C++ was the fastest-growing programming language in September 2020 compared to its status last year, while Java experienced the biggest drop in this month's TIOBE's Programming Community index rankings.

More:

• TIOBE gave C++ a rating of 7.11%, a 1.48% increase over Sept. 2019, the biggest gain among all languages for the month. TIOBE CEO Paul Jansen says he believes the new C++20 standard might explain the increase in popularity, "especially because of the new modules feature that is going to replace the dreadful include mechanism."
• Although Java remains the second most popular language, Java's popularity dropped 3.18% since Sept. 2019. The C programming language also overtook Java's #1 place in May 2020 for the first time in five years. Jansen, the CEO of TIOBE Software, says this could be because of the coronavirus, as the language is used for medical devices.
• Python, C++, C#, Visual Basic, JavaScript, PHP, R, and SQL followed C and Java in the rankings.

Microsoft has open-sourced Fluid Framework, a Typescript library for real-time collaborative web applications.

More:

• Sam Broner, a Microsoft Fluid Framework software engineer, describes Fluid as an easy way to build “native multi-user apps” that also makes it possible to embed and share “live web experiences" with no custom server code required.
• It works with whatever JavaScript app framework you choose, whether that's vanilla JavaScript or Angular, React, or Vue. .NET and Java users will need a JavaScript runtime to host Fluid code.
• While Microsoft said it scales well as its both low-latency and undemanding on the server, users reported the documentation site wasn't loading correctly and had been throttled “due to unusually high usage.” Broner says the team has fixed the issue now, however.
• Microsoft first previewed Fluid Framework at Build in May 2019, before providing more details during Build 2020. 

⚒️  Roundup Of Some Top Recent Tips / Tricks / From The Experts and Emerging Names: 

For this feature, I scour Twitter and the rest of the web to deliver the latest top dev tips/tricks from experts and emerging names in the dev space, including well-known figures like Martin Fowler, Addy Osmani and more.

Popular web development teacher Wes Bos:

• "Use trash instead of rm to delete things via the CLI. It's safer because you can restore things, and it's a better API for deleting folders and files. It even supports globs for deleting multiple files at once! npm install --global trash-cli."

Kent C. Dodds, a former JavaScript engineer at PayPal , popular teacher, and a Google Developer Expert 

To read the full list and receive this feature regularly, start your FREE 14-day trial of Inside Dev Premium today.

Safari Technology Preview Release 113 is now available. Some highlights:

• Backcolors for odd and even items in Dark Mode in the Timelines tab have been fixed
• Web Inspector’s user interface and styling has been modified to match macOS Big Sur's
• New support for MediaRecorder bitrate options
• A fix for updating min-height: auto after an image load when the picture has a specified height and width

For a more detailed list of changes, check out the release notes.

Here are some security patches web developers should know about from this week:

PATCH WATCH:

• Google fixed five high-severity security flaws in Chrome with the latest stable channel update 85.0.4183.102 for Windows, Mac, and Linux.
• Ubuntu patched a critical bug in the Linux Kernel that could enable a remote attacker to launch a remote code execution attack.
• Microsoft plugged 129 vulnerabilities, including 23 critical bugs, in its last Patch Tuesday security update. The patches included fixes for a number of remote code execution flaws, including a "worst-case scenario" memory corruption bug in Exchange Server 
• Adobe patched critical vulnerabilities in InDesign, Framemaker, and Experience Manager, some of which could be exploited to take control of affected systems. 
• Red Hat patched multiple vulnerabilities in its JBoss product that could enable a remote attacker to trigger a denial-of-service condition, launch a remote code execution attack, steal sensitive information, and bypass security restriction on the targeted system.

For more security patches you should know about, subscribe to our Inside Security Premium newsletter. Or consider an unlimited subscription, which gives you access to all the paid versions of our newsletters. 

The Rails team has released Rails 5.2.4.4 and 6.0.3.3, both of which contain important security fixes. The two patch a potential XSS vulnerability in Action View that incorrectly marked a string as HTML safe when a default string is used for a missing translation key. 

More:

• Click here for the checksums. 
• The team discussed the XSS vulnerability in Action View in more detail here.
• As a part of its upgrade to Ruby 2.7, GitHub also recently sent patches for gems that were emitting warnings in their app including Rails, rails-controller-testing, capybara, factory_bot, view_component, posix-spawn, github-ds, ruby-kafka, and others. 
• In a 30-minute presentation, Ruby Creator Yukihiro Matsumoto recently explored what's to come in the upcoming Ruby 3 release and beyond. Inside Dev Premium readers received a quick bullet point summary of highlights from that talk, which you can check out here. To read it in full, start your FREE 14-day trial.

Quick Hits:

• Ruby DSL Sinatra v2.1.0 has been released. In this new version, support for Ruby 2.2 has been dropped, while the Sinatra team migrated from thin to rainbows in its development environment.
• Learn how to improve site performance by inlining CSS.
• Red Hat and IBM have launched a new marketplace to make it easier for companies to buy, deploy, and manage enterprise software from vendors across hybrid cloud environments running Red Hat OpenShift.
• Conga tapped into insights from tech-forward business leaders in order to create this fact-packed report: The State of Digital Document Transformation.*

*This is sponsored content.