RATATOSKRATATOSK
Sign in

Dapr

v1.16.21Orchestration & Management
Oct 21, 2026

ACTION 1

A security release updates Go so `crypto/x509` rejects certificate chains that pass through compromised eMudhra intermediate CA keys. This protects affected outbound TLS connections.

Action needed (1)

  • securityGo 1.26.10 build and certificate-chain rejection

    Dapr is now built with Go 1.26.10, whose crypto/x509 package rejects any certificate chain that passes through the compromised keys. This protects affected outbound TLS connections.

    Go 1.26.10

Add Dapr to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Dapr releases →