<p>Elixir v1.20 has officially landed, marking a huge milestone as the language is now officially a gradually typed language, type checking every single line of code without requiring developer annotations, and even prompting some developers to drop Dialyzer entirely. HexDocs is rolling out per-package subdomains for improved browser security isolation, the Erlang Ecosystem Foundation has launched an Ecosystem Registry to help answer "who uses this?" for Erlang, Elixir, and Gleam companies, and the Lua library for Elixir is approaching its v1.0 release with a brand new pure-Elixir Lua 5.3 VM. On the security front, a sophisticated self-replicating worm called Miasma compromised 73 Microsoft GitHub repos by exploiting legitimate OIDC tokens and valid SLSA provenance, even weaponizing AI coding tools like Claude Code and Cursor, raising fresh questions about supply chain safety and whether Hex might benefit from a cooldown mechanism like the one Ruby just shipped, and more!</p>
<p><strong>Elixir Community News</strong></p>
<ul>
<li><a href="https://paraxial.io/?utm_source=thinkingelixir&utm_campaign=thinkingelixir-oct2025" rel="nofollow noopener">https://paraxial.io/</a> – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.</li>
<li><a href="https://x.com/josevalim/status/2062248428898254957" rel="nofollow noopener">https://x.com/josevalim/status/2062248428898254957</a> – José Valim announced the release of Elixir v1.20, highlighting it as now officially a gradually typed language.</li>
<li><a href="https://elixir-lang.org/blog/2026/06/03/elixir-v1-20-0-released/" rel="nofollow noopener">https://elixir-lang.org/blog/2026/06/03/elixir-v1-20-0-released/</a> – Official Elixir v1.20.0 release announcement</li>
<li><a href="https://bsky.app/profile/david.bernheisel.com/post/3mnkuwjup6c2g" rel="nofollow noopener">https://bsky.app/profile/david.bernheisel.com/post/3mnkuwjup6c2g</a> – David removing Dialyzer from a project</li>
<li><a href="https://x.com/TheErlef/status/2061525571226554684" rel="nofollow noopener">https://x.com/TheErlef/status/2061525571226554684</a> – The Erlang Ecosystem Foundation announced the new HexDocs per-package subdomain URLs.</li>
<li><a href="https://hex.pm/blog/hexdocs-per-package-subdomains" rel="nofollow noopener">https://hex.pm/blog/hexdocs-per-package-subdomains</a></li>
<li><a href="https://x.com/davydog187/status/2061938751257911316" rel="nofollow noopener">https://x.com/davydog187/status/2061938751257911316</a> – Dave Lucia announced the Lua library v1.0.0 RC</li>
<li><a href="https://x.com/davydog187/status/2062540335679422641" rel="nofollow noopener">https://x.com/davydog187/status/2062540335679422641</a> – Dave Lucia announced deflua.com</li>
<li><a href="https://deflua.com/" rel="nofollow noopener">https://deflua.com/</a> – The official website for Lua</li>
<li><a href="https://marketing.erlef.org/news/registry-announce.html" rel="nofollow noopener">https://marketing.erlef.org/news/registry-announce.html</a> – The Erlang Ecosystem Foundation announced the new Ecosystem Registry for companies</li>
<li><a href="https://registry.erlef.org/" rel="nofollow noopener">https://registry.erlef.org/</a> – The ERLEF Ecosystem Registry</li>
<li><a href="https://x.com/gleamlang/status/2061800462530076748" rel="nofollow noopener">https://x.com/gleamlang/status/2061800462530076748</a> – Gleam announced the release of version 1.17.0.</li>
<li><a href="https://gleam.run/news/single-file-gleam-beam-programs-with-escript/" rel="nofollow noopener">https://gleam.run/news/single-file-gleam-beam-programs-with-escript/</a> – Gleam 1.17.0 release notes</li>
<li><a href="https://x.com/codebeamio/status/2065089786675601785" rel="nofollow noopener">https://x.com/codebeamio/status/2065089786675601785</a> – Code BEAM Europe 2026 speakers have been announced.</li>
<li><a href="https://codebeameurope.com/#speakers" rel="nofollow noopener">https://codebeameurope.com/#speakers</a> – The Code BEAM Europe 2026 speakers lineup and talk topics.</li>
<li><a href="https://github.com/microsoft/pg_durable" rel="nofollow noopener">https://github.com/microsoft/pg_durable</a> – Microsoft's pg_durable GitHub repo</li>
<li><a href="https://microsoft.github.io/pg_durable/" rel="nofollow noopener">https://microsoft.github.io/pg_durable/</a> – Official documentation site for Microsoft's pg_durable Postgres extension.</li>
<li><a href="https://blog.rubygems.org/2026/06/03/cooldown-let-new-gems-be-vetted.html" rel="nofollow noopener">https://blog.rubygems.org/2026/06/03/cooldown-let-new-gems-be-vetted.html</a> – Bundler's new cooldown feature</li>
<li><a href="https://linuxiac.com/arch-linux-aur-malware-campaign-hits-multiple-user-contributed-packages/" rel="nofollow noopener">https://linuxiac.com/arch-linux-aur-malware-campaign-hits-multiple-user-contributed-packages/</a> – Malware campaign affecting over 400 Arch Linux AUR packages</li>
<li><a href="https://cloudsmith.com/blog/miasma-worms-path-of-destruction" rel="nofollow noopener">https://cloudsmith.com/blog/miasma-worms-path-of-destruction</a> – Cloudsmith's detailed write-up on the Miasma self-replicating malware worm</li>
<li><a href="https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/" rel="nofollow noopener">https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/</a> – Microsoft Security's blog post on the Miasma campaign</li>
</ul><p>Sponsored By:</p><ul><li><a rel="nofollow" href="https://paraxial.io/?utm_source=thinkingelixir&utm_campaign=thinkingelixir-oct2025">Paraxial.io</a>: <a rel="nofollow" href="https://paraxial.io/?utm_source=thinkingelixir&utm_campaign=thinkingelixir-oct2025">Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer.
</a></li></ul>
