RATATOSKRATATOSK
Sign in

Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY
AllAction neededCheck if affectedPlan ahead
KIND
AllSecurityBreakingDeprecated
Category
AllAI & MLCI/CD & App DeliveryKubernetes CoreNetworking & MessagingObservabilityOrchestration & ManagementProvisioning & RuntimeSecurityStorage & Data
Keycloak26.7.2SecurityAug 19, 2026
ACTION 2CHECK 6OTHER 14View full analysis

A maintenance release with disclosed security fixes, a cleartext vault-keystore password correction, a Quarkus dependency upgrade, and other bug corrections. The fixes cover account and permission flows, secret handling, and runtime dependencies.

Action needed (2)

  • securitymediumCVE-2026-59888 and CVE-2026-59889 fixes in jackson-databind

    jackson-databind is upgraded to 2.21.5 to address CVE-2026-59888 and CVE-2026-59889. The dependency update ships in this Keycloak release.

  • securitymediumCVE-2026-45292 OpenTelemetry Java SDK memory allocation correction

    CVE-2026-45292 corrects unbounded memory allocation in W3C Baggage Propagation in the OpenTelemetry Java SDK.

Check if affected (6)

  • securitycriticalCVE-2026-18963 reset-credentials flow bypass correction

    Applies if you use the reset-credentials flow.

  • securityhighCVE-2026-15571 predictable account-linking hash correction

    Applies if you use oidc.

  • securitymediumCVE-2026-14613 fine-grained admin permissions bypass correction

    Applies if you use the admin/fine-grained-permissions API.

  • + 3 more on the release page
Source ↗
Keycloak26.7.1SecurityAug 5, 2026
CHECK 12OTHER 5View full analysis

A maintenance release with security fixes and additional bug fixes. The security fixes require upgrading, and the ordinary bug fixes require no operator action beyond upgrading.

Check if affected (12)

Source ↗
Open Policy Agent (OPA)v1.19.0SecurityJul 30, 2026
ACTION 3CHECK 2OTHER 36View full analysis

A release with a SQL injection fix and a GHSA-linked dependency update, alongside a breaking Rego safety-checking change. It also changes runtime and CLI behavior, adds capabilities, and fixes correctness and performance issues.

Action needed (3)

  • securityhighoras.land/oras-go/v2 update for GHSA-fxhp-mv3v-67qp

    oras.land/oras-go/v2 is updated from 2.6.1 to 2.6.2 to address GHSA-fxhp-mv3v-67qp.

  • breakingReadHeaderTimeout default

    All HTTP servers now set ReadHeaderTimeout to 32s.

  • breakingPartial set and -object rule name conflicts

    The AST rejects partial set and -object rules that share a name.

Check if affected (2)

  • securityCompile API SQL identifier handling

    Applies if you use the Compile API and use a dynamic key.

  • breakingStricter := safety checking

    Applicability is not stated in the release notes.

Source ↗
Kyvernov1.18.2SecurityJul 10, 2026
ACTION 1CHECK 1OTHER 5View full analysis

A maintenance release with operator-relevant fixes and behavior changes, plus security work in the 1.18 release line. It includes namespace-boundary enforcement for generators and security dependency updates.

Action needed (1)

  • securitySecurity dependency updates

    Security dependency updates from #16340 are backported to release-1.18.

Check if affected (1)

  • securityNamespace-boundary enforcement in generator.apply()

    Applies if you use generator.apply().

Source ↗
Keycloak26.7.0SecurityJul 9, 2026
ACTION 1CHECK 19PLAN 4OTHER 258View full analysis

A substantial operator-focused release that adds and promotes APIs, feature gates, administration capabilities, and deployment options. It also includes deprecations and removals, along with fixes for account takeover, log injection and audit forgery, key-attestation bypass, QR-code dimension denial of service, and four CVE-identified vulnerabilities.

Action needed (1)

  • securityPre-account takeover attack exposure

    The release corrects an issue that provided room for pre-account takeover attacks.

Check if affected (19)

Plan ahead (4)

  • deprecatedThe V1 API, deprecated

    Applies if you use V1.

  • deprecatedThe Require Discoverable Credential option, deprecated

    Applies if you configure the Require Discoverable Credential option.

  • deprecatedThe Twitter IDP implementation, deprecated

    Applies if you use the Twitter IDP implementation.

  • + 1 more on the release page
Source ↗
cert-managerv1.21.0SecurityJul 8, 2026
CHECK 5PLAN 2OTHER 38View full analysis

A feature and maintenance release with operator-facing RBAC, Helm, API, and feature-gate changes, alongside new capabilities and defect corrections. It includes changes to configuration, permissions, certificate issuance, and integrations.

Check if affected (5)

  • securitycert-manager-edit aggregate ClusterRole permission removal, GHSA-8rvj-mm4h-c258

    Applies if you use the cert-manager-edit aggregate ClusterRole.

  • breakingObjectReference API removal

    Applies if you use ObjectReference in an API.

  • breakingPrometheus ServiceMonitor and PodMonitor Helm value removal

    Applies if you configure any of prometheus.servicemonitor.targetPort, prometheus.servicemonitor.path, or prometheus.podmonitor.path.

  • + 2 more on the release page

Plan ahead (2)

  • deprecatedGateway API controller configuration fields

    Applies if you configure any of enableGatewayAPI, enableGatewayAPIListenerSet, gatewayAPI.enabled, or gatewayAPI.enableListenerSet.

  • deprecatedServerSideApply feature gate deprecation

Source ↗
cert-managerv1.19.6SecurityJun 25, 2026
ACTION 2CHECK 1View full analysis

cert-manager v1.19.6 changes permissions in the cert-manager-edit aggregate ClusterRole and updates the Go toolchain. Workflows that directly create or modify Challenge or Order resources may require explicit permissions after the release.

Action needed (2)

  • securityhighGo v1.25.11 with fixes for CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507

    Go is updated to v1.25.11 in cert-manager v1.19.6 to fix CVE-2026-27145, CVE-2026-42504, and CVE-2026-42507.

  • securityGo 1.25.10 dependency upgrade

    Go is upgraded to 1.25.10 as part of the dependency updates in cert-manager v1.19.6.

Check if affected (1)

  • securityReduced cert-manager-edit permissions for Challenge and Order creation and updates

    Applies if you use the cert-manager-edit aggregate ClusterRole for workflows that create or modify Challenge or Order resources.

Source ↗
cert-managerv1.20.3SecurityJun 25, 2026
ACTION 1CHECK 1OTHER 2View full analysis

A security-focused patch release removes unsafe ACME permissions and includes fixes for identified CVEs. It also corrects Challenge garbage collection and updates Go dependencies.

Action needed (1)

Check if affected (1)

  • securityThe cert-manager-edit aggregate ClusterRole permissions

    Applicability is not stated in the release notes.

Source ↗
OpenFGAv1.18.0SecurityJun 17, 2026
CHECK 3View full analysis

v1.18.0 is a security-focused release with authentication hardening and stricter configuration validation. MySQL deployments have migration and maintenance-window requirements, while OIDC deployments have required issuer and audience settings.

Check if affected (3)

  • securitymediumMySQL schema migrations 008

    Applies if you use the MySQL backend.

  • securityConstant-time preshared key authentication

    Applies if you use preshared key authentication.

  • securityRequired OIDC issuer and audience configuration

    Applies if authn.method is set to oidc.

Source ↗
Keycloak26.6.3SecurityJun 4, 2026
ACTION 2CHECK 15OTHER 30View full analysis

A security-focused maintenance release with fixes spanning OIDC, authorization and account APIs, identity features, federation, WebAuthn, SAML, Netty, and lodash. It also updates dependencies and adds startup and SPI behavior alongside numerous correctness fixes.

Action needed (2)

  • securityhighCVE-2026-4800 lodash code injection

    CVE-2026-4800 is addressed in the account UI, where lodash was vulnerable to code injection.

  • securitymediumCVE-2026-42581 Netty HTTP/1.0 smuggling sanitization

    CVE-2026-42581 is addressed in Netty, correcting HTTP/1.0 TE and CL coexistence that bypassed smuggling sanitization.

Check if affected (15)

Source ↗
Kubescapev4.0.9SecurityMay 29, 2026
ACTION 3CHECK 3OTHER 105View full analysis

A broad maintenance release with correctness fixes, new CLI and reporting capabilities, anonymization updates, a performance improvement, added validation, and dependency refreshes. It also includes security fixes alongside changes to output and push defaults.

Action needed (3)

  • securityDependency updates for security advisories

    Dependencies are updated to address security advisories.

  • securityEnvFrom clearing in container data removal

    removeContainersData now clears EnvFrom to prevent secret name leakage.

  • securityEnv[].ValueFrom clearing in container data removal

    removeContainersData and removeEphemeralContainersData now clear Env[].ValueFrom.

Check if affected (3)

  • security/v1/results access control hardening

    Applies if you use /v1/results.

  • breakingThe pdf/html output default changed to file output

    Applies if you use pdf/html output.

  • breakingThe push default changed to opt-in

    Applies if you use push.

Source ↗
SPIREv1.15.1SecurityMay 28, 2026
CHECK 1OTHER 2View full analysis

SPIRE v1.15.1 includes a security correction for Azure IMDS node attestation. The release also updates the golang.org/x/net and golang.org/x/crypto dependencies.

Check if affected (1)

  • securityAzure IMDS node attestation validation

    Applies if you use the azure_imds server node attestor plugin.

Source ↗
SPIREv1.14.7SecurityMay 28, 2026
CHECK 1OTHER 2View full analysis

SPIRE v1.14.7 fixes a security vulnerability in Azure IMDS node attestation. It also updates the Go toolchain to 1.26.3 and updates three dependencies.

Check if affected (1)

  • securityThe azure_imds node attestor validation is corrected

    Applies if you use the azure_imds server node attestor plugin.

Source ↗
Falco0.44.0SecurityMay 26, 2026
ACTION 1CHECK 5OTHER 34View full analysis

A release that removes several supported engines and outputs and restricts falco-webui access. It also adds rule and configuration capabilities, includes defect fixes and dependency updates, and discloses no security advisory.

Action needed (1)

  • breakinggRPC server support, removed

    gRPC server support is removed in this release.

Check if affected (5)

  • securityPlugin library path traversal prevention

    Applies if you configure the plugin library path.

  • breakingThe gRPC output, removed

    Applies if you use the gRPC output.

  • breakingThe gVisor engine, removed

    Applies if you use the gVisor engine.

  • + 2 more on the release page
Source ↗
Keycloak26.6.2SecurityMay 19, 2026
ACTION 6CHECK 12OTHER 13View full analysis

A maintenance release with numerous disclosed security fixes, dependency updates, enhancements, and bug fixes. It also corrects forced object deletion during the operator upgrade path.

Action needed (6)

  • securityhighCVE-2026-33871: HTTP/2 CONTINUATION frame flood denial of service

    The release fixes the HTTP/2 CONTINUATION frame flood denial-of-service issue identified by CVE-2026-33871.

  • securityhighCVE-2026-33870: HTTP request smuggling through chunked extension parsing

    The release corrects the HTTP request smuggling primitive caused by chunked extension quoted-string parsing, identified by CVE-2026-33870.

  • securityhighBouncycastle updates for CVE-2026-0636, CVE-2026-3505, and CVE-2026-5598

    The release updates bouncycastle for CVE-2026-0636, CVE-2026-3505, and CVE-2026-5598.

  • securityhighCVE-2026-7504: Redirect URI validation bypass

    The release corrects the redirect URI validation bypass in Keycloak, identified by CVE-2026-7504.

  • securitymediumCVE-2026-5588: Bouncy Castle bcpkix cryptographic algorithm vulnerability

    The release updates the bcpkix modules affected by the broken or risky cryptographic algorithm vulnerability in the Bouncy Castle Crypto Package for Java, identified by CVE-2026-5588.

  • securityPermission and policy call ordering in admin/api

    The release corrects the ordering of permission and policy calls in admin/api that led to exposure of a client ID.

Check if affected (12)

Source ↗
SPIREv1.14.6SecurityApr 27, 2026
CHECK 2View full analysis

A security-focused maintenance release fixes two vulnerabilities in node attestation and join token handling. Operators should use this release to receive these fixes.

Check if affected (2)

  • securityThe aws_iid attestation identity verification

    Applies if you use the aws_iid server node attestor plugin.

  • securityJoin token data store deletion

    Applicability is not stated in the release notes.

Source ↗
SPIREv1.13.6SecurityApr 27, 2026
CHECK 1OTHER 1View full analysis

This is a security and correctness fix release for SPIRE node attestation. It addresses forged EC2 identity handling in aws_iid and concurrent join-token attestation behavior.

Check if affected (1)

  • securityCorrected aws_iid EC2 identity verification

    Applies if you use the aws_iid server node attestor plugin.

Source ↗
Kyvernov1.16.4SecurityApr 23, 2026
ACTION 12CHECK 3OTHER 2View full analysis

A security-fix release with fixes for multiple CVEs and updates to affected dependencies. It also changes the default HTTP behavior and restricts configmap access for namespaced policies.

Action needed (12)

  • securitycriticalCVE-2025-68121 fix

    This release fixes CVE-2025-68121.

  • securitycriticalCVE-2026-33186 fix

    This release fixes CVE-2026-33186.

  • securityhighCVE-2026-24051 fix

    This release fixes CVE-2026-24051 in the 1.16 release line.

  • securityhighThe github.com/docker/cli dependency update

    The github.com/docker/cli dependency is updated to resolve CVE-2025-15558.

  • securityhighCVE-2025-66564 fix

    This release resolves CVE-2025-66564.

  • securitymediumThe sigstore/rekor dependency update to v1.5.1

    The sigstore/rekor dependency is updated to v1.5.1 to fix CVE-2026-23831.

  • securitymediumThe go-tuf/v2 dependency update to v2.3.1

    The go-tuf/v2 dependency is updated to v2.3.1 to address CVE-2026-23992.

  • securitymediumCVE-2026-22772 fix

    This release fixes CVE-2026-22772.

  • securitymediumThe go-tuf/v2 dependency update to v2.4.1

    The go-tuf/v2 dependency is updated to v2.4.1 to patch CVE-2026-24686.

  • securitylowCVE-2026-1229 fix

    This release fixes CVE-2026-1229 in the 1.16 release line.

  • securitylowCVE-2026-26958 fix

    This release fixes CVE-2026-26958.

  • securityStandard library CVE fixes

    This release fixes standard library CVEs.

Check if affected (3)

  • securitycriticalHTTP disabled by default in namespaced policies

    Applies if you configure namespaced policies.

  • securityCVE fixes for go < 1.25.8

    Applies if you depend on go < 1.25.8.

  • breakingRestricted configmap access for namespaced policies

    Applies if you configure namespaced policies.

Source ↗
Kyvernov1.17.2SecurityApr 23, 2026
ACTION 6CHECK 2OTHER 17View full analysis

A maintenance release with multiple correctness fixes and security fixes, including changes for several CVEs and standard library CVEs. Operators should account for the changed HTTP default and narrower configmap access in addition to the security fixes.

Action needed (6)

  • securitycriticalCVE-2026-33186 correction

    The release fixes CVE-2026-33186.

  • securityhighCVE-2026-24051 correction

    The release fixes CVE-2026-24051 in the 1.17 release line.

  • securityhighCVE-2026-34986 correction

    The release fixes CVE-2026-34986.

  • securitylowCVE-2026-1229 correction

    The release fixes CVE-2026-1229.

  • securityCVES 2026-15558 correction

    The release includes the CVES 2026-15558 fix for 1.17.

  • securityGo version update

    The Go version was bumped to fix standard library CVEs.

Check if affected (2)

  • securitycriticalHTTP default for namespaced policies

    Applies if you configure namespaced policies.

  • breakingConfigmap access for namespaced policies

    Applies if you configure namespaced policies.

Source ↗
OpenFGAv1.14.1SecurityApr 10, 2026
CHECK 2OTHER 3View full analysis

A maintenance release adds server shutdown-timeout configuration and performance improvements in object listing and cache key generation. It also corrects an AuthZEN discovery security issue and replaces a vulnerable test dependency.

Check if affected (2)

  • securityAuthZEN discovery metadata endpoint URLs

    Applies if authzen.baseURL is configured.

  • securityThe github.com/docker/docker test dependency, replaced with Moby

    Applies if tests run.

Source ↗
Keycloak26.6.0SecurityApr 8, 2026
ACTION 6CHECK 7PLAN 1OTHER 269View full analysis

A substantial operator-facing feature and maintenance release adds new capabilities, configuration and deployment options, performance improvements, and many bug fixes. It also changes selected defaults, deprecates Token Exchange v1, and includes security and correctness fixes for authorization, identity and URL handling, SCIM, anti-phishing checks, and UMA token validation.

Action needed (6)

  • securitySeparate password and OTP brute force protection

    Password and OTP brute force protection are now separate by default to prevent OTP bypass attacks.

  • securityResourceAdminManager URL construction validation

    URL construction in ResourceAdminManager is validated against matrix parameter injection.

  • securityClient retrieval anti-ID phishing check

    Client retrieval now includes the missing anti-ID phishing check.

  • breakingZero-downtime patch releases enabled by default

    Zero-downtime patch releases are now promoted to supported and enabled by default.

  • breaking--truststore-kubernetes-enabled enabled by default

    The behavior controlled by --truststore-kubernetes-enabled is enabled by default.

  • breakingTen-second default not-before validation

    The default not-before validation period is now 10 seconds instead of 0.

Check if affected (7)

  • securityWorkflows admin permission boundaries

    Applies if you use Workflows.

  • securityOrganizations login IdP alias disclosure

    Applies if you use Organizations.

  • securitySCIM PUT body ID override protection

    Applies if you use SCIM.

  • + 4 more on the release page

Plan ahead (1)

  • deprecatedToken Exchange v1 deprecation

    Applies if you use Token Exchange v1.

Source ↗
Keycloak26.5.7SecurityApr 2, 2026
ACTION 1CHECK 6OTHER 2View full analysis

A security maintenance release fixes seven disclosed vulnerabilities. It also upgrades Quarkus and corrects an error caused by requests without a Host header.

Action needed (1)

  • securitymediumCVE-2026-1002 static handler component cache

    CVE-2026-1002 fixes a flaw in the io.vertx/vertx-core static handler component cache that could deny access to static files.

Check if affected (6)

Source ↗
OpenFGAv1.13.1SecurityMar 24, 2026
CHECK 1View full analysis

A maintenance release fixes a disclosed security vulnerability in Check requests with conditions and caching enabled, which could return incorrect cached results. The fix addresses the interaction between conditional checks and caching.

Check if affected (1)

Source ↗
Keycloak26.5.6SecurityMar 19, 2026
CHECK 8OTHER 10View full analysis

A security and maintenance release that fixes disclosed vulnerabilities alongside ordinary bugs. The security fixes require upgrading, while the other fixes require no operator action beyond upgrading.

Check if affected (8)

  • securitymediumCVE-2026-1180, blind SSRF in OIDC Dynamic Client Registration

    Applies if you use OIDC Dynamic Client Registration.

  • securitymediumCVE-2025-14777, Keycloak IDOR in realm client creation and deletion

    Applicability is not stated in the release notes.

  • securitymediumCVE-2026-3121, privilege escalation via manage-clients permission

    Applies if you configure manage-clients permission.

  • + 5 more on the release page
Source ↗
SPIREv1.14.3SecurityMar 18, 2026
ACTION 1CHECK 1OTHER 9View full analysis

A maintenance release adds agent version reporting, changes TLS policy behavior, improves performance, and corrects several defects. It also includes security fixes for selector logging and TLS certificate chain validation.

Action needed (1)

  • securityAgent-level selector logging removal

    Selectors are no longer logged at the agent level to avoid potential leakage of sensitive information.

Check if affected (1)

  • securityServer TCP endpoint TLS session tickets disabled

    Applies if you use the server TCP endpoint.

Source ↗
cert-managerv1.20.0SecurityMar 10, 2026
ACTION 2CHECK 4OTHER 26View full analysis

This release adds Helm, API, solver, and feature-gate capabilities while changing defaults and accepted behavior. It also corrects bugs and includes security fixes in the cert-manager controller and Go.

Action needed (2)

  • securityhighGo v1.25.5 update for CVE-2025-61727 and CVE-2025-61729

    Go is updated to v1.25.5 to fix CVE-2025-61727 and CVE-2025-61729.

  • breakingIssuer reference kind and group defaults, reverted

    The default issuer reference kind and group values are reverted to the behavior before 0.19.0.

Check if affected (4)

  • securityPotential cert-manager controller panic from cached DNS responses

    Applicability is not stated in the release notes.

  • breakingThe OtherNames feature, enabled by default

    Applies if you use the OtherNames feature.

  • breakingDefault container user and group IDs

    Applies if you do not configure the default container user (UID) or do not configure the default container group (GID).

  • + 1 more on the release page
Source ↗
Keycloak26.5.5SecurityMar 5, 2026
CHECK 4View full analysis

This release fixes four disclosed security vulnerabilities involving SAML and identity brokering. The corrections address authentication, identity provider enforcement, broker login, and encrypted assertion handling.

Check if affected (4)

  • securityhighCVE-2026-3047 SAML broker authentication bypass

    Applies if you use SAML broker and configure a disabled SAML client.

  • securityhighCVE-2026-3009 disabled identity provider enforcement

    Applies if you configure Disabled Identity Provider.

  • securityhighCVE-2026-2603 disabled SAML IdP broker login

    Applies if you configure Disabled SAML IdP.

  • + 1 more on the release page
Source ↗
SPIREv1.14.2SecurityMar 3, 2026
CHECK 2View full analysis

Fixes two security vulnerabilities in server node attestor plugins: an SSRF issue and excessive CPU consumption during node attestation. The fixes apply to the http_challenge and x509pop plugins.

Check if affected (2)

  • securityThe http_challenge server node attestor plugin, SSRF issue fixed

    Applies if you use http_challenge.

  • securityThe x509pop server node attestor plugin, CPU-exhaustion issue fixed

    Applies if you use x509pop.

Source ↗
SPIREv1.13.4SecurityMar 3, 2026
CHECK 2View full analysis

A security maintenance release with fixes in server node attestor plugins. The corrected issues affect request handling and resource use during node attestation.

Check if affected (2)

  • securityThe http_challenge server node attestor plugin, SSRF issue corrected

    Applies if you use the http_challenge server node attestor plugin.

  • securityThe x509pop server node attestor plugin, CPU consumption issue corrected

    Applies if you use the x509pop server node attestor plugin.

Source ↗
Keycloak26.5.4SecurityFeb 20, 2026
ACTION 2CHECK 4OTHER 10View full analysis

A maintenance release with five disclosed security fixes, one new capability, and ten corrected bugs. It contains no operator prerequisites or dependency-manifest entries.

Action needed (2)

  • securitymediumCVE-2026-0707, authorization header parsing

    This release corrects authorization header parsing that could bypass security controls.

  • securitylowCVE-2025-5416, keycloak-core environment information disclosure

    This release fixes environment information disclosure in keycloak-core.

Check if affected (4)

Source ↗
cert-managerv1.19.3SecurityFeb 2, 2026
CHECK 1OTHER 3View full analysis

A maintenance release with a security fix in the cert-manager controller, along with routine bug fixes and a Go toolchain dependency update. The security fix addresses a DNS response handling issue that could cause controller denial of service.

Check if affected (1)

  • securitymediumcert-manager controller DNS response panic fix, GHSA-gx3x-vq4p-mhhv

    Applicability is not stated in the release notes.

Source ↗
Kyvernov1.15.3SecurityJan 27, 2026
ACTION 1CHECK 1OTHER 5View full analysis

A maintenance release with security-related fixes for the Go toolchain and cross-namespace access through apiCall. It also contains ordinary defect fixes and capability or behavior changes.

Action needed (1)

  • securityThe go version update for standard library CVEs

    The go version is updated to fix standard library CVEs in this release.

Check if affected (1)

  • securityCross-namespace access through apiCall prevented

    Applies if you use apiCall.

Source ↗
Keycloak26.5.1SecurityJan 14, 2026
CHECK 1OTHER 13View full analysis

Keycloak 26.5.1 is a maintenance release with a security fix in the Organization feature. It also contains correctness fixes, a performance improvement, and changes to HTTP responses and realm administration.

Check if affected (1)

  • securityThe Organization feature account-name exposure fix

    Applies if you use the Organization feature.

Source ↗
Keycloak26.5.0SecurityJan 6, 2026
CHECK 2PLAN 1OTHER 247View full analysis

A substantial feature and maintenance release adds operator capabilities including workflows, JWT authorization grants, organization invitations, OpenTelemetry export, and Windows services. It also updates Quarkus and fixes correctness issues, while changing supported database versions and addressing a vulnerability in brute force detection settings.

Check if affected (2)

  • securityBrute force detection settings vulnerability, corrected

    Applies if you configure brute force detection settings.

  • breakingPostgreSQL 13.x support removal

    Applies if you depend on PostgreSQL 13.x.

Plan ahead (1)

  • deprecatedFine-Grained Admin Permissions v1, deprecated

    Applies if you enable admin/fine-grained-permissions.

Source ↗
Browse by month
Aug 2026Jul 2026Jun 2026May 2026Apr 2026Mar 2026Feb 2026Jan 2026Dec 2025Nov 2025Oct 2025Sep 2025Aug 2025Jul 2025Jun 2025May 2025Apr 2025Mar 2025Feb 2025Jan 2025Dec 2024Nov 2024Oct 2024Sep 2024Aug 2024Jul 2024Jun 2024May 2024Apr 2024Mar 2024Feb 2024Jan 2024Dec 2023Nov 2023Oct 2023Sep 2023