Dapr
v1.18.7Orchestration & ManagementOct 9, 2026
A maintenance release focused on correctness, with fixes for sidecar crashes, data races, resource leaks, request mix-ups, and excessive logging. It does not introduce operator-facing configuration changes.
All 14 other recorded changesfixes 13 · value changes 1
fixes (13)
- The executor actor refuses calls once its deactivation has started, and the caller retries them on a new executor actor.
- Starting and closing the gRPC servers are serialized, and a server is not started once shutdown has begun.
- A closed actor lock refuses new calls and registers calls only while it is open. It records the method once when the call arrives.
- A workflow instance refuses invocations once deactivated, and the caller retries on a new instance.
- Closing an input binding waits for events in flight, and refuses later events.
- The subscriber cancels its retries under its lock on shutdown.
- The actor lock checks the depth limit before counting the call, so a rejected call no longer changes the depth.
- Only the send goroutine closes the Scheduler stream, once and after its last send.
- Hot reload shutdown cancels every Operator stream, including the first one. It waits for the reconnect goroutine to exit before closing the stream.
- A claim is released at most once, guarded by an atomic flag. The in-flight lock and its event loop are no longer reused, so a late release from a closed placement session is dropped.
- The pipeline no longer keeps a shared handler. Each request runs the configured middlewares around its own handler.
- The list of pipelines is read under its lock.
- Hot reload checks a Subscription's scopes first, and skips Subscriptions scoped to other apps with a debug log.
value changes (1)
- The sidecar now uses durabletask-go v0.12.6, which keeps every pending execution of a task, so each result and cancellation reaches all of them and none is left pending.
Add Dapr to your stack
A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.