Meshery
v1.0.75Provisioning & RuntimeNov 3, 2026
A maintenance release focused on server, CLI, and UI correctness fixes. It also changes some operator-visible behavior and includes a Next.js security update.
Action needed (1)
breakingDefault namespace in
resolveResourcePathThe server now uses a default namespace for namespaced kinds in
resolveResourcePath.
Check if affected (2)
securityThe
Next.dependency updatejs Applies if you depend on
Next..js The UI upgrades
Next.to address security vulnerabilities.js breakingLower-bound validation for
--pageApplies if you use
--page.mesheryctlrejects--pagevalues below 1 for performance profiles and performance results.
All 33 other recorded changesfixes 26 · value changes 4 · additions 2 · constraints 1
fixes (26)
- - [server] Prevent nil pointer dereference on invalid load test URL @Supersaiyan101 (#22736)
- - [Server] Fix race in MeshSync deployment mode notifications @Karman580 (#22733)
- - [Server] Return 404 for missing resources and validate UUID in MeshSync handlers @Amansingh0807 (#22695)
- - Fix(server): resolve dry-run GVR discovery and in-design namespaces @rudrakshSoni-dev (#22464)
- - [mesheryctl] fix command help examples using unaccepted flags @Fazlul105 (#22707)
- - [mesheryctl] return errors from system token list and view @Fazlul105 (#22706)
- - [mesheryctl] validate channel argument upfront on system channel switch @Fazlul105 (#22703)
- - [mesheryctl] Fix nil pointer dereference panic in design export on non-200 responses @Supersaiyan101 (#22705)
- - [mesheryctl] Add missing delimiter between error message and cause @kkm121 (#22715)
- - fix(mesheryctl): close unclosed HTTP response bodies across api.Delete and api.Add callers @The-AnkitPatel (#22724)
- - [mesheryctl] Fix HTTP response body and connection leaks in IsMesheryRunning and MakeRequest @muskan-creates352 (#22727)
- - [Server/mesheryctl] Interpolate format args in MeshKit error construc… @barbierajput378-pixel (#22735)
- - [mesheryctl] Print model list flag validation errors once @adityacosmos24 (#22604)
- - [mesheryctl] Fix continuous HTTP response body leak in system dashboard @muskan-creates352 (#22627)
- - [mesheryctl] Fix HTTP response body descriptor leaks in system check @muskan-creates352 (#22583)
- - [mesheryctl] model: fix double-wrapped export flag validation error and add tests @somaz94 (#19866)
- - fix(server): stop embedding design contents in event metadata @yi-nuo426 (#22769)
- - Fix Responsiveness of Cancel, Save, Reset Action Buttons @Katotodan (#21312)
- - [UI] Fix form fields overlapping the sticky Settings bar @NerfedAce (#22683)
- - Fix preservation of saved performance profile metadata @aryan105825 (#22702)
- - [UI] Reset MeshSync table to first page on search and filter @harshiltewari2004 (#22710)
- - [UI] Make provider dialog close button hover visible @Saidkhusayn (#22728)
- - [UI] Fix Design Configurator "+" for key/value fields after RJSF v6 upgrade @HelanaNady (#22744)
- - fix(ui): manage blob URL lifecycle and prevent memory leak in DataToF… @Ayush-AM (#22570)
- - [UI] Fix inert adapter selection and variable shadowing in MesheryPlayComponent @Ayush-AM (#22349)
- - [UI] Fix schema dropdown rendering condition and HTML nesting in LegacyRJSFModal @Ayush-AM (#22350)
value changes (4)
- - [Server] Isolate ExportModel working directory with per-request temp dir (#22609) @VimalN2005 (#22742)
- - [Server] Return 404 for missing resources and validate UUID in MeshSync handlers @Amansingh0807 (#22695)
- - [Server] Name the declared namespace on a Forbidden from the default fallback dry-run @rudrakshSoni-dev (#22661)
- - [mesheryctl] system start / system reset delete a "manifests" folder in the current directory @ayushgade06 (#22700)
additions (2)
- - [Agents] Add pre-landing-review and migration-risk-analyzer skills (#22372) @VimalN2005 (#22718)
- - feat(ui): enhance cross-cluster design validation with unified compatibility analysis @ThakurUjjwal1706 (#22739)
constraints (1)
- - [Server] Allow GitHub and Artifact Hub connections to register @Karman580 (#22711)
Add Meshery to your stack
A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.