Linkerd
edge-26.4.2Networking & MessagingPure dependency maintenance release — proxy bumped to v2.348.0, multiple Go/Rust/JS deps updated. No feature changes or bug fixes to speak of.
enhancementProxy v2.348.0 — check the proxy changelog if you're chasing specific behavior
The proxy is the only component here with potentially meaningful runtime changes. The release notes don't surface proxy-level details directly, so if you're tracking a specific fix or behavior change, pull up the linkerd2-proxy v2.348.0 release notes separately before promoting this edge build to production.
securitylodash updated in web dashboard — low urgency, but worth knowing
lodash went from 4.17.23 to 4.18.1. The Linkerd dashboard is typically internal-facing, so exposure is limited. Still, if your team audits frontend dependency CVEs, confirm this resolves any open advisories in your SBOM tooling.
enhancementSkip this edge unless you need the proxy bump
This is a housekeeping release. If you're already tracking edge builds for the proxy, upgrading is straightforward. For anyone evaluating edge-26.4.x for broader testing, there's no functional regression risk here, but also nothing compelling enough to rush an upgrade from edge-26.4.1.
Key changes (5)
- Proxy updated to v2.348.0 (details in proxy changelog)
- tokio runtime bumped from 1.50.0 to 1.51.1 (two hops in one release cycle)
- gRPC-Go updated to 1.80.0
- lodash bumped to 4.18.1 in the web dashboard
- New destination controller API tests added for better regression coverage