AI-analyzed release notes for CNCF graduated and incubating projects.
A maintenance release with security guidance for CVE-2025–30156 and updates across Ceph authentication, core behavior, Multus networking, and the Ceph base image. The release also includes a workaround for a Ceph authentication rotation race.
Action needed (1)
securityCVE-2025–30156 upgrade guidance
Rook users are advised to upgrade to Rook v1. or v1. with Ceph v20. or v19. in response to CVE-2025–30156.
v1.19.8 is a maintenance release with a security-related dependency update and behavioral improvements. The recorded dependency change updates the vulnerable go text package from v0.37 to a newer version.
Action needed (1)
securityThe go text package, updated from v0.37
The go text package is updated from v0.37 to the latest version because v0.37 has a vulnerability. This dependency update ships in v1.19.8.
This release includes a security-related dependency update in CI. The change affects builds that use golang..
Action needed (1)
securitycriticalThe golang. dependency, updated to v0.
CI updates golang. from its previous version to v0. to fix GO-2026-5026.
