" rel="nofollow noopener">@brainlid.bsky.social</a></li>
<li>Mark Ericksen on Fediverse - <a href="https://genserver.social/brainlid" rel="nofollow noopener">@brainlid@genserver.social</a></li>
<li>David Bernheisel on Bluesky - <a href="https://bsky.app/profile/david.bernheisel.com" rel="nofollow noopener">@david.bernheisel.com</a></li>
<li>David Bernheisel on Fediverse - <a href="https://genserver.social/dbern" rel="nofollow noopener">@dbern@genserver.social</a></li>
</ul><p>Sponsored By:</p><ul><li><a rel="nofollow" href="https://paraxial.io/?utm_source=thinkingelixir&utm_campaign=thinkingelixir-oct2025">Paraxial.io</a>: <a rel="nofollow" href="https://paraxial.io/?utm_source=thinkingelixir&utm_campaign=thinkingelixir-oct2025">Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.
</a></li></ul>
