AI-analyzed release notes for CNCF graduated and incubating projects.
This release combines new cost data and collection capabilities with operational updates. Endpoint access defaults change, and the release includes corrections across pricing, pagination, request handling, providers, and serialization.
Check if affected (1)
breakingEndpoint defaults, deactivated without an admin token
Applies if you use endpoints without setting an admin token.
Endpoints are deactivated by default unless an admin token is set. This change ships in OpenCost v1.121.0.
A maintenance release with dependency updates, correctness fixes, and new cloud and query capabilities. Configuration and output behavior also change, along with a Go dependency upgrade for GHSA-xmrv-pmrh-hhx2 and CVE-2026-34986.
Action needed (1)
securityhighGo dependency upgrades for GHSA-xmrv-pmrh-hhx2 and CVE-2026-34986
Go dependencies are upgraded for GHSA-xmrv-pmrh-hhx2 and CVE-2026-34986.
Check if affected (1)
breakingThe MCP_SERVER_ENABLED default is false
Applies if you do not configure MCP_SERVER_ENABLED.
The MCP server is now opt-in, with MCP_SERVER_ENABLED defaulting to false.
A maintenance release with dependency updates, operator-visible configuration and behavior changes, new integrations and capabilities, and correctness fixes. It also includes an explicitly disclosed security-related Go dependency upgrade.
Action needed (1)
securityhighGo dependency upgrades for GHSA-xmrv-pmrh-hhx2 and CVE-2026-34986
Go dependencies were upgraded to address GHSA-xmrv-pmrh-hhx2 and CVE-2026-34986.
Check if affected (2)
breakingThe provider config source, changed
Applies if you configure provider config.
The configuration behavior reads from cloud-integration. instead of using provider config.
breakingThe MCP_SERVER_ENABLED default, changed to false
Applies if you use the MCP server.
The MCP_SERVER_ENABLED setting now defaults to false, making the MCP server opt-in by default.
A maintenance release with a dependency update, correctness fixes, and new operator-facing capabilities. The MCP server now requires explicit opt-in when MCP_SERVER_ENABLED is not configured.
Check if affected (1)
breakingThe MCP_SERVER_ENABLED default, changed to false
Applies if MCP_SERVER_ENABLED is not configured.
The MCP server now defaults MCP_SERVER_ENABLED to false, making it opt-in by default.
