Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: FalcoClear ×

Falco0.44.0SecurityMay 26, 2026

ACTION 1CHECK 5OTHER 34View full analysis

A release that removes several supported engines and outputs and restricts falco-webui access. It also adds rule and configuration capabilities, includes defect fixes and dependency updates, and discloses no security advisory.

Action needed (1)

breakinggRPC server support, removed
gRPC server support is removed in this release.

Check if affected (5)

securityPlugin library path traversal prevention
Applies if you configure the plugin library path.
The configuration prevents plugin library path traversal via relative paths in this release.
breakingThe gRPC output, removed
Applies if you use the gRPC output.
The gRPC output is removed in this release.
breakingThe gVisor engine, removed
Applies if you use the gVisor engine.
Support for the gVisor engine is removed in this release.
+ 2 more on the release page

Source ↗

Falco0.43.0SecurityJan 28, 2026

CHECK 2PLAN 4OTHER 16View full analysis

A maintenance release that removes source-config-path output from release builds, deprecates several userspace interfaces, and rotates the package-signing key. It also includes correctness fixes, dependency updates, and an image-size reduction.

Check if affected (2)

breakingSource config path output in release builds
Applies if you use debug builds.
Source config path output is now limited to debug builds, so release builds no longer include it.
breakingGPG signing key for DEB/RPM packages, rotated
Applies if you use DEB/RPM packages.
The GPG key used to sign DEB/RPM packages has been rotated, and all existing packages have been re-signed. The new key fingerprint is 478B2FBBC75F4237B731DA4365106822B35B1B1F.

Plan ahead (4)

deprecatedThe --gvisor-generate-config CLI option, deprecated
Applies if you use --gvisor-generate-config.
The --gvisor-generate-config CLI option is deprecated in userspace.
deprecatedThe legacy eBPF probe, deprecated
Applies if you use the legacy eBPF probe.
The legacy eBPF probe is deprecated in userspace.
deprecatedThe gVisor engine, deprecated
Applies if you use the gVisor engine.
The gVisor engine is deprecated in userspace.
+ 1 more on the release page

Source ↗

Browse by month