MalaGIS

Sharing GIS Technologies, Resources and News.

In early June 2026, the Open Geospatial Consortium (OGC) officially released the OGC Features and Geometries JSON standard, commonly known as JSON-FG, as document number 21-045r1, version 1.0.0. After a quick review of the OGC standard details, the gist is that it addresses some capability gaps in GeoJSON, further expands GeoJSON's application scenarios, unifies specifications, and reduces private attributes. If you work with WebGIS, OGC APIs, or vector data exchange tools, you can follow along to understand what JSON-FG adds and assess whether your existing projects need to support it.

more >>

GeoServer is an open-source map server under OSGeo, playing a core role in WebGIS systems for spatial data publishing and OGC standard services. Whether it is classic services like WMS, WFS, WCS, or integration with data sources such as PostGIS, Shapefile, and GeoTIFF, GeoServer remains a common choice in many domestic government, land, emergency, and other industry projects.

more >>

QGIS is one of the most widely used open-source desktop GIS applications globally. Vector editing, spatial analysis, cartographic output, the Processing toolchain, and 3D views are all high-frequency capabilities in daily production. On May 29, 2026, the QGIS project released two maintenance versions on the same day: 4.0.3 and 3.44.11, targeting the new QGIS 4 mainline and the 3.44 long-term support branch respectively. Based on the commit history in the GitHub Releases, this article summarizes the key updates. Both versions focus on stability fixes and experience polishing, making them suitable for teams running production projects to evaluate upgrades.

more >>

CesiumJS is one of the core engines for 3D earth and 3D map development on the web. It is widely used in photorealistic 3D, oblique photography, BIM, and other scenarios, and serves as the "standard client" for the 3D Tiles ecosystem. On June 1, 2026, the Cesium team released CesiumJS 1.142, focusing on large-scale data rendering performance, the integration of vector tiles with 3D Tiles, and improvements to the low-level BufferPrimitive rendering capabilities. Here is an introduction based on the official Releases.

more >>

From May 27 to 29, the 24th meeting of the Standing Committee of the 16th Beijing Municipal People's Congress was held. At the meeting, the Beijing Surveying, Mapping and Geoinformation Regulations (Draft) (hereinafter referred to as the "Draft Regulations") was submitted for deliberation. The draft consists of 8 chapters and 66 articles, and intends to replace the Beijing Surveying and Mapping Regulations enacted in 2003 through an "abolish the old and establish the new" approach.

more >>

Just a few days ago, the MapLibre community officially released the MapLibre Tile (MLT) format. This could very well be the most fundamental and hardcore technological innovation in the WebGIS domain since Mapbox defined the MVT standard a decade ago. The official announcement claims that MLT can achieve compression rates up to 6 times better than MVT and decoding speeds 3 times faster! So what exactly is MLT? Why is it positioned to challenge MVT? Let's delve into the details today.

more >>

The other day, while casually browsing in the MalGIS community chat, a friend @Tiantian suddenly asked me, "Does ArcGIS Pro 3.6 not support Windows 10 anymore?" This sudden question gave me a fright. After all, many friends following MalGIS should still be on Windows 10, some even on Windows 7. If there were such an issue, it should have surfaced earlier. However, when the friend later showed me the evidence, I couldn't be sure for a moment.

more >>

In the field of GIS development, on-premises deployment is an extremely common requirement, and MinIO is almost synonymous with private object storage. Whether storing hundreds of terabytes of remote sensing imagery or billions of loose map tiles, MinIO has consistently been the "cornerstone" of WebGIS architecture due to its simple deployment, excellent S3 compatibility, and the high performance of the Go language. However, just last week, the official MinIO GitHub repository announced an update to the project's status, moving it to maintenance mode and ceasing to accept new feature requests. The main changes are as follows:

• The codebase is now in a maintenance-only state.
• No new features, enhancements, or pull requests will be accepted.
• Critical security fixes may be evaluated on a case-by-case basis.
• Existing issues and pull requests will not be actively reviewed.
• Community support will continue on a best-effort basis via Slack.
• For enterprise support and actively maintained versions, please refer to MinIO AIStor.

To summarize the key point: if you wish to use a continually updated version of MinIO in the future, you must pay for the commercial version, MinIO AIStor. According to my research, the price is quite steep, requiring a subscription service. The annual fee is $96,000 to manage 400TB of data (a price point that is essentially unfeasible within the domestic GIS community in China).

more >>

In the previous article QGIS 4.0 Delayed: New Release Scheduled for February 2026, the editor introduced the latest progress on QGIS 4.0 development, noting that the originally planned QGIS 4.0 version has been postponed to February 2026. This is very disappointing news for many macOS users, especially those with M-series chips, as everyone has been waiting for the official native QGIS application for Mac M chips. Consequently, users will have to continue using the translated version of QGIS (which still works). However, there is good news: the official team has ported the Mac packaging method originally intended for QGIS 4.0 to the QGIS 3.x series. This means that an official native QGIS 3.x version for Mac M chips is now available. The editor checked today and confirmed that the official website has been updated. Users still on the Intel-translated version are highly recommended to upgrade immediately!

more >>

It's Friday, are you starting to slack off and prepare for the weekend? Hold on, just yesterday (December 3, 2025), React official and the Next.js team jointly disclosed a Critical-level security vulnerability. This is not just an ordinary bug, but a 'nuclear-level' vulnerability that allows unauthorized remote code execution (RCE). If your WebGIS project uses Next.js or React 19, please investigate promptly. This vulnerability is extremely dangerous and could lead to further data leakage risks.

Vulnerability Details

Vulnerability ID: CVE-2025-55182 (React) / CVE-2025-66478 (Next.js)

Affected Scope: As long as your project has React Server Components (RSC) enabled, even if you think you haven't written any backend logic, you could be affected.

Severity Level: CVSS 10.0 (maximum score) — This means attackers can execute arbitrary code on your Node.js server without logging in or performing complex operations, just by sending a carefully crafted HTTP request.

Affected Versions:

• React: 19.0.0 to 19.2.0
• Next.js: 15.x, 16.x, and versions after 14.3.0-canary.77

more >>