Dapr
v1.16.7Orchestration & ManagementJan 20, 2026
Dapr v1.16.7 contains operator-facing bug fixes. It updates tracing for raw payload publishes, corrects file-based OAuth configuration with `oauth2CredentialsFile`, and fixes `HTTPEndpoint` initialization when only a root CA is configured.
All 3 other recorded changesfixes 3
fixes (3)
- For raw payload publishes, the same trace information is now written directly into the pubsub metadata that accompanies the raw message, ensuring that tracing works consistently regardless of payload mode.
oauth2ClientSecretPathconfiguration is now corrected to read a client secret from file. A new option,oauth2CredentialsFile, has been added to loadclient_id,client_secret,issuer_url, and from a JSON file with the format:{"client_id": "... . ", "client_secret": ". . . ", "issuer_url": ". . . "} - The HTTPEndpoint component has been updated to correctly handle cases where only a root CA is defined in the ClientTLS block, allowing successful initialization without requiring client certificate and key.
Add Dapr to your stack
A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.