About this episode

The episode discusses the release of Elixir v1.20, its new gradually typed features, and various updates in the Elixir and Erlang ecosystems, including security concerns.

Elixir v1.20 has officially landed, marking a huge milestone as the language is now officially a gradually typed language, type checking every single line of code without requiring developer annotations, and even prompting some developers to drop Dialyzer entirely. HexDocs is rolling out per-package subdomains for improved browser security isolation, the Erlang Ecosystem Foundation has launched an Ecosystem Registry to help answer "who uses this?" for Erlang, Elixir, and Gleam companies, and the Lua library for Elixir is approaching its v1.0 release with a brand new pure-Elixir Lua 5.3 VM. On the security front, a sophisticated self-replicating worm called Miasma compromised 73 Microsoft GitHub repos by exploiting legitimate OIDC tokens and valid SLSA provenance, even weaponizing AI coding tools like Claude Code and Cursor, raising fresh questions about supply chain safety and whether Hex might benefit from a cooldown mechanism like the one Ruby just shipped, and more! Elixir Community News https://paraxial.io/ – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a special offer…

Topics covered

• gradually typed language
• Elixir v1.20
• security
• Erlang Ecosystem
• Lua library
• supply chain safety

Keywords

• Elixir
• gradually typed
• Dialyzer
• Erlang
• Lua
• security
• Miasma
• supply chain
• HexDocs

Sponsors

Paraxial.io

Mentioned in this episode

Organizations: Erlang Ecosystem Foundation

Products: Elixir v1.20, Dialyzer, Lua, Claude Code, Cursor, SLSA

Places: Microsoft

More episodes of Thinking Elixir Podcast

• 309: The Final Episode · June 23, 2026 · 45 min

Explore listener stats, chart rankings, contacts and more on the Thinking Elixir Podcast podcast page.